Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.postgresql/postgresql@42.5.3
purl pkg:maven/org.postgresql/postgresql@42.5.3
Next non-vulnerable version 42.7.11
Latest non-vulnerable version 42.7.11
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-nw8j-ybjy-hqbg
Aliases:
CVE-2024-1597
GHSA-24rp-q3w6-vc56
GHSA-xfg6-62px-cxc2
Duplicate This advisory duplicates another.
42.5.5
Affected by 1 other vulnerability.
42.6.1
Affected by 1 other vulnerability.
42.7.2
Affected by 1 other vulnerability.
VCID-y6bd-xgvn-jub9
Aliases:
CVE-2026-42198
GHSA-98qh-xjc8-98pq
jdbc.postgresql.org: pgjdbc: Client-side Denial of Service via malicious SCRAM-SHA-256 authentication
42.7.11
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-06T08:27:19.330591+00:00 GitLab Importer Affected by VCID-y6bd-xgvn-jub9 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.postgresql/postgresql/CVE-2026-42198.yml 38.6.0
2026-06-06T04:38:12.713996+00:00 GitLab Importer Affected by VCID-nw8j-ybjy-hqbg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.postgresql/postgresql/CVE-2024-1597.yml 38.6.0