StackRadar

CVE-2023-5868

Medium

Advisory

Published 15 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.028
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
88
of 17,781 indexed, latest versions
Container images
88
deployed by those charts
Fix available
8 of 9
affected packages

Postgresql: memory disclosure in aggregate function calls

Carried by container images the latest versions of 88 of 17,781 indexed charts deploy, on 88 images.

Affected packageAffected versionsFixed inImages
postgresql14apk14.1-r5, 14.2-r0, 14.4-r0, 14.5-r0+2 more14.10-r020
postgresql-15deb15.3-0+deb12u1, 15.3-1.pgdg120+1, 15.4-2.pgdg120+115.5-0+deb12u119
postgresql-12deb12.7-0ubuntu0.20.04.1, 12.8-0ubuntu0.20.04.1, 12.9-0ubuntu0.20.04.1, 12.11-0ubuntu0.20.04.1+1 more12.17-0ubuntu0.20.04.116
postgresqlbitnami11.8.0-10, 11.12.0-7, 14.4.0-0, 14.4.0-11+5 more11.22.09
postgresql-14deb14.3-1.pgdg22.04+1, 14.4-0ubuntu0.22.04.1, 14.5-0ubuntu0.22.04.1, 14.6-1.pgdg22.04+1+1 more14.10-0ubuntu0.22.04.18
postgresql15apk15.1-r0, 15.2-r0, 15.3-r0, 15.4-r015.5-r08
postgresql-10deb10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 more10.23-0ubuntu0.18.04.2+esm16
PostgreSQLbitnami15.3.0, 15.4.0, 15.5.0-42, 16.0.011.22.05
postgresql-9.3deb9.3.22-0ubuntu0.14.04no fix listed1
OSV records
ALPINE-CVE-2023-5868BIT-postgresql-2023-5868DEBIAN-CVE-2023-5868UBUNTU-CVE-2023-5868
Also known as
USN-6538-1, USN-6538-2

Charts affected

88 by stars
ChartLatestAffected imagesRadar Score
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

24,995
privatebinhomelabcihelmchartstestVerified publisher2.1.71 of 1See more

privatebin homelabcihelmchartstest 2.1.7

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
privatebin/pdo:1.3.500466418121c
postgresql14@14.2-r0
14.10-r0

Open the chart page →

1,159
healthchecksimprowisedVerified publisher1.1.11 of 2See more

healthchecks improwised 1.1.1

1 of the 2 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
linuxserver/healthchecks:2.7.2023033194696dab3c50
postgresql15@15.2-r0
15.5-r0

Open the chart page →

2,628
pgpoolimprowisedVerified publisher1.0.11 of 1See more

pgpool improwised 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
pgpool/pgpool:latest3782cbf9bb0c
postgresql15@15.2-r0
15.5-r0

Open the chart page →

948
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

16,600
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
postgresql14@14.5-r0
14.10-r0

Open the chart page →

2,320
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

70,530
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
postgresql-12@12.9-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1

Open the chart page →

17,779
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
postgresql15@15.4-r0
15.5-r0

Open the chart page →

5,940
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
postgresql14@14.2-r0
14.10-r0

Open the chart page →

7,327
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
postgresql-15@15.4-2.pgdg120+1
15.5-0+deb12u1

Open the chart page →

5,866
MINTmint8.0.23 of 15See more

MINT mint 8.0.2

3 of the 15 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
postgresql14@14.8-r0
14.10-r0
mintproject/data-catalog-db:9be70359feabe03ed55bfdbf92c20a7e43ab928b9bf26fedd848
postgresql14@14.5-r0
14.10-r0
postgis/postgis:10-3.2-alpine7e3e68a36d53
postgresql14@14.5-r0
14.10-r0

Open the chart page →

43,341
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
postgresql-14@14.5-0ubuntu0.22.04.1
14.10-0ubuntu0.22.04.1

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
postgresql-14@14.5-0ubuntu0.22.04.1
14.10-0ubuntu0.22.04.1

Open the chart page →

12,791
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

12,813
betydbncsaVerified publisher0.6.12 of 4See more

betydb ncsa 0.6.1

2 of the 4 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:11.8.0c3f10b41989f
postgresql@11.8.0-10
11.22.0
pecan/db:latest9a1cdc3a9ccb
postgresql14@14.1-r5
14.10-r0

Open the chart page →

9,542
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
pecan/db:latest9a1cdc3a9ccb
postgresql14@14.1-r5
14.10-r0

