Vulnerability Description
Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVSS Score
9.8
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Jackc | Pgx | < 5.9.0 |
Related Weaknesses (CWE)
References
- https://pkg.go.dev/vuln/GO-2026-4772Third Party Advisory
- https://access.redhat.com/errata/RHSA-2026:11070
- https://access.redhat.com/errata/RHSA-2026:11217
- https://access.redhat.com/errata/RHSA-2026:13791
- https://access.redhat.com/errata/RHSA-2026:13829
- https://access.redhat.com/errata/RHSA-2026:13907
- https://access.redhat.com/errata/RHSA-2026:17789
- https://access.redhat.com/errata/RHSA-2026:19137
- https://access.redhat.com/errata/RHSA-2026:22423
- https://access.redhat.com/errata/RHSA-2026:24475
- https://access.redhat.com/errata/RHSA-2026:24479
- https://access.redhat.com/errata/RHSA-2026:24482
- https://access.redhat.com/errata/RHSA-2026:24503
- https://access.redhat.com/errata/RHSA-2026:24539
- https://access.redhat.com/errata/RHSA-2026:25273
FAQ
What is CVE-2026-33816?
CVE-2026-33816 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Memory-safety vulnerability in github.com/jackc/pgx/v5.
How severe is CVE-2026-33816?
CVE-2026-33816 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2026-33816?
Check the references section above for vendor advisories and patch information. Affected products include: Jackc Pgx.