← Back to Resources
Open Source NewsSeptember 23, 20262 min read

PgBouncer 1.26.0 Released, Fixes Three CVEs

By BIOS Founding Team

PgBouncer 1.26.0 Released, Fixes Three CVEs

PgBouncer 1.26.0 patches three denial-of-service vulnerabilities, including a crash via a malformed SCRAM client-final-message from unauthenticated clients and an integer overflow in packet-buffer growth.

It also adds default tracking of search_path and a new pool_idle_timeout setting.

Full details: https://www.postgresql.org/about/news/pgbouncer-1260-released-fixes-three-cves-3385/