by Kastro CVE-2026-33815
github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3 — CVE-2026-33815 in github.com/jackc/pgx
Description · from the CVE record
Memory-safety vulnerability in github.com/jackc/pgx/v5.
Affected
ProductAffectedFixed inSource
github.com/jackc/pgx/v5/pgproto3< 5.9.05.9.0CNA
Cryostat 4 on RHEL 9see advisory4.2.0-13redhat-SADP
RHEM 1.0 for RHEL 9see advisory0:1.0.3-1.el9emredhat-SADP
RHEM 1.1 for RHEL 10see advisory0:1.1.3-1.el10emredhat-SADP
RHEM 1.1 for RHEL 9see advisory0:1.1.3-1.el9emredhat-SADP
Custom Metric Autoscaler 2.19see advisory1780101236redhat-SADP
Custom Metric Autoscaler 2.19see advisory1780101226redhat-SADP
Custom Metric Autoscaler 2.19see advisory1780101239redhat-SADP
Custom Metric Autoscaler 2.19see advisory1779953535redhat-SADP
Multicluster Global Hub 1.3.4see advisory1779210675redhat-SADP
Multicluster Global Hub 1.3.4see advisory1779210608redhat-SADP
Multicluster Global Hub 1.3.4see advisory1779209992redhat-SADP
Scores by source
CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat-SADP (CNA)8.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total