{"schemaVersion":3,"id":"CVE-2026-54291","aliases":["UBUNTU-CVE-2026-54291","DEBIAN-CVE-2026-54291","CGA-2c62-q35w-73v9","CGA-3q4m-m9w3-hv74","CGA-43rm-5mxm-5fgq","CGA-48xf-5gf7-mqm2","CGA-4cgh-rfgg-pqqx","CGA-56w6-3v9j-r4jw","CGA-6cxm-89gj-j5vv","CGA-6q9r-27vc-73gj","CGA-76pv-fjgv-3j9h","CGA-9r9w-98qh-4xp6","CGA-c9pq-c4rm-837w","CGA-f7q7-w6wf-9xxx","CGA-hfh9-xjfm-hvh8","CGA-j8c3-9r55-3644","CGA-m42p-jhwq-52fh","CGA-mphr-p67f-w4x8","CGA-pcvr-8v6c-jpfq","CGA-pfhw-wpfv-x4f5","CGA-q74j-9j47-5mqg","CGA-vgqv-pjj6-vw9g","CGA-w382-6jr4-hx7f","CGA-w9fr-w37w-vxfv","CGA-wpvc-gm84-r742","CGA-wpxj-qxv3-r4xh","CGA-x45m-pcwr-hhh6","CGA-x82c-w394-86r5","CGA-xgqh-7q66-4r83","CGA-229q-vwpw-6m32","CGA-22vw-vv8m-463r","CGA-2pf3-6x7q-h995","CGA-2v2p-v762-5h4h","CGA-2v4v-m6cj-grp6","CGA-2xxr-6564-xx7m","CGA-3246-w6mp-mw9f","CGA-336q-jvrh-hjh6","CGA-3c27-h64f-c85v","CGA-3pjp-5pv4-225r","CGA-3wh5-85fm-5546","CGA-42v6-5fhf-cgm4","CGA-45mr-r6wg-9mw5","CGA-47qx-gqxg-wxm6","CGA-4f3q-f4xf-9r3g","CGA-4h9q-83gv-74qw","CGA-4rg7-xmv2-g88g","CGA-4v95-55xw-qqxh","CGA-5g46-254x-xf75","CGA-5gjw-4984-q4rc","CGA-5m6x-mq2r-4grh","CGA-5pmw-mjc9-cw8r","CGA-64v9-9j6r-qh82","CGA-6x2r-46cg-7qvw","CGA-728f-q7jx-m365","CGA-72m2-47c5-7wwq","CGA-74qm-xr3v-2pv6","CGA-7pwv-j7q9-rhx5","CGA-7x57-m8rw-7q7c","CGA-83f6-xg86-3wvq","CGA-83v5-x286-qqxf","CGA-8522-hq2m-m8wh","CGA-8fgq-m933-59ch","CGA-8hhh-7jf4-6xfx","CGA-8jc5-px3c-5287","CGA-93gw-593q-c7f9","CGA-93w8-38j9-76jc","CGA-955v-8j9v-cq2m","CGA-982q-9858-5jw9","CGA-9cvv-mq52-p928","CGA-9hjw-g2pq-7423","CGA-9m9w-rqv5-gqf4","CGA-cf89-qv87-q4vr","CGA-cq42-c93v-6rp8","CGA-cv9p-x538-fp7f","CGA-f3p3-pjm6-965g","CGA-f3pp-pxgj-x7mg","CGA-f8w8-pmw7-p8xm","CGA-ffm5-h8wj-cv5m","CGA-g63g-8g39-5p99","CGA-g7f9-jx4c-xrfg","CGA-gvcw-9vfp-5h8j","CGA-h297-wfmx-6j7v","CGA-hf95-9vhp-cfqv","CGA-hg6m-r3f4-xm39","CGA-hhwc-x988-7vpq","CGA-hm46-wq94-cfwx","CGA-hmfh-82mq-fwqf","CGA-hphc-xw2v-59px","CGA-hrch-mg8c-7v4c","CGA-j3gm-5m99-6jg4","CGA-j8pq-fqvg-p77q","CGA-jmcc-wf56-x6m6","CGA-jmg2-522f-v7rr","CGA-jwrp-jmmc-5959","CGA-m38x-v75q-3p3p","CGA-mc9p-g7cc-859x","CGA-mgph-8frv-vcv5","CGA-mw95-g9x5-f856","CGA-p26m-gc3c-94pp","CGA-p492-fff3-r9fr","CGA-p778-5q54-4h7w","CGA-p92g-2q47-x8c9","CGA-pcjq-v9wg-qwhf","CGA-pf73-q8qc-wpf8","CGA-ppfg-pp92-586j","GHSA-j92g-9f8w-j867","BIT-postgresql-jdbc-driver-2026-54291","CGA-pwqf-r3v4-436w","CGA-r2c9-54j9-4jrh","CGA-r2x2-5jh8-9wvw","CGA-r3g2-r55p-423m","CGA-r3q2-xxh5-3w4h","CGA-r3rc-3hjp-9x7v","CGA-r53g-35g3-v99h","CGA-rhp6-65g4-xmg4","CGA-rphg-8r79-3hxm","CGA-rqgj-w5g2-2q72","CGA-vvjf-v3w6-wf8g","CGA-w867-p64h-v26m","CGA-wj54-c44h-8vxr","CGA-wp5f-mm75-cxv9","CGA-x4wp-rpgf-6c57","CGA-x6rf-r47w-q9f3","CGA-x7vj-hg33-4wcr","CGA-x9fp-5c59-rpm6","CGA-xhw4-2r8q-68cj","CGA-xj34-336p-29jj","CGA-xjgf-gf5g-595g","CGA-xqq4-vj98-p3mq"],"status":"published","duplicateOf":null,"title":null,"description":"pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it, losing the man-in-the-middle protection the setting is meant to guarantee. An attacker who can intercept the TLS connection can trigger the downgrade with a certificate whose signature algorithm has no tls-server-end-point channel-binding hash, because the bundled com.ongres.scram:scram-client returns an empty byte array instead of failing and pgJDBC ScramAuthenticator checks only that the server advertised a PLUS mechanism, without rejecting the empty binding or checking that the negotiated mechanism uses channel binding. This issue is fixed in version 42.7.12.","dates":{"published":"2026-07-06T18:55:01.675Z","modified":"2026-07-06T19:47:17.454Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.2,"severity":"high","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":8.2,"severity":"high","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":8.2,"severity":"high","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Ubuntu","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":5.6,"impact":6,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Debian","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":5.6,"impact":6,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":8.2,"severity":"high","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":8.2,"severity":"high","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Maven","score":8.2,"severity":"high","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":8.2,"severity":"high","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":5.9,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00236,"percentile":0.13693,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00236},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00236,"percentile":0.13693}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00236,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00236,"percentile":0.13693}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-636","name":"Not Failing Securely ('Failing Open')","description":"When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/636.html"},{"id":"CWE-757","name":"Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')","description":"A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/757.html"}],"affected":[{"vendor":"chainguard","product":"airbyte-server","name":"airbyte-server","label":"airbyte-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airbyte-server","purlType":"apk","versions":[{"text":"< 2.0.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"airbyte-server-fips","name":"airbyte-server-fips","label":"airbyte-server-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/airbyte-server-fips","purlType":"apk","versions":[{"text":"< 2.0.