tocsin

CVE-2026-53712

2 advisories.

Maven/com.ongres.scram:scram-client CVE-2026-53712: high

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

Action: Upgrade com.ongres.scram:scram-client to 3.3 or later.

Affected

introducedfixedlast affected
03.3-

Fixed versions

3.3

Sources

CVE-2026-53712 · published · modified · JSON

Maven/com.ongres.scram:scram-common CVE-2026-53712: high

OnGres SCRAM silent channel-binding authentication downgrade via unsupported certificate algorithms

Action: Upgrade com.ongres.scram:scram-common to 3.3 or later.

Affected

introducedfixedlast affected
03.3-

Fixed versions

3.3

Sources

CVE-2026-53712 · published · modified · JSON