pg_cancel_backend()

One uncommitted transaction explains most Postgres connection exhaustion

A dev.to cheat sheet routes the incident through pg_stat_activity's state and xact_start columns before anything gets terminated, and its ready-made five-minute sweeper is stricter than its own advice about what counts as suspicious.