CVE-2026-33816
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
A memory-safety vulnerability has been discovered in the pgx library for Go (github.com/jackc/pgx/v5). It could lead to unexpected behavior or potential data integrity compromise.
Risk Assessment
The vulnerability may allow an attacker to manipulate memory data, potentially leading to information disclosure or application disruption in systems using this library.
Recommendation
It is recommended to immediately update the pgx library to the latest version containing the fix. Monitor the official project repository for detailed patch information.
Other vulnerabilities in pgx
See all- CVE-2026-41889Critical
In the pgx PostgreSQL driver for Go, prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar-quoted string literal in the SQL query contains text that would be interpreted as a placeholder, and the value of that placeholder is attacker-controlled.
- CVE-2026-33815Critical
Memory-safety vulnerability in the pgx v5 library for Go, used for PostgreSQL database communication. The flaw could lead to unexpected behavior or potential data integrity compromise.
Original NVD description (English source)
Memory-safety vulnerability in github.com/jackc/pgx/v5.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS