CVE-2024-1597
CriticalAdvisory
Published 21 Feb 2024In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 10.0
- base score, highest
- EPSS
- 0.048
- 91st percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 194
- of 17,781 indexed, latest versions
- Container images
- 124
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
pgjdbc SQL Injection via line comment generation
Carried by container images the latest versions of 194 of 17,781 indexed charts deploy, on 124 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| postgresqlmaven | 9.4.1208.jre7, 9.4.1209.jre7, 9.4.1211, 42.0.0+35 more | 42.2.28, 42.3.9, 42.4.4, 42.5.5+1 more | 124 |
| PostgreSQL JDBC Driverbitnami | 42.6.0 | 42.2.28 | 1 |
Charts affected
194 by stars
Container images carrying it
124 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| flyway/ | 22d97ceb0c47 | postgresql | 42.2.28 | 79 |
| bde2020/ | 620267768985 | postgresql | 42.2.28 | 4 |
| apache/ | e8b7c4ddd069 | postgresql | 42.2.28 | 3 |
| supertokens/ | 18d34c781347 | postgresql | 42.2.28 | 3 |
| apachepulsar/ | b341ef76a852 | postgresql | 42.2.28 | 2 |
| dependencytrack/ | 485ac0952c02 | postgresql | 42.5.5 | 2 |
| dina1993/ | ac731244aed1 | postgresql | 42.5.5 | 2 |
| dina1993/ | 669d146a5e63 | postgresql | 42.5.5 | 2 |
| dina1993/ | 3d6b0dac1cb4 | postgresql | 42.5.5 | 2 |
| geoservercloud/ | 99540eef78ad | postgresql | 42.2.28 | 2 |
| geoservercloud/ | 5c254c53a357 | postgresql | 42.2.28 | 2 |
| geoservercloud/ | c687b1cbc891 | postgresql | 42.2.28 | 2 |
| geoservercloud/ | 5288f320cf36 | postgresql | 42.2.28 | 2 |
| geoservercloud/ | a30a60ac6cd0 | postgresql | 42.2.28 | 2 |
| gradiant/ | aae4f8a21f8b | postgresql | 42.2.28 | 2 |
| scorpiobroker/ | 01e11d800459 | postgresql | 42.3.9 | 2 |
| scorpiobroker/ | 5073ceef2fa0 | postgresql | 42.3.9 | 2 |
| scorpiobroker/ | a2cfcf0947fd | postgresql | 42.3.9 | 2 |
| scorpiobroker/ | b742a53b2803 | postgresql | 42.3.9 | 2 |
| scorpiobroker/ | b7fe27a06ff5 | postgresql | 42.3.9 | 2 |
| scorpiobroker/ | e08036670d66 | postgresql | 42.3.9 | 2 |
| scorpiobroker/ | f02e8a429a08 | postgresql | 42.3.9 | 2 |
| quay.io/ | 054ef67eb7da | postgresql | 42.5.5 | 2 |
| quay.io/ | 68f9f38c8f30 | postgresql | 42.2.28 | 2 |
| airbyte/ | caf4f551c546 | postgresql | 42.5.5 | 1 |
| airsonicadvanced/ | f7cbafac2806 | postgresql | 42.2.28 | 1 |
| apacheignite/ | d7deab68b8fa | postgresql | 42.2.28 | 1 |
| apache/ | 76c176e8a0e4 | postgresql | 42.2.28 | 1 |
| apache/ | e2be712fc4f4 | postgresql | 42.3.9 | 1 |
| apache/ | 133d35d2c263 | postgresql | 42.3.9 | 1 |
| apache/ | b4ec8c18d079 | postgresql | 42.2.28 | 1 |
| apicurio/ | 44eeddd3562c | postgresql | 42.2.28 | 1 |
| apicurio/ | 302d202ed149 | postgresql | 42.2.28 | 1 |
| apicurio/ | 27a91978a388 | postgresql | 42.2.28 | 1 |
| assistiot/ | 23f195a7a26a | postgresql | 42.4.4 | 1 |
| assistiot/ | e4414cb72dc4 | postgresql | 42.3.9 | 1 |
| atlassian/ | 3b9222ab32ef | postgresql | 42.2.28 | 1 |
| atlassian/ | ebf761c7d437 | postgresql | 42.6.1 | 1 |
| atlassian/ | 37bc46cbec1a | postgresql | 42.2.28 | 1 |
| atlassian/ | 64a75aa4ec4e | postgresql | 42.2.28 | 1 |
| beastob/ | 99a49885ab33 | postgresql | 42.2.28 | 1 |
| bitnamilegacy/ | cb04e49e6eb1 | postgresql | 42.6.1 | 1 |
| bivas/ | 05545994f806 | postgresql | 42.2.28 | 1 |
| chandanteekinavar/ | 0cf52bf5ee9a | postgresql | 42.2.28 | 1 |
| dremio/ | 80ed2e3b7c43 | postgresql | 42.4.4 | 1 |
| easypi/ | d2950a36a576 | postgresql | 42.5.5 | 1 |
| eikek0/ | 661ff3ef42cd | postgresql | 42.2.28 | 1 |
| farberg/ | 4b4a22487394 | postgresql | 42.2.28 | 1 |
| flyway/ | 45b5d7cdc75a | postgresql | 42.4.4 | 1 |
| flyway/ | 80f12c80502b | postgresql | 42.4.4 | 1 |