CVE-2026-107315 | pgjdbc up to 42.7.13 Connection Pool PreparedStatement.setObject length information disclosure

A vulnerability labeled as problematic has been found in pgjdbc up to 42.7.13. Affected is the function PreparedStatement.setObject of the component Connection Pool. The manipulation of the argument length results in information disclosure.

This vulnerability is cataloged as CVE-2026-107315. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More