Skip to content
Postgresql Jdbc Driver vulnerabilities
-
pgjdbc, postgresql jdbc driver +1 more
Silent channel-binding authentication downgrade via unsupported certificate algorithms
CVE-2026-54291
Fix available
8.2 High
-
pgjdbc, postgresql jdbc driver, red hat amq broker 7.13.6 +17 more +19 more
pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS
CVE-2026-42198
Fix available
7.5 High
-
pgjdbc, postgresql jdbc driver +1 more
pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration
CVE-2025-49146
Fix available
8.2 High
-
pgjdbc, postgresql jdbc driver, fedoraproject fedora +2 more
pgjdbc SQL Injection via line comment generation
CVE-2024-1597
Fix available
10.0 Critical
-
pgjdbc, postgresql jdbc driver, debian linux +2 more
TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc
CVE-2022-41946
Fix available
4.7 Medium
-
pgjdbc, postgresql jdbc driver, debian linux +1 more +3 more
SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc
CVE-2022-31197
Fix available
7.1 High
-
postgresql jdbc driver, debian linux +1 more
pgjdbc Arbitrary File Write Vulnerability
CVE-2022-26520
Fix availableDisputed
9.8 Critical
-
postgresql jdbc driver, debian linux, fedoraproject fedora +1 more +3 more
Unchecked Class Instantiation when providing Plugin Classes
CVE-2022-21724
Fix available
7.0 High
-
postgresql jdbc driver, debian linux, fedoraproject fedora +2 more +4 more
Improper Restriction of XML External Entity Reference
CVE-2020-13692
Fix available
7.7 High
-
[unknown] postgresql, postgresql jdbc driver, redhat enterprise linux +2 more
Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate
CVE-2018-10936
Public exploitFix available
8.1 High
-
postgresql, postgresql jdbc driver +1 more
Unescaped parameters in the PostgreSQL JDBC driver
CVE-2012-1618
Fix available
7.5 High