CVE-2026-33815
Fixed in a distro release EPSS <1%CVSS 9.8
Memory-safety vulnerability in github.com/jackc/pgx/v5.
Products: github.com/jackc/pgx/v5/pgproto3, Red Hat Cryostat 4 on RHEL 9, Red Hat RHEM 1.0 for RHEL 9, Red Hat RHEM 1.1 for RHEL 10, Red Hat RHEM 1.1 for RHEL 9, Red Hat Custom Metric Autoscaler 2.19, Red Hat Multicluster Global Hub 1.3.4, Red Hat Multicluster Global Hub 1.7.0, Red Hat Advanced Cluster Management for Kubernetes 2.14, Red Hat Advanced Cluster Management for Kubernetes 2.15, Red Hat Advanced Cluster Management for Kubernetes 2.16, Red Hat Advanced Cluster Security 4.8, Red Hat Advanced Cluster Security 4.9, Red Hat Advanced Cluster Security for Kubernetes 4.10, Red Hat Openshift Data Foundation 4.20, Red Hat Trusted Artifact Signer 1.3, Custom Metric Autoscaler operator for Red Hat Openshift, Red Hat Multicluster Engine for Kubernetes, Red Hat Multicluster Global Hub, Red Hat OpenShift Pipelines, Red Hat 3scale API Management Platform 2, Red Hat Advanced Cluster Security 4, Red Hat Edge Manager 1, Red Hat Enterprise Linux 10, Red Hat Hardened Images, Red Hat OpenShift AI (RHOAI), Red Hat Quay 3, Red Hat Trusted Artifact Signer, Red Hat Zero Trust Workload Identity Manager, Red Hat Zero Trust Workload Identity Manager - Tech Preview
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | github.com/jackc/pgx/v5 | 5.9.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | commercial-grafana-11.6 | 11.6.16-r0 |
| Chainguard | commercial-grafana-12.1 | no fix |
| Chainguard | commercial-grafana-12.2 | 12.2.10-r0 |
| Chainguard | commercial-grafana-12.3 | 12.3.8-r0 |
| Chainguard | commercial-grafana-12.4 | 12.4.5-r0 |
| Chainguard | envoy-gateway-fips-1.6-egctl | 1.6.7-r4 |
| Chainguard | gitaly-18.11 | 18.11.6-r1 |
| Chainguard | gitlab-elasticsearch-indexer | 5.14.13-r1 |
| Chainguard | gitlab-elasticsearch-indexer-fips | 5.14.13-r1 |
| Chainguard | grafana-12.0 | no fix |
| Chainguard | grafana-12.1 | 12.1.10.01-r23 |
| Chainguard | grafana-fips-12.0 | no fix |
| Chainguard | grafana-fips-12.1 | no fix |
| Chainguard | keda-2.17 | no fix |
| Chainguard | keda-2.17-metrics-apiserver | no fix |
| Chainguard | keda-fips-2.17 | no fix |
| Chainguard | keda-fips-2.17-metrics-apiserver | no fix |
| Chainguard | kuma-cp-2.10 | no fix |
| Chainguard | kuma-dp-2.10 | no fix |
| Chainguard | kumactl-2.10 | no fix |
| Chainguard | rke2-runtime-1.32 | no fix |
| Chainguard | rke2-runtime-fips-1.32 | no fix |
| Chainguard | teleport-18.6 | 18.6.8-r22 |
| Chainguard | vault-1.20 | no fix |
| Chainguard | vault-1.21 | 1.21.4-r12 |
| Chainguard | vault-fips-1.21 | 1.21.4-r16 |
| Debian 14 | golang-github-jackc-pgx-v5 | 5.9.2-1 |
| Red Hat edge manager 1.0 | flightctl | 0:1.0.3-1.el9em |
| Red Hat edge manager 1.0 | flightctl-agent | 0:1.0.3-1.el9em |
| Red Hat edge manager 1.0 | flightctl-cli | 0:1.0.3-1.el9em |
| Red Hat edge manager 1.0 | flightctl-selinux | 0:1.0.3-1.el9em |
| Red Hat edge manager 1.1 | flightctl | 0:1.1.3-1.el9em |
| Red Hat edge manager 1.1 | flightctl | 0:1.1.3-1.el10em |
| Red Hat edge manager 1.1 | flightctl-agent | 0:1.1.3-1.el9em |
| Red Hat edge manager 1.1 | flightctl-agent | 0:1.1.3-1.el10em |
| Red Hat edge manager 1.1 | flightctl-cli | 0:1.1.3-1.el9em |
| Red Hat edge manager 1.1 | flightctl-cli | 0:1.1.3-1.el10em |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise Server 16.0 | cosign | 3.1.1-160000.1.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | cosign | 3.1.1-150400.3.45.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | cosign | 3.1.1-160000.1.1 |
| Ubuntu 26.04 LTS | golang-github-jackc-pgx-v5 | no fix |
| Ubuntu 26.10 | golang-github-jackc-pgx-v5 | no fix |
| Wolfi | gitaly-18.11 | 18.11.6-r1 |
| Wolfi | teleport-18.6 | 18.6.8-r22 |
| openSUSE Leap 16.0 | cosign | 3.1.1-160000.1.1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |
| openSUSE Tumbleweed | cosign | 3.1.1-1.1 |