CLEANSTART-2026-PD68934: pgjdbc, the PostgreSQL JDBC Driver, versions 42
Published Nov 6, 2026
·Updated
Security vulnerability affects the keycloak package. pgjdbc, the PostgreSQL JDBC Driver, versions 42.
Affected Software
1 affected componentFixes available
cleanstart/keycloak<26.7.5-r3
26.7.5-r3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/keycloakto a version that resolves this vulnerability.Fixed in 26.7.5-r3
Event History
Nov 6, 2026
Advisory Published
via OSV·12:36 AM
Data Sourced
via OSV·12:36 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates no privileges are required and no user interaction is required.
2
What level of access does an attacker need to attempt exploitation?
The vulnerability is rated as network-accessible, but exploitation has high attack complexity. The provided data does not identify the specific conditions that make exploitation complex.
3
What is the expected security impact if exploitation succeeds?
The CVSS vector rates confidentiality impact as high. It rates integrity and availability impact as none.