CVE-2026-33816: Jackc Pgx

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Memory-safety vulnerability in github.com/jackc/pgx/v5.

Affected products

• Jackc Pgx: before 5.9.0 (fixed in 5.9.0)

Published 2026-04-07. Last modified 2026-09-10.