GHSA-9jj7-4m8r-rfcm

Memory-safety vulnerability in github.com/jackc/pgx/v5.

At a glance

Published: 2026-04-07 18:31 UTC
Updated: 2026-09-10 03:50 UTC
CVE: CVE-2026-33816
Aliases: GO-2026-4772
CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Affected packages

Package	Versions
Go · github.com/jackc/pgx/v5	introduced 0, fixed 5.9.0

References

https://nvd.nist.gov/vuln/detail/CVE-2026-33816 ADVISORY
https://github.com/jackc/pgx PACKAGE
https://pkg.go.dev/vuln/GO-2026-4772 WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database