Forbidden reads and writes via role-blind cached plans

Row-security bypass in PostgreSQL before 17.1, 16.5, 15.9, 14.14, 13.17, and 12.21 allows remote authenticated users to read or modify protected rows. The planner fails to mark cached plans as role-dependent when a CTE, subquery, sublink, security-invoker view, coercion projection, or SQL function reaches an RLS table, so later executions under another role reuse the wrong policy context. Exploitation requires CREATE POLICY, role-specific policies, user-ID changes, and a matching plan-reuse pattern; successful reuse exposes or changes rows that the executing role should not access.