Threats affecting pkg:golang/github.com/jackc/pgx

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	2.3	EPSS 0.4%	CVE-2026-41889jackc pgx · SQL Injection Low2.3EPSS 0.4%2026-05-08CVE Database V5CVE-2026-41889 CVE-2026-41889 is a low-severity SQL injection vulnerability in the jackc pgx PostgreSQL driver for Go. It affects versions prior to 5.9.2 when using the non-default simple protocol with dollar quoted string literals that contain text interpreted as placeholders controllable by an attacker. This vulnerability has been patched in version 5.9.2. EPSS 0.4%Vulnerability CWE-89	CVE Database V5	2026-05-08

Page 1 of 1