Pgjdbc vulnerabilities
We track 3 vulnerabilities in Pgjdbc products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 29, 2026.
Latest Pgjdbc vulnerabilities
- 7.5 High severity
pgjdbc: Allocation of Resources Without Limits or Throttling
pgjdbc is an open source postgresql JDBC Driver. From version 42.2.0 to before version 42.7.11, pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication. A malicious server can instruct the driver to perform SCRAM authenticat
- 9.8 Critical severity
pgjdbc: Improper Neutralization of Special Elements used in an SQL Command
pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE. Note this is not the default. In the default mode there is no vulnerability. A placeholder for a numeric value must be immediately preceded by a minus. There mus
- 8.0 High severity
pgjdbc: Improper Neutralization of Special Elements used in an SQL Command
PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not performing escaping of column na