{"id":"EUVD-2026-19707","revision":"66a92bd7e73245e7a54da8abfd3106d0","records":[{"revision":"66a92bd7e73245e7a54da8abfd3106d0","observedAt":"2026-10-28T04:02:18.789+00:00","statement":{"source":"euvd","id":"EUVD-2026-19707","aliases":["CVE-2026-33815","GHSA-xgrm-4fwx-7qm8"],"title":"Memory-safety vulnerability in github.com/jackc/pgx/v5.","description":"Memory-safety vulnerability in github.com/jackc/pgx/v5.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":null}],"references":["https://pkg.go.dev/vuln/GO-2026-4771"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-19707","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Apr 7, 2026, 3:19:24 PM","dateUpdated":"Sep 17, 2026, 12:04:28 PM"},"relatedAdvisories":[{"id":"RHSA-2026:13829","title":"Red Hat Security Advisory: RHACS 4.10.2 security and bug fix update","vulnerabilityIds":["CVE-2025-13465","CVE-2026-25679","CVE-2026-29063","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33815","CVE-2026-33816","CVE-2026-34986","CVE-2026-35469"]},{"id":"RHSA-2026:13791","title":"Red Hat Security Advisory: RHACS 4.9.6 security and bug fix update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-29063","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-33186","CVE-2026-33815","CVE-2026-33816","CVE-2026-34986","CVE-2026-35469"]},{"id":"RHSA-2026:22423","title":"Red Hat Security Advisory: Multicluster Global Hub 1.3.4 security update","vulnerabilityIds":["CVE-2026-21728","CVE-2026-25679","CVE-2026-27137","CVE-2026-32282","CVE-2026-32283","CVE-2026-32285","CVE-2026-32286","CVE-2026-33186","CVE-2026-33487","CVE-2026-33815","CVE-2026-33816","CVE-2026-34986","CVE-2026-41602","CVE-2026-41603","CVE-2026-41604","CVE-2026-41605","CVE-2026-41606","CVE-2026-41607","CVE-2026-41636","CVE-2026-43869"]},{"id":"RHSA-2026:25273","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.2 security update","vulnerabilityIds":["CVE-2025-48431","CVE-2026-6322","CVE-2026-33815","CVE-2026-33816","CVE-2026-40895","CVE-2026-41602","CVE-2026-42033","CVE-2026-42035","CVE-2026-42039","CVE-2026-42041","CVE-2026-42043","CVE-2026-42044","CVE-2026-43869"]},{"id":"RHSA-2026:24539","title":"Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.15.3 security update","vulnerabilityIds":["CVE-2025-48431","CVE-2026-33815","CVE-2026-33816","CVE-2026-40293","CVE-2026-40890","CVE-2026-40895","CVE-2026-41602","CVE-2026-41603","CVE-2026-41604","CVE-2026-41605","CVE-2026-41606","CVE-2026-41607","CVE-2026-41636","CVE-2026-42033","CVE-2026-42035","CVE-2026-42039","CVE-2026-42041","CVE-2026-42043","CVE-2026-42044","CVE-2026-43869"]},{"id":"RHSA-2026:24479","title":"Red Hat Security Advisory: RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2026-33815","CVE-2026-33816","CVE-2026-34986"]},{"id":"RHSA-2026:36796","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.0.3 Security Update","vulnerabilityIds":["CVE-2025-61729","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33810","CVE-2026-33811","CVE-2026-33815","CVE-2026-33816","CVE-2026-35469","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"RHSA-2026:24475","title":"Red Hat Security Advisory: RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2026-33815","CVE-2026-33816","CVE-2026-34986"]},{"id":"RHSA-2026:17789","title":"Red