Vulnerability GHSA-xgrm-4fwx-7qm8
Critical
CRITICAL RISK
CVSS Score: 9.8
Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
7 months ago
April 07, 2026 at 06:31 PM UTC
pgx contains memory-safety vulnerability
v5.0.0-alpha.1 - v5.8.0
v5.0.0-alpha.1 - v5.8.0
Summary
pgx contains memory-safety vulnerability
Details
pgx is a pure Go driver and toolkit for PostgreSQL. pgx prior to v5.9.0 contains a memory-safety vulnerability.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
4 months ago
SQL Injection via placeholder confusion with dollar quoted string literals in github.com/jackc/pgx
v5.0.0-alpha.1 - v5.9.1 GO-2026-5004
v5.0.0-alpha.1 - v5.9.1 GO-2026-5004
Low Risk
6 months ago
pgx: SQL Injection via placeholder confusion with dollar quoted string literals
v5.0.0-alpha.1 - v5.9.1 GHSA-j88v-2chj-qfwx
v5.0.0-alpha.1 - v5.9.1 GHSA-j88v-2chj-qfwx
Critical
7 months ago
Memory-safety vulnerability in github.com/jackc/pgx/v5.
v5.0.0-alpha.1 - v5.8.0 GHSA-9jj7-4m8r-rfcm
v5.0.0-alpha.1 - v5.8.0 GHSA-9jj7-4m8r-rfcm
Unknown
7 months ago
CVE-2026-33815 in github.com/jackc/pgx
v5.0.0-alpha.1 - v5.8.0 GO-2026-4771
v5.0.0-alpha.1 - v5.8.0 GO-2026-4771
Unknown
7 months ago
CVE-2026-33816 in github.com/jackc/pgx
v5.0.0-alpha.1 - v5.8.0 GO-2026-4772
v5.0.0-alpha.1 - v5.8.0 GO-2026-4772
Impacted packages
Timeline
Published
7 months ago
April 07, 2026 at 06:31 PM UTC
Fixed (v5.9.0)
7 months ago
March 21, 2026 at 05:28 PM UTC
Last Modified
2 months ago
September 10, 2026 at 03:50 AM UTC