https://github.com/haskellari/postgresql-simple/blob/187e4ac44b079a6fc8739777e3f5f6fee0510dd5/postgresql-simple.cabal#L91-L91 and [HSEC-2026-0007](https://haskell.github.io/security-advisories/advisory/HSEC-2026-0007.html) says affected version `>=0.12.0.0 && <2.3.0.0` Tests pass with never aeson: ```sh cabal test all \ --allow-newer=postgresql-simple:aeson \ --constraint='aeson >=2.3.0.0' ```
postgresql-simple/postgresql-simple.cabal
Line 91 in 187e4ac
and HSEC-2026-0007 says affected version
>=0.12.0.0 && <2.3.0.0Tests pass with never aeson: