CVE-2020-25695

High

Advisory

Published 13 Nov 2020In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.464; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 25; of 17,781 indexed, latest versions
Container images: 23; deployed by those charts
Fix available: 4 of 5; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 23 images.

Affected package	Affected versions	Fixed in	Images
postgresqlapk	11.2-r0, 11.3-r0, 11.4-r0, 11.7-r0+5 more	11.10-r0, 12.5-r0	13
postgresql-10deb	10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1	5
postgresql-9.5deb	9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.04	9.5.24-0ubuntu0.16.04.1	3
postgresqlbitnami	11.8.0-10	9.5.24	1
postgresql-9.3deb	9.3.22-0ubuntu0.14.04	no fix listed	1

OSV records: ALPINE-CVE-2020-25695 BIT-postgresql-2020-25695 UBUNTU-CVE-2020-25695
Also known as: USN-4633-1

Charts affected

25 by stars

Chart

Latest

Affected images

Radar Score

netris-controllernetrisai

2.8.2

1 of 14 See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	postgresql@12.3-r2	12.5-r0

Open the chart page →

30,326

pgadmin4folio-org

1.2.30

1 of 1 See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :4.22	b1f00b8163cf	postgresql@12.2-r0	12.5-r0

Open the chart page →

2,034

powerdnsadminhalkeye

0.3.1

1 of 1 See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :0.2.3	099371dd9ba6	postgresql@12.4-r0	12.5-r0

Open the chart page →

3,345

galaxy-stablecloudve

2.0.0

1 of 5 See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
galaxy/galaxy-stable :v18.01	8e577a626dfd	postgresql-9.3@9.3.22-0ubuntu0.14.04	no fix listed

Open the chart page →

70,895

pulsarcnieg

1.0.8

1 of 2 See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	postgresql@11.7-r0	11.10-r0

Open the chart page →

16,860

cgrccommongroundregistratiecomponent

0.1.0

1 of 3 See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
conduction/cgrc-php :dev	25415534d245	postgresql@12.2-r0	12.5-r0

Open the chart page →

7,572

datacubedatacube-charts

0.18.2

1 of 1 See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
opendatacube/wms :latest	1b90cdf68831	postgresql-10@10.10-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1

Open the chart page →

27,728

datacube-datadatacube-charts

0.2.6

1 of 1 See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	postgresql-10@10.14-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1

Open the chart page →

18,863

datacube-processingdatacube-charts

0.1.1

1 of 2 See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
opendatacube/pipelines :wofs-1.22	5d810e8504b8	postgresql-10@10.6-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1

Open the chart page →

22,405

restcubedatacube-charts

0.2.9

1 of 1 See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
opendatacube/restcube :latest	91870111837c	postgresql-10@10.10-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1

Open the chart page →

24,335

xbackbonegeek-cookbook

5.4.2

1 of 1 See more

xbackbone geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
pe46dro/xbackbone-docker :3.3.3	09dfe3aa10f6	postgresql@11.7-r0	11.10-r0

Open the chart page →

1,655

pgadminhalkeye

1.0.0

1 of 1 See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
chorss/docker-pgadmin4 :4.11	5c549cacb8ab	postgresql@11.4-r0	11.10-r0

Open the chart page →

2,555

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	postgresql@12.4-r0	12.5-r0

Open the chart page →

8,534

apica-ascentlogiqai

2.0.4

1 of 19 See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
logiqai/toolbox :2.0.1	55a574ec5b64	postgresql@12.2-r0	12.5-r0

Open the chart page →

23,613

pulsarv2milvus-helm

2.7.8

1 of 4 See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	postgresql@11.7-r0	11.10-r0

Open the chart page →

15,855

adminermogaal

0.2.1

1 of 1 See more

adminer mogaal 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
library/adminer :4.7.5-standalone	f42d935fec5a	postgresql@12.1-r0	12.5-r0

Open the chart page →

1,572

betydbncsa

0.6.1

1 of 4 See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :11.8.0	c3f10b41989f	postgresql@11.8.0-10	9.5.24

