PG
Product
PgBouncer
11
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 1High 7Medium 3Low 0
Watch
Add PgBouncer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107348 | 5.9 | Oct 14 | Integer overflow causes an infinite loop in message buffer growth in PgBouncer Affected: 1.21.0 before 1.26.1 |
| CVE-2026-6669 | 5.9 | Sep 23 | Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer Affected: through 1.25.2 |
| CVE-2026-6667 | 4.3 | May 9 | PgBouncer missing authorization check in KILL_CLIENT admin command Affected: before 1.25.2 |
Showing 3
