`org.postgresql:postgresql`

Ecosystem:
maven

Package URL:
pkg:maven/org.postgresql:postgresql

Total PRs:
2,930 Dependabot PRs

Latest PR:
3 days ago

Unique Repositories:
1,207 repositories

Unique Repos (30 days):
46 repositories

Security Advisories

pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS

GHSA-98qh-xjc8-98pq CVE-2026-42198 HIGH published 27 days ago • updated about 21 hours ago

## Summary pgjdbc is vulnerable to a client-side denial of service during SCRAM-SHA-256 authentication. ### Impact A malicious server can instruct...

pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration

GHSA-hq9p-pm7w-8p54 CVE-2025-49146 HIGH published 12 months ago • updated 9 days ago

### Impact When the PostgreSQL JDBC driver is configured with channel binding set to `required` (default value is `prefer`), the driver would incor...

View all 10 advisories

Recent PRs (filtered by: Minor PRs )

RSS Feed Clear filter

Bump org.postgresql:postgresql from 42.4.4 to 42.7.11 in /contrib/storage-jdbc

apache/drill #3048

42.4.4 → 42.7.11 Minor PR

Open 17 days ago 1 comment

Bump org.postgresql:postgresql from 42.6.1 to 42.7.11

ClickHouse/clickhouse-java #2847

42.6.1 → 42.7.11 Minor PR

Open 26 days ago 4 comments

chore(deps): bump org.postgresql:postgresql from 42.6.2 to 42.7.11 in /code/boot

fedykvitalik2004/bibliotopia-bff #62

42.6.2 → 42.7.11 Minor PR

Open 26 days ago 2 comments

build(deps): bump org.postgresql:postgresql from 42.6.1 to 42.7.10

GoogleCloudPlatform/DataflowTemplates #3705

42.6.1 → 42.7.10 Minor PR

Closed about 2 months ago 3 comments

[maven] bump org.postgresql:postgresql from 42.6.2 to 42.7.10 in /code

fedykvitalik2004/bibliotopia-storage #89

42.6.2 → 42.7.10 Minor PR

Open 2 months ago 2 comments

[maven] bump org.postgresql:postgresql from 42.6.2 to 42.7.10 in /code

fedykvitalik2004/bibliotopia-bff #30

42.6.2 → 42.7.10 Minor PR

Open 3 months ago 2 comments

chore(deps): bump org.postgresql:postgresql from 42.6.0 to 42.7.10

Jackela/Casual-Academic-Time-Allocation-Management-System #27

42.6.0 → 42.7.10 Minor PR

Closed 3 months ago 3 comments

deps(deps): bump org.postgresql:postgresql from 42.6.0 to 42.7.10

HussamHaroon/LHC-Event-Processor #18

42.6.0 → 42.7.10 Minor PR

Open 4 months ago 1 comment

Bump org.postgresql:postgresql from 42.2.8 to 42.3.9

dochernyshov/debezium #2

42.2.8 → 42.3.9 Minor PR

Closed 4 months ago 1 comment

Bump the maven-minor-patch group across 1 directory with 11 updates

org-myjtools/openbbt #8

42.6.0 → 42.7.9 Minor PR

Closed 4 months ago 1 comment

deps(deps): bump org.postgresql:postgresql from 42.6.0 to 42.7.9

IamAntiHero/LHC-Event-Processor #13

42.6.0 → 42.7.9 Minor PR

Open 4 months ago 1 comment

[TSPS-793]: Bump the gradle-other-updates group with 14 updates

DataBiosphere/terra-scientific-pipelines-service #297

42.6.1 → 42.7.9 Minor PR

Open 4 months ago 2 comments

deps(main)(deps): bump org.postgresql:postgresql from 42.6.0 to 42.7.9 in /service-main

Ledocoin/beer-monorepo #43

42.6.0 → 42.7.9 Minor PR

Open 4 months ago 1 comment

chore(deps)(deps): bump org.postgresql:postgresql from 42.3.3 to 42.7.8

paul-zhang-168/bcp-md-agent #11

42.3.3 → 42.7.8 Minor PR

Open 5 months ago 1 comment

Bump org.postgresql:postgresql from 42.5.0 to 42.7.8

ministryofjustice/hmpps-digital-prison-reporting-lib #717

42.5.0 → 42.7.8 Minor PR

Open 5 months ago 1 comment

build(deps): bump org.postgresql:postgresql from 42.4.5 to 42.7.8

Mobility-Data-Space/mds-logging-house-client #37

42.4.5 → 42.7.8 Minor PR

Open 7 months ago 1 comment

build(deps): bump org.postgresql:postgresql from 42.6.0 to 42.7.8

gabrielcsaturnino/taskday #5

42.6.0 → 42.7.8 Minor PR

Closed 7 months ago 1 comment

chore(deps)(deps): bump org.postgresql:postgresql from 42.6.0 to 42.7.8 in /src/backend

