P
Vendor security profile
pgjdbc
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs4
Critical0
CISA KEV0
Public exploit2
Patch rate%25
Avg. CVSS5.7
12-month vulnerability rate
0
0
0
0
0
1
0
0
0
0
0
3
CVE KEV
CVE severity distribution
4toplam CVE
High1 (25%)
Medium3 (75%)
Patch and exploitation view
%25
Verified patch
%0
CISA KEV
%50
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
5.3
CVE-2026-107315
pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros)
P
Patch status unknownEPSS %0
5.9
CVE-2026-107314
pgjdbc does not enforce requireAuth when the value excludes every authentication method
P
Patch status unknownEPSS %0
4.2
CVE-2026-107313
pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections
P
Patch verifiedEPSS %0
7.5
CVE-2026-42198
pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS
P
Patch status unknownEPSS %4