Pgjdbc

5 CVEs across 1 Pgjdbc products. Browse Pgjdbc vulnerabilities, severities, and proof-of-concept exploits.

Pgjdbc products with known CVEs

ProductCVEs
Pgjdbc6
Pgjdbc CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-54291Medium5.92026-07-06pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded from SCRAM-S…
CVE-2026-42198High7.52026-04-29pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during…
CVE-2025-49146High8.22025-06-11pgjdbc is an open source postgresql JDBC Driver. From 42.7.4 and until 42.7.7, when the PostgreSQL JDBC driver is configured with channel binding set to requir…
CVE-2024-1597Critical10.02024-02-19pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is n…
CVE-2022-41946Medium4.72022-11-23pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `PreparedStatement.setText(int, InputStream)` or `Prepa…
CVE-2022-31197High7.12022-08-03PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC i…