CVE-2026-14672: Postgres Scram Mock Default Iterationscve-2026-14672-postgres-scram-mock-default-iterations
Hardcoded default SCRAM iterations during mock secret generation creates an observable response discrepancy (CWE-208), allowing unauthenticated user enumeration when non-default iteration counts are used. Assign the runtime configured iteration variable instead.