pgjdbc — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in pgjdbc, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-107315	pgjdbc pads a value shorter than its declared length with bytes of earlier statements (rather than zeros) CWE-226	5.3	Medium	2026-10-07
CVE-2026-107314	pgjdbc does not enforce requireAuth when the value excludes every authentication method CWE-636	5.9	Medium	2026-10-07
CVE-2026-107313	pgjdbc stores bytes of earlier messages in place of a large value on GSS-encrypted connections CWE-201	4.2	Medium	2026-10-07
CVE-2026-54291	Silent channel-binding authentication downgrade via unsupported certificate algorithms CWE-636	-	-	2026-07-06
CVE-2026-42198	pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS CWE-770	7.5	High	2026-04-29
CVE-2025-49146	pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration CWE-287	8.2	High	2025-06-11
CVE-2024-1597	pgjdbc SQL Injection via line comment generation CWE-89	10.0	Critical	2024-02-19
CVE-2022-41946	TemporaryFolder on unix-like systems does not limit access to created files in pgjdbc CWE-200	4.7	Medium	2022-11-23
CVE-2022-31197	SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc CWE-89	7.1	High	2022-08-03

All 9 known CVE vulnerabilities affecting pgjdbc with full Chinese analysis, references, and POCs where available.