com.ongres.scram:scram-common vulnerabilities

CVEs whose affected-version data names the com.ongres.scram:scram-common package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-53712High

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

▾ Twilightongres · com.ongres.scram:scram-clientEPSS 0.26%via GHSA

com.ongres.scram:scram-common vulnerabilities (CVEs) · VulnSea