https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:31:03 +0000 https://db.gcve.eu/vuln/ghsa-hq9p-pm7w-8p54 <p><strong>Affected:</strong> Maven: org.postgresql:postgresql</p> <p>### Impact When the PostgreSQL JDBC driver is configured with channel binding set to `required` (default value is `prefer`), the driver would incorrectly allow connections to proceed with authentication methods that do not support channel binding (such as password, MD5, GSS, or SSPI authentication). This could allow a man-in-the-middle attacker to intercept connections that users believed were protected by channel binding requirements.</p> <p>### Patches TBD</p> <p>### Workarounds</p> <p>Configure `sslMode=verify-full` to prevent MITM attacks.</p> <p>### References</p> <p>* https://www.postgresql.org/docs/current/sasl-authentication.html#SASL-SCRAM-SHA-256 * https://datatracker.ietf.org/doc/html/rfc7677 * https://datatracker.ietf.org/doc/html/rfc5802</p> <p><strong>Affected:</strong> Maven: org.postgresql:postgresql</p> <p>### Impact When the PostgreSQL JDBC driver is configured with channel binding set to `required` (default value is `prefer`), the driver would incorrectly allow connections to proceed with authentication methods that do not support channel binding (such as password, MD5, GSS, or SSPI authentication). This could allow a man-in-the-middle attacker to intercept connections that users believed were protected by channel binding requirements.</p> <p>### Patches TBD</p> <p>### Workarounds</p> <p>Configure `sslMode=verify-full` to prevent MITM attacks.</p> <p>### References</p> <p>* https://www.postgresql.org/docs/current/sasl-authentication.html#SASL-SCRAM-SHA-256 * https://datatracker.ietf.org/doc/html/rfc7677 * https://datatracker.ietf.org/doc/html/rfc5802</p> https://db.gcve.eu/vuln/ghsa-hq9p-pm7w-8p54