galatea-associates/inventory-management-system-rdybxi #116

42.6.0 → 42.7.8 Minor PR

Open 8 months ago 1 comment

Bump org.postgresql:postgresql from 42.6.0 to 42.7.8 in /savvy-app-backend/transaction-service

Vikk11/finance-app #79

42.6.0 → 42.7.8 Minor PR

Open 8 months ago

Bump org.postgresql:postgresql from 42.5.1 to 42.7.8

FullDuplexFish/DistributedDatabaseFuzzingFramework #9

42.5.1 → 42.7.8 Minor PR

Open 8 months ago

maven(deps): bump org.postgresql:postgresql from 42.4.0 to 42.7.8

rkorytkowski/openmrs-core #129

42.4.0 → 42.7.8 Minor PR

Open 9 months ago

build(deps): bump org.postgresql:postgresql from 42.5.1 to 42.7.8

guidewire-oss/uaa #294

42.5.1 → 42.7.8 Minor PR

Open 9 months ago 1 comment

Bump org.postgresql:postgresql from 42.3.4 to 42.7.8

querydsl/querydsl #3899

42.3.4 → 42.7.8 Minor PR

Open 9 months ago

Bump org.postgresql:postgresql from 42.3.6 to 42.7.8

ie3-institute/DWDWeatherTools #257

42.3.6 → 42.7.8 Minor PR

Open 9 months ago

[dependabot] Bump org.postgresql:postgresql from 42.5.4 to 42.7.8

jenkinsci/horreum-plugin #94

42.5.4 → 42.7.8 Minor PR

Open 9 months ago

maven(deps): bump org.postgresql:postgresql from 42.5.1 to 42.7.8

Tromzo-Vulnerable-Code/openmrs-core #21

42.5.1 → 42.7.8 Minor PR

Open 9 months ago

build(deps): bump org.postgresql:postgresql from 42.6.0 to 42.7.7

apache/gravitino #8579

42.6.0 → 42.7.7 Minor PR

Open 9 months ago

Bump org.postgresql:postgresql from 42.2.23 to 42.7.7

pacphi/jdbc-demo #127

42.2.23 → 42.7.7 Minor PR

Merged 9 months ago

Bump org.postgresql:postgresql from 42.1.0 to 42.3.9 in /test-data/maven/multi-module-multi-branch in the maven group across 1 directory

hashim21223445/maven-dependency-submission-action #21

42.1.0 → 42.3.9 Minor PR

Open 9 months ago

Bump the github-actions group with 23 updates

mohitc/NetworkTopologyDatastore #4

42.2.28 → 42.7.7 Minor PR

Closed 9 months ago 1 comment

Bump org.postgresql:postgresql from 42.6.0 to 42.7.7

HSLdevcom/transitlog-alert-sink #50

42.6.0 → 42.7.7 Minor PR

Closed 9 months ago 1 comment

Bump org.postgresql:postgresql from 42.5.0 to 42.7.7 in /labs/unicorn-store/software/alternatives/unicorn-store-spring-native-graalvm

caoloss1/aws-lambda-java-workshop #34

42.5.0 → 42.7.7 Minor PR

Open 9 months ago

Bump org.postgresql:postgresql from 42.5.0 to 42.7.7 in /labs/unicorn-store/software/unicorn-store-spring

caoloss1/aws-lambda-java-workshop #18

42.5.0 → 42.7.7 Minor PR

Open 9 months ago

Bump org.postgresql:postgresql from 42.5.0 to 42.7.7 in /labs/unicorn-store/software/alternatives/unicorn-store-basic

caoloss1/aws-lambda-java-workshop #7

42.5.0 → 42.7.7 Minor PR

Open 9 months ago

Bump org.postgresql:postgresql from 42.6.1 to 42.7.7

GoogleCloudPlatform/DataflowTemplates #2708

42.6.1 → 42.7.7 Minor PR

Closed 9 months ago 1 comment

Bump org.postgresql:postgresql from 42.2.23 to 42.3.9 in the maven group across 1 directory

h3llsize/helper #1

42.2.23 → 42.3.9 Minor PR

Open 10 months ago

build(deps): bump org.postgresql:postgresql from 42.5.1 to 42.7.7

guidewire-oss/uaa #265

42.5.1 → 42.7.7 Minor PR

Open 10 months ago

Bump org.postgresql:postgresql from 42.2.5 to 42.3.9 in the maven group across 1 directory

