Postgresql Jdbc Driver
11 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Postgresql Jdbc Driver, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.
Postgresql Jdbc Driver CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 1 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 1 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 1 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 11 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High7
- Medium2
Latest CVEs
The 11 most recently published vulnerabilities affecting Postgresql Jdbc Driver.
- CVE-2026-54291Silent channel-binding authentication downgrade via unsupported certificate algorithms5.9
- CVE-2026-42198pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS7.5
- CVE-2025-49146pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration8.2
- CVE-2024-1597pgjdbc SQL Injection via line comment generation10.0
- CVE-2022-41946TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc4.7
- CVE-2022-31197SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc7.1
- CVE-2022-26520In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files through the loggerFile and loggerLevel connection p...9.8
- CVE-2022-21724Unchecked Class Instantiation when providing Plugin Classes7.0
- CVE-2020-13692PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.7.7
- CVE-2018-10936A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the driver. This cou...8.1
- CVE-2012-1618Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enabled, such as the default configuration of PostgreSQL...7.5
Product grouping is registry-driven, with AI assist and human review. How it works