CVE-2022-21724
HighAdvisory
Published 2 Feb 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.0
- base score, highest
- EPSS
- 0.030
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 141
- of 17,781 indexed, latest versions
- Container images
- 71
- deployed by those charts
- Fix available
- 1 of 1
- affected package
pgjdbc Does Not Check Class Instantiation when providing Plugin Classes
Carried by container images the latest versions of 141 of 17,781 indexed charts deploy, on 71 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| postgresqlmaven | 9.4.1208.jre7, 9.4.1209.jre7, 9.4.1211, 42.0.0+20 more | 42.2.25, 42.3.2 | 71 |
- OSV records
- GHSA-v7wg-cpwc-24m4
- Also known as
- BIT-postgresql-jdbc-driver-2022-21724
Charts affected
141 by stars
Container images carrying it
71 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flyway/ | 22d97ceb0c47 | postgresql | 42.2.25 | 79 |
| bde2020/ | 620267768985 | postgresql | 42.2.25 | 4 |
| apache/ | e8b7c4ddd069 | postgresql | 42.2.25 | 3 |
| supertokens/ | 18d34c781347 | postgresql | 42.2.25 | 3 |
| apachepulsar/ | b341ef76a852 | postgresql | 42.2.25 | 2 |
| geoservercloud/ | 99540eef78ad | postgresql | 42.2.25 | 2 |
| geoservercloud/ | 5c254c53a357 | postgresql | 42.2.25 | 2 |
| geoservercloud/ | c687b1cbc891 | postgresql | 42.2.25 | 2 |
| geoservercloud/ | 5288f320cf36 | postgresql | 42.2.25 | 2 |
| geoservercloud/ | a30a60ac6cd0 | postgresql | 42.2.25 | 2 |
| gradiant/ | aae4f8a21f8b | postgresql | 42.2.25 | 2 |
| scorpiobroker/ | 01e11d800459 | postgresql | 42.3.2 | 2 |
| scorpiobroker/ | 5073ceef2fa0 | postgresql | 42.3.2 | 2 |
| scorpiobroker/ | a2cfcf0947fd | postgresql | 42.3.2 | 2 |
| scorpiobroker/ | b742a53b2803 | postgresql | 42.3.2 | 2 |
| scorpiobroker/ | b7fe27a06ff5 | postgresql | 42.3.2 | 2 |
| scorpiobroker/ | e08036670d66 | postgresql | 42.3.2 | 2 |
| scorpiobroker/ | f02e8a429a08 | postgresql | 42.3.2 | 2 |
| quay.io/ | 68f9f38c8f30 | postgresql | 42.2.25 | 2 |
| airsonicadvanced/ | f7cbafac2806 | postgresql | 42.2.25 | 1 |
| apacheignite/ | d7deab68b8fa | postgresql | 42.2.25 | 1 |
| apache/ | 76c176e8a0e4 | postgresql | 42.2.25 | 1 |
| apache/ | b4ec8c18d079 | postgresql | 42.2.25 | 1 |
| apicurio/ | 44eeddd3562c | postgresql | 42.2.25 | 1 |
| apicurio/ | 302d202ed149 | postgresql | 42.2.25 | 1 |
| apicurio/ | 27a91978a388 | postgresql | 42.2.25 | 1 |
| atlassian/ | 3b9222ab32ef | postgresql | 42.2.25 | 1 |
| atlassian/ | 37bc46cbec1a | postgresql | 42.2.25 | 1 |
| beastob/ | 99a49885ab33 | postgresql | 42.2.25 | 1 |
| bivas/ | 05545994f806 | postgresql | 42.2.25 | 1 |
| chandanteekinavar/ | 0cf52bf5ee9a | postgresql | 42.2.25 | 1 |
| eikek0/ | 661ff3ef42cd | postgresql | 42.2.25 | 1 |
| farberg/ | 4b4a22487394 | postgresql | 42.2.25 | 1 |
| folioci/ | 1b57d690d568 | postgresql | 42.2.25 | 1 |
| geonetwork/ | 20c9bb761f67 | postgresql | 42.2.25 | 1 |
| geoservercloud/ | 5dc0c93a1710 | postgresql | 42.2.25 | 1 |
| geoservercloud/ | 47ae1bdb4bcc | postgresql | 42.2.25 | 1 |
| geoservercloud/ | 28c3e5a8c5a3 | postgresql | 42.2.25 | 1 |
| geoservercloud/ | 8c70ee06d5ab | postgresql | 42.2.25 | 1 |
| geoservercloud/ | 42775ba6a4da | postgresql | 42.2.25 | 1 |
| library/ | 0ae5169e3d0f | postgresql | 42.2.25 | 1 |
| library/ | 7e43ff493a47 | postgresql | 42.2.25 | 1 |
| library/ | 88cd63154d4b | postgresql | 42.2.25 | 1 |
| library/ | a246bc64207e | postgresql | 42.2.25 | 1 |
| library/ | a9bc5a3a1fc3 | postgresql | 42.2.25 | 1 |
| lsmaster/ | 061eb5fbfa00 | postgresql | 42.2.25 | 1 |
| metabase/ | ffb2dccacefc | postgresql | 42.2.25 | 1 |
| openkm/ | 3bc465a7461b | postgresql | 42.2.25 | 1 |
| owasp/ | efc65e702ee1 | postgresql | 42.2.25 | 1 |
| redestroyder/ | 740364a619fd | postgresql | 42.3.2 | 1 |