org.postgresql:postgresql vulnerabilities (Maven)
10 vulnerabilities.
-
org.postgresql:postgresqlMaven Silent channel-binding authentication downgrade via unsupported certificate algorithms 8.2 High -
org.postgresql:postgresqlMaven pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS 7.5 High -
org.postgresql:postgresqlMaven pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration 8.2 High -
org.postgresql:postgresqlMaven pgjdbc SQL Injection via line comment generation 10.0 Critical -
org.postgresql:postgresqlMaven TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc 4.7 Medium -
org.postgresql:postgresqlMaven SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc 7.1 High -
org.postgresql:postgresqlMaven pgjdbc Arbitrary File Write Vulnerability 9.8 Critical -
org.postgresql:postgresqlMaven Unchecked Class Instantiation when providing Plugin Classes 7.0 High -
org.postgresql:postgresqlMaven Improper Restriction of XML External Entity Reference 7.7 High -
org.postgresql:postgresqlMaven Unescaped parameters in the PostgreSQL JDBC driver 7.5 High