StackRadar

CVE-2024-27304

Critical

Advisory

Published 4 Mar 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
131
of 17,781 indexed, latest versions
Container images
125
deployed by those charts
Fix available
4 of 4
affected packages

pgproto3 SQL Injection via Protocol Message Size Overflow

Carried by container images the latest versions of 131 of 17,781 indexed charts deploy, on 125 images.

Affected packageAffected versionsFixed inImages
github.com/jackc/pgproto3/v2golangv2.0.0, v2.0.1, v2.0.2, v2.0.4+8 more2.3.397
github.com/jackc/pgx/v4golangv4.6.0, v4.7.1, v4.8.1, v4.8.2-0.20200910143026-040df1ccef85+12 more4.18.289
github.com/jackc/pgx/v5golangv5.0.4, v5.2.0, v5.3.0, v5.3.1+4 more5.5.423
github.com/jackc/pgxgolangv3.1.1-0.20180608201956-39bbc98d99d7+incompatible, v3.2.0+incompatible, v3.3.0+incompatible, v3.6.0+incompatible+1 more4.18.216
OSV records
GHSA-7jwh-3vrq-q3m8GHSA-mrww-27vc-gghv
Also known as
GO-2024-2606

Charts affected

131 by stars
ChartLatestAffected imagesRadar Score
artifact-hubartifact-hubVerified publisher1.23.01 of 7See more

artifact-hub artifact-hub 1.23.0

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
artifacthub/db-migrator:v1.23.028c13565ac5c
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2

Open the chart page →

10,755
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
github.com/jackc/pgproto3/v2@v2.0.4
github.com/jackc/pgx/v4@v4.8.2-0.20200910143026-040df1ccef85
2.3.3
4.18.2

Open the chart page →

33,725
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
github.com/jackc/pgx/v5@v5.3.1
2.3.3
4.18.2
5.5.4

Open the chart page →

32,902
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

17,263
lndfold0.3.151 of 4See more

lnd fold 0.3.15

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

8,835
yataibentomlVerified publisher1.1.131 of 1See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

1,915
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

1,884
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2

Open the chart page →

5,606
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

24,700
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2

Open the chart page →

17,404
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2

Open the chart page →

3,451
blockygeek-cookbookVerified publisher10.5.21 of 1See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

3,030
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/cncf/gitvote/dbmigrator:v1.5.0f1e7efe440da
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2

Open the chart page →

5,613
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
kubevious/ui:1.2.16233e84bdd59
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

14,204
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
github.com/jackc/pgx/v5@v5.3.1
5.5.4

Open the chart page →

1,942
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/jackc/pgx@v3.3.0+incompatible
4.18.2

Open the chart page →

15,477
wharf-helmwharf-helmOfficialVerified publisher3.2.61 of 5See more

wharf-helm wharf-helm 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2

Open the chart page →

10,032
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

4,039
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/jackc/pgx/v5@v5.4.2
5.5.4

Open the chart page →

5,299
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
github.com/jackc/pgx/v5@v5.5.2
5.5.4

Open the chart page →

2,897
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.17.14dd365800b62
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.1
2.3.3
4.18.2

Open the chart page →

7,583
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

6,237
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

15,383
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
github.com/jackc/pgx/v5@v5.4.3
5.5.4

Open the chart page →

3,048
vidcheckfactlyVerified publisher0.5.21 of 2See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
factly/vidcheck-server:0.12.087064eb0463c
github.com/jackc/pgproto3/v2@v2.0.5
github.com/jackc/pgx/v4@v4.9.0
2.3.3
4.18.2

Open the chart page →

3,617
gboxgboxVerified publisher1.0.51 of 2See more

gbox gbox 1.0.5

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
gboxproxy/gbox:v1.0.63a9f4a711d5c
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

2,521
gorse-enterprisegorse-io0.4.23 of 5See more

gorse-enterprise gorse-io 0.4.2

3 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
zhenghaoz/gorse-server:0.4.1239c565685b01
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2

Open the chart page →

4,380
cratedb-adapter-v2hmdmph0.2.11 of 1See more

cratedb-adapter-v2 hmdmph 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
github.com/jackc/pgx@v3.1.1-0.20180608201956-39bbc98d99d7+incompatible
4.18.2

Open the chart page →

2,913
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
github.com/jackc/pgx/v5@v5.3.1
5.5.4

Open the chart page →

2,489
mesherykubesphere-stable0.5.07 of 13See more

meshery kubesphere-stable 0.5.0

7 of the 13 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/jackc/pgx/v5@v5.4.3
5.5.4
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/jackc/pgx/v5@v5.4.3
5.5.4
layer5/meshery-kuma:stable-latest9d25f029a8a2
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
layer5/meshery-osm:stable-latestec898e5786c6
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

24,690
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

4,389
backup-repository-serverriotkit-org4.0.01 of 1See more

backup-repository-server riotkit-org 4.0.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2

Open the chart page →

2,049
postgresql-singlesinextraVerified publisher1.15.11 of 1See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.8.1
2.3.3
4.18.2

Open the chart page →

4,913
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
artifacthub/db-migrator:v1.19.02a746b289fcd
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2

Open the chart page →

14,491
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

2,022
goalerttokens-studioVerified publisher0.0.51 of 2See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
goalert/goalert:v0.32.008d57388b0cb
github.com/jackc/pgx/v5@v5.5.3
5.5.4

Open the chart page →

1,469
boundaryundergridVerified publisher0.1.01 of 3See more

boundary undergrid 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/boundary:0.8.1fb70bd9210ff
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

