StackRadar

CVE-2024-0985

High

Advisory

Published 8 Feb 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.0
base score, highest
EPSS
0.018
77th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
222
of 17,781 indexed, latest versions
Container images
223
deployed by those charts
Fix available
12 of 14
affected packages

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

Carried by container images the latest versions of 222 of 17,781 indexed charts deploy, on 223 images.

Affected packageAffected versionsFixed inImages
postgresql-15deb15.3-0+deb12u1, 15.3-1.pgdg120+1, 15.4-2.pgdg120+1, 15.5-0+deb12u115.6-0+deb12u128
postgresql-12deb12.7-0ubuntu0.20.04.1, 12.8-0ubuntu0.20.04.1, 12.9-0ubuntu0.20.04.1, 12.11-0ubuntu0.20.04.1+1 more12.18-0ubuntu0.20.04.116
postgresql-14deb14.3-1.pgdg22.04+1, 14.4-0ubuntu0.22.04.1, 14.5-0ubuntu0.22.04.1, 14.6-1.pgdg22.04+1+2 more14.11-0ubuntu0.22.04.19
postgresql15apk15.1-r0, 15.2-r0, 15.3-r0, 15.4-r0+1 more15.6-r09
postgresqlbitnami14.4.0-0, 14.4.0-11, 15.2.0-4, 15.3.0-3+3 more12.18.07
postgresql-10deb10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 moreno fix listed6
postgresql14apk14.4-r0, 14.5-r0, 14.10-r014.11-r06
PostgreSQLbitnami15.3.0, 15.4.0, 15.5.0-4212.18.04
postgresql-9.5deb9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.049.5.25-0ubuntu0.16.04.1+esm73
postgresqlrpm13.23-1.el9_70:15.6-1.module+el9.3.0+21283+b0ea34b61
postgresql16apk16.1-r016.2-r01
postgresql-9.3deb9.3.22-0ubuntu0.14.04no fix listed1
postgresql-13deb13.3-1, 13.4-0+deb11u1, 13.5-0+deb11u1, 13.6-1.pgdg110+1+8 more13.14-0+deb11u176
postgresql-11deb11.4-1, 11.5-1+deb10u1, 11.7-0+deb10u1, 11.9-0+deb10u1+11 more11.22-0+deb10u260
OSV records
ALPINE-CVE-2024-0985BIT-postgresql-2024-0985DEBIAN-CVE-2024-0985RHSA-2024:0950UBUNTU-CVE-2024-0985DLA-3764-1DSA-5622-1
Also known as
DSA-5623-1, USN-6656-1, USN-6656-2

Charts affected

222 by stars
ChartLatestAffected imagesRadar Score
ldap-instance-configsciencebox0.0.11 of 1See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
postgresql-11@11.10-0+deb10u1
11.22-0+deb10u2

Open the chart page →

3,313
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
postgresql-13@13.7-1.pgdg110+1
13.14-0+deb11u1

Open the chart page →

2,637
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
postgresql@14.4.0-11
12.18.0

Open the chart page →

11,636
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
postgresql-11@11.7-0+deb10u1
11.22-0+deb10u2

Open the chart page →

8,694
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
postgresql-13@13.10-0+deb11u1
13.14-0+deb11u1

Open the chart page →

7,574
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
postgresql-12@12.11-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1

Open the chart page →

30,687
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
postgresql-11@11.16-0+deb10u1
11.22-0+deb10u2

Open the chart page →

11,554
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
postgresql-11@11.16-0+deb10u1
11.22-0+deb10u2

Open the chart page →

11,554
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1

Open the chart page →

20,223
studygovernorstudy-governorVerified publisher0.1.381 of 3See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
postgresql14@14.10-r0
14.11-r0

Open the chart page →

1,447
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
postgresql-12@12.12-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1

Open the chart page →

12,655
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
postgresql-13@13.13-0+deb11u1
13.14-0+deb11u1

Open the chart page →

2,038
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.0836af062af30
postgresql15@15.3-r0
15.6-r0

Open the chart page →

21,005
vehicle-dashboardtest-vehi-dash0.1.03 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

3 of the 7 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
library/node:16.20f77a1aef2da8
postgresql-11@11.20-0+deb10u1
11.22-0+deb10u2
samajh/alprbackend:latestea742b4372ad
postgresql-11@11.14-0+deb10u1
11.22-0+deb10u2
samajh/alprfrontend:latest05ef4fddbb75
postgresql-11@11.14-0+deb10u1
11.22-0+deb10u2

Open the chart page →

20,270
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
postgresql-13@13.9-0+deb11u1
13.14-0+deb11u1

Open the chart page →

3,164
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
postgresql-15@15.5-0+deb12u1
15.6-0+deb12u1

Open the chart page →

17,323
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1

Open the chart page →

14,358
openldap-havcnngrVerified publisher1.0.01 of 3See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
postgresql-11@11.10-0+deb10u1
11.22-0+deb10u2

Open the chart page →

5,514
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
postgresql-13@13.7-0+deb11u1
13.14-0+deb11u1

Open the chart page →

3,392
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
postgresql-11@11.12-0+deb10u1
11.22-0+deb10u2

Open the chart page →

2,670
vaultwardenwitcom-gmbh0.2.01 of 2See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
vaultwarden/server:1.25.239f34c5159a2
postgresql-13@13.7-0+deb11u1
13.14-0+deb11u1

Open the chart page →

1,585
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-0985.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
postgresql-13@13.9-0+deb11u1
13.14-0+deb11u1

Open the chart page →

1,838

Container images carrying it

223 by charts deploying them

A fixed version is listed for 12 of the 14 affected packages.

