Security: Uncaught Exception Violation found by Snyk

[leslie-corbalt]

I have the following required packages in go.mod: github.com/jackc/pgx/v5 v5.6.0 github.com/jmoiron/sqlx v1.3.5

My code imports: "github.com/jmoiron/sqlx" "_ github.com/jackc/pgx/v5/stdlib"

Snyk found a vulnerability, Uncaught Exception in pgx/v4, introduced through github.com/jackc/[email protected].

[leslie-corbalt]

It was introduced on July 2, 2024:

[jackc]

I have no idea what Snyk is doing. But every time a Snyk issue has been raised before it has been a false positive.

[randecarlson]

I notice that the OP imports .../V5/stdlib yet the snyk report references V4/stdlib...