Vulnerability advisory
GHSA-xgrm-4fwx-7qm8
pgx contains memory-safety vulnerability
Also known as CVE-2026-33815GO-2026-4771
Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected versions
| Affected | Fixed in |
|---|---|
| All versions before 5.9.0 | 5.9.0 |
Description
pgx is a pure Go driver and toolkit for PostgreSQL. pgx prior to v5.9.0 contains a memory-safety vulnerability.