Container imageDigestPackageFixed inUsed by
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1
1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
postgresql-13@13.9-0+deb11u1
13.14-0+deb11u1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
postgresql-12@12.11-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1
1
statcan/ckan:2.93921305425b8
postgresql-12@12.7-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1
1
stratospire/activityrelay:0.2.3a4c34cb01117
postgresql-13@13.8-0+deb11u1
13.14-0+deb11u1
1
stremio/server:latest3dc145603def
postgresql-11@11.19-0+deb10u1
11.22-0+deb10u2
1
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
postgresql-13@13.13-0+deb11u1
13.14-0+deb11u1
1
temporalio/admin-tools:1.22.4258958fe2ff2
postgresql15@15.4-r0
15.6-r0
1
temporalio/admin-tools:1.22.0836af062af30
postgresql15@15.3-r0
15.6-r0
1
theradius/loggia:0.463ba348546ec
postgresql-15@15.5-0+deb12u1
15.6-0+deb12u1
1
thongngo3301/stakefish:latesta341af5976e3
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
postgresql-14@14.7-1.pgdg22.04+1
14.11-0ubuntu0.22.04.1
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
postgresql-14@14.6-1.pgdg22.04+1
14.11-0ubuntu0.22.04.1
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
postgresql-14@14.3-1.pgdg22.04+1
14.11-0ubuntu0.22.04.1
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
postgresql-11@11.14-0+deb10u1
11.22-0+deb10u2
1
tpdock/freeradius:2.2.93da600c95a49
postgresql-9.5@9.5.10-0ubuntu0.16.04
9.5.25-0ubuntu0.16.04.1+esm7
1
ubcctlt/barman:v2.19cbbbbc8ae16b
postgresql-13@13.6-1.pgdg110+1
13.14-0+deb11u1
1
vaultwarden/server:1.29.1c2849f8189e4
postgresql-13@13.11-0+deb11u1
13.14-0+deb11u1
1
vlebediantsev/notes-admin-front:latest007c6670ff48
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1
1
vlebediantsev/notes-project-front:latest945675fd2636
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
postgresql-15@15.3-0+deb12u1
15.6-0+deb12u1
1
volkerraschek/postfixadmin:3.3.13c4f10aebf87b
postgresql-13@13.9-0+deb11u1
13.14-0+deb11u1
1
volkerraschek/postfixadmin-fetchmail:0.3.0e4cf12c6249d
postgresql15@15.1-r0
15.6-r0
1
weblate/weblate:3.11.3-182848df56ecd
postgresql-11@11.7-0+deb10u1
11.22-0+deb10u2
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
postgresql-13@13.7-0+deb11u1
13.14-0+deb11u1
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
postgresql-12@12.8-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
postgresql-14@14.5-0ubuntu0.22.04.1
14.11-0ubuntu0.22.04.1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
postgresql-12@12.8-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
postgresql-14@14.5-0ubuntu0.22.04.1
14.11-0ubuntu0.22.04.1
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
postgresql-11@11.12-0+deb10u1
11.22-0+deb10u2
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
postgresql-11@11.12-0+deb10u1
11.22-0+deb10u2
1
zzorica/k8s-mgmt-pod:0.5.2640ca4de2922
postgresql-13@13.7-0+deb11u1
13.14-0+deb11u1
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
postgresql-13@13.8-0+deb11u1
13.14-0+deb11u1
1
ghcr.io/0xemma/reddark:main2a115e991894
postgresql-13@13.11-0+deb11u1
13.14-0+deb11u1
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
postgresql15@15.5-r0
15.6-r0
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
postgresql@14.4.0-0
12.18.0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
postgresql14@14.5-r0
14.11-r0
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
postgresql-15@15.5-0+deb12u1
15.6-0+deb12u1
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
postgresql-13@13.7-0+deb11u1
13.14-0+deb11u1
1
ghcr.io/duyet/glossary:0.1.0ae6309fa237d
postgresql-11@11.14-0+deb10u1
11.22-0+deb10u2
1
ghcr.io/estaid-app/pgbouncer-docker:1.22.07e5630757299
postgresql16@16.1-r0
16.2-r0
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
postgresql-13@13.8-0+deb11u1
13.14-0+deb11u1
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
postgresql-11@11.9-0+deb10u1
11.22-0+deb10u2
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
postgresql-12@12.7-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
postgresql-12@12.7-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
postgresql-12@12.7-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
postgresql-12@12.7-0ubuntu0.20.04.1
12.18-0ubuntu0.20.04.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.