`org.postgresql:postgresql`

Ecosystem:
maven

Package URL:
pkg:maven/org.postgresql:postgresql

Total PRs:
2,557 Dependabot PRs

Latest PR:
4 days ago

Unique Repositories:
1,091 repositories

Unique Repos (30 days):
17 repositories

Security Advisories

Unescaped parameters in the PostgreSQL JDBC driver

GHSA-h86w-m5rm-xr33 CVE-2012-1618 HIGH published over 3 years ago • updated 15 days ago

Interaction error in the PostgreSQL JDBC driver before 8.2, when used with a PostgreSQL server with the "standard_conforming_strings" option enable...

org.postgresql:postgresql vulnerable to SQL Injection via line comment generation

GHSA-24rp-q3w6-vc56 CVE-2024-1597 CRITICAL published almost 2 years ago • updated 2 days ago

# Impact SQL injection is possible when using the non-default connection property `preferQueryMode=simple` in combination with application code tha...

PostgreSQL JDBC Driver SQL Injection in ResultSet.refreshRow() with malicious column names

GHSA-r38f-c4h4-hqq2 CVE-2022-31197 HIGH published over 3 years ago • updated 2 days ago

### Impact _What kind of vulnerability is it? Who is impacted?_ The PGJDBC implementation of the `java.sql.ResultRow.refreshRow()` method is not p...

TemporaryFolder on unix-like systems does not limit access to created files

GHSA-562r-vg33-8x8h CVE-2022-41946 MODERATE published about 3 years ago • updated 2 days ago

**Vulnerability** `PreparedStatement.setText(int, InputStream)` and `PreparedStatemet.setBytea(int, InputStream)` will create a temporary file i...

Path traversal in org.postgresql:postgresql

GHSA-727h-hrw8-jg8q CVE-2022-26520 LOW published over 3 years ago • updated 2 days ago

In pgjdbc before 42.3.3, an attacker (who controls the jdbc URL or properties) can call java.util.logging.FileHandler to write to arbitrary files t...

View all 9 advisories

Recent PRs

Bump the minor-and-patch group in /backend with 15 updates

digitalfabrik/entitlementcard #2545

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

chore(deps): bump org.postgresql:postgresql from 42.7.3 to 42.7.8

Aiven-Open/jdbc-connector-for-apache-kafka #373

42.7.3 → 42.7.8 Patch PR

Open 2 months ago

Bump org.postgresql:postgresql from 42.7.3 to 42.7.8

Bhadri14/Bhadri1 #6

42.7.3 → 42.7.8 Patch PR

Open 2 months ago 1 comment

fix(deps): bump the prod-deps group across 1 directory with 10 updates

folio-org/spring-module-core #95

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

chore(deps): bump the update-dependencies group across 1 directory with 21 updates

navikt/pale-2 #390

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump the backend group with 31 updates

navikt/pensjon-etterlatte-saksbehandling #7876

42.7.7 → 42.7.8 Patch PR

Merged 2 months ago 1 comment

chore(deps): bump the backend-dependencies group across 1 directory with 17 updates

Miragon/retail-ddd-example #40

42.7.7 → 42.7.8 Patch PR

Open 2 months ago 1 comment

Bump the prod-dependencies group across 1 directory with 15 updates

coditory/sherlock-distributed-lock #287

42.7.5 → 42.7.8 Patch PR

Closed 2 months ago 1 comment

Bump the dependencies group with 4 updates

avaje/avaje-httpserver-realworld #8

42.7.7 → 42.7.8 Patch PR

Merged 2 months ago

Build(deps): bump org.postgresql:postgresql from 42.7.7 to 42.7.8

io7m-com/cardant #280

42.7.7 → 42.7.8 Patch PR

Open 2 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 28 updates

navikt/syfonlaltinn #294

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago 1 comment

Bump org.postgresql:postgresql from 42.7.4 to 42.7.8 in /back

10Pines/smart-open-space #507

42.7.4 → 42.7.8 Patch PR

Open 2 months ago

Bump the minor-updates group with 8 updates

fabieu/simdesk #250

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /prime-router

CDCgov/prime-reportstream #18578

42.7.7 → 42.7.8 Patch PR

Open 2 months ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 30 updates

navikt/syfosmmanuell-backend #383

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago 1 comment

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8

spring-petclinic/spring-framework-petclinic #222

42.7.7 → 42.7.8 Patch PR

Merged 2 months ago

Bump org.postgresql:postgresql from 42.7.5 to 42.7.7

Somaya235/bingapp #6

42.7.5 → 42.7.7 Patch PR

Open 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8

io7m-com/ervilla #109

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /modules/junit-jupiter

reta/testcontainers-java #1967

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /modules/cratedb

reta/testcontainers-java #1958

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /modules/questdb

reta/testcontainers-java #1953

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /modules/postgresql

reta/testcontainers-java #1903

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /modules/cockroachdb

reta/testcontainers-java #1894

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /modules/spock

reta/testcontainers-java #1878

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago

build(deps): bump the action-dependencies group across 1 directory with 4 updates

