Skip to content
9.8 Critical

CVE-2026-33816 Memory-safety vulnerability in github.com/jackc/pgx/v5

Description

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Affected products and versions

Product Affected versions Fixed in
github.com/jackc/pgx/v5/pgproto3 5.9 earliest → < 5.9.0 5.9.0
Cryostat 4 on RHEL 9 4.2 earliest → < 4.2.0-13 4.2.0-13
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Custom Metric Autoscaler 2.19 1788363289 earliest → < 1788363289 1788363289
Multicluster Global Hub 1.3.4 1779209992 earliest → < 1779209992 1779209992
Multicluster Global Hub 1.7.1 1779925273 earliest → < 1779925273 1779925273
Red Hat Advanced Cluster Management for Kubernetes 2.15 1780677003 earliest → < 1780677003 1780677003
Red Hat Advanced Cluster Management for Kubernetes 2.16 1780926805 earliest → < 1780926805 1780926805
Red Hat Advanced Cluster Security for Kubernetes 4.10 1777976489 earliest → < 1777976489 1777976489
Show the 30 other branches
Product Affected versions Fixed in
Red Hat Advanced Cluster Security for Kubernetes 4.8 1777307791 earliest → < 1777307791 1777307791
Red Hat Advanced Cluster Security for Kubernetes 4.9 1777986630 earliest → < 1777986630 1777986630
Red Hat Hardened Images Versions not published
Red Hat OpenShift Pipelines 1.21 1780641574 earliest → < 1780641574 1780641574
Red Hat Trusted Artifact Signer 1.3 1780053572 earliest → < 1780053572 1780053572
Custom Metric Autoscaler operator for Red Hat Openshift Versions not published
Multicluster Engine for Kubernetes Versions not published
Multicluster Global Hub Versions not published
Red Hat 3scale API Management Platform 2 Versions not published
Red Hat Advanced Cluster Security 4 Versions not published
Red Hat Edge Manager 1 Versions not published
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat Openshift Data Foundation 4 Versions not published
Red Hat Trusted Artifact Signer Versions not published
Zero Trust Workload Identity Manager - Tech Preview Versions not published
Red Hat Quay 3 Versions not published
Zero Trust Workload Identity Manager Versions not published
OpenShift Pipelines Versions not published
RHEM 1.0 for RHEL 9 Versions not published
Red Hat Enterprise Linux 10 Versions not published
Red Hat Edge Manager 1.1 1784127775 earliest → < 1784127775 1784127775
Red Hat Openshift Data Foundation 4.20 1783669219 earliest → < 1783669219 1783669219
RHEM 1.1 for RHEL 10 Versions not published
RHEM 1.1 for RHEL 9 Versions not published
Red Hat Advanced Cluster Security 4.8 1777307791 earliest → < 1777307791 1777307791
Red Hat Advanced Cluster Security 4.9 1777986630 earliest → < 1777986630 1777986630
Red Hat Openshift Data Foundation 4.2 1783669219 earliest → < 1783669219 1783669219
Multicluster Global Hub 1.7.0 1779925273 earliest → < 1779925273 1779925273
Multicluster Global Hub 1.7.2 1779925273 earliest → < 1779925273 1779925273
Red Hat Advanced Cluster Management for Kubernetes 2.16.0 1780926805 earliest → < 1780926805 1780926805

References

Timeline

  1. Published
  2. Last modified
The 2 CVEs of github.com/jackc/pgx/v5/pgproto3 →
Track this CVE