GHSA-fqpg-rq76-99pq
Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx
5.3 MediumFix available
GHSA-fqpg-rq76-99pq is a medium vulnerability (CVSS 5.3) in github.com/jackc/pgx/v5, published July 2, 2024. No source lists public exploit code. Fixed in github.com/jackc/pgx/v5 5.5.2.
- Severity
- 5.3 MediumCVSS 3.1, GitHub Advisories
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
5.5.2github.com/jackc/pgx/v5 +1 more
Description
Pipeline can panic when PgConn is busy or closed.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/jackc/pgx/v5Go | before 5.5.2 | 5.5.2 |
github.com/jackc/pgx/v5Go | 5.0.0-alpha.5 up to 5.5.2 | 5.5.2 |
What each source reports
GitHub Advisories Score used
Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx
Pipeline can panic when PgConn is busy or closed.
- Record
GHSA-fqpg-rq76-99pq- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-754
- Updated
- 2026-11-02
OSV
Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx
Pipeline can panic when PgConn is busy or closed.
- Record
GHSA-fqpg-rq76-99pq- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-754
- Updated
- 2026-11-02
OSVGO-2024-2567No score
Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx
Pipeline can panic when PgConn is busy or closed.
- Record
GO-2024-2567- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.