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.0.0-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apache-hop","name":"apache-hop","label":"apache-hop","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":{"isEol":null,"eolDate":null,"matchMethod":"name_exact","cycle":null,"product":{"name":"apache-hop","label":"Apache Hop","category":"app"}},"hubHref":null},{"vendor":"chainguard","product":"apache-hop-fips","name":"apache-hop-fips","label":"apache-hop-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apache-hop-fips","purlType":"apk","versions":[{"text":"< 2.19.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apicurio-registry","name":"apicurio-registry","label":"apicurio-registry","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apicurio-registry","purlType":"apk","versions":[{"text":"< 3.3.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.0-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"apicurio-registry-fips","name":"apicurio-registry-fips","label":"apicurio-registry-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/apicurio-registry-fips","purlType":"apk","versions":[{"text":"< 3.3.0-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.0-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-8.8","name":"camunda-8.8","label":"camunda-8.8","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-8.8","purlType":"apk","versions":[{"text":"< 8.8.31-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.8.31-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"camunda-zeebe-8.6","name":"camunda-zeebe-8.6","label":"camunda-zeebe-8.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/camunda-zeebe-8.6","purlType":"apk","versions":[{"text":"< 8.6.39-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.6.39-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor","name":"conductor","label":"conductor","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor","purlType":"apk","versions":[{"text":"< 3.31.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.31.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conductor-fips","name":"conductor-fips","label":"conductor-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conductor-fips","purlType":"apk","versions":[{"text":"< 3.31.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.31.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"debezium-3.6-connector-jdbc","name":"debezium-3.6-connector-jdbc","label":"debezium-3.6-connector-jdbc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/debezium-3.6-connector-jdbc","purlType":"apk","versions":[{"text":"< 3.6.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"debezium-3.6-connector-postgres","name":"debezium-3.6-connector-postgres","label":"debezium-3.6-connector-postgres","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/debezium-3.6-connector-postgres","purlType":"apk","versions":[{"text":"< 3.6.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dependency-track","name":"dependency-track","label":"dependency-track","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dependency-track","purlType":"apk","versions":[{"text":"< 4.14.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dependency-track-apiserver-4","name":"dependency-track-apiserver-4","label":"dependency-track-apiserver-4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dependency-track-apiserver-4","purlType":"apk","versions":[{"text":"< 4.14.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"dependency-track-bundled","name":"dependency-track-bundled","label":"dependency-track-bundled","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/dependency-track-bundled","purlType":"apk","versions":[{"text":"< 4.14.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.2-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"druid","name":"druid","label":"druid","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r43","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r43 | < 37.0.0-r56","eol":null,"hubHref":null},{"vendor":"chainguard","product":"floci","name":"floci","label":"floci","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/floci","purlType":"apk","versions":[{"text":"< 1.5.33-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.5.33-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"flyway","name":"flyway","label":"flyway","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/flyway","purlType":"apk","versions":[{"text":"< 13.0.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.0.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"flyway-fips","name":"flyway-fips","label":"flyway-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/flyway-fips","purlType":"apk","versions":[{"text":"< 13.0.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.0.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.27","name":"geoserver-2.27","label":"geoserver-2.27","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.27","purlType":"apk","versions":[{"text":"< 2.27.5-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.27.5-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.27-community","name":"geoserver-2.27-community","label":"geoserver-2.27-community","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.27-community","purlType":"apk","versions":[{"text":"< 2.27.5-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.27.5-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.28","name":"geoserver-2.28","label":"geoserver-2.28","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.28","purlType":"apk","versions":[{"text":"< 2.28.4-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.4-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-2.28-community","name":"geoserver-2.28-community","label":"geoserver-2.28-community","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-2.28-community","purlType":"apk","versions":[{"text":"< 2.28.4-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.28.4-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"geoserver-3.0","name":"geoserver-3.0","label":"geoserver-3.