Open the chart page →

9,542

comacopencord

1.0.0

2 of 9 See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	postgresql-9.5@9.5.14-0ubuntu0.16.04	9.5.24-0ubuntu0.16.04.1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	postgresql-9.5@9.5.14-0ubuntu0.16.04	9.5.24-0ubuntu0.16.04.1

Open the chart page →

88,546

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	postgresql-9.5@9.5.14-0ubuntu0.16.04	9.5.24-0ubuntu0.16.04.1

Open the chart page →

26,211

freeradiusopencord

1.0.4

1 of 1 See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	postgresql-10@10.12-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1

Open the chart page →

15,702

sebaopencord

1.0.0

1 of 17 See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
tpdock/freeradius :2.2.9	3da600c95a49	postgresql-9.5@9.5.10-0ubuntu0.16.04	9.5.24-0ubuntu0.16.04.1

Open the chart page →

93,855

voltha-infraopencord

2.14.0

1 of 10 See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	postgresql-10@10.12-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1

Open the chart page →

41,044

pact-brokerqamatic

0.1.0

1 of 2 See more

pact-broker qamatic 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.32.0-2	062d6c710099	postgresql@11.3-r0	11.10-r0

Open the chart page →

3,533

pgwebslamdev

0.0.8

1 of 1 See more

pgweb slamdev 0.0.8

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
sosedoff/pgweb :0.11.7	85e0132e0cce	postgresql@11.9-r0	11.10-r0

Open the chart page →

600

pgadminstakater

0.1.14

1 of 1 See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2020-25695.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :4.5	a5a656e1d5fd	postgresql@11.2-r0	11.10-r0

Open the chart page →

2,060

Container images carrying it

23 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
apachepulsar/pulsar-manager :v0.1.0	b341ef76a852	postgresql@11.7-r0	11.10-r0	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	postgresql-10@10.12-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	postgresql-9.5@9.5.14-0ubuntu0.16.04	9.5.24-0ubuntu0.16.04.1	2
bitnamilegacy/postgresql :11.8.0	c3f10b41989f	postgresql@11.8.0-10	9.5.24	1
chorss/docker-pgadmin4 :4.11	5c549cacb8ab	postgresql@11.4-r0	11.10-r0	1
conduction/cgrc-php :dev	25415534d245	postgresql@12.2-r0	12.5-r0	1
conduction/kvk-php :dev	8f177f9f8a7b	postgresql@12.4-r0	12.5-r0	1
dpage/pgadmin4 :4.5	a5a656e1d5fd	postgresql@11.2-r0	11.10-r0	1
dpage/pgadmin4 :4.22	b1f00b8163cf	postgresql@12.2-r0	12.5-r0	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	postgresql-9.3@9.3.22-0ubuntu0.14.04	no fix listed	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	postgresql-10@10.14-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	postgresql@12.3-r2	12.5-r0	1
library/adminer :4.7.5-standalone	f42d935fec5a	postgresql@12.1-r0	12.5-r0	1
logiqai/toolbox :2.0.1	55a574ec5b64	postgresql@12.2-r0	12.5-r0	1
ngoduykhanh/powerdns-admin :0.2.3	099371dd9ba6	postgresql@12.4-r0	12.5-r0	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	postgresql-9.5@9.5.14-0ubuntu0.16.04	9.5.24-0ubuntu0.16.04.1	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	postgresql-10@10.6-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1	1
opendatacube/restcube :latest	91870111837c	postgresql-10@10.10-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1	1
opendatacube/wms :latest	1b90cdf68831	postgresql-10@10.10-0ubuntu0.18.04.1	10.15-0ubuntu0.18.04.1	1
pactfoundation/pact-broker :2.32.0-2	062d6c710099	postgresql@11.3-r0	11.10-r0	1
pe46dro/xbackbone-docker :3.3.3	09dfe3aa10f6	postgresql@11.7-r0	11.10-r0	1
sosedoff/pgweb :0.11.7	85e0132e0cce	postgresql@11.9-r0	11.10-r0	1
tpdock/freeradius :2.2.9	3da600c95a49	postgresql-9.5@9.5.10-0ubuntu0.16.04	9.5.24-0ubuntu0.16.04.1	1