Search the atlas

CVE-2026-33815 Critical

pgx contains memory-safety vulnerability

[pgx](github.com/jackc/pgx/v5) is a pure Go driver and toolkit for PostgreSQL. pgx prior to v5.9.0 contains a memory-safety vulnerability.

Exploit probability 0.6%

Published April 7, 2026

Required by Not available

Last source change June 26, 2026

02 / AFFECTED SOFTWARE

Affected packages

Go github.com/jackc/pgx/v5

Go github.com/jackc/pgx/v5

03 / CONNECTIONS

Connected vulnerabilities

related CGA-7V58-Q3H2-QFR7

related RHSA-2026:36796

related RHSA-2026:41019

04 / EVIDENCE

Source records

Open Source Vulnerabilities GO-2026-4771

Memory-safety vulnerability in github.com/jackc/pgx/v5.

View original source

Open Source Vulnerabilities GHSA-xgrm-4fwx-7qm8

[pgx](github.com/jackc/pgx/v5) is a pure Go driver and toolkit for PostgreSQL. pgx prior to v5.9.0 contains a memory-safety vulnerability.

View original source

05 / REFERENCES

Further evidence