CVE-2020-13692
HighAdvisory
Published 10 Feb 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.7
- base score, highest
- EPSS
- 0.041
- 90th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 106
- of 17,781 indexed, latest versions
- Container images
- 22
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper Restriction of XML External Entity Reference
Carried by container images the latest versions of 106 of 17,781 indexed charts deploy, on 22 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| postgresqlmaven | 42.0.0, 42.1.4, 42.2.1, 42.2.2+7 more | 42.2.13 | 22 |
- OSV records
- GHSA-88cc-g835-76rp
- Also known as
- BIT-postgresql-jdbc-driver-2020-13692
Charts affected
106 by stars
Container images carrying it
22 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flyway/ | 22d97ceb0c47 | postgresql | 42.2.13 | 79 |
| apache/ | e8b7c4ddd069 | postgresql | 42.2.13 | 3 |
| supertokens/ | 18d34c781347 | postgresql | 42.2.13 | 3 |
| apachepulsar/ | b341ef76a852 | postgresql | 42.2.13 | 2 |
| quay.io/ | 68f9f38c8f30 | postgresql | 42.2.13 | 2 |
| atlassian/ | 37bc46cbec1a | postgresql | 42.2.13 | 1 |
| bivas/ | 05545994f806 | postgresql | 42.2.13 | 1 |
| folioci/ | 1b57d690d568 | postgresql | 42.2.13 | 1 |
| library/ | 0ae5169e3d0f | postgresql | 42.2.13 | 1 |
| library/ | a246bc64207e | postgresql | 42.2.13 | 1 |
| metabase/ | ffb2dccacefc | postgresql | 42.2.13 | 1 |
| openkm/ | 3bc465a7461b | postgresql | 42.2.13 | 1 |
| owasp/ | efc65e702ee1 | postgresql | 42.2.13 | 1 |
| rundeck/ | 4d64fe56f767 | postgresql | 42.2.13 | 1 |
| rundeck/ | b13e8059ad72 | postgresql | 42.2.13 | 1 |
| sdandey/ | bef0f599737b | postgresql | 42.2.13 | 1 |
| seataio/ | ee1ed55f4144 | postgresql | 42.2.13 | 1 |
| thelastpickle/ | 9c53996c457d | postgresql | 42.2.13 | 1 |
| ghcr.io/ | 00ce11c31087 | postgresql | 42.2.13 | 1 |
| ghcr.io/ | baa4fa9549dc | postgresql | 42.2.13 | 1 |
| quay.io/ | 3029dc0f1d38 | postgresql | 42.2.13 | 1 |
| quay.io/ | 98c26e1b8f70 | postgresql | 42.2.13 | 1 |