The current version of PgBouncer is 1_26_0 (as of 23/09/2026). patchletter checks the official source daily and emails you new releases.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- PgBouncer: Mehrere Schwachstellen ermöglichen Denial of Service
WID-SEC-W-2026-3529 · 24 Sept
PgBouncer at a glance
PgBouncer is a widely used lightweight connection pooler for PostgreSQL, reducing the overhead of many client connections — common in front of busy databases. PgBouncer ships releases in an unhurried cadence plus security fixes; as a component in the database path handling authentication, keeping it current matters.
For admins PgBouncer sits between clients and PostgreSQL and handles credentials, so it's security-relevant: keep it patched (it has had advisories), enforce TLS on both sides where appropriate, and protect its authentication configuration (the userlist and any auth query). It belongs on the internal network, not exposed. Because it multiplexes connections, mind the pooling mode (session, transaction) against your application's assumptions. After updating, verify that clients connect through it and PostgreSQL sees healthy pooling. A misconfiguration or outage here affects everything talking to the database. Track the version and its support status; patchletter surfaces new PgBouncer releases so security fixes land.
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 1_26_0 | STABLE | 23/09/2026 | Release notes → |
| 1_25_2 | STABLE | 08/07/2026 | Release notes → |
Frequently asked questions
- What is the latest version of PgBouncer?
- PgBouncer 1_26_0, released 23/09/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the PgBouncer release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new PgBouncer updates?
- Tick PgBouncer off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new PgBouncer version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current PgBouncer version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/pgbouncer)https://patchletter.com/badge/pgbouncer.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
