github.com/jackc/pgx
Go3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/jackc/pgxpage 1 of 1
- CVE-2024-27289HIGHCVSS 8.1EG 8.12024-03-06
pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for a numeric value must be immediately pr…
- CVE-2024-27304CRITICALCVSS 9.8EG 9.82024-03-06
pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be…
- CVE-2026-41889CRITICALCVSS 9.8EG 9.82026-05-08
pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that wo…
Check whether github.com/jackc/pgx is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/jackc/pgx CVEs against the assets you own.
Start Free Scan →