[ Vendor · 4 CVEs ]
pgjdbc
CVEs affecting pgjdbc published in the last 30 days, plus any pgjdbc CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107315 | 8 Oct 2026 | CVSS 5.3 | pgjdbcpgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length with bytes left in its send… | Fix |
| CVE-2026-107314 | 7 Oct 2026 | CVSS 5.9 | pgjdbcpgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection property excludes all six… | Fix |
| CVE-2026-107313 | 7 Oct 2026 | CVSS 4.2 | pgjdbcpgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place of the first part of a… | |
| CVE-2026-54291 | 6 Jul 2026 | CVSS 8.2 | pgjdbcpgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded… |