Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
jackc records in CISA KEVNo jackc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
The DataRow.Decode function fails to properly validate field lengths.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00675 · Published 2026-03-26 · Partial fix CWE-129
Priority HIGH 70
pgx is a PostgreSQL driver and toolkit for Go.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00847 · Published 2024-03-06 · Partial fix · 4.18.2 CWE-89
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00583 · Published 2026-04-07 · Partial fix · 5.9.0 CWE-20
Priority MEDIUM 50
Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00629 · Published 2026-04-07 · Partial fix · 5.9.0
Priority MEDIUM 50
pgx is a PostgreSQL driver and toolkit for Go.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01109 · Published 2024-03-06 · Partial fix · 4.18.2, 5.5.4 CWE-190
Priority LOW 12
pgx is a PostgreSQL driver and toolkit for Go.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00356 · Published 2026-05-08 · Partial fix · 5.9.2 CWE-89
Open these records in search →