{"action":"Upgrade github.com/jackc/pgx/v5 to 5.5.2 or later.","affected":[{"fixed":"5.5.2","introduced":"0"}],"component":"github.com/jackc/pgx/v5","cve_ids":[],"ecosystem":"Go","exploited":false,"fixed_versions":["5.5.2"],"ghsa_id":"GHSA-fqpg-rq76-99pq","id":"tcs_01M5KF9PV7FPKRYKH41SP47ZAB","modified_at":"2026-03-19T18:46:54.238511Z","published_at":"2024-07-05T20:08:26Z","references":["https://osv.dev/vulnerability/GHSA-fqpg-rq76-99pq","https://github.com/jackc/pgx/commit/dfd198003a03dbb96e4607b0d3a0bb9a7398ccb7","https://github.com/jackc/pgx"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-fqpg-rq76-99pq","url":"https://osv.dev/vulnerability/GHSA-fqpg-rq76-99pq"}],"summary":"Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx"}