Skip to content
OpenAdvisories
High DLA-3140-1 1 CVE

libpgjava - security update

Published Oct 7, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 libpgjava 42.2.5-2+deb10u2

Vulnerabilities 1

  • High 7.1
    CVE-2022-31197

    SQL Injection in ResultSet.refreshRow() with malicious column names in pgjdbc

    PostgreSQL JDBC Driver (PgJDBC for short) allows Java programs to connect to a PostgreSQL database using standard, database independent Java code. The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not performing escaping of column n…

    pgjdbc pgjdbc libpgjava libpgjava Debian Ubuntu Alpine Wolfi Maven