<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: pgbouncer</title><description>Every new CVE for pgbouncer.</description><link>https://agentprime.io/</link><item><title>CVE-2026-107350: Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer</title><link>https://agentprime.io/advisories/CVE-2026-107350/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107350/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 17:34:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107349: Infinite loop on empty option name in startup options parameter in PgBouncer</title><link>https://agentprime.io/advisories/CVE-2026-107349/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107349/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 17:34:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-107348: Integer overflow causes an infinite loop in message buffer growth in PgBouncer</title><link>https://agentprime.io/advisories/CVE-2026-107348/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-107348/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 14 Oct 2026 17:34:29 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-19888: NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer</title><link>https://agentprime.io/advisories/CVE-2026-19888/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-19888/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 16:04:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6669: Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer</title><link>https://agentprime.io/advisories/CVE-2026-6669/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6669/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 16:04:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6668: Integer overflow causes an infinite loop in packet buffer growth in PgBouncer</title><link>https://agentprime.io/advisories/CVE-2026-6668/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6668/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 23 Sep 2026 16:04:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6667: PgBouncer missing authorization check in KILL_CLIENT admin command</title><link>https://agentprime.io/advisories/CVE-2026-6667/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6667/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 09 May 2026 00:43:53 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6666: PgBouncer crash in kill_pool_logins_server_error</title><link>https://agentprime.io/advisories/CVE-2026-6666/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6666/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 09 May 2026 00:43:49 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6665: PgBouncer buffer overflow in SCRAM</title><link>https://agentprime.io/advisories/CVE-2026-6665/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6665/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 09 May 2026 00:43:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6664: PgBouncer integer overflow in PgBouncer network packet parsing</title><link>https://agentprime.io/advisories/CVE-2026-6664/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6664/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 09 May 2026 00:43:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-12819: Untrusted search path in auth_query connection in PgBouncer</title><link>https://agentprime.io/advisories/CVE-2025-12819/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-12819/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 03 Dec 2025 19:00:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-2291: PgBouncer default auth_query does not take Postgres password expiry into account</title><link>https://agentprime.io/advisories/CVE-2025-2291/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-2291/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Apr 2025 18:00:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-3935: SQL injection in pgbouncer</title><link>https://agentprime.io/advisories/CVE-2021-3935/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-3935/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Nov 2021 15:59:14 GMT</pubDate><category>CVE</category></item></channel></rss>