What’s Vulnerable › Products

Postgresql Jdbc Driver vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your Postgresql Jdbc Driver version is affected

Latest Postgresql Jdbc Driver vulnerabilities

• CVE-2026-54291 — Silent channel-binding authentication downgrade via unsupported certificate algorithms (CVSS 5.9)
• CVE-2026-42198 — pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS (CVSS 7.5)
• CVE-2025-49146 — pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration (CVSS 5.9)
• CVE-2024-1597 — pgjdbc SQL Injection via line comment generation (CVSS 9.8)
• CVE-2022-41946 — TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc (CVSS 5.5)
• CVE-2022-31197 — SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc (CVSS 8.0)
• CVE-2022-26520 — (CVSS 9.8)
• CVE-2022-21724 — Unchecked Class Instantiation when providing Plugin Classes (CVSS 9.8)
• CVE-2020-13692 — (CVSS 7.7)
• CVE-2018-10936 — (CVSS 8.1)
• CVE-2012-1618 — (CVSS 7.5)