Jackc - vulnerabilities (CVEs)

6 CVEs in 2 products, 0 in the last 30 days, newest from 2026-05-08.

Products

• Pgx - 5 CVEs
• Pgproto3 - 2 CVEs

Newest CVEs of Jackc

• CVE-2026-41889 - CVSS 9.8 (critical), 2026-05-08: pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted…
• CVE-2026-33816 - CVSS 9.8 (critical), 2026-04-07: Memory-safety vulnerability in github.com/jackc/pgx/v5.
• CVE-2026-33815 - CVSS 9.8 (critical), 2026-04-07: Memory-safety vulnerability in github.com/jackc/pgx/v5.
• CVE-2026-32286 - CVSS 7.5 (high), 2026-03-26: The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative…
• CVE-2024-27289 - CVSS 8.1 (high), 2024-03-06: pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default…
• CVE-2024-27304 - CVSS 9.8 (critical), 2024-03-06: pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An…