Pgjdbc
This hub aggregates every CVE we track for Pgjdbc, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.
9
CVEs tracked
2
Critical
5
High
0
In CISA KEV
Severity distribution
HIGH5MEDIUM2CRITICAL2
Monthly trend
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
1
0
2024-092026-08
Latest CVEs
The 9 most recently published vulnerabilities affecting Pgjdbc.
- CVE-2026-54291Silent channel-binding authentication downgrade via unsupported certificate algorithms5.9
- CVE-2026-42198pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS7.5
- CVE-2025-49146pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration8.2
- CVE-2024-1597pgjdbc SQL Injection via line comment generation10.0
- CVE-2022-41946TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7
- CVE-2022-31197SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc7.1
- CVE-2022-26520In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection p...9.8
- CVE-2022-21724Unchecked Class Instantiation when providing Plugin Classes7.0
- CVE-2020-13692PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.7.7
Product normalization is registry-driven with AI assist and human review. How it works