CVE-2022-1552

High

Advisory

Published 12 May 2022In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.160; 97th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 111; of 17,781 indexed, latest versions
Container images: 112; deployed by those charts
Fix available: 9 of 10; affected packages

Red Hat Security Advisory: postgresql security update

Carried by container images the latest versions of 111 of 17,781 indexed charts deploy, on 112 images.

Affected package	Affected versions	Fixed in	Images
postgresqlapk	13.1-r2, 13.2-r0, 13.3-r0, 13.4-r0+2 more	13.7-r0	19
postgresql-13deb	13.3-1, 13.4-0+deb11u1, 13.5-0+deb11u1, 13.6-1.pgdg110+1	13.7-0+deb11u1	16
postgresql-12deb	12.7-0ubuntu0.20.04.1, 12.8-0ubuntu0.20.04.1, 12.9-0ubuntu0.20.04.1	12.11-0ubuntu0.20.04.1	12
postgresql14apk	14.1-r5, 14.2-r0	14.3-r0	11
postgresql-10deb	10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 more	10.21-0ubuntu0.18.04.1	6
postgresql-9.5deb	9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.04	9.5.25-0ubuntu0.16.04.1+esm2	3
postgresqlbitnami	11.8.0-10, 11.12.0-7	10.21.0	2
postgresqlrpm	9.2.24-1.el7_5	0:9.2.24-8.el7_9	2
postgresql-9.3deb	9.3.22-0ubuntu0.14.04	no fix listed	1
postgresql-11deb	11.4-1, 11.5-1+deb10u1, 11.7-0+deb10u1, 11.9-0+deb10u1+5 more	11.16-0+deb10u1	40

OSV records: ALPINE-CVE-2022-1552 BIT-postgresql-2022-1552 DEBIAN-CVE-2022-1552 RHSA-2022:5162 UBUNTU-CVE-2022-1552 DSA-5135-1
Also known as: DSA-5136-1, USN-5440-1, USN-5676-1

Charts affected

111 by stars

Chart

Latest

Affected images

Radar Score

openldapschoolguys-helmcharts

0.1.3

1 of 1 See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	postgresql-11@11.10-0+deb10u1	11.16-0+deb10u1

Open the chart page →

3,313

ldap-instance-configsciencebox

0.0.1

1 of 1 See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	postgresql-11@11.10-0+deb10u1	11.16-0+deb10u1

Open the chart page →

3,313

weblateslamdev

0.0.11

1 of 2 See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
weblate/weblate :3.11.3-1	82848df56ecd	postgresql-11@11.7-0+deb10u1	11.16-0+deb10u1

Open the chart page →

8,694

vehicle-dashboardtest-vehi-dash

0.1.0

2 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
samajh/alprbackend :latest	ea742b4372ad	postgresql-11@11.14-0+deb10u1	11.16-0+deb10u1
samajh/alprfrontend :latest	05ef4fddbb75	postgresql-11@11.14-0+deb10u1	11.16-0+deb10u1

Open the chart page →

20,270

openldap-havcnngr

1.0.0

1 of 3 See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	postgresql-11@11.10-0+deb10u1	11.16-0+deb10u1

Open the chart page →

5,514

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	postgresql-11@11.12-0+deb10u1	11.16-0+deb10u1

Open the chart page →

2,670

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	postgresql14@14.2-r0	14.3-r0

Open the chart page →

7,552

temporalwenerme

0.15.1

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
temporalio/admin-tools :1.15.1	35034611d981	postgresql@13.5-r0	13.7-r0

Open the chart page →

22,665

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	postgresql@13.4-r0	13.7-r0

Open the chart page →

2,643

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	postgresql@13.5-r0	13.7-r0

Open the chart page →

2,534

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2022-1552.

Container image	Digest	Package	Fixed in
edoburu/pgbouncer :1.12.0	abc0a4123a81	postgresql@13.4-r0	13.7-r0

Open the chart page →

3,697

Container images carrying it

112 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	postgresql-12@12.7-0ubuntu0.20.04.1	12.11-0ubuntu0.20.04.1	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	postgresql-12@12.7-0ubuntu0.20.04.1	12.11-0ubuntu0.20.04.1	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	postgresql-12@12.7-0ubuntu0.20.04.1	12.11-0ubuntu0.20.04.1	1
ghcr.io/leoquote/tinyproxy_exporter :master	6b4103d88dbb	postgresql-13@13.3-1	13.7-0+deb11u1	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	postgresql-13@13.5-0+deb11u1	13.7-0+deb11u1	1
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	postgresql@13.5-r0	13.7-r0	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	postgresql-11@11.13-0+deb10u1	11.16-0+deb10u1	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	postgresql@13.4-r0	13.7-r0	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	postgresql@13.4-r0	13.7-r0	1
registry.gitlab.com/open-forms/design-catalogue :latest	f21f19346b29	postgresql-11@11.9-0+deb10u1	11.16-0+deb10u1	1
registry.gitlab.com/open-forms/forms-catalogue :latest	4eaf9c911f33	postgresql-13@13.3-1	13.7-0+deb11u1	1
registry.gitlab.com/open-forms/request-registry :latest	0886cbbc5f95	postgresql-13@13.3-1	13.7-0+deb11u1	1