StackRadar

CVE-2021-32028

Medium

Advisory

Published 13 May 2021In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 17,781 indexed, latest versions
Container images
59
deployed by those charts
Fix available
3 of 5
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 59 images.

Affected packageAffected versionsFixed inImages
postgresqlapk11.9-r0, 12.1-r0, 12.2-r0, 12.3-r2+5 more11.12-r0, 12.7-r0, 13.3-r047
postgresql-10deb10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 more10.17-0ubuntu0.18.04.16
postgresql-9.5deb9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.04no fix listed3
postgresqlbitnami11.8.0-10, 11.12.0-79.6.222
postgresql-9.3deb9.3.22-0ubuntu0.14.04no fix listed1
OSV records
ALPINE-CVE-2021-32028BIT-postgresql-2021-32028UBUNTU-CVE-2021-32028
Also known as
USN-4972-1

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
postgresql@12.5-r0
12.7-r0

Open the chart page →

8,725
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
postgresql@12.5-r0
12.7-r0

Open the chart page →

7,510
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
postgresql@12.5-r0
12.7-r0

Open the chart page →

7,491
pgwebslamdev0.0.81 of 1See more

pgweb slamdev 0.0.8

1 of the 1 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
sosedoff/pgweb:0.11.785e0132e0cce
postgresql@11.9-r0
11.12-r0

Open the chart page →

600
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
postgresql@12.5-r0
12.7-r0

Open the chart page →

7,480
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
postgresql@12.5-r0
12.7-r0

Open the chart page →

7,510
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
postgresql@12.5-r0
12.7-r0

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
postgresql@12.5-r0
12.7-r0

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
postgresql@12.5-r0
12.7-r0

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2021-32028.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
postgresql@12.5-r0
12.7-r0

Open the chart page →

7,429

Container images carrying it

59 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
freeradius/freeradius-server:3.0.2121c8bfa904d8
postgresql-10@10.12-0ubuntu0.18.04.1
10.17-0ubuntu0.18.04.1
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
postgresql-9.5@9.5.14-0ubuntu0.16.04
no fix listed
2
bitnamilegacy/postgresql:11.8.0c3f10b41989f
postgresql@11.8.0-10
9.6.22
1
conduction/agendaservice-php:latest9cfeeb6c7c20
postgresql@12.5-r0
12.7-r0
1
conduction/balance-registration-php:devc36094a41369
postgresql@12.5-r0
12.7-r0
1
conduction/betaalservice-php:latestece1ab544c57
postgresql@12.5-r0
12.7-r0
1
conduction/cgrc-php:dev25415534d245
postgresql@12.2-r0
12.7-r0
1
conduction/checkin-component-php:dev3423845692c1
postgresql@12.5-r0
12.7-r0
1
conduction/conduction-ui-php:dev2744565516e8
postgresql@12.5-r0
12.7-r0
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
postgresql@12.5-r0
12.7-r0
1
conduction/docparser-php:devb6f95c8ead7d
postgresql@12.5-r0
12.7-r0
1
conduction/kvk-php:dev8f177f9f8a7b
postgresql@12.4-r0
12.7-r0
1
conduction/pan-php:dev24f03c57568f
postgresql@12.5-r0
12.7-r0
1
dpage/pgadmin4:4.22b1f00b8163cf
postgresql@12.2-r0
12.7-r0
1
galaxy/galaxy-stable:v18.018e577a626dfd
postgresql-9.3@9.3.22-0ubuntu0.14.04
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
postgresql-10@10.14-0ubuntu0.18.04.1
10.17-0ubuntu0.18.04.1
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
postgresql@12.3-r2
12.7-r0
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
postgresql-10@10.15-0ubuntu0.18.04.1
10.17-0ubuntu0.18.04.1
1
instrumentisto/coturn:4.56c25f154177c
postgresql@12.5-r0
12.7-r0
1
library/adminer:4.7143ec8cc2f3a
postgresql@13.1-r2
13.3-r0
1
library/adminer:4.7.5-standalonef42d935fec5a
postgresql@12.1-r0
12.7-r0
1
logiqai/toolbox:2.0.155a574ec5b64
postgresql@12.2-r0
12.7-r0
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
postgresql@12.4-r0
12.7-r0
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
postgresql-9.5@9.5.14-0ubuntu0.16.04
no fix listed
1
opendatacube/pipelines:wofs-1.225d810e8504b8
postgresql-10@10.6-0ubuntu0.18.04.1
10.17-0ubuntu0.18.04.1
1
opendatacube/restcube:latest91870111837c
postgresql-10@10.10-0ubuntu0.18.04.1
10.17-0ubuntu0.18.04.1
1
opendatacube/wms:latest1b90cdf68831
postgresql-10@10.10-0ubuntu0.18.04.1
10.17-0ubuntu0.18.04.1
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
postgresql@13.2-r0
13.3-r0
1
robjuz/postgresql-nominatim:latest805c7bab76df
postgresql@11.12.0-7
9.6.22
1
sosedoff/pgweb:0.11.785e0132e0cce
postgresql@11.9-r0
11.12-r0
1
tpdock/freeradius:2.2.93da600c95a49
postgresql-9.5@9.5.10-0ubuntu0.16.04
no fix listed
1
wallabag/wallabag:2.4.25e4c26a7fb4a
postgresql@12.6-r0
12.7-r0
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
postgresql@12.5-r0
12.7-r0
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
postgresql@12.5-r0
12.7-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.