Product by PostgreSQL Global Development Group
PostgreSQL
11 known vulnerabilities in PostgreSQL (PostgreSQL Global Development Group), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-42198 | pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS | 7.5 | |
| Critical | CVE-2024-1597 | pgjdbc SQL Injection via line comment generation | 10.0 | |
| Critical | CVE-2022-26520 | PostgreSQL JDBC Driver: security vulnerability | 9.8 | |
| High | CVE-2020-13692 | PostgreSQL JDBC Driver: XML External Entity (XXE) | 7.7 | |
| High | CVE-2018-10936 | PostgreSQL: Improper Validation of Certificate with Host Mismatch | 8.1 | |
| Critical | CVE-2022-21724 | Unchecked Class Instantiation when providing Plugin Classes | 7.0 | |
| High | CVE-2022-31197 | SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc | 7.1 | |
| High | CVE-2026-54291 | Silent channel-binding authentication downgrade via unsupported certificate algorithms | 5.9 | |
| High | CVE-2025-49146 | Pgjdbc: Improper Authentication | 8.2 | |
| Not rated | CVE-2012-1618 | PostgreSQL: SQL Injection | — | |
| Medium | CVE-2022-41946 | TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc | 4.7 |