PGJDBC SECURITY RELEASE: SECURITY ADVISORY

Interestingly this vulnerability has existed for quite some time. I think the fact that refreshRow() is not used very widely and the vulnerability is difficult to exploit made it very unlikely to be exploited.