CVE-2026-33815: github.com/jackc/pgx/v5/pgproto3, грешка в паметта

9.8

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.

Описание

Оригинално описание

Memory-safety vulnerability in github.com/jackc/pgx/v5.

github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3: преди 5.9.0
Red Hat: още 29 продукта, добавени от Red Hat
Cryostat 4 on RHEL 9, RHEM 1.0 for RHEL 9, RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9, Custom Metric Autoscaler 2.19, Multicluster Global Hub 1.3.4, Multicluster Global Hub 1.7.0, Red Hat Advanced Cluster Management for Kubernetes 2.14, Red Hat Advanced Cluster Management for Kubernetes 2.15, Red Hat Advanced Cluster Management for Kubernetes 2.16, Red Hat Advanced Cluster Security 4.8, Red Hat Advanced Cluster Security 4.9, Red Hat Advanced Cluster Security for Kubernetes 4.10, Red Hat Openshift Data Foundation 4.20, Red Hat Trusted Artifact Signer 1.3, Custom Metric Autoscaler operator for Red Hat Openshift, Multicluster Engine for Kubernetes, Multicluster Global Hub, OpenShift Pipelines, Red Hat 3scale API Management Platform 2, Red Hat Advanced Cluster Security 4, Red Hat Edge Manager 1, Red Hat Enterprise Linux 10, Red Hat Hardened Images, Red Hat OpenShift AI (RHOAI), Red Hat Quay 3, Red Hat Trusted Artifact Signer, Zero Trust Workload Identity Manager, Zero Trust Workload Identity Manager - Tech Preview