📦 Pgbouncer

This vulnerability allows unauthenticated attackers to execute arbitrary SQL commands during PgBouncer authentication by manipulating the search_path parameter. It affects all PgBouncer instances befo...

This vulnerability in PgBouncer allows attackers to authenticate with expired passwords when using auth_query mode. The connection pooler fails to check PostgreSQL's VALID UNTIL password expiration va...