Keijot

**Name of the Vulnerable Software and Affected Versions** pgjdbc versions 42.7.4 through 42.7.11 **Description** Connections using `channelBinding=require` can be silently downgraded from SCRAM-SHA-256-PLUS with channel binding to plain SCRAM-SHA-256. This results in the loss of man-in-the-middle protection. An attacker capable of intercepting the TLS connection can trigger this downgrade using a certificate with a signature algorithm that lacks a tls-server-end-point channel-binding hash. This occurs because the `com.ongres.scram:scram-client` returns an empty byte array instead of failing, and the `ScramAuthenticator()` function only verifies that the server advertised a PLUS mechanism without rejecting the empty binding or ensuring the negotiated mechanism utilizes channel binding. **Recommendations** Update pgjdbc to version 42.7.12.

**Name of the Vulnerable Software and Affected Versions** PyJWT versions prior to 2.13.0 **Description** PyJWKClient passes the `uri` argument directly to `urllib.request.urlopen()`, which utilizes the default OpenerDirector of the Python standard library. This allows the registration of HTTPHandler, HTTPSHandler, FTPHandler, FileHandler, and DataHandler without a documented option to restrict the schemes being fetched. If an application accepts attacker-influenced URLs through the jku ingestion path, such as from a JWT header, configuration file, or OAuth flow parameter, an attacker can perform Server-Side Request Forgery (SSRF). This can lead to reading arbitrary local files via the `file://` scheme, attempting FTP or data-URI fetches, or forging tokens that the library verifies as valid. **Recommendations** Update to version 2.13.0.