CVE-2026-33816: critical vulnerability in github.com/jackc/pgx/v5/pgproto3
CVE-2026-33816 in github.com/jackc/pgx
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.8epss 0.6%
Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
github.com/jackc/pgx/v5 · github.com/jackc/pgx/v5/pgproto3Related CVEs — github.com/jackc/pgx/v5/pgproto3
In the same product, most dangerous first.
References
https://access.redhat.com/errata/RHSA-2026:11070https://access.redhat.com/errata/RHSA-2026:11217https://access.redhat.com/errata/RHSA-2026:13791https://access.redhat.com/errata/RHSA-2026:13829https://access.redhat.com/errata/RHSA-2026:13907https://access.redhat.com/errata/RHSA-2026:17789https://access.redhat.com/errata/RHSA-2026:19137https://access.redhat.com/errata/RHSA-2026:22423https://access.redhat.com/errata/RHSA-2026:24475https://access.redhat.com/errata/RHSA-2026:24479https://access.redhat.com/errata/RHSA-2026:24482https://access.redhat.com/errata/RHSA-2026:24503