jackc

Products

ProductCVEsExploitedLatest
pgx3–May 8, 2026

Exploited and recent CVEs

  • CVE-2026-41889 Low 2.3 pgx: SQL Injection via placeholder confusion with dollar quoted string literals 0.4%
  • CVE-2024-27304 Critical 9.8 pgx SQL Injection via Protocol Message Size Overflow 1.1%
  • CVE-2024-27289 High 8.1 pgx SQL Injection via Line Comment Creation 0.8%