A user who can create objects in a database with plv8 3.2.1 installed is able to cause deferred triggers to execute as the Superuser during autovacuum.
The product does not properly check when a function or operation returns a value that is legitimate for the function, but is not expected by the product.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Plv8 | Plv8 | 3.2.1 (including) | 3.2.1 (including) |