4,957
wharf-ainowharf-helmVerified publisher0.1.51 of 7See more

wharf-aino wharf-helm 0.1.5

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2

Open the chart page →

13,459
gitlab-code-review-notifieralmorgvVerified publisher0.1.21 of 2See more

gitlab-code-review-notifier almorgv 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
almorgv/gitlab-code-review-notifier:0.1.25f2a7d2b44d8
github.com/jackc/pgx@v3.6.2+incompatible
4.18.2

Open the chart page →

2,115
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2

Open the chart page →

28,131
falco-ui-serverappscodeVerified publisher2026.1.151 of 2See more

falco-ui-server appscode 2026.1.15

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/jackc/pgx/v5@v5.4.2
5.5.4

Open the chart page →

2,872
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2

Open the chart page →

32,501
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

10,145
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2

Open the chart page →

13,459
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/jackc/pgx/v5@v5.4.3
5.5.4

Open the chart page →

1,330
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/jackc/pgproto3/v2@v2.0.4
github.com/jackc/pgx@v3.6.2+incompatible
2.3.3
4.18.2

Open the chart page →

20,900
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2

Open the chart page →

25,151
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

8,009
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.27.0828ee36cb13a
github.com/jackc/pgx/v5@v5.0.4
5.5.4

Open the chart page →

9,146
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/jackc/pgx@v3.3.0+incompatible
4.18.2

Open the chart page →

5,973

Container images carrying it

125 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
github.com/jackc/pgx/v5@v5.3.1
2.3.3
4.18.2
5.5.4
6
caddy/ingress:v0.2.118d1366fc0e9
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
3
ethpandaops/tracoor:latestd8514b9f4c59
github.com/jackc/pgx/v5@v5.4.3
5.5.4
3
oryd/hydra:v2.2.02c93beb5e5f2
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2
3
crate/crate_adapter:latestb8d89fa5d19b
github.com/jackc/pgx@v3.1.1-0.20180608201956-39bbc98d99d7+incompatible
4.18.2
2
hashicorp/vault:1.8.34db614d40d0e
github.com/jackc/pgx@v3.3.0+incompatible
4.18.2
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2
2
hashicorp/vault:1.12.18de4d5f31b38
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2
4.18.2
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/jackc/pgx/v5@v5.3.1
5.5.4
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/jackc/pgproto3/v2@v2.0.1
2.3.3
2
oryd/kratos:v1.0.0d06fc5845f63
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
2
rancher/kine:v0.11.412889bbcd1e8
github.com/jackc/pgx/v5@v5.4.2
5.5.4
2
rookout/controller:latest4451a6f6b8ec
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
2
rookout/data-on-prem:latest51c0fce64467
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
2
zhenghaoz/gorse-master:0.4.12033046b432ec
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
2
zhenghaoz/gorse-server:0.4.1239c565685b01
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2
2
alex6021710/ai-scale-auth:latest6c7a47e470c3
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
1
alex6021710/ai-scale-migrator:latest744b8a924f35
github.com/jackc/pgproto3/v2@v2.0.7
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
1
almorgv/gitlab-code-review-notifier:0.1.25f2a7d2b44d8
github.com/jackc/pgx@v3.6.2+incompatible
4.18.2
1
apache/shardingsphere-operator:0.3.0ffe68d6b99c0
github.com/jackc/pgx/v5@v5.3.1
5.5.4
1
aquasec/kube-bench:v0.6.176672264accce
github.com/jackc/pgx/v5@v5.2.0
5.5.4
1
aquasec/kube-bench:v0.6.9c329d73fea58
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
1
artifacthub/db-migrator:v1.23.028c13565ac5c
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2
1
artifacthub/db-migrator:v1.19.02a746b289fcd
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2
1
baserow/baserow:1.30.1df0c42eb67e8
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2
1
bytesafe/bytesafe-ce:v1.0.4ee287384c005
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
cockroachdb/cockroach-operator:v2.1.0983312754620
github.com/jackc/pgproto3/v2@v2.0.4
github.com/jackc/pgx@v3.6.2+incompatible
2.3.3
4.18.2
1
dollarshaveclub/furan2:master14a257836529
github.com/jackc/pgproto3/v2@v2.0.4
github.com/jackc/pgx/v4@v4.8.1
2.3.3
4.18.2
1
drorivry4/rego:lateste035d49b15ca
github.com/jackc/pgx/v5@v5.4.3
5.5.4
1
ethpandaops/forky:debian-latestc937f4ba737c
github.com/jackc/pgx/v5@v5.5.2
5.5.4
1
factly/dega-api:0.15.166fafc7b0a17
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
1
factly/dega-server:0.15.194d21479382e
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
1
factly/kavach-server:0.22.3be85ff1b9bd3
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
1
factly/mande-server:0.34.1384d384310ef
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
1
factly/vidcheck-server:0.12.087064eb0463c
github.com/jackc/pgproto3/v2@v2.0.5
github.com/jackc/pgx/v4@v4.9.0
2.3.3
4.18.2
1
falcosecurity/falcosidekick:2.27.0828ee36cb13a
github.com/jackc/pgx/v5@v5.0.4
5.5.4
1
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/jackc/pgx/v5@v5.4.3
5.5.4
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2
1
goalert/goalert:v0.32.008d57388b0cb
github.com/jackc/pgx/v5@v5.5.3
5.5.4
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
github.com/jackc/pgx/v5@v5.4.3
5.5.4
1
goharbor/harbor-core:v2.9.06412d679fdc3
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.12.0
2.3.3
4.18.2
1
goharbor/harbor-jobservice:v2.9.039435daedd0c
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.12.0
2.3.3
4.18.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.