Sharing database kernel technology, engineering practices, and industry insights.
We recently conducted a comprehensive security audit of the Xihe (Halo) database and fixed two important security vulnerabilities: privilege escalation vulnerability (CVE-2025-1094) and permission checking mechanism vulnerability (CVE-2024-10976).
Includes fixes for pg_stats_ext view missing authentication vulnerability (CVE-2024-4317) and privilege escalation vulnerability through REFRESH MATERIALIZED VIEW CONCURRENTLY (CVE-2024-0985).
Includes fixes for pg_signal_backend role privilege vulnerability, integer overflow, and aggregate function data leakage vulnerability.
In-depth analysis of how HaloDB solves the null pointer problem caused by Query tree deserialization in the PostgreSQL rule system, achieving seamless upgrades.
This article details the compatible platforms and installation process of the Halo database, helping you quickly deploy your first domestic database.
The Halo database adopts world-leading technology, possesses a unique multi-mode parsing engine, is highly compatible with multiple mainstream databases, and reduces migration costs.