LysXky/vulnado #20

42.2.5 → 42.3.9 Minor PR

Open 10 months ago

Bump org.postgresql:postgresql from 42.2.5 to 42.3.9 in the maven group across 1 directory

omelnyk602/devsecops-teamcity-java-vulnerable-application #11

42.2.5 → 42.3.9 Minor PR

Open 11 months ago

maven(deps): bump org.postgresql:postgresql from 42.5.1 to 42.7.7

Tromzo-Vulnerable-Code/openmrs-core #6

42.5.1 → 42.7.7 Minor PR

Open 11 months ago 3 comments

fix(deps): bump the prod-deps group across 1 directory with 12 updates

folio-org/mod-fqm-manager #832

42.5.4 → 42.7.7 Minor PR

Open 11 months ago

Bump the maven group across 7 directories with 11 updates

afreefishYu/dlink #1

42.2.10 → 42.3.9 Minor PR

Open 11 months ago

Bump org.postgresql:postgresql from 42.2.5 to 42.3.9 in /Example02_Java

jackgkafaty/CodeQL_containerizedApp #4

42.2.5 → 42.3.9 Minor PR

Open 11 months ago

Bump org.postgresql:postgresql from 42.3.6 to 42.7.7

ie3-institute/DWDWeatherTools #231

42.3.6 → 42.7.7 Minor PR

Open 11 months ago 2 comments

Bump the backend-prod group across 1 directory with 10 updates

SURFnet/student-mobility-inteken-ontvanger-generiek #32

42.6.1 → 42.7.7 Minor PR

Closed 11 months ago

[dependabot] Bump org.postgresql:postgresql from 42.5.4 to 42.7.7

jenkinsci/horreum-plugin #70

42.5.4 → 42.7.7 Minor PR

Open 11 months ago

Bump org.postgresql:postgresql from 42.2.5 to 42.3.9 in the maven group across 1 directory

TM-ACode/ScaleSec #1

42.2.5 → 42.3.9 Minor PR

Open 11 months ago

chore(deps): bump org.postgresql:postgresql from 42.3.1 to 42.7.7 in /packages/connector

tellery/tellery #1760

42.3.1 → 42.7.7 Minor PR

Open 11 months ago 1 comment

build(deps): bump org.postgresql:postgresql from 42.6.0 to 42.7.7

TimHubert/webtech_gymtracker #5

42.6.0 → 42.7.7 Minor PR

Closed 12 months ago 2 comments

build(deps): bump org.postgresql:postgresql from 42.5.5 to 42.7.7

operaton/operaton #896

42.5.5 → 42.7.7 Minor PR

Open 12 months ago

Package Details

Name:	`org.postgresql:postgresql`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.postgresql:postgresql`
JSON API:	View JSON

Security Advisories

10

Active advisories

CRITICAL 1

HIGH 6

MODERATE 2

LOW 1

View All maven Advisories

Package Information

Description:

PostgreSQL JDBC Driver Postgresql

Repository:	https://github.com/pgjdbc/pgjdbc
Homepage:	https://jdbc.postgresql.org
Latest Release:	`42.7.6` about 1 year ago
Dependent Repos:	176,054
Dependent Packages:	3,652
Ranking:	Top 0.0044% by dependent repos Top 0.0184% by dependent pkgs

PR Status

Open 1,288 (44.0%)

Merged 763 (26.0%)

Closed 732 (25.0%)

PR Types

Major 4 (0.1%)

Minor 111 (3.8%)

Patch 2,660 (90.8%)

org.postgresql:postgresql

Security Advisories

pgjdbc: Unbounded PBKDF2 iterations in SCRAM authentication allows CPU exhaustion DoS

Improper Restriction of XML External Entity Reference

pgjdbc Arbitrary File Write Vulnerability

pgjdbc Does Not Check Class Instantiation when providing Plugin Classes

pgjdbc Client Allows Fallback to Insecure Authentication Despite channelBinding=require Configuration

Recent PRs (filtered by: Minor PRs )

Package Details

Security Advisories

10

Package Information

PR Status

PR Types

`org.postgresql:postgresql`