https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-0366.htmlhttps://patchthecve.com/cve/CVE-2004-0366.htmlTue, 16 Jun 2026 22:05:29 +0000HIGH 7.5: SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.https://patchthecve.com/cve/CVE-2003-0672.htmlhttps://patchthecve.com/cve/CVE-2003-0672.htmlTue, 16 Jun 2026 22:02:37 +0000HIGH 7.5: Format string vulnerability in pam-pgsql 0.5.2 and earlier allows remote attackers to execute arbitrary code via the username that isp rovided during authentication, which is not properly handled when recording a log message.https://patchthecve.com/cve/CVE-2001-1369.htmlhttps://patchthecve.com/cve/CVE-2001-1369.htmlTue, 16 Jun 2026 21:56:08 +0000HIGH 7.5: Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account records by injecting SQL statements into user or password fields.