pgx vulnerabilities
3 known CVE vulnerabilities in pgx, translated and rated.
- CVE-2026-41889Critical
In the pgx PostgreSQL driver for Go, prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar-quoted string literal in the SQL query contains text that would be interpreted as a placeholder, and the value of that placeholder is attacker-controlled.
- CVE-2026-33816Critical
A memory-safety vulnerability has been discovered in the pgx library for Go (github.com/jackc/pgx/v5). It could lead to unexpected behavior or potential data integrity compromise.
- CVE-2026-33815Critical
Memory-safety vulnerability in the pgx v5 library for Go, used for PostgreSQL database communication. The flaw could lead to unexpected behavior or potential data integrity compromise.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

