Skip to content
OpenAdvisories

Vendor

OnGres

3 known vulnerabilities.

Products

scram 2 StackGres 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-53712

    SCRAM: Silent channel-binding authentication downgrade via unsupported certificate algorithms

    SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security Layer (SASL, RFC 4422) authentication mechanisms. Prior to 3.3, a flaw in com.ongres.scram:scram-client and com.ongres.scram:scram-common al…

    OnGres scram com.ongres.scram:scram-common com.ongres.scram:scram-client Maven