9.8Crítica

CVE-2026-33815CVE-2026-33815 in github.com/jackc/pgx

github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3; Red Hat Cryostat 4 on RHEL 9; Red Hat RHEM 1.0 for RHEL 9; Red Hat RHEM 1.1 for RHEL 10 Publicada: (hace 7 meses)

Descripción

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Debilidad (CWE): CWE-129CWE-787

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
acm 2.14 —
acm 2.15 —
acm 2.16 —
advanced cluster security 4.10 —
advanced cluster security 4.8 —
advanced cluster security 4.9 —
cryostat 4 —
edge manager 1.0 —
edge manager 1.1 —
github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3 < 5.9.0
jackc pgx —
multicluster globalhub 1.3 —
multicluster globalhub 1.7 —
openshift custom metrics autoscaler 2.19 —
openshift data foundation 4.20 —
Red Hat Cryostat 4 on RHEL 9 all versions
Red Hat Custom Metric Autoscaler 2.19 all versions
Red Hat Custom Metric Autoscaler operator for Red Hat Openshift all versions
Red Hat Multicluster Engine for Kubernetes all versions
Red Hat Multicluster Global Hub all versions
Red Hat Multicluster Global Hub 1.3.4 all versions
Red Hat Multicluster Global Hub 1.7.0 all versions
Red Hat OpenShift Pipelines all versions
Red Hat Red Hat 3scale API Management Platform 2 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.15 all versions
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.16 all versions
Red Hat Red Hat Advanced Cluster Security 4.8 all versions
Red Hat Red Hat Advanced Cluster Security 4.9 all versions
Red Hat Red Hat Advanced Cluster Security for Kubernetes 4.10 all versions
Red Hat Red Hat Openshift Data Foundation 4.20 all versions
Red Hat Red Hat Trusted Artifact Signer 1.3 all versions
Red Hat RHEM 1.0 for RHEL 9 all versions
Red Hat RHEM 1.1 for RHEL 10 all versions
Red Hat RHEM 1.1 for RHEL 9 all versions
trusted artifact signer 1.3 —

Referencias y parches

Coincidencias CPE (NVD) (1)

  • cpe:2.3:a:jackc:pgx:*:*:*:*:*:go:*:*