pg-native

3.9.1 · 30 Sep 2026MIT139k / weekRepository Homepage npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for pg-native. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	3.9.1	Safe from 3.0.1
	2.2.0	8 open advisories, worst high · last release Aug 2017, no longer updated

Your version

High
pg-native and libpq vulnerable to uncontrolled resource consumptionGHSA-j32j-2hxv-rqf7 · 18 Jun 2022
- 3.x3.0.0Fixed in 3.0.1
- 2.x and older0.0.1 – 2.2.0No fix, no longer updated · move to 3.0.1

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.