Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-j92g-9f8w-j867
  • Maven/org.postgresql:postgresql
PostgreSQL JDBC Driver: Silent channel-binding authentication downgrade via unsupported certificate algorithms 21 Jul
  • Fix available
  • Severity - 8.2 (High)
GHSA-98qh-xjc8-98pq
  • Maven/org.postgresql:postgresql
pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS 05 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-hq9p-pm7w-8p54
  • Maven/org.postgresql:postgresql
pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration 11 Jun 2025
  • Fix available
  • Severity - 8.2 (High)
GHSA-24rp-q3w6-vc56
  • Maven/org.postgresql:postgresql
org.postgresql:postgresql vulnerable to SQL Injection via line comment generation 21 Feb 2024
  • Fix available
  • Severity - 10.0 (Critical)
GHSA-562r-vg33-8x8h
  • Maven/org.postgresql:postgresql
TemporaryFolder on unix-like systems does not limit access to created files 23 Nov 2022
  • Fix available
  • Severity - 4.7 (Medium)
GHSA-r38f-c4h4-hqq2
  • Maven/org.postgresql:postgresql
PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names 06 Aug 2022
  • Fix available
  • Severity - 7.1 (High)
GHSA-h86w-m5rm-xr33
  • Maven/org.postgresql:postgresql
Unescaped parameters in the PostgreSQL JDBC driver 17 May 2022
  • Fix available
GHSA-727h-hrw8-jg8q
  • Maven/org.postgresql:postgresql
Path traversal in org.postgresql:postgresql 11 Mar 2022
  • Fix available
GHSA-673j-qm5f-xpv8
  • Maven/org.postgresql:postgresql
pgjdbc Arbitrary File Write Vulnerability 16 Feb 2022
  • Fix available
GHSA-88cc-g835-76rp
  • Maven/org.postgresql:postgresql
Improper Restriction of XML External Entity Reference 10 Feb 2022
  • Fix available
  • Severity - 7.7 (High)
GHSA-v7wg-cpwc-24m4
  • Maven/org.postgresql:postgresql
pgjdbc Does Not Check Class Instantiation when providing Plugin Classes 02 Feb 2022
  • Fix available
  • Severity - 7.0 (High)