CVE-2021-32028

Medium

Advisory

Published 13 May 2021In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 60; of 17,781 indexed, latest versions
Container images: 59; deployed by those charts
Fix available: 3 of 5; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 59 images.

Affected package	Affected versions	Fixed in	Images
postgresqlapk	11.9-r0, 12.1-r0, 12.2-r0, 12.3-r2+5 more	11.12-r0, 12.7-r0, 13.3-r0	47
postgresql-10deb	10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 more	10.17-0ubuntu0.18.04.1	6
postgresql-9.5deb	9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.04	no fix listed	3
postgresqlbitnami	11.8.0-10, 11.12.0-7	9.6.22	2
postgresql-9.3deb	9.3.22-0ubuntu0.14.04	no fix listed	1

OSV records: ALPINE-CVE-2021-32028 BIT-postgresql-2021-32028 UBUNTU-CVE-2021-32028
Also known as: USN-4972-1

Charts affected

60 by stars

Chart

Latest

Affected images

Radar Score

panproto-application-nldesign

0.1.0

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	postgresql@12.5-r0	12.7-r0

Open the chart page →

8,725

proto-component-commongroundproto-component-commonground

1.0.0

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	postgresql@12.5-r0	12.7-r0

Open the chart page →

7,510

review-componentreview-component

1.0.0

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	postgresql@12.5-r0	12.7-r0

Open the chart page →

7,491

pgwebslamdev

0.0.8

1 of 1 See more

pgweb slamdev 0.0.8

1 of the 1 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
sosedoff/pgweb :0.11.7	85e0132e0cce	postgresql@11.9-r0	11.12-r0

Open the chart page →

600

taalhuizen-servicetaalhuizen-service

1.0.0

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	postgresql@12.5-r0	12.7-r0

Open the chart page →

7,480

trouw-servicetrouw-service

1.0.0

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	postgresql@12.5-r0	12.7-r0

Open the chart page →

7,510

verhuis-serviceverhuis-service

1.0.0

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	postgresql@12.5-r0	12.7-r0

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1.0.0

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	postgresql@12.5-r0	12.7-r0

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1.1.0

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	postgresql@12.5-r0	12.7-r0

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1.1.0

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-32028.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	postgresql@12.5-r0	12.7-r0

Open the chart page →

7,429

Container images carrying it

59 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	postgresql@12.5-r0	12.7-r0	1
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	postgresql@12.5-r0	12.7-r0	1
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	postgresql@12.5-r0	12.7-r0	1
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	postgresql@12.5-r0	12.7-r0	1
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	postgresql@12.5-r0	12.7-r0	1
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	postgresql@12.5-r0	12.7-r0	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	postgresql@12.5-r0	12.7-r0	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	postgresql@12.5-r0	12.7-r0	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	postgresql@12.5-r0	12.7-r0	1