1 matches found
AZL-60438 CVE-2025-2291 affecting package pgbouncer for versions less than 1.24.1-1
Password can be used past expiry in PgBouncer due to authquery not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password...
9.8CVSS5.7AI score0.00347EPSS
SaveExploits0References1
20