CVE-2026-33816

CriticalCVSS 9.8

Published: 07/04/2026(UTC)Updated: 10/09/2026(UTC)Translated: 21/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.56%

45th percentile - higher than 45% of all known CVEs

Summary

A memory-safety vulnerability has been discovered in the pgx library for Go (github.com/jackc/pgx/v5). It could lead to unexpected behavior or potential data integrity compromise.

Risk Assessment

The vulnerability may allow an attacker to manipulate memory data, potentially leading to information disclosure or application disruption in systems using this library.

Recommendation

It is recommended to immediately update the pgx library to the latest version containing the fix. Monitor the official project repository for detailed patch information.

Other vulnerabilities in pgx

CVE-2026-33815Critical
Memory-safety vulnerability in the pgx v5 library for Go, used for PostgreSQL database communication. The flaw could lead to unexpected behavior or potential data integrity compromise.

Original NVD description (English source)

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS