Vulnerabilities

TI-2026-30292 CVE-2026-41889 · GHSA-j88v-2chj-qfwx

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

LOW 12

pgx is a PostgreSQL driver and toolkit for Go.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00356 Published 2026-05-08 Partial fix · 5.9.2 CWE-89

TI-2026-26188 CVE-2026-33816 · GHSA-9jj7-4m8r-rfcm

MEDIUM 50

Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00583 Published 2026-04-07 Partial fix · 5.9.0 CWE-20

TI-2026-26187 CVE-2026-33815 · GHSA-xgrm-4fwx-7qm8

MEDIUM 50

Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00629 Published 2026-04-07 Partial fix · 5.9.0

TI-2026-24815 CVE-2026-32286 · GHSA-jqcq-xjh3-6g23

HIGH 72

The DataRow.Decode function fails to properly validate field lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00675 Published 2026-03-26 Partial fix CWE-129

TI-2024-18142 CVE-2024-27304 · GHSA-mrww-27vc-gghv

MEDIUM 50

pgx is a PostgreSQL driver and toolkit for Go.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01109 Published 2024-03-06 Partial fix · 4.18.2, 5.5.4 CWE-190

TI-2024-18128 CVE-2024-27289 · GHSA-m7wr-2xf7-cm9p

HIGH 70

pgx is a PostgreSQL driver and toolkit for Go.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00847 Published 2024-03-06 Partial fix · 4.18.2 CWE-89