CVE-2026-41889
LowAdvisory
Published 22 Apr 2026In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.3
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 308
- of 17,781 indexed, latest versions
- Container images
- 324
- deployed by those charts
- Fix available
- 1 of 3
- affected packages
pgx: SQL Injection via placeholder confusion with dollar quoted string literals
Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 324 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v5.0.4, v5.2.0, v5.3.0, v5.3.1+17 more | 5.9.2 | 186 |
| github.com/ | v4.6.0, v4.7.1, v4.8.1, v4.8.2-0.20200910143026-040df1ccef85+14 more | no fix listed | 139 |
| github.com/ | v3.1.1-0.20180608201956-39bbc98d99d7+incompatible, v3.2.0+incompatible, v3.3.0+incompatible, v3.6.0+incompatible+1 more | no fix listed | 16 |
- OSV records
- GHSA-j88v-2chj-qfwx
- Also known as
- GO-2026-5004
Charts affected
308 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| truefoundry-monitoringtruefoundryVerified publisher | 0.1.6 | 1 of 8See more | 4,526 |
| twitter-apptwitter-helm | 0.1.12 | 1 of 8See more | 6,132 |
| twenty-crmvictorlane | 0.0.1 | 1 of 3See more | 13,459 |
| gateway-control-planewallarmVerified publisher | 0.2.0 | 2 of 2See more | 1,455 |
| argo-eventswenerme | 2.4.27 | 1 of 1See more | 969 |
| wexa-studiowexa-studio | 1.2.0 | 3 of 15See more | 14,983 |
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,381 |
Container images carrying it
324 by charts deploying them
A fixed version is listed for 1 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | f1e7efe440da | github.com/ | no fix listed | 1 |
| ghcr.io/ | a982103d91d3 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 8bfed3d49a08 | github.com/ | no fix listed | 1 |
| ghcr.io/ | f5654f745d4c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5470b2ec3161 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 5706414241eb | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 5c9e99ff7167 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 03c1ddbda33b | github.com/ | no fix listed | 1 |
| ghcr.io/ | 24a0113d5fb0 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 6dfdbc9853bb | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 7db1a1bf3dae | github.com/ github.com/ | no fix listed 5.9.2 | 1 |
| ghcr.io/ | 46a71d75dfd3 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 015f5ba04bcb | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | e161eddc59a0 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 74426c1fe00f | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 6d4106724d56 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 97febecbe6cb | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | c4b1d3d0f052 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 02348a19aeae | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 112fc427d933 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 72dc058e478d | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 167fd532bd43 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 73a2ebae4413 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | f312f50ddc57 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 2fbce0601a3c | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 528f2174fa2f | github.com/ | no fix listed | 1 |
| ghcr.io/ | b3256cbc7b68 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 90097a08b87c | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 2fe6b69b20d7 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5bc5ca66d55a | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | d7f93d2182fe | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 14450f52a708 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 379e583a0a75 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2434560e8f0e | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | b880da90aa1a | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 77a36c035b4b | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | f0c6f7d7daa6 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 45bdeaf3fcd6 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | aab0c99d313f | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | ab41ffa78f69 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2dc54179b25a | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | fafb72e98f22 | github.com/ github.com/ | no fix listed 5.9.2 | 1 |
| ghcr.io/ | 625b140372fd | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 647e45284a80 | github.com/ github.com/ | no fix listed 5.9.2 | 1 |
| ghcr.io/ | 9f157fe035f1 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 05b05c56da94 | github.com/ | 5.9.2 | 1 |
| ghcr.io/ | 21715979aefa | github.com/ | no fix listed | 1 |
| public.ecr.aws/ | 62375abc3c56 | github.com/ | 5.9.2 | 1 |
| public.ecr.aws/ | 97065ced2942 | github.com/ | 5.9.2 | 1 |
| public.ecr.aws/ | 87cbd356af2e | github.com/ | no fix listed | 1 |