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/geoserver-3.0","purlType":"apk","versions":[{"text":"< 3.0.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"ghidra","name":"ghidra","label":"ghidra","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/ghidra","purlType":"apk","versions":[{"text":"< 12.1.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.1.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"guacamole-client-jdbc","name":"guacamole-client-jdbc","label":"guacamole-client-jdbc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/guacamole-client-jdbc","purlType":"apk","versions":[{"text":"< 1.6.0-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.6.0-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"hono-service-device-registry-jdbc","name":"hono-service-device-registry-jdbc","label":"hono-service-device-registry-jdbc","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/hono-service-device-registry-jdbc","purlType":"apk","versions":[{"text":"< 2.7.0-r27","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r27","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2025.4","name":"kayenta-2025.4","label":"kayenta-2025.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2025.4","purlType":"apk","versions":[{"text":"< 2025.4.6-r12","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.4.6-r12","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2026.0","name":"kayenta-2026.0","label":"kayenta-2026.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2026.0","purlType":"apk","versions":[{"text":"< 2026.0.4-r16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.0.4-r16","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-2026.1","name":"kayenta-2026.1","label":"kayenta-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-2026.1","purlType":"apk","versions":[{"text":"< 2026.1.1-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.1.1-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2025.4","name":"kayenta-fips-2025.4","label":"kayenta-fips-2025.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2025.4","purlType":"apk","versions":[{"text":"< 2025.4.6-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2025.4.6-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2026.0","name":"kayenta-fips-2026.0","label":"kayenta-fips-2026.0","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2026.0","purlType":"apk","versions":[{"text":"< 2026.0.4-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.0.4-r11","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kayenta-fips-2026.1","name":"kayenta-fips-2026.1","label":"kayenta-fips-2026.1","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kayenta-fips-2026.1","purlType":"apk","versions":[{"text":"< 2026.1.1-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2026.1.1-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.5","name":"keycloak-26.5","label":"keycloak-26.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.5-iamguarded-compat","name":"keycloak-26.5-iamguarded-compat","label":"keycloak-26.5-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.5-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.6","name":"keycloak-26.6","label":"keycloak-26.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.6","purlType":"apk","versions":[{"text":"< 26.6.4-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.4-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.6-iamguarded-compat","name":"keycloak-26.6-iamguarded-compat","label":"keycloak-26.6-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.6-iamguarded-compat","purlType":"apk","versions":[{"text":"< 26.6.4-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.4-r19","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.7","name":"keycloak-26.7","label":"keycloak-26.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.7","purlType":"apk","versions":[{"text":"< 26.7.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.7.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-26.7-iamguarded-compat","name":"keycloak-26.7-iamguarded-compat","label":"keycloak-26.7-iamguarded-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-26.7-iamguarded-compat","purlType":"apk","versions":[{"text":"< 26.7.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.7.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.5","name":"keycloak-fips-26.5","label":"keycloak-fips-26.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.5","purlType":"apk","versions":[{"text":"< 26.5.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.5.7-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.5-iamguarded-fips","name":"keycloak-fips-26.5-iamguarded-fips","label":"keycloak-fips-26.5-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.5-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.5.7-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.5.7-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.6","name":"keycloak-fips-26.6","label":"keycloak-fips-26.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.6","purlType":"apk","versions":[{"text":"< 26.6.4-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.4-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.6-iamguarded-fips","name":"keycloak-fips-26.6-iamguarded-fips","label":"keycloak-fips-26.6-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.6-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.6.4-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.4-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.7","name":"keycloak-fips-26.7","label":"keycloak-fips-26.7","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.7","purlType":"apk","versions":[{"text":"< 26.7.