Product by Open Source
Postgresql Jdbc Driver
5 known vulnerabilities in Postgresql Jdbc Driver (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
5
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-42198 | pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS | 7.5 | |
| High | CVE-2026-54291 | Silent channel-binding authentication downgrade via unsupported certificate algorithms | 5.9 | |
| Medium | CVE-2026-107314 | pgjdbc does not enforce requireAuth when the value excludes every authentication method | 5.9 | |
| Medium | CVE-2026-107315 | Pgjdbc: Sensitive Information in Resource Not Removed Before Reuse | 5.3 | |
| Medium | CVE-2026-107313 | pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections | 4.2 |