Skip to content
OpenAdvisories

Package · Maven

com.ongres.scram:scram-common

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-53712

    SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms

    SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to 3.3, a flaw in com.ongres.scram:scram-client and com.ongres.scram:scram-common al…

    OnGres scram com.ongres.scram:scram-common com.ongres.scram:scram-client Maven
  • Medium 6.6
    CVE-2025-59432

    Timing Attack Vulnerability in SCRAM Authentication

    SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to version 3.2, a timing attack vulnerability exists in the SCRAM Java implementatio…

    OnGres scram com.ongres.scram:scram-common libscram-java Debian Ubuntu Maven