CVE-2023-31136

CVE-2023-31136 is a medium-severity vulnerability affecting PostgresNIO, a Swift client for PostgreSQL, prior to version 1.14.2. It allows a man-in-the-middle attacker to inject false responses to a client's initial queries, even with TLS enabled and certificate verification in place. The vulnerability has a CVSS score of 5.9, indicating a network attack vector with high attack complexity, potentially leading to high confidentiality impact. There are no known active exploits, public exploit code, or significant community discussion surrounding this CVE.