---
title: "PostGIS"
description: "1 posts about PostGIS, summarised, each linking to the original."
---

# PostGIS
> 1 posts about PostGIS, summarised, each linking to the original.

## Articles

### [Collaboration makes us all stronger](https://yomu.fyi/post/collaboration-makes-us-all-stronger.md)
- Company: [Databricks](https://yomu.fyi/company/databricks.md)
- Author: Aaron Kobayashi, Mehmet D. Ince, Anurag Srivastava, Alexey Kondratov
- Published: Sep 1, 2026

An external researcher, Mehmet Ince, reported a memory-safety flaw in PostGIS’s address\_standardizer extension, where caller-controlled grammar data indexed a fixed-size array without bounds checking. Because the extension was available to ordinary tenant roles on managed Postgres services, Databricks treated the issue as a platform exposure rather than a third-party problem, while noting that its microVM architecture meant the exploit did not produce cross-customer impact on Lakebase Postgres and Neon. Detection alerted the Neon team during testing, enabling rapid validation and downstream patching while a durable fix was developed and deployed to protect tenants without customer action. The upstream fix initially missed cases; Mehmet supplied the remaining pieces, and the complete correction was returned to PostGIS, with his bounty donated and matched for the project.