Executive brief
Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
Affected products
- crates.io postgres-protocol
Junglewise Threat Intelligence
RUSTSEC-2026-0179 - Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
Severity: medium · CVSS 4 · Published 2026-06-12
Technologies: postgres-protocol (crates.io). Vendors: crates.io.
Related threats
- postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service
- postgres-protocol panic on malformed hstore value
- postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
- postgres-protocol unbounded SCRAM iteration count DoS
- RUSTSEC-2026-0180 - Panic decoding a malformed `hstore` value allows denial of service