Open the chart page →

14,154
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

109,294
nominatimnominatim-chart1.3.02 of 3See more

nominatim nominatim-chart 1.3.0

2 of the 3 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
postgresql-12@12.12-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
robjuz/postgresql-nominatim:latest805c7bab76df
postgresql@11.12.0-7
11.22.0

Open the chart page →

22,658
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

15,187
apicurioone-acre-fundVerified publisher2.3.01 of 5See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
postgresql@14.4.0-11
11.22.0

Open the chart page →

18,667
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
postgresql-10@10.12-0ubuntu0.18.04.1
10.23-0ubuntu0.18.04.2+esm1

Open the chart page →

15,702
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
postgresql-10@10.12-0ubuntu0.18.04.1
10.23-0ubuntu0.18.04.2+esm1

Open the chart page →

41,044
postgresql-backupphntom0.1.91 of 1See more

postgresql-backup phntom 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
phntom/postgresql-backup-s3:1.0.2249b6488f618b
postgresql15@15.1-r0
15.5-r0

Open the chart page →

2,556
postgres-controllerpostgres-controller1.3.61 of 1See more

postgres-controller postgres-controller 1.3.6

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
evgkrsk/postgres-controller:0.6.237f0e1f435c3
postgresql15@15.1-r0
15.5-r0

Open the chart page →

1,782
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

14,537
rdfoxrdfox-helm-chart0.1.22 of 2See more

rdfox rdfox-helm-chart 0.1.2

2 of the 2 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
oxfordsemantic/rdfox:5.6db17910eb855
postgresql-12@12.9-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
oxfordsemantic/rdfox-init:5.6baf570ff968d
postgresql-12@12.9-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1

Open the chart page →

12,802
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

16,620
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
postgresql@14.4.0-11
11.22.0

Open the chart page →

11,636
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
postgresql-12@12.11-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1

Open the chart page →

30,687
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

20,223
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
postgresql-12@12.12-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1

Open the chart page →

12,655
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.0836af062af30
postgresql15@15.3-r0
15.5-r0

Open the chart page →

21,005
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1

Open the chart page →

14,358
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-5868.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
postgresql14@14.2-r0
14.10-r0

Open the chart page →

7,552

Container images carrying it

88 by charts deploying them

A fixed version is listed for 8 of the 9 affected packages.

Container imageDigestPackageFixed inUsed by
robjuz/postgresql-nominatim:latest805c7bab76df
postgresql@11.12.0-7
11.22.0
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
postgresql-12@12.11-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
statcan/ckan:2.93921305425b8
postgresql-12@12.7-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
temporalio/admin-tools:1.22.4258958fe2ff2
postgresql15@15.4-r0
15.5-r0
1
temporalio/admin-tools:1.22.0836af062af30
postgresql15@15.3-r0
15.5-r0
1
thongngo3301/stakefish:latesta341af5976e3
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
postgresql-14@14.7-1.pgdg22.04+1
14.10-0ubuntu0.22.04.1
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
postgresql-14@14.6-1.pgdg22.04+1
14.10-0ubuntu0.22.04.1
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
postgresql-14@14.3-1.pgdg22.04+1
14.10-0ubuntu0.22.04.1
1
vlebediantsev/notes-admin-front:latest007c6670ff48
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
vlebediantsev/notes-project-front:latest945675fd2636
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
volkerraschek/postfixadmin-fetchmail:0.3.0e4cf12c6249d
postgresql15@15.1-r0
15.5-r0
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
postgresql-12@12.8-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
postgresql-14@14.5-0ubuntu0.22.04.1
14.10-0ubuntu0.22.04.1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
postgresql-12@12.8-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
postgresql-14@14.5-0ubuntu0.22.04.1
14.10-0ubuntu0.22.04.1
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
postgresql@14.4.0-0
11.22.0
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
postgresql14@14.2-r0
14.10-r0
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
postgresql14@14.2-r0
14.10-r0
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
postgresql14@14.2-r0
14.10-r0
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
postgresql14@14.2-r0
14.10-r0
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
postgresql14@14.2-r0
14.10-r0
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
postgresql14@14.2-r0
14.10-r0
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
postgresql14@14.2-r0
14.10-r0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
postgresql14@14.5-r0
14.10-r0
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
postgresql-12@12.7-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
postgresql-12@12.7-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
postgresql-12@12.7-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
postgresql-12@12.7-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
postgresql-12@12.7-0ubuntu0.20.04.1
12.17-0ubuntu0.20.04.1
1
ghcr.io/mjohnson9/docker-pleroma:v0.1.44f08e2823756
postgresql14@14.5-r0
14.10-r0
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
postgresql-15@15.3-0+deb12u1
15.5-0+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.