Project
PostGIS is an open-source extension that adds geospatial objects, indexing, and query functions to the PostgreSQL database.
A researcher published a GeoServer SQL injection on 12 August 2026 and watchTowr says probing started within hours. With no fix shipped, access control is the only lever available.
Reality
ParkEase puts slot exclusivity in PostgreSQL 18, where no write path can skip it. The mechanism is a GiST exclusion constraint, and the cost lands on whichever booking request loses the race at insert time.
Reality
A tester on Nile's free tier made two tenants, then ran the same SELECT on a connection that never set nile.tenant_id and got every row back. Nile's docs describe that open read as deliberate, so the guarantee sits in application code.
Reality
Databricks says an ordinary customer role could reach the unchecked array index. The repair went upstream into the open-source extension rather than into either fleet. That is the only version that helps anyone else.
Reality
Storing 2.7 million features in three tables was the right call. Handing the tile server one view per layer put a user-editable string into DDL, and an empty layer was the only alarm.
Reality
A survey ingest form offered two EPSG codes for one zone. One lands in Rajasthan and is caught in seconds. The other lands 427 metres away and is not.
Reality
A vector tile server has run in production for months with its cache deliberately set to 0 MB. The stale-tile bug that got it there is a lesson in reading what a config option actually refreshes.
Reality
DailyMeteo serves 11 TB of GeoTIFFs from a Django app reading files off a disk. The load-bearing choices are a dedicated production box and a pull-based rsync every 30 minutes.
Reality
Hundreds of exploit attempts landed within hours of public disclosure, according to WatchTowr. With nothing to install, the controls available are network isolation, filter-layer blocking and least privilege.
Reality