Postgresql jdbc driver
This hub aggregates every CVE we track for Postgresql jdbc driver, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.
11
CVEs tracked
2
Critical
7
High
0
In CISA KEV
Severity distribution
HIGH7MEDIUM2CRITICAL2
Monthly trend
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
1
0
0
1
0
2024-092026-08
Latest CVEs
The 11 most recently published vulnerabilities affecting Postgresql jdbc driver.
- CVE-2026-54291Silent channel-binding authentication downgrade via unsupported certificate algorithms5.9
- CVE-2026-42198pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS7.5
- CVE-2025-49146pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration8.2
- CVE-2024-1597pgjdbc SQL Injection via line comment generation10.0
- CVE-2022-41946TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7
- CVE-2022-31197SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc7.1
- CVE-2022-26520In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection p...9.8
- CVE-2022-21724Unchecked Class Instantiation when providing Plugin Classes7.0
- CVE-2020-13692PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.7.7
- CVE-2018-10936A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This cou...8.1
- CVE-2012-1618Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL...7.5
Product normalization is registry-driven with AI assist and human review. How it works