A critical vulnerability was found in the StackGres operator, which allows a low-privilege tenant who owns a database to gain administrator privileges. This issue has a CVSS score of 9.9 and is classified as CRITICAL. The vulnerability impacts StackGres deployments, allowing for potential administrative control and immediate assessment and mitigation are required to prevent exploitation. The CVE record an [truncated]
A flaw in the SCRAM authentication mechanism, part of the Simple Authentication and Security Layer (SASL), allows a man-in-the-middle attacker to silently downgrade a connection from SCRAM-SHA-256-PLUS with channel binding to standard SCRAM-SHA-256 without channel binding. This occurs when TlsServerEndpoint processes an X.509 certificate using a modern signature algorithm such as Ed25519, causing getChann [truncated]
