CVE-2024-27289
HighAdvisory
Published 4 Mar 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.008
- 56th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 104
- of 17,781 indexed, latest versions
- Container images
- 99
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
pgx SQL Injection via Line Comment Creation
Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 99 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v4.6.0, v4.7.1, v4.8.1, v4.8.2-0.20200910143026-040df1ccef85+12 more | 4.18.2 | 89 |
| github.com/ | v3.1.1-0.20180608201956-39bbc98d99d7+incompatible, v3.2.0+incompatible, v3.3.0+incompatible, v3.6.0+incompatible+1 more | 4.18.2 | 16 |
- OSV records
- GHSA-m7wr-2xf7-cm9p
- Also known as
- GO-2024-2605
Charts affected
104 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| twitter-apptwitter-helm | 0.1.12 | 1 of 8See more | 6,132 |
| twenty-crmvictorlane | 0.0.1 | 1 of 3See more | 13,459 |
| wexa-studiowexa-studio | 1.2.0 | 1 of 15See more | 14,983 |
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
Container images carrying it
99 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | fbeaef7a8566 | github.com/ | 4.18.2 | 6 |
| caddy/ | 18d1366fc0e9 | github.com/ | 4.18.2 | 3 |
| oryd/ | 2c93beb5e5f2 | github.com/ | 4.18.2 | 3 |
| quay.io/ | 75fb847ac045 | github.com/ | 4.18.2 | 3 |
| crate/ | b8d89fa5d19b | github.com/ | 4.18.2 | 2 |
| hashicorp/ | 4db614d40d0e | github.com/ | 4.18.2 | 2 |
| hashicorp/ | 6b4e5dadf082 | github.com/ github.com/ | 4.18.2 4.18.2 | 2 |
| hashicorp/ | 8de4d5f31b38 | github.com/ github.com/ | 4.18.2 4.18.2 | 2 |
| hoppscotch/ | f1da831950b7 | github.com/ | 4.18.2 | 2 |
| oryd/ | d06fc5845f63 | github.com/ | 4.18.2 | 2 |
| oryd/ | e8cb9b79a89c | github.com/ | 4.18.2 | 2 |
| otel/ | 7ef2a2ff46b9 | github.com/ | 4.18.2 | 2 |
| rookout/ | 4451a6f6b8ec | github.com/ | 4.18.2 | 2 |
| rookout/ | 51c0fce64467 | github.com/ | 4.18.2 | 2 |
| zhenghaoz/ | 033046b432ec | github.com/ | 4.18.2 | 2 |
| zhenghaoz/ | 39c565685b01 | github.com/ | 4.18.2 | 2 |
| zhenghaoz/ | f7739f64c9b0 | github.com/ | 4.18.2 | 2 |
| quay.io/ | b736b345437d | github.com/ | 4.18.2 | 2 |
| alex6021710/ | 6c7a47e470c3 | github.com/ | 4.18.2 | 1 |
| alex6021710/ | 744b8a924f35 | github.com/ | 4.18.2 | 1 |
| almorgv/ | 5f2a7d2b44d8 | github.com/ | 4.18.2 | 1 |
| aquasec/ | c329d73fea58 | github.com/ | 4.18.2 | 1 |
| artifacthub/ | 28c13565ac5c | github.com/ | 4.18.2 | 1 |
| artifacthub/ | 2a746b289fcd | github.com/ | 4.18.2 | 1 |
| baserow/ | df0c42eb67e8 | github.com/ | 4.18.2 | 1 |
| bytesafe/ | ee287384c005 | github.com/ | 4.18.2 | 1 |
| cockroachdb/ | 983312754620 | github.com/ | 4.18.2 | 1 |
| dollarshaveclub/ | 14a257836529 | github.com/ | 4.18.2 | 1 |
| factly/ | 66fafc7b0a17 | github.com/ | 4.18.2 | 1 |
| factly/ | 94d21479382e | github.com/ | 4.18.2 | 1 |
| factly/ | be85ff1b9bd3 | github.com/ | 4.18.2 | 1 |
| factly/ | 384d384310ef | github.com/ | 4.18.2 | 1 |
| factly/ | 87064eb0463c | github.com/ | 4.18.2 | 1 |
| gboxproxy/ | 3a9f4a711d5c | github.com/ | 4.18.2 | 1 |
| goharbor/ | 6412d679fdc3 | github.com/ | 4.18.2 | 1 |
| goharbor/ | 86bf3031f4a7 | github.com/ | 4.18.2 | 1 |
| goharbor/ | 39435daedd0c | github.com/ | 4.18.2 | 1 |
| goharbor/ | 8d5339ff2d74 | github.com/ | 4.18.2 | 1 |
| goharbor/ | fd91a4a1273f | github.com/ | 4.18.2 | 1 |
| goharbor/ | a92b51aa7d6e | github.com/ | 4.18.2 | 1 |
| grafana/ | f6cbec9409be | github.com/ | 4.18.2 | 1 |
| hashicorp/ | fb70bd9210ff | github.com/ | 4.18.2 | 1 |
| hashicorp/ | 0b01ed3924e6 | github.com/ github.com/ | 4.18.2 4.18.2 | 1 |
| hashicorp/ | b2177a8bfe85 | github.com/ github.com/ | 4.18.2 4.18.2 | 1 |
| hashicorp/ | dfc3500beb0e | github.com/ | 4.18.2 | 1 |
| hoppscotch/ | 538fe6ded4b6 | github.com/ | 4.18.2 | 1 |
| kubevious/ | 6233e84bdd59 | github.com/ | 4.18.2 | 1 |
| layer5/ | 77d59943b3d6 | github.com/ | 4.18.2 | 1 |
| layer5/ | 9d25f029a8a2 | github.com/ | 4.18.2 | 1 |
| layer5/ | b3864dfd47ad | github.com/ | 4.18.2 | 1 |