Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

pgbouncer may be exploited; update to latest version

published 1 month ago

Summary

The pgbouncer connection‑pooling service has a security weakness that could be used by attackers. The problem is fixed in newer releases, so you should upgrade the pgbouncer package to the latest version available.

What to do

Update cleanstart pgbouncer to version 1.16.1-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	pgbouncer	< 1.16.1-r0 Fix: upgrade to 1.16.1-r0

Original advisory text

Security fix for CVE-2021-3935 applied in: pgbouncer 1.16.1-r0

Security vulnerability affects the pgbouncer package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2021-3935 URL
https://nvd.nist.gov/vuln/detail/CVE-2021-3935 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-MZ91907 · OSV

Track software like this

Free during beta