Maven/com.ongres.scram:scram-client CVE-2026-53712: high, EPSS 0.26%
OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms
Action: Upgrade com.ongres.scram:scram-client to 3.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.3 | - |
Fixed versions
| 3.3 |
Sources
- osv: GHSA-p9jg-fcr6-3mhf
- https://github.com/ongres/scram/security/advisories/GHSA-p9jg-fcr6-3mhf
- https://github.com/ongres/scram
CVE-2026-53712 · published · modified · JSON