Critical severity9.8NVD Advisory· Published Apr 7, 2026· Updated Aug 12, 2026
CVE-2026-33815
CVE-2026-33815
Description
Memory-safety vulnerability in github.com/jackc/pgx/v5.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/jackc/pgx/v5Go | < 5.9.0 | 5.9.0 |
Affected products
14- osv-coords13 versionspkg:apk/chainguard/commercial-grafana-11.6pkg:apk/chainguard/commercial-grafana-12.2pkg:apk/chainguard/commercial-grafana-12.3pkg:apk/chainguard/commercial-grafana-12.4pkg:apk/chainguard/envoy-gateway-fips-1.6-egctlpkg:apk/chainguard/gitaly-18.11pkg:apk/chainguard/teleport-18.6pkg:apk/wolfi/gitaly-18.11pkg:apk/wolfi/teleport-18.6pkg:golang/github.com/jackc/pgx/v5/pgproto3pkg:rpm/opensuse/cosign&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/cosign&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0
< 11.6.16-r0+ 12 more
- (no CPE)range: < 11.6.16-r0
- (no CPE)range: < 12.2.10-r0
- (no CPE)range: < 12.3.8-r0
- (no CPE)range: < 12.4.5-r0
- (no CPE)range: < 1.6.7-r4
- (no CPE)range: < 18.11.6-r1
- (no CPE)range: < 18.6.8-r22
- (no CPE)range: < 18.11.6-r1
- (no CPE)range: < 18.6.8-r22
- (no CPE)range: < 5.9.0
- (no CPE)range: < 3.1.1-160000.1.1
- (no CPE)range: < 3.1.1-1.1
- (no CPE)range: < 0.0.20260723T184607-160000.1.1
Patches
Vulnerability mechanics
References
26- github.com/advisories/GHSA-xgrm-4fwx-7qm8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-33815ghsaADVISORY
- pkg.go.dev/vuln/GO-2026-4771nvdThird Party AdvisoryWEB
- github.com/jackc/pgx/v5ghsaPACKAGE
- github.com/jackc/pgx/commit/6dbad4cafdb8a4daab7ff79c858c95da4b6109e8ghsaWEB
- github.com/jackc/pgx/issues/2519ghsaWEB
- github.com/jackc/pgx/issues/2530ghsaWEB
- access.redhat.com/errata/RHSA-2026:11070nvd
- access.redhat.com/errata/RHSA-2026:11217nvd
- access.redhat.com/errata/RHSA-2026:13791nvd
- access.redhat.com/errata/RHSA-2026:13829nvd
- access.redhat.com/errata/RHSA-2026:17789nvd
- access.redhat.com/errata/RHSA-2026:22423nvd
- access.redhat.com/errata/RHSA-2026:24475nvd
- access.redhat.com/errata/RHSA-2026:24479nvd
- access.redhat.com/errata/RHSA-2026:24482nvd
- access.redhat.com/errata/RHSA-2026:24503nvd
- access.redhat.com/errata/RHSA-2026:24539nvd
- access.redhat.com/errata/RHSA-2026:25273nvd
- access.redhat.com/errata/RHSA-2026:26636nvd
- access.redhat.com/errata/RHSA-2026:36796nvd
- access.redhat.com/errata/RHSA-2026:40984nvd
- access.redhat.com/errata/RHSA-2026:41019nvd
- access.redhat.com/security/cve/CVE-2026-33815nvd
- bugzilla.redhat.com/show_bug.cginvd
- security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33815.jsonnvd
News mentions
0No linked articles in our index yet.