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.7.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"keycloak-fips-26.7-iamguarded-fips","name":"keycloak-fips-26.7-iamguarded-fips","label":"keycloak-fips-26.7-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/keycloak-fips-26.7-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.7.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.7.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nacos","name":"nacos","label":"nacos","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nacos","purlType":"apk","versions":[{"text":"< 3.2.3-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.3-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nacos-docker","name":"nacos-docker","label":"nacos-docker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nacos-docker","purlType":"apk","versions":[{"text":"< 3.2.3-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.2.3-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"nuxeo-2023","name":"nuxeo-2023","label":"nuxeo-2023","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/nuxeo-2023","purlType":"apk","versions":[{"text":"< 2023.45-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2023.45-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.4","name":"request-9047-keycloak-fips-26.4","label":"request-9047-keycloak-fips-26.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.4","purlType":"apk","versions":[{"text":"< 26.4.7-r24","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r24","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.4-iamguarded-fips","name":"request-9047-keycloak-fips-26.4-iamguarded-fips","label":"request-9047-keycloak-fips-26.4-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.4-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.4.7-r24","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.4.7-r24","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.5","name":"request-9047-keycloak-fips-26.5","label":"request-9047-keycloak-fips-26.5","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.5","purlType":"apk","versions":[{"text":"< 26.5.7-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.5.7-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.5-iamguarded-fips","name":"request-9047-keycloak-fips-26.5-iamguarded-fips","label":"request-9047-keycloak-fips-26.5-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.5-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.5.7-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.5.7-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.6","name":"request-9047-keycloak-fips-26.6","label":"request-9047-keycloak-fips-26.6","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.6","purlType":"apk","versions":[{"text":"< 26.6.4-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.4-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"request-9047-keycloak-fips-26.6-iamguarded-fips","name":"request-9047-keycloak-fips-26.6-iamguarded-fips","label":"request-9047-keycloak-fips-26.6-iamguarded-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/request-9047-keycloak-fips-26.6-iamguarded-fips","purlType":"apk","versions":[{"text":"< 26.6.4-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.4-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"seata-server","name":"seata-server","label":"seata-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/seata-server","purlType":"apk","versions":[{"text":"< 2.7.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.7.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sonarqube","name":"sonarqube","label":"sonarqube","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sonarqube","purlType":"apk","versions":[{"text":"< 26.7.0.124771-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.7.0.124771-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r8","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar","name":"traccar","label":"traccar","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar","purlType":"apk","versions":[{"text":"< 6.14.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.14.5-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"traccar-fips","name":"traccar-fips","label":"traccar-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/traccar-fips","purlType":"apk","versions":[{"text":"< 6.14.5-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 6.14.5-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"apicurio-registry","name":"apicurio-registry","label":"apicurio-registry","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/apicurio-registry","purlType":"apk","versions":[{"text":"< 3.3.0-r11","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.3.0-r11","eol":null,"hubHref":null},{"vendor":"wolfi","product":"debezium-3.6-connector-jdbc","name":"debezium-3.6-connector-jdbc","label":"debezium-3.6-connector-jdbc","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/debezium-3.6-connector-jdbc","purlType":"apk","versions":[{"text":"< 3.6.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"debezium-3.6-connector-postgres","name":"debezium-3.6-connector-postgres","label":"debezium-3.6-connector-postgres","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/debezium-3.6-connector-postgres","purlType":"apk","versions":[{"text":"< 3.6.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.6.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dependency-track","name":"dependency-track","label":"dependency-track","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dependency-track","purlType":"apk","versions":[{"text":"< 4.14.