Skip to content
fr Sign in
9.8 Critical

CVE-2026-33815 Memory-safety vulnerability in github.com/jackc/pgx/v5

Description

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Affected products and versions

Product Affected versions Fixed in
github.com/jackc/pgx/v5/pgproto3 5.9 earliest → < 5.9.0 5.9.0
Cryostat 4 on RHEL 9 4.2 earliest → < 4.2.0-13 4.2.0-13
Custom Metric Autoscaler 2.19 1779953535 earliest → < 1779953535 1779953535
Multicluster Global Hub 1.3.4 1779209992 earliest → < 1779209992 1779209992
Multicluster Global Hub 1.7.1 1779925273 earliest → < 1779925273 1779925273
Red Hat Advanced Cluster Management for Kubernetes 2.15 1780677003 earliest → < 1780677003 1780677003
Red Hat Advanced Cluster Management for Kubernetes 2.16 1780926805 earliest → < 1780926805 1780926805
Red Hat Advanced Cluster Security for Kubernetes 4.10 1777976489 earliest → < 1777976489 1777976489
Red Hat Advanced Cluster Security for Kubernetes 4.8 1777307791 earliest → < 1777307791 1777307791
Show the 28 other branches
Product Affected versions Fixed in
Red Hat Advanced Cluster Security for Kubernetes 4.9 1777986630 earliest → < 1777986630 1777986630
Red Hat Trusted Artifact Signer 1.3 1780053572 earliest → < 1780053572 1780053572
Custom Metric Autoscaler operator for Red Hat Openshift Versions not published
Multicluster Engine for Kubernetes Versions not published
Multicluster Global Hub Versions not published
OpenShift Pipelines Versions not published
Red Hat 3scale API Management Platform 2 Versions not published
Red Hat Advanced Cluster Security 4 Versions not published
Red Hat Edge Manager 1 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Hardened Images Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat Openshift Data Foundation 4 Versions not published
Red Hat Trusted Artifact Signer Versions not published
Zero Trust Workload Identity Manager - Tech Preview Versions not published
Red Hat Quay 3 Versions not published
Zero Trust Workload Identity Manager Versions not published
RHEM 1.0 for RHEL 9 Versions not published
Red Hat Openshift Data Foundation 4.20 1783669219 earliest → < 1783669219 1783669219
RHEM 1.1 for RHEL 10 Versions not published
RHEM 1.1 for RHEL 9 Versions not published
Red Hat Advanced Cluster Security 4.8 1777307791 earliest → < 1777307791 1777307791
Red Hat Advanced Cluster Security 4.9 1777986630 earliest → < 1777986630 1777986630
Red Hat Openshift Data Foundation 4.2 1783669219 earliest → < 1783669219 1783669219
Multicluster Global Hub 1.7.0 1779925273 earliest → < 1779925273 1779925273
Multicluster Global Hub 1.7.2 1779925273 earliest → < 1779925273 1779925273
Red Hat Advanced Cluster Management for Kubernetes 2.16.0 1780926805 earliest → < 1780926805 1780926805
Red Hat Advanced Cluster Management for Kubernetes 2.14 1787645355 earliest → < 1787645355 1787645355

References

Timeline

  1. Published
  2. Last modified

Other CVEs of github.com/jackc/pgx/v5/pgproto3

The 2 CVEs of github.com/jackc/pgx/v5/pgproto3 →
CVE-2026-33816 Memory-safety vulnerability in github.com/jackc/pgx/v5 9.8 Critical
Track this CVE