Stack overflow via SCRAM nonce handling in PgBouncer (CVE-2026-6665)

The SCRAM authentication code in PgBouncer before 1.25.2 fails to correctly check the return value of strlcat() when building the SCRAM client-final-message. A malicious backend server can exploit this flaw by sending a SCRAM server-final-message with a long nonce, triggering a stack overflow in the PgBouncer process. Affected versions: - before 1.25.2 We recommend updating to: 1.25.2. CVSS 9.8 · our assessment: act_now Reference: https://www.pgbouncer.org/changelog.html#pgbouncer-125x Details: https://vuln.today/cve/CVE-2026-6665