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.2-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"dependency-track-bundled","name":"dependency-track-bundled","label":"dependency-track-bundled","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/dependency-track-bundled","purlType":"apk","versions":[{"text":"< 4.14.2-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.2-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"druid","name":"druid","label":"druid","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/druid","purlType":"apk","versions":[{"text":"< 37.0.0-r43","noFixRecorded":false,"fixedIn":null},{"text":"< 37.0.0-r56","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 37.0.0-r43 | < 37.0.0-r56","eol":null,"hubHref":null},{"vendor":"wolfi","product":"flyway","name":"flyway","label":"flyway","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/flyway","purlType":"apk","versions":[{"text":"< 13.0.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 13.0.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.5","name":"keycloak-26.5","label":"keycloak-26.5","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.5","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.5-iamguarded-compat","name":"keycloak-26.5-iamguarded-compat","label":"keycloak-26.5-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.5-iamguarded-compat","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.6","name":"keycloak-26.6","label":"keycloak-26.6","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.6","purlType":"apk","versions":[{"text":"< 26.6.4-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.4-r19","eol":null,"hubHref":null},{"vendor":"wolfi","product":"keycloak-26.6-iamguarded-compat","name":"keycloak-26.6-iamguarded-compat","label":"keycloak-26.6-iamguarded-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/keycloak-26.6-iamguarded-compat","purlType":"apk","versions":[{"text":"< 26.6.4-r19","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.6.4-r19","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sonarqube","name":"sonarqube","label":"sonarqube","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sonarqube","purlType":"apk","versions":[{"text":"< 26.7.0.124771-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 26.7.0.124771-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"thingsboard-tb-node","name":"thingsboard-tb-node","label":"thingsboard-tb-node","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/thingsboard-tb-node","purlType":"apk","versions":[{"text":"< 4.3.1.3-r8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.3.1.3-r8","eol":null,"hubHref":null},{"vendor":"debian","product":"libpgjava","name":"libpgjava","label":"libpgjava","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libpgjava","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null},{"text":"< 42.7.12-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"All versions (No fix recorded) | < 42.7.12-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"libpgjava","name":"libpgjava","label":"libpgjava","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/libpgjava","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"org.postgresql","product":"postgresql","name":"org.postgresql:postgresql","label":"postgresql","ecosystem":"Maven","cpePart":null,"purl":"pkg:maven/org.postgresql/postgresql","purlType":"maven","versions":[{"text":"≥ 42.7.4, < 42.7.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 42.7.4, < 42.7.12","eol":null,"hubHref":null},{"vendor":"pgjdbc","product":"pgjdbc","name":"pgjdbc","label":"pgjdbc","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 42.7.4, < 42.7.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 42.7.4, < 42.7.12","eol":null,"hubHref":"/vendor/pgjdbc/pgjdbc"},{"vendor":"postgresql","product":"postgresql_jdbc_driver","name":"postgresql jdbc driver","label":"postgresql_jdbc_driver","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 42.7.4, < 42.7.12","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 42.7.4, < 42.7.12","eol":null,"hubHref":"/vendor/postgresql/postgresql_jdbc_driver"}],"affectedCount":77,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867","label":"github.com/pgjdbc/pgjdbc/security/advisories/GHSA-j92g-9f8w-j867","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB","Patch","Vendor Advisory"]},{"url":"https://github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99","label":"github.com/pgjdbc/pgjdbc/commit/77df98e4e66c12936ded3478a0954f6f580bad99","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB","Patch"]},{"url":"https://github.com/ongres/scram/releases/tag/3.3","label":"github.com/ongres/scram/releases/tag/3.3","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB","Not Applicable"]},{"url":"https://ubuntu.com/security/CVE-2026-54291","label":"ubuntu.com/security/CVE-2026-54291","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-54291","label":"www.cve.org/CVERecord?id=CVE-2026-54291","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-54291","label":"security-tracker.debian.org/tracker/CVE-2026-54291","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54291.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/54xxx/CVE-2026-54291.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-54291","label":"nvd.nist.gov/vuln/detail/CVE-2026-54291","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/pgjdbc/pgjdbc","label":"github.com/pgjdbc/pgjdbc","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-X9W7-CJ52-9J8F"]},"timeline":[{"kind":"published","date":"2026-07-06T18:55:01.675Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-07-06T19:47:17.454Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":33,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T21:00:54.142Z","stale":false,"partial":false}}