CLEANSTART-2026-WN92749: pgx is a PostgreSQL driver and toolkit for Go

Q: Which software package is identified as affected?

The affected software is identified as cleanstart/keda. No affected or fixed version range is provided.

Q: Does the available information describe exploitation prerequisites or affected configurations?

No. The available information does not state attacker prerequisites, exposed interfaces, or whether default configurations are affected.

Q: Is a mitigation available if patching cannot be completed immediately?

No workaround or mitigation is provided in the available information. It also does not provide indicators for determining whether an installation has already been affected.

Published Nov 11, 2026

Updated

Security vulnerability affects the keda package. pgx is a PostgreSQL driver and toolkit for Go.

Affected Software

1 affected componentFixes available

cleanstart/keda<2.20.2-r5

2.20.2-r5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/keda to a version that resolves this vulnerability.
Fixed in 2.20.2-r5

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-41889

Frequently Asked Questions

Which software package is identified as affected?

The affected software is identified as cleanstart/keda. No affected or fixed version range is provided.

Does the available information describe exploitation prerequisites or affected configurations?

No. The available information does not state attacker prerequisites, exposed interfaces, or whether default configurations are affected.

Is a mitigation available if patching cannot be completed immediately?

No workaround or mitigation is provided in the available information. It also does not provide indicators for determining whether an installation has already been affected.

CLEANSTART-2026-WN92749: pgx is a PostgreSQL driver and toolkit for Go

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which software package is identified as affected?

Does the available information describe exploitation prerequisites or affected configurations?

Is a mitigation available if patching cannot be completed immediately?

Company

Resources

Contact

Frequently Asked Questions

Which software package is identified as affected?

Does the available information describe exploitation prerequisites or affected configurations?

Is a mitigation available if patching cannot be completed immediately?