What’s Vulnerable › Products

pgjdbc vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your pgjdbc version is affected

Latest pgjdbc vulnerabilities

• CVE-2026-107315 — pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros) (CVSS 5.3)
• CVE-2026-107314 — pgjdbc does not enforce requireAuth when the value excludes every authentication method (CVSS 5.9)
• CVE-2026-107313 — pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections (CVSS 4.2)