pgx contains memory-safety vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2026-33815 · ADVISORY
• jackc/pgx · WEB
• jackc/pgx · WEB
• jackc/pgx commit 6dbad4c · WEB
• pkg.go.dev/vuln/GO-2026-4771 · WEB
• github.com/jackc/pgx/v5 · PACKAGE
• access.redhat.com/errata/RHSA-2026:11070
• access.redhat.com/errata/RHSA-2026:11217
• access.redhat.com/errata/RHSA-2026:13791
• access.redhat.com/errata/RHSA-2026:13829
• access.redhat.com/errata/RHSA-2026:17789
• access.redhat.com/errata/RHSA-2026:22423
• access.redhat.com/errata/RHSA-2026:24475
• access.redhat.com/errata/RHSA-2026:24479

Lỗ hổng khác của github.com/jackc/pgx/v5

• CVE-2026-41889NGHIÊM TRỌNG 9.8pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used,…
• CVE-2026-33816NGHIÊM TRỌNG 9.8Memory-safety vulnerability in github.com/jackc/pgx/v5.
• GHSA-fqpg-rq76-99pqTRUNG BÌNH 5.3Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx
• GO-2024-2567Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx
• CVE-2024-27304NGHIÊM TRỌNG 9.8pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 G…