Known vulnerabilities in pgbouncer
Vendor:
PgBouncer
Software:
pgbouncer
Software CPE:
cpe:2.3:a:wiki.postgresql.org:pgbouncer:*:*:*:*:*:*:*:*
Website:
https://www.pgbouncer.org/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.25.2
1.25.1
1.25.0
1.24.1
1.24.0
1.23.1
1.23.0
1.22.1
1.22.0
1.21.0
1.20.1
1.20.0
1.19.1
1.19.0
1.18.0
1.17.0
1.16.1
1.16.0
1.8.1
1.8
1.7.1
1.7
1.6.1
1.5.5
1.5.4
1.5.3
1.5.1
1.5
1.4.2
1.4.1
1.4
1.3.4
1.3.3
1.3.2
1.3.1
1.3
1.2.3
1.2.2
1.2.1
1.2
1.1.2
1.1.1
1.1
1.0.8
1.0.7
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0
1.15.0
1.7.2
1.5.2
1.6
1.9.0
1.11.0
1.10.0
1.14.0
1.13.0
1.12.0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU119232 - Untrusted Search Path CVE-2025-12819 |
CWE-426 | High | 1.25.1 | 06.12.2025 |
SB2025120601 SB20260509172 SB20260509173 and 5 more |
||
| #VU107593 - Weak Password Requirements CVE-2025-2291 |
CWE-521 | Medium | 1.24.1 | 17.04.2025 |
SB2025041743 SB2025041745 SB2025041746 and 4 more |
||
| #VU38956 - Improper Authentication CVE-2015-6817 |
CWE-287 | High | - | 23.05.2017 |
SB2017052319 |
||
| #VU43330 - Memory corruption CVE-2012-4575 |
CWE-119 | Medium | - | 18.11.2012 |
SB2012111801 |