postgres-pro
Warn
Audited by Socket on Sep 23, 2026
1 alert found:
AnomalyAnomalyscripts/backup_pg.py
LOWAnomalyLOW
scripts/backup_pg.py
No clear malicious behavior or obfuscated payload is present. The code performs expected PostgreSQL backup and restore operations. Security concerns include SQL injection through the database name, path traversal or arbitrary file manipulation through backup_name, backup_file, and tampered history paths, exposure of database backups, and execution of SQL from untrusted restore archives. Inputs should be validated, SQL identifiers safely quoted or restricted, paths confined to the backup directory, and secrets handled through a secure credential mechanism.
Confidence: 98%Severity: 68%
Audit Metadata