PG
Vendor
pgjdbc
8
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-107315 | PG pgjdbc pgjdbc | 5.3 | Oct 7 | pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros) |
| CVE-2026-107314 | PG pgjdbc pgjdbc | 5.9 | Oct 7 | pgjdbc does not enforce requireAuth when the value excludes every authentication method |
| CVE-2026-107313 | PG pgjdbc pgjdbc | 4.2 | Oct 7 | pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections |
| CVE-2026-54291 | PG pgjdbc pgjdbc | 5.9 | Jul 6 | Silent channel-binding authentication downgrade via unsupported certificate algorithms |
| CVE-2026-42198 | PG pgjdbc pgjdbc | 7.5 | Apr 29 | pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS |
| CVE-2025-49146 | PG pgjdbc pgjdbc | 5.9 | Jun 11 | pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration |
| CVE-2024-1597 | PG pgjdbc pgjdbc | 9.8 | Feb 19 | pgjdbc SQL Injection via line comment generation |
| CVE-2022-31197 | PG pgjdbc pgjdbc | 8.0 | Aug 3 | SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc |