| Package | Affected versions | Patched versions |
|---|---|---|
| pgbouncer | < 1.24.1 | 1.24.1 |
Password can be used past expiry in PgBouncer due to auth_query not taking into account Postgres its VALID UNTIL value, which allows an attacker to log in with an already expired password
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free