230 matches found
CLEANSTART-2026-SR55231 pgjdbc, the PostgreSQL JDBC Driver, versions 42
Security vulnerability affects the sonarqube package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...
CLEANSTART-2026-MR63134 pgjdbc, the PostgreSQL JDBC Driver, versions 42
Security vulnerability affects the sonarqube package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...
CLEANSTART-2024-BJ87056 PostgreSQL JDBC Driver (aka PgJDBC) before 42
Security vulnerability affects the java-postgresql-jdbc package. PostgreSQL JDBC Driver aka PgJDBC before 42...
CLEANSTART-2024-DM91288 pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE
Security vulnerability affects the java-postgresql-jdbc package. pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE...
CLEANSTART-2026-UL42181 pgjdbc is an open source postgresql JDBC Driver
Security vulnerability affects the druid-fips package. pgjdbc is an open source postgresql JDBC Driver...
CLEANSTART-2026-ZM12186 pgjdbc is an open source postgresql JDBC Driver
Security vulnerability affects the druid-fips package. pgjdbc is an open source postgresql JDBC Driver...
Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a 'Failing Open' issue in pgjdbc PostgreSQL JDBC Driver (CVE-2026-54291)
Summary IBM Watson Speech Services Cartridge is vulnerable to a 'Failing Open' issue in pgjdbc PostgreSQL JDBC Driver. This is due to a flaw which allows channelBinding=require connections to be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it,...
Security Bulletin: Security vulnerability has been found in IBM Guardium Discover and Classify (IGDC)
Summary Security Vulnerability has been addressed in IBM Guardium Discover and Classify IGDC Vulnerability Details CVEID:CVE-2026-54291 DESCRIPTION: pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded...
CLEANSTART-2026-SM93271 pgjdbc, the PostgreSQL JDBC Driver, versions 42
Security vulnerability affects the rundeck package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...
CLEANSTART-2026-WS83724 pgjdbc, the PostgreSQL JDBC Driver, versions 42
Security vulnerability affects the rundeck package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...
PT-2026-134753
Security vulnerability affects the rundeck package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...
PT-2026-134747
Security vulnerability affects the rundeck package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...
Security Bulletin: IBM Guardium Data Protection is affected by a security vulnerability (CVE-2026-54291)
Summary IBM Guardium Data Protection has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2026-54291 DESCRIPTION: pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded from...
CVE-2026-107313
A flaw was found in the PostgreSQL JDBC Driver pgjdbc. When Generic Security Services GSS encryption is enabled, transmitting large data values can cause the driver to send stale buffer contents instead of the intended payload. Consequently, sensitive data from earlier queries on the same...
Astra Linux – vulnerability in libpgjava
pgjdbc is an open source PostgreSQL JDBC driver. Versions 42.2.0 through 42.7.11 are vulnerable to a client-side denial of service occurring during SCRAM-SHA-256 authentication. A malicious server can instruct the driver to perform SCRAM authentication using a very high iteration count. With such...
Astra Linux – vulnerability in libpgjava
The PostgreSQL JDBC Driver abbreviated as PgJDBC enables Java programs to connect to a PostgreSQL database using standard, database-independent Java code. The PGJDBC implementation of the java.sql.ResultRow.refreshRow method fails to escape column names; therefore, a malicious column name...
GSS Buffer Leak
pgjdbc the PostgreSQL JDBC Driver is vulnerable to GSS buffer leak. The vulnerability is due to the driver reusing the GSS send buffer when GSS encryption is enabled, where writes from a byte array using methods such as setString, setBytes, ByteStreamWriter, CopyIn.writeToCopy, or LargeObject.wri...
SUSE CVE-2026-107314
pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six authentication methods the driver knows, for example requireAuth=!password,!md5,!gss,!sspi,!scram-sha-256,!none. The driver then accepts any method...
SUSE CVE-2026-107315
pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send buffer instead of zeros, and the server stores those bytes as part of the value. The bytes are messages the driver sent earlier on the same...
CVE-2026-107315
A flaw was found in the PostgreSQL JDBC Driver pgjdbc. When an application transmits a value shorter than its declared length, the driver pads the remaining data with residual bytes from its internal send buffer instead of zero bytes. An attacker who can induce the application to store and...