CVE-2026-33816

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@golang.org

Published

2026-04-07

Last modified

2026-10-26

Weaknesses

CWE-787

Affected products

• Github.comjackcpgxv5pgproto3 (Github.comjackcpgxv5)
• Pgx (Jackc)
• Acm (Redhat)
• Advanced Cluster Security (Redhat)
• Cryostat (Redhat)
• Edge Manager (Redhat)
• Enterprise Linux (Redhat)
• Hummingbird (Redhat)
• Multicluster Engine (Redhat)
• Multicluster Globalhub (Redhat)
• Openshift Ai (Redhat)
• Openshift Custom Metrics Autoscaler (Redhat)
• Openshift Data Foundation (Redhat)
• Openshift Pipelines (Redhat)
• Quay (Redhat)
• Red Hat 3scale Amp (Redhat)
• Trusted Artifact Signer (Redhat)
• Zero Trust Workload Identity Manager (Redhat)

References

• https://pkg.go.dev/vuln/GO-2026-4772
• https://access.redhat.com/security/cve/CVE-2026-33816
• https://bugzilla.redhat.com/show_bug.cgi?id=2455972
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33816.json
• https://access.redhat.com/errata/RHSA-2026:41019
• https://access.redhat.com/errata/RHSA-2026:17789
• https://access.redhat.com/errata/RHSA-2026:36796
• https://access.redhat.com/errata/RHSA-2026:19137
• https://access.redhat.com/errata/RHSA-2026:26636
• https://access.redhat.com/errata/RHSA-2026:62866
• https://access.redhat.com/errata/RHSA-2026:22423
• https://access.redhat.com/errata/RHSA-2026:24503
• https://access.redhat.com/errata/RHSA-2026:24539
• https://access.redhat.com/errata/RHSA-2026:25273
• https://access.redhat.com/errata/RHSA-2026:11070
• https://access.redhat.com/errata/RHSA-2026:11217
• https://access.redhat.com/errata/RHSA-2026:13791
• https://access.redhat.com/errata/RHSA-2026:13829
• https://access.redhat.com/errata/RHSA-2026:40945
• https://access.redhat.com/errata/RHSA-2026:40118
• https://access.redhat.com/errata/RHSA-2026:13907
• https://access.redhat.com/errata/RHSA-2026:26519
• https://access.redhat.com/errata/RHSA-2026:40984
• https://access.redhat.com/errata/RHSA-2026:24479
• https://access.redhat.com/errata/RHSA-2026:24475
• https://access.redhat.com/errata/RHSA-2026:24482