LuminaPJ/lumina-server #32

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago 2 comments

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8

navikt/aap-utbetal #275

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

build(deps): bump the backend-dependencies group with 16 updates

emaarco/distributed-horcruxes #25

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump the maven-deps group across 1 directory with 6 updates

starwit/observatory-config #341

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

chore(deps): bump the dependencies group across 1 directory with 33 updates

navikt/macgyver #320

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump the backend group with 9 updates

navikt/pensjon-etterlatte #1984

42.7.7 → 42.7.8 Patch PR

Merged 2 months ago

chore(deps): bump the dependencies group across 1 directory with 28 updates

navikt/sykmeldinger-backend-kafka #356

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump the gradle-deps group with 7 updates

gocd/gocd-analytics-plugin #1352

42.7.7 → 42.7.8 Patch PR

Merged 2 months ago 1 comment

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8

DSpace/DSpace #11383

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /start

OpenLiberty/guide-testcontainers #223

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /finish

OpenLiberty/guide-testcontainers #218

42.7.7 → 42.7.8 Patch PR

Merged 2 months ago

chore(deps): bump the dependencies group across 1 directory with 25 updates

navikt/syfosmmottak #435

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago 1 comment

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /finish/module-persisting-data

OpenLiberty/guide-liberty-deep-dive #552

42.7.7 → 42.7.8 Patch PR

Merged 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /finish/module-testcontainers

OpenLiberty/guide-liberty-deep-dive #546

42.7.7 → 42.7.8 Patch PR

Merged 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8 in /finish/module-jwt

OpenLiberty/guide-liberty-deep-dive #545

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Build(deps): Bump the annet-deps group across 1 directory with 18 updates

navikt/ung-sak #734

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

chore(deps): bump the dependencies group across 1 directory with 20 updates

navikt/syfosmvarsel #363

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

chore(deps): bump the update-dependencies group across 1 directory with 16 updates

navikt/pale-2-register #297

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Bump org.postgresql:postgresql from 42.7.7 to 42.7.8

Project-UniCloud/uc-backend #33

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

chore(deps): bump the update-dependencies group across 1 directory with 20 updates

navikt/pale-2 #389

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago 1 comment

Bump the maven-deps group across 1 directory with 8 updates

starwit/Urbalytix #55

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago 1 comment

build(deps): bump org.postgresql:postgresql from 42.5.3 to 42.5.5 in /archetype/src/main/resources/archetype-resources

zebrunner/carina #2291

42.5.3 → 42.5.5 Patch PR

Open 2 months ago

Bump the minor-or-patch group across 1 directory with 9 updates

FAIRDataTeam/FAIRDataPoint #779

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

Build(deps): Bump the annet-deps group across 1 directory with 17 updates

navikt/ung-sak #727

42.7.7 → 42.7.8 Patch PR

Closed 2 months ago 1 comment

Bump the gradle group across 1 directory with 12 updates

navikt/sif-innsyn-api #614

42.7.7 → 42.7.8 Patch PR

Open 2 months ago

chore(deps): bump the java-minor-patch group with 10 updates

nordic-institute/x-road-catalog #106

42.7.7 → 42.7.8 Patch PR

Open 2 months ago 2 comments

Package Details

Name:	`org.postgresql:postgresql`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.postgresql:postgresql`
JSON API:	View JSON

Security Advisories

9

Active advisories

CRITICAL 1

HIGH 5

MODERATE 2

LOW 1

View All maven Advisories

Package Information

Description:

PostgreSQL JDBC Driver Postgresql

Repository:	https://github.com/pgjdbc/pgjdbc
Homepage:	https://jdbc.postgresql.org
Latest Release:	`42.7.6` 6 months ago
Dependent Repos:	176,054
Dependent Packages:	3,652
Ranking:	Top 0.0044% by dependent repos Top 0.0184% by dependent pkgs

PR Status

Open 1,144 (44.7%)

Merged 763 (29.8%)

Closed 503 (19.7%)

PR Types

Minor 92 (3.6%)

Patch 2,308 (90.3%)