| Package | Affected versions | Patched versions |
|---|---|---|
| org.postgresql:postgresql | ≥ 9.4.1212.jre6, < 42.2.13 | 42.2.13 |
| postgresql jdbc driver | < 42.2.13 | 42.2.13 |
| quarkus | ≤ 1.5.2 |
PostgreSQL JDBC Driver (aka PgJDBC) before 42.2.13 allows XXE.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free