Jackc vulnerabilities

Products

• Pgx 5
• Pgproto3 2

Newest

• jackc pgx pgx: SQL Injection via placeholder confusion with dollar quoted string literals CVE-2026-41889 Fix available 2.3 LowApril 22, 2026
• jackc pgx, github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3, red hat cryostat 4 on rhel 9 +29 more +31 more CVE-2026-33816 in github.com/jackc/pgx CVE-2026-33816 Fix available 9.8 CriticalApril 7, 2026
• jackc pgx, github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3, red hat cryostat 4 on rhel 9 +28 more +30 more CVE-2026-33815 in github.com/jackc/pgx CVE-2026-33815 Fix available 9.8 CriticalApril 7, 2026
• github.com/jackc/pgproto3/v2, jackc pgproto3, red hat assisted installer for red hat openshift container platform 2 +26 more +28 more Denial of service in github.com/jackc/pgproto3/v2 CVE-2026-32286 Public exploitFix available 7.5 HighMarch 16, 2026
• jackc pgx, pgproto3 +1 more pgx SQL Injection via Protocol Message Size Overflow CVE-2024-27304 Public exploitFix available 9.8 CriticalMarch 4, 2024
• jackc pgx pgx SQL Injection via Line Comment Creation CVE-2024-27289 Fix available 8.1 HighMarch 4, 2024