| Package | Affected versions | Patched versions |
|---|---|---|
| pgbouncer | < 1.25.1 | 1.25.1 |
Untrusted search path in auth_query connection handler in PgBouncer before 1.25.1 allows an unauthenticated attacker to execute arbitrary SQL during authentication via a malicious search_path parameter in the StartupMessage.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free