Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: PgBouncer 1.25.2 Clear all filters
TI-2026-05849 CVE-2026-6666 · GHSA-4463-8rvf-rj9f

PgBouncer crash in kill_pool_logins_server_error

Priority LOW 33

A possible null pointer reference in PgBouncer before 1.25.2 could lead to a crash, if a server sends an error response without SQLSTATE field.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00369 Published 2026-05-09 Fixed in 1.25.2 CWE-476
TI-2026-05848 CVE-2026-6665 · GHSA-mhmx-mjv6-w337

PgBouncer buffer overflow in SCRAM

Priority MEDIUM 43

The SCRAM code in PgBouncer before 1.25.2 did not check the return value of strlcat() correctly when building the contents of the SCRAM client-final-message.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00372 Published 2026-05-09 Fixed in 1.25.2 CWE-121
TI-2026-05847 CVE-2026-6664 · GHSA-pmgp-q838-fh9g

PgBouncer integer overflow in PgBouncer network packet parsing

Priority LOW 34

An integer overflow in network packet parsing code in PgBouncer before 1.25.2 bypasses a boundary check and can lead to a crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2026-05-09 Fixed in 1.25.2 CWE-190