Known vulnerabilities in c3p0

Software: c3p0
Software CPE: cpe:2.3:a:mchange.com:c3p0:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting c3p0 c3p0 is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126753 - Deserialization of Untrusted Data
CVE-2026-27830
CWE-502 Medium
No
No
0.12.0 22.04.2026 SB20260422128
SB20260422168
SB20260422170
and 8 more
#VU18785 - Improper input validation
CVE-2019-5427
CWE-20 Medium
No
No
0.9.5.4 12.06.2019 SB2019042204
SB2020032701
SB2022022132
and 5 more
#VU18784 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20433
CWE-611 Medium
No
No
0.9.5.3 12.06.2019 SB2018122409
SB2019061208
SB2022042586
and 2 more