Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Memory-safety vulnerability in github.com/jackc/pgx/v5.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-04-07 | 2 | Disclosure2 |
| 2026-04-10 | 2 | Patch2 |
| 2026-04-16 | 1 | General1 |
| 2026-04-17 | 1 | Disclosure1 |
PSA regarding CVE-2026-33815 and CVE-2026-33816 (Critical CVEs in jackc/pgx). Note that these issues were fixed in jackc/pgx v5.9.0. Most public sources still erroneously claim the latest version (5.9.1) is vulnerable
Post summary
The PSA confirms that CVE-2026-33815 and CVE-2026-33816 were fixed in jackc/pgx v5.9.0 and that claims of their presence in v5.9.1 are incorrect.
A memory-safety vulnerability (CVE-2026-33816) affects 'jackc/pgx/v5'. Review Go applications using this PostgreSQL driver for potential impact. Patching is advised once available. #GoLang #PostgreSQL #InfoSec https://www.pulsepatch.io/posts/cve-2026-33816-pgx-memory-safety
Post summary
The post announces a newly discovered memory‑safety vulnerability in the Go PostgreSQL driver, warns developers to review their applications, and recommends applying a patch once released.
CVE-2026-33816 Interesting
Post summary
The excerpt only cites CVE‑2026‑33816 and labels it "Interesting", offering no further technical or actionable details.
Fix commits - CVE-2026-33815 https://github.com/jackc/pgx/commit/6dbad4cafdb8a4daab7ff79c858c95da4b6109e8 CVE-2026-33816 https://github.com/jackc/pgx/commit/025d48ccb90efcebdb8ccc67079adddcde3771d5 Requests for updating Go vulndb - https://github.com/golang/vulndb/issues/4943 https://github.com/golang/vulndb/issues/4944
Post summary
The post lists GitHub commit URLs that fix CVE‑2026‑33815 and CVE‑2026‑33816 and references issue threads for updating the Go vulnerability database, indicating that patches are available but no exploit or PoC is mentioned.
CVE-2026-33816 Memory-Safety Vulnerability in http://GitHub.com/jackc/pgx/v5 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-33816 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The tweet announces the CVE-2026-33816 memory‑safety vulnerability in gitHub.com/jackc/pgx/v5 and links to a Vulmon report, but offers no PoC, exploit code, or patch details.
CVE-2026-33816 Memory-safety vulnerability in http://github.com/jackc/pgx/v5. https://www.cve.org/CVERecord?id=CVE-2026-33816
Post summary
The post announces a new CVE (Memory-safety vulnerability) without referencing any PoC, exploit code, active attacks, patches, or debunking claims.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jackc | pgx | - | go | - |