pgx contains memory-safety vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2026-33815 · ADVISORY
• jackc/pgx · WEB
• jackc/pgx · WEB
• jackc/pgx commit 6dbad4c · WEB
• pkg.go.dev/vuln/GO-2026-4771 · WEB
• github.com/jackc/pgx/v5 · PACKAGE
• access.redhat.com/errata/RHSA-2026:11070
• access.redhat.com/errata/RHSA-2026:11217
• access.redhat.com/errata/RHSA-2026:13791
• access.redhat.com/errata/RHSA-2026:13829
• access.redhat.com/errata/RHSA-2026:17789
• access.redhat.com/errata/RHSA-2026:22423
• access.redhat.com/errata/RHSA-2026:24475
• access.redhat.com/errata/RHSA-2026:24479

github.com/jackc/pgx/v5 のその他の脆弱性

• CVE-2026-41889緊急 9.8pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used,…
• CVE-2026-33816緊急 9.8Memory-safety vulnerability in github.com/jackc/pgx/v5.
• GHSA-fqpg-rq76-99pq中 5.3Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx
• GO-2024-2567Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx
• CVE-2024-27304緊急 9.8pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 G…