Skip to content
OpenAdvisories

Package · Go

github.com/jackc/pgx

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2026-41889

    pgx: SQL Injection via placeholder confusion with dollar quoted string literals

    pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be inte…

    jackc pgx github.com/jackc/pgx/v5 golang-github-jackc-pgx-v5 Debian Ubuntu Go