Hat Security Advisory: Red Hat build of Cryostat 4.2.0: new RHEL 9 container image security update","vulnerabilityIds":["CVE-2026-1002","CVE-2026-1525","CVE-2026-1526","CVE-2026-1528","CVE-2026-2229","CVE-2026-4800","CVE-2026-4926","CVE-2026-33186","CVE-2026-33813","CVE-2026-33815","CVE-2026-33816","CVE-2026-33870","CVE-2026-33871","CVE-2026-34986","CVE-2026-39852","CVE-2026-40895"]},{"id":"RHSA-2026:24482","title":"Red Hat Security Advisory: RHTAS 1.3.5 - Red Hat Trusted Artifact Signer Release","vulnerabilityIds":["CVE-2026-32281","CVE-2026-32282","CVE-2026-33815","CVE-2026-33816","CVE-2026-34986"]},{"id":"RHSA-2026:26636","title":"Red Hat Security Advisory: Custom Metrics Autoscaler Operator for Red Hat OpenShift 2.19.0-1 Update","vulnerabilityIds":["CVE-2025-61726","CVE-2025-61728","CVE-2025-61729","CVE-2025-68121","CVE-2026-25679","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33815","CVE-2026-33816","CVE-2026-34986"]},{"id":"RHSA-2026:11070","title":"Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update","vulnerabilityIds":["CVE-2026-29063","CVE-2026-32286","CVE-2026-33186","CVE-2026-33815","CVE-2026-33816","CVE-2026-34986","CVE-2026-35469"]},{"id":"openSUSE-SU-2026:11198-1","title":"cosign-3.1.1-1.1 on GA media","vulnerabilityIds":["CVE-2026-25680","CVE-2026-27136","CVE-2026-33815","CVE-2026-39827","CVE-2026-39830","CVE-2026-39834","CVE-2026-46597"]},{"id":"RHSA-2026:67842","title":"Red Hat Security Advisory: Multicluster Global Hub 1.7.3 security update","vulnerabilityIds":["CVE-2026-32282","CVE-2026-33815","CVE-2026-33818","CVE-2026-34040","CVE-2026-46604","CVE-2026-48586","CVE-2026-50151","CVE-2026-56852","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-71235","CVE-2026-71576","CVE-2026-71577","CVE-2026-75762","CVE-2026-77849","CVE-2026-79921","CVE-2026-80220","CVE-2026-80221"]},{"id":"RHSA-2026:41019","title":"Red Hat Security Advisory: Red Hat Edge Manager Version 1.1.3 Security Update","vulnerabilityIds":["CVE-2025-61729","CVE-2026-25679","CVE-2026-27137","CVE-2026-32280","CVE-2026-32281","CVE-2026-32282","CVE-2026-32283","CVE-2026-33186","CVE-2026-33811","CVE-2026-33815","CVE-2026-33816","CVE-2026-35469","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39832","CVE-2026-39835","CVE-2026-42151","CVE-2026-42154","CVE-2026-42508","CVE-2026-46595"]},{"id":"openSUSE-SU-2026:21281-1","title":"Security update for cosign","vulnerabilityIds":["CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-33815","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]},{"id":"RHSA-2026:40984","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.15 security, enhancement & bug fix update","vulnerabilityIds":["CVE-2025-12816","CVE-2025-13465","CVE-2025-15284","CVE-2025-66031","CVE-2025-68157","CVE-2025-68458","CVE-2025-69873","CVE-2026-4800","CVE-2026-22029","CVE-2026-25128","CVE-2026-25896","CVE-2026-26278","CVE-2026-26996","CVE-2026-27904","CVE-2026-27942","CVE-2026-29063","CVE-2026-33036","CVE-2026-33186","CVE-2026-33815","CVE-2026-33816","CVE-2026-34986","CVE-2026-48779"]},{"id":"RHSA-2026:11217","title":"Red Hat Security Advisory: RHACS 4.8.11 security and bug fix