Skip to content

fix(cve): cve-2026-33816 - pgx memory-safety#422

Open
vmrh21 wants to merge 1 commit into
red-hat-data-services:mainfrom
vmrh21:fix/cve-2026-33816-pgx-main-attempt-2
Open

fix(cve): cve-2026-33816 - pgx memory-safety#422
vmrh21 wants to merge 1 commit into
red-hat-data-services:mainfrom
vmrh21:fix/cve-2026-33816-pgx-main-attempt-2

Conversation

@vmrh21

@vmrh21 vmrh21 commented May 6, 2026

Copy link
Copy Markdown

summary

update github.com/jackc/pgx/v5 from v5.9.0 to v5.9.2 to resolve memory-safety vulnerability.

cve details

  • cve id: CVE-2026-33816
  • package: github.com/jackc/pgx/v5
  • severity: memory-safety vulnerability
  • vulnerable versions: < v5.9.2
  • fixed version: v5.9.2
  • jira issues: RHOAIENG-57063

changes

  • update jackc/pgx/v5 v5.9.0 → v5.9.2 in maas-api/go.mod

test results

status: ✅ all tests passed
test command: go test ./...
result: PASSED

test summary
  • cmd: PASS
  • internal/api_keys: PASS
  • internal/auth: PASS
  • internal/config: PASS
  • internal/handlers: PASS
  • internal/subscription: PASS

breaking changes

none — minor version patch update within the same v5.x line.

testing checklist

  • pre-pr automated tests executed
  • go test ./... passes
  • verify cve is resolved with security scan
  • ci/cd pipeline passes

risk assessment

risk level: low — patch update within same major/minor version.

resolves: RHOAIENG-57063


🤖 generated by cve fixer workflow

update github.com/jackc/pgx/v5 from v5.9.0 to v5.9.2 to resolve
memory-safety vulnerability in pgx database driver.

cve details:
- cve-2026-33816: memory-safety vulnerability in github.com/jackc/pgx

changes:
- update jackc/pgx/v5 v5.9.0 → v5.9.2

all tests pass with the updated dependency.

resolves: RHOAIENG-57063

co-authored-by: claude opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant