Ppgjdbc

Products

Exploited and recent CVEs

• CVE-2026-107315 Medium 5.3 pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros) 0.2%
• CVE-2026-107314 Medium 5.9 pgjdbc does not enforce requireAuth when the value excludes every authentication method 0.3%
• CVE-2026-107313 Medium 4.2 pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections 0.1%
• CVE-2026-54291 High 8.2 Silent channel-binding authentication downgrade via unsupported certificate algorithms 0.2%
• CVE-2026-42198 High 7.5 pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS 3.3%
• CVE-2025-49146 High 8.2 pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration 0.5%
• CVE-2024-1597 Critical 10.0 pgjdbc SQL Injection via line comment generation 4.8%
• CVE-2022-41946 Medium 4.7 TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc 0.6%
• CVE-2022-31197 High 7.1 SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc 2.4%