Pgjdbc vulnerabilities

Products

• Pgjdbc 9

Newest

• pgjdbc pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros) CVE-2026-107315 Fix available 5.3 MediumOctober 7, 2026
• pgjdbc pgjdbc does not enforce requireAuth when the value excludes every authentication method CVE-2026-107314 Fix available 5.9 MediumOctober 7, 2026
• pgjdbc pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections CVE-2026-107313 Fix available 4.2 MediumOctober 7, 2026
• pgjdbc, postgresql jdbc driver +1 more Silent channel-binding authentication downgrade via unsupported certificate algorithms CVE-2026-54291 Fix available 8.2 HighJuly 6, 2026
• pgjdbc, postgresql jdbc driver, red hat amq broker 7.13.6 +17 more +19 more pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS CVE-2026-42198 Fix available 7.5 HighApril 29, 2026
• pgjdbc, postgresql jdbc driver +1 more pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration CVE-2025-49146 Fix available 8.2 HighJune 11, 2025
• pgjdbc, postgresql jdbc driver, fedoraproject fedora +2 more pgjdbc SQL Injection via line comment generation CVE-2024-1597 Fix available 10.0 CriticalFebruary 19, 2024
• pgjdbc, postgresql jdbc driver, debian linux +2 more TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc CVE-2022-41946 Fix available 4.7 MediumNovember 23, 2022
• pgjdbc, postgresql jdbc driver, debian linux +1 more +3 more SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc CVE-2022-31197 Fix available 7.1 HighAugust 3, 2022