Critical severity9.8NVD Advisory· Published Apr 7, 2026· Updated May 21, 2026
CVE-2026-33816
CVE-2026-33816
Description
Memory-safety vulnerability in github.com/jackc/pgx/v5.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/jackc/pgx/v5Go | < 5.9.0 | 5.9.0 |
Affected products
257- cpe:2.3:a:pgx_project:pgx:*:*:*:*:*:go:*:*
- osv-coords256 versionspkg:apk/chainguard/argo-workflow-controller-3.7pkg:apk/chainguard/argo-workflow-controller-4.0pkg:apk/chainguard/argo-workflow-controller-fips-3.7pkg:apk/chainguard/argo-workflow-controller-fips-4.0pkg:apk/chainguard/argo-workflow-executor-3.7pkg:apk/chainguard/argo-workflow-executor-4.0pkg:apk/chainguard/argo-workflow-executor-fips-3.7pkg:apk/chainguard/argo-workflow-executor-fips-4.0pkg:apk/chainguard/argo-workflows-3.7pkg:apk/chainguard/argo-workflows-4.0pkg:apk/chainguard/argo-workflows-fips-3.7pkg:apk/chainguard/argo-workflows-fips-4.0pkg:apk/chainguard/authentik-2025.12-go-serverpkg:apk/chainguard/authentik-2026.2-go-serverpkg:apk/chainguard/authentik-fips-2025.12-go-serverpkg:apk/chainguard/authentik-fips-2026.2-go-serverpkg:apk/chainguard/azure-service-operatorpkg:apk/chainguard/azure-service-operator-fipspkg:apk/chainguard/bentopkg:apk/chainguard/bento-fipspkg:apk/chainguard/caddypkg:apk/chainguard/caddy-fipspkg:apk/chainguard/cerbospkg:apk/chainguard/cerbos-fipspkg:apk/chainguard/certificate-transparency-fips-trillian-ctserverpkg:apk/chainguard/certificate-transparency-trillian-ctserverpkg:apk/chainguard/chainloop-control-planepkg:apk/chainguard/chainloop-control-plane-fipspkg:apk/chainguard/cloudnative-pgpkg:apk/chainguard/cloudnative-pg-fipspkg:apk/chainguard/cloudnative-pg-fips-pluginspkg:apk/chainguard/cloudnative-pg-pluginspkg:apk/chainguard/cloudproberpkg:apk/chainguard/cloudprober-fipspkg:apk/chainguard/commercial-chainloop-backendpkg:apk/chainguard/dapr-daprd-1.14pkg:apk/chainguard/dapr-daprd-1.15pkg:apk/chainguard/dapr-daprd-1.16pkg:apk/chainguard/dapr-daprd-1.17pkg:apk/chainguard/dapr-daprd-fips-1.14pkg:apk/chainguard/dapr-daprd-fips-1.15pkg:apk/chainguard/dapr-daprd-fips-1.16pkg:apk/chainguard/dapr-daprd-fips-1.17pkg:apk/chainguard/envoy-gateway-egctlpkg:apk/chainguard/envoy-gateway-fips-egctlpkg:apk/chainguard/falcosidekickpkg:apk/chainguard/falcosidekick-fipspkg:apk/chainguard/ferretdbpkg:apk/chainguard/flytepkg:apk/chainguard/gitaly-18.10pkg:apk/chainguard/gitaly-18.11pkg:apk/chainguard/gitaly-18.9pkg:apk/chainguard/gitaly-fips-18.10pkg:apk/chainguard/gitaly-fips-18.11pkg:apk/chainguard/gitaly-fips-18.9pkg:apk/chainguard/gitlab-container-registry-18.10pkg:apk/chainguard/gitlab-container-registry-18.11pkg:apk/chainguard/gitlab-container-registry-18.9pkg:apk/chainguard/gitlab-container