Package · Debian

golang-github-jackc-pgx-v5

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

Low 2.3

CVE-2026-41889

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be inte…

jackc pgx kots k3s Debian Ubuntu Azure Linux Wolfi Go

May 8, 2026
Critical 9.8

CVE-2026-33815

CVE-2026-33815 in github.com/jackc/pgx

Memory-safety vulnerability in github.com/jackc/pgx/v5.

github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3 teleport-18.6 gitaly-18.11 Debian Ubuntu Wolfi Go

Apr 7, 2026
Critical 9.8

CVE-2026-33816

CVE-2026-33816 in github.com/jackc/pgx

Memory-safety vulnerability in github.com/jackc/pgx/v5.

github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3 kots k3s Debian Ubuntu Wolfi Go

Apr 7, 2026