OnGres

Products

ProductCVEsExploitedLatest
scram2–Jul 17, 2026
StackGres1–Aug 23, 2026

Exploited and recent CVEs

  • CVE-2026-78155 Critical 9.9 Untrusted Search Path in StackGres 0.5%
  • CVE-2026-53712 High 8.2 SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms 0.3%
  • CVE-2025-59432 Medium 6.6 Timing Attack Vulnerability in SCRAM Authentication 0.7%