CLEANSTART-2026-OF32881: pgjdbc, the PostgreSQL JDBC Driver, versions 42

Q: What level of access does an attacker need to attempt exploitation?

The reported vector is network-based and requires no prior privileges or user interaction. Exploitation is rated high complexity, so additional unspecified conditions are required.

Q: What is the expected security impact if exploitation succeeds?

The reported impact is high confidentiality impact, with no reported integrity or availability impact. The vulnerability does not cross a security authority boundary because scope is unchanged.

Q: How can I identify potentially affected deployments?

Review Cleanstart Keycloak deployments for the pgjdbc PostgreSQL JDBC Driver dependency identified as version 42. The supplied data does not provide a more precise affected version range, fixed version, or configuration condition.

Published Nov 11, 2026

Updated

Security vulnerability affects the keycloak package. pgjdbc, the PostgreSQL JDBC Driver, versions 42.

Affected Software

1 affected componentFixes available

cleanstart/keycloak<26.6.4-r8

26.6.4-r8

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/keycloak to a version that resolves this vulnerability.
Fixed in 26.6.4-r8

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-107314

Frequently Asked Questions

What level of access does an attacker need to attempt exploitation?

The reported vector is network-based and requires no prior privileges or user interaction. Exploitation is rated high complexity, so additional unspecified conditions are required.

What is the expected security impact if exploitation succeeds?

The reported impact is high confidentiality impact, with no reported integrity or availability impact. The vulnerability does not cross a security authority boundary because scope is unchanged.

How can I identify potentially affected deployments?

Review Cleanstart Keycloak deployments for the pgjdbc PostgreSQL JDBC Driver dependency identified as version 42. The supplied data does not provide a more precise affected version range, fixed version, or configuration condition.

CLEANSTART-2026-OF32881: pgjdbc, the PostgreSQL JDBC Driver, versions 42

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need to attempt exploitation?

What is the expected security impact if exploitation succeeds?

How can I identify potentially affected deployments?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to attempt exploitation?

What is the expected security impact if exploitation succeeds?

How can I identify potentially affected deployments?