LOWGo
GHSA-j88v-2chj-qfwx· CVE-2026-41889, GO-2026-5004pgx: SQL Injection via placeholder confusion with dollar quoted string literals
Modified: 9/10/2026
package
Go/github.com/jackc/pgx/v4
pkg:go/github.com/jackc/pgx/v4
HIGH8.1Go
GHSA-m7wr-2xf7-cm9p· CVE-2024-27289, GO-2024-2605pgx SQL Injection via Line Comment Creation
Modified: 9/10/2026
CRITICAL9.8Go
GHSA-mrww-27vc-gghv· CVE-2024-27304, GHSA-7jwh-3vrq-q3m8pgx SQL Injection via Protocol Message Size Overflow
Modified: 9/10/2026
—Go
GO-2024-2605· CVE-2024-27289, GHSA-m7wr-2xf7-cm9pSQL injection in github.com/jackc/pgx/v4
Modified: 2/4/2026
—Go
GO-2024-2606· CVE-2024-27304, GHSA-7jwh-3vrq-q3m8SQL injection in github.com/jackc/pgproto3 and github.com/jackc/pgx
Modified: 2/4/2026
—Go
GO-2026-5004· CVE-2026-41889, GHSA-j88v-2chj-qfwxSQL Injection via placeholder confusion with dollar quoted string literals in github.com/jackc/pgx
Modified: 6/25/2026