update","vulnerabilityIds":["CVE-2026-25679","CVE-2026-29063","CVE-2026-32286","CVE-2026-33186","CVE-2026-33815","CVE-2026-33816","CVE-2026-34986","CVE-2026-35469"]},{"id":"RHSA-2026:73987","title":"Red Hat Security Advisory: RHOAI 3.3.7 - Red Hat OpenShift AI","vulnerabilityIds":["CVE-2025-61726","CVE-2025-66471","CVE-2025-71408","CVE-2026-1525","CVE-2026-1526","CVE-2026-1528","CVE-2026-2229","CVE-2026-5422","CVE-2026-6321","CVE-2026-6734","CVE-2026-9697","CVE-2026-11816","CVE-2026-11822","CVE-2026-11824","CVE-2026-12151","CVE-2026-13149","CVE-2026-15154","CVE-2026-15378","CVE-2026-16221","CVE-2026-16745","CVE-2026-18951","CVE-2026-23490","CVE-2026-25681","CVE-2026-27136","CVE-2026-27489","CVE-2026-27893","CVE-2026-28356","CVE-2026-28500","CVE-2026-28684","CVE-2026-31230","CVE-2026-31958","CVE-2026-32274","CVE-2026-32286","CVE-2026-32597","CVE-2026-33186","CVE-2026-33231","CVE-2026-33245","CVE-2026-33811","CVE-2026-33814","CVE-2026-33815","CVE-2026-33816","CVE-2026-34445","CVE-2026-34986","CVE-2026-34993","CVE-2026-35397","CVE-2026-35536","CVE-2026-39821","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39835","CVE-2026-40110","CVE-2026-41242","CVE-2026-42215","CVE-2026-42294","CVE-2026-42296","CVE-2026-42297","CVE-2026-42338","CVE-2026-42502","CVE-2026-42508","CVE-2026-44240","CVE-2026-44431","CVE-2026-44432","CVE-2026-44727","CVE-2026-44843","CVE-2026-45736","CVE-2026-46595","CVE-2026-48526","CVE-2026-48586","CVE-2026-48710","CVE-2026-48746","CVE-2026-48779","CVE-2026-49855","CVE-2026-53550","CVE-2026-54058","CVE-2026-54283","CVE-2026-55969","CVE-2026-56853","CVE-2026-56858","CVE-2026-56859","CVE-2026-56860","CVE-2026-56862","CVE-2026-59197","CVE-2026-59199","CVE-2026-59200","CVE-2026-59204","CVE-2026-59205","CVE-2026-59869","CVE-2026-59873","CVE-2026-59874","CVE-2026-59884","CVE-2026-59885","CVE-2026-59886","CVE-2026-62384","CVE-2026-63310","CVE-2026-64834","CVE-2026-64835","CVE-2026-66036","CVE-2026-66037","CVE-2026-66038","CVE-2026-66040","CVE-2026-67322","CVE-2026-67323","CVE-2026-67325","CVE-2026-68770","CVE-2026-69152","CVE-2026-69192","CVE-2026-69243","CVE-2026-69244","CVE-2026-71281","CVE-2026-73089","CVE-2026-73415","CVE-2026-73417","CVE-2026-73627","CVE-2026-78682","CVE-2026-79674","CVE-2026-79675","CVE-2026-80205","CVE-2026-81722","CVE-2026-81724","CVE-2026-81727","CVE-2026-84375","CVE-2026-84445"]},{"id":"RHSA-2026:24503","title":"Red Hat Security Advisory: Multicluster Global Hub 1.7.1 security update","vulnerabilityIds":["CVE-2025-41118","CVE-2026-21728","CVE-2026-32281","CVE-2026-32282","CVE-2026-33813","CVE-2026-33815","CVE-2026-33816","CVE-2026-34040","CVE-2026-40293","CVE-2026-40890","CVE-2026-41602","CVE-2026-43869"]},{"id":"SUSE-SU-2026:22613-1","title":"Security update for cosign","vulnerabilityIds":["CVE-2026-25680","CVE-2026-25681","CVE-2026-27136","CVE-2026-33815","CVE-2026-39827","CVE-2026-39828","CVE-2026-39829","CVE-2026-39830","CVE-2026-39831","CVE-2026-39832","CVE-2026-39833","CVE-2026-39834","CVE-2026-39835","CVE-2026-42502","CVE-2026-42506","CVE-2026-42508","CVE-2026-46595","CVE-2026-46597","CVE-2026-46598"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-19707","identifiers":["EUVD-2026-19707","CVE-2026-33815","GHSA-xgrm-4fwx-7qm8"]},"retained":false,"historicalAffected":[]}],"coverage":[]}