There is 1 open security issue in forky.
1 important issue:
- CVE-2026-90775:
PostGIS address_standardizer through 3.7.0 fails to validate the Weight parameter from caller-supplied rules tables before using it as an array index. Attackers can craft malicious rule rows with out-of-range Weight values to trigger out-of-bounds reads in the load_value array, causing the PostgreSQL backend process to crash and terminate all cluster sessions.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/a/address-standardizer.png){kind=link}