Skip to content
OpenAdvisories

Package · Wolfi

debezium-3.6-connector-postgres

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2026-59949

    yawkat LZ4 Java: JVM Crash via Null Byte Array in lz4-java Streaming XXHash JNI (StreamingXXHash32JNI / StreamingXXHash64JNI)

    yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JNI-backed XXHash implementations fail to validate the byte array object and the off and len arguments in XXHashFactory.nativeInstance().hash32().hash(), XXHashFactory.nativeInstance().hash64…

    yawkat lz4-java druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • High 8.2
    CVE-2026-54291

    Silent channel-binding authentication downgrade via unsupported certificate algorithms

    pgjdbc is an open source postgresql JDBC Driver. In releases 42.7.4 through 42.7.11, channelBinding=require connections can be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256 without it, losing the man-in-the-middle pro…

    pgjdbc pgjdbc druid thingsboard-tb-node Debian Ubuntu Wolfi Maven