-registry-fips-18.10pkg:apk/chainguard/gitlab-container-registry-fips-18.11pkg:apk/chainguard/gitlab-container-registry-fips-18.9pkg:apk/chainguard/gitnesspkg:apk/chainguard/goosepkg:apk/chainguard/goose-fipspkg:apk/chainguard/grafana-11.6pkg:apk/chainguard/grafana-12.1pkg:apk/chainguard/grafana-fips-11.6pkg:apk/chainguard/grafana-fips-12.1pkg:apk/chainguard/grafana-fips-12.2pkg:apk/chainguard/hydrapkg:apk/chainguard/hydra-fipspkg:apk/chainguard/jitsucom-bulker-bulkerpkg:apk/chainguard/jitsucom-bulker-sidecarpkg:apk/chainguard/jitsucom-bulker-syncctlpkg:apk/chainguard/juicefs-1.2pkg:apk/chainguard/juicefs-1.3pkg:apk/chainguard/k3spkg:apk/chainguard/k3s-1.31pkg:apk/chainguard/k3s-1.32pkg:apk/chainguard/k3s-1.33pkg:apk/chainguard/k3s-1.34pkg:apk/chainguard/k3s-1.35pkg:apk/chainguard/k3s-staticpkg:apk/chainguard/k3s-static-1.31pkg:apk/chainguard/k3s-static-1.32pkg:apk/chainguard/k3s-static-1.33pkg:apk/chainguard/k3s-static-1.34pkg:apk/chainguard/k3s-static-1.35pkg:apk/chainguard/keda-2.18pkg:apk/chainguard/keda-2.18-metrics-apiserverpkg:apk/chainguard/keda-2.19pkg:apk/chainguard/keda-2.19-metrics-apiserverpkg:apk/chainguard/keda-fips-2.18pkg:apk/chainguard/keda-fips-2.18-metrics-apiserverpkg:apk/chainguard/keda-fips-2.19pkg:apk/chainguard/keda-fips-2.19-metrics-apiserverpkg:apk/chainguard/kinepkg:apk/chainguard/kotspkg:apk/chainguard/kube-benchpkg:apk/chainguard/kube-bench-fipspkg:apk/chainguard/kubeflow-pipelines-apiserverpkg:apk/chainguard/kuma-cp-2.11pkg:apk/chainguard/kuma-cp-2.12pkg:apk/chainguard/kuma-cp-2.13pkg:apk/chainguard/kuma-cp-2.7pkg:apk/chainguard/kuma-cp-2.9pkg:apk/chainguard/kumactl-2.11pkg:apk/chainguard/kumactl-2.12pkg:apk/chainguard/kumactl-2.13pkg:apk/chainguard/kumactl-2.7pkg:apk/chainguard/kumactl-2.9pkg:apk/chainguard/kuma-dp-2.11pkg:apk/chainguard/kuma-dp-2.12pkg:apk/chainguard/kuma-dp-2.13pkg:apk/chainguard/kuma-dp-2.7pkg:apk/chainguard/kuma-dp-2.9pkg:apk/chainguard/migratepkg:apk/chainguard/openbaopkg:apk/chainguard/openbao-fipspkg:apk/chainguard/ory-kratospkg:apk/chainguard/ory-kratos-fipspkg:apk/chainguard/pg_timetablepkg:apk/chainguard/pg_timetable-fipspkg:apk/chainguard/pgwatchpkg:apk/chainguard/rke2-cloud-providerpkg:apk/chainguard/rke2-cloud-provider-fipspkg:apk/chainguard/rke2-runtime-1.33pkg:apk/chainguard/rke2-runtime-1.34pkg:apk/chainguard/rke2-runtime-1.35pkg:apk/chainguard/rke2-runtime-fips-1.33pkg:apk/chainguard/rke2-runtime-fips-1.34pkg:apk/chainguard/rke2-runtime-fips-1.35pkg:apk/chainguard/seaweedfspkg:apk/chainguard/seaweedfs-fipspkg:apk/chainguard/seaweedfs-rocksdbpkg:apk/chainguard/seaweedfs-rocksdb-fipspkg:apk/chainguard/sftpgopkg:apk/chainguard/sftpgo-plugin-eventsearchpkg:apk/chainguard/sftpgo-plugin-eventstorepkg:apk/chainguard/spicedbpkg:apk/chainguard/spicedb-fipspkg:apk/chainguard/spire-serverpkg:apk/chainguard/spire-server-fipspkg:apk/chainguard/spqrpkg:apk/chainguard/steampipepkg:apk/chainguard/steppkg:apk/chainguard/step-capkg:apk/chainguard/step-ca-fipspkg:apk/chainguard/step-fipspkg:apk/chainguard/step-issuerpkg:apk/chainguard/step-issuer-fipspkg:apk/chainguard/teleport-17pkg:apk/chainguard/teleport-18pkg:apk/chainguard/teleport-18.6pkg:apk/chainguard/temporalpkg:apk/chainguard/temporal-fipspkg:apk/chainguard/temporal-serverpkg:apk/chainguard/temporal-server-fipspkg:apk/chainguard/temporal-sql-toolpkg:apk/chainguard/temporal-sql-tool-fipspkg:apk/chainguard/timescaledb-parallel-copypkg:apk/chainguard/vault-1.21pkg:apk/chainguard/vault-fips-1.21pkg:apk/chainguard/wal-g-pgpkg:apk/chainguard/zitadel-3pkg:apk/wolfi/argo-workflow-controller-3.7pkg:apk/wolfi/argo-workflow-controller-4.0pkg:apk/wolfi/argo-workflow-executor-3.7pkg:apk/wolfi/argo-workflow-executor-4.0pkg:apk/wolfi/argo-workflows-3.7pkg:apk/wolfi/argo-workflows-4.0pkg:apk/wolfi/azure-service-operatorpkg:apk/wolfi/bentopkg:apk/wolfi/caddypkg:apk/wolfi/cerbospkg:apk/wolfi/certificate-transparency-trillian-ctserverpkg:apk/wolfi/cloudnative-pgpkg:apk/wolfi/cloudnative-pg-pluginspkg:apk/wolfi/cloudproberpkg:apk/wolfi/dapr-daprd-1.15pkg:apk/wolfi/dapr-daprd-1.16pkg:apk/wolfi/dapr-daprd-1.17pkg:apk/wolfi/envoy-gateway-egctlpkg:apk/wolfi/falcosidekickpkg:apk/wolfi/ferretdbpkg:apk/wolfi/flytepkg:apk/wolfi/gitaly-18.10pkg:apk/wolfi/gitaly-18.11pkg:apk/wolfi/gitaly-18.9pkg:apk/wolfi/gitnesspkg:apk/wolfi/grafana-11.6pkg:apk/wolfi/grafana-12.1pkg:apk/wolfi/hydrapkg:apk/wolfi/jitsucom-bulker-bulkerpkg:apk/wolfi/jitsucom-bulker-sidecarpkg:apk/wolfi/jitsucom-bulker-syncctlpkg:apk/wolfi/juicefs-1.3pkg:apk/wolfi/k3spkg:apk/wolfi/k3s-1.32pkg:apk/wolfi/k3s-1.33pkg:apk/wolfi/k3s-1.34pkg:apk/wolfi/k3s-1.35pkg:apk/wolfi/k3s-staticpkg:apk/wolfi/k3s-static-1.32pkg:apk/wolfi/k3s-static-1.33pkg:apk/wolfi/k3s-static-1.34pkg:apk/wolfi/k3s-static-1.35pkg:apk/wolfi/keda-2.18pkg:apk/wolfi/keda-2.18-metrics-apiserverpkg:apk/wolfi/keda-2.19pkg:apk/wolfi/keda-2.19-metrics-apiserverpkg:apk/wolfi/kinepkg:apk/wolfi/kotspkg:apk/wolfi/kube-benchpkg:apk/wolfi/kubeflow-pipelines-apiserverpkg:apk/wolfi/kuma-cp-2.11pkg:apk/wolfi/kuma-cp-2.12pkg:apk/wolfi/kuma-cp-2.13pkg:apk/wolfi/kuma-cp-2.9pkg:apk/wolfi/kumactl-2.11pkg:apk/wolfi/kumactl-2.12pkg:apk/wolfi/kumactl-2.13pkg:apk/wolfi/kumactl-2.9pkg:apk/wolfi/kuma-dp-2.11pkg:apk/wolfi/kuma-dp-2.12pkg:apk/wolfi/kuma-dp-2.13pkg:apk/wolfi/kuma-dp-2.9pkg:apk/wolfi/migratepkg:apk/wolfi/openbaopkg:apk/wolfi/pg_timetablepkg:apk/wolfi/rke2-cloud-providerpkg:apk/wolfi/seaweedfspkg:apk/wolfi/sftpgopkg:apk/wolfi/sftpgo-plugin-eventsearchpkg:apk/wolfi/sftpgo-plugin-eventstorepkg:apk/wolfi/spicedbpkg:apk/wolfi/spire-serverpkg:apk/wolfi/spqrpkg:apk/wolfi/steampipepkg:apk/wolfi/steppkg:apk/wolfi/step-capkg:apk/wolfi/step-issuerpkg:apk/wolfi/teleport-17pkg:apk/wolfi/teleport-18pkg:apk/wolfi/teleport-18.6pkg:apk/wolfi/temporalpkg:apk/wolfi/temporal-serverpkg:apk/wolfi/temporal-sql-toolpkg:apk/wolfi/timescaledb-parallel-copypkg:apk/wolfi/wal-g-pgpkg:golang/github.com/jackc/pgx/v5pkg:rpm/almalinux/go-fdo-serverpkg:rpm/almalinux/go-fdo-server-manufacturerpkg:rpm/almalinux/go-fdo-server-ownerpkg:rpm/almalinux/go-fdo-server-rendezvouspkg:rpm/opensuse/kubectl-cnpg&distro=openSUSE%20Tumbleweed
< 0+ 255 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 3.7.13-r6
- (no CPE)range: < 4.0.4-r6
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.29.0-r2
- (no CPE)range: < 1.29.0-r3
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.72.2-r0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.7.2-r1
- (no CPE)range: < 1.7.2-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.35.3.1-r3
- (no CPE)range: < 1.31.6.1-r18
- (no CPE)range: < 1.32.13.1-r12
- (no CPE)range: < 1.33.10.1-r7
- (no CPE)range: < 1.34.6.1-r3
- (no CPE)range: < 1.35.3.1-r2
- (no CPE)range: < 1.35.3.1-r3
- (no CPE)range: < 1.31.6.1-r19
- (no CPE)range: < 1.32.13.1-r12
- (no CPE)range: < 1.33.10.1-r7
- (no CPE)range: < 1.34.6.1-r3
- (no CPE)range: < 1.35.3.1-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.14.16-r2
- (no CPE)range: < 1.130.0-r5
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.14.5-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.29.0-r3
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.7.2-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.35.3.1-r3
- (no CPE)range: < 1.32.13.1-r12
- (no CPE)range: < 1.33.10.1-r7
- (no CPE)range: < 1.34.6.1-r3
- (no CPE)range: < 1.35.3.1-r2
- (no CPE)range: < 1.35.3.1-r3
- (no CPE)range: < 1.32.13.1-r12
- (no CPE)range: < 1.33.10.1-r7
- (no CPE)range: < 1.34.6.1-r3
- (no CPE)range: < 1.35.3.1-r2
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.14.16-r2
- (no CPE)range: < 1.130.0-r5
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.14.5-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 5.9.0
- (no CPE)range: < 1.0.1-1.el10_2
- (no CPE)range: < 1.0.1-1.el10_2
- (no CPE)range: < 1.0.1-1.el10_2
- (no CPE)range: < 1.0.1-1.el10_2
- (no CPE)range: < 1.29.1-1.1
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-9jj7-4m8r-rfcmghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2026-33816ghsaADVISORY
- pkg.go.dev/vuln/GO-2026-4772nvdThird Party AdvisoryWEB
News mentions
0No linked articles in our index yet.