StackRadar

CVE-2024-27304

Critical

Advisory

Published 4 Mar 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
131
of 17,781 indexed, latest versions
Container images
125
deployed by those charts
Fix available
4 of 4
affected packages

pgproto3 SQL Injection via Protocol Message Size Overflow

Carried by container images the latest versions of 131 of 17,781 indexed charts deploy, on 125 images.

Affected packageAffected versionsFixed inImages
github.com/jackc/pgproto3/v2golangv2.0.0, v2.0.1, v2.0.2, v2.0.4+8 more2.3.397
github.com/jackc/pgx/v4golangv4.6.0, v4.7.1, v4.8.1, v4.8.2-0.20200910143026-040df1ccef85+12 more4.18.289
github.com/jackc/pgx/v5golangv5.0.4, v5.2.0, v5.3.0, v5.3.1+4 more5.5.423
github.com/jackc/pgxgolangv3.1.1-0.20180608201956-39bbc98d99d7+incompatible, v3.2.0+incompatible, v3.3.0+incompatible, v3.6.0+incompatible+1 more4.18.216
OSV records
GHSA-7jwh-3vrq-q3m8GHSA-mrww-27vc-gghv
Also known as
GO-2024-2606

Charts affected

131 by stars
ChartLatestAffected imagesRadar Score
artifact-hubartifact-hubVerified publisher1.23.01 of 7See more

artifact-hub artifact-hub 1.23.0

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
artifacthub/db-migrator:v1.23.028c13565ac5c
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2

Open the chart page →

10,755
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
github.com/jackc/pgproto3/v2@v2.0.4
github.com/jackc/pgx/v4@v4.8.2-0.20200910143026-040df1ccef85
2.3.3
4.18.2

Open the chart page →

33,725
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
github.com/jackc/pgx/v5@v5.3.1
2.3.3
4.18.2
5.5.4

Open the chart page →

32,902
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

17,263
lndfold0.3.151 of 4See more

lnd fold 0.3.15

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

8,835
yataibentomlVerified publisher1.1.131 of 1See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

1,915
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

1,884
clowardenclowarden0.2.31 of 4See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2

Open the chart page →

5,606
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

24,700
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2

Open the chart page →

17,404
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2

Open the chart page →

3,451
blockygeek-cookbookVerified publisher10.5.21 of 1See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

3,030
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/cncf/gitvote/dbmigrator:v1.5.0f1e7efe440da
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2

Open the chart page →

5,613
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
kubevious/ui:1.2.16233e84bdd59
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

14,204
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
github.com/jackc/pgx/v5@v5.3.1
5.5.4

Open the chart page →

1,942
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/jackc/pgx@v3.3.0+incompatible
4.18.2

Open the chart page →

15,477
wharf-helmwharf-helmOfficialVerified publisher3.2.61 of 5See more

wharf-helm wharf-helm 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2

Open the chart page →

10,032
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

4,039
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/jackc/pgx/v5@v5.4.2
5.5.4

Open the chart page →

5,299
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
github.com/jackc/pgx/v5@v5.5.2
5.5.4

Open the chart page →

2,897
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.17.14dd365800b62
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.1
2.3.3
4.18.2

Open the chart page →

7,583
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

6,237
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

15,383
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
github.com/jackc/pgx/v5@v5.4.3
5.5.4

Open the chart page →

3,048
vidcheckfactlyVerified publisher0.5.21 of 2See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
factly/vidcheck-server:0.12.087064eb0463c
github.com/jackc/pgproto3/v2@v2.0.5
github.com/jackc/pgx/v4@v4.9.0
2.3.3
4.18.2

Open the chart page →

3,617
gboxgboxVerified publisher1.0.51 of 2See more

gbox gbox 1.0.5

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
gboxproxy/gbox:v1.0.63a9f4a711d5c
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

2,521
gorse-enterprisegorse-io0.4.23 of 5See more

gorse-enterprise gorse-io 0.4.2

3 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
zhenghaoz/gorse-server:0.4.1239c565685b01
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2

Open the chart page →

4,380
cratedb-adapter-v2hmdmph0.2.11 of 1See more

cratedb-adapter-v2 hmdmph 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
github.com/jackc/pgx@v3.1.1-0.20180608201956-39bbc98d99d7+incompatible
4.18.2

Open the chart page →

2,913
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
github.com/jackc/pgx/v5@v5.3.1
5.5.4

Open the chart page →

2,489
mesherykubesphere-stable0.5.07 of 13See more

meshery kubesphere-stable 0.5.0

7 of the 13 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/jackc/pgx/v5@v5.4.3
5.5.4
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/jackc/pgx/v5@v5.4.3
5.5.4
layer5/meshery-kuma:stable-latest9d25f029a8a2
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
layer5/meshery-osm:stable-latestec898e5786c6
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

24,690
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

4,389
backup-repository-serverriotkit-org4.0.01 of 1See more

backup-repository-server riotkit-org 4.0.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2

Open the chart page →

2,049
postgresql-singlesinextraVerified publisher1.15.11 of 1See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.8.1
2.3.3
4.18.2

Open the chart page →

4,913
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
artifacthub/db-migrator:v1.19.02a746b289fcd
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2

Open the chart page →

14,491
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

2,022
goalerttokens-studioVerified publisher0.0.51 of 2See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
goalert/goalert:v0.32.008d57388b0cb
github.com/jackc/pgx/v5@v5.5.3
5.5.4

Open the chart page →

1,469
boundaryundergridVerified publisher0.1.01 of 3See more

boundary undergrid 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/boundary:0.8.1fb70bd9210ff
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

4,957
wharf-ainowharf-helmVerified publisher0.1.51 of 7See more

wharf-aino wharf-helm 0.1.5

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2

Open the chart page →

13,459
gitlab-code-review-notifieralmorgvVerified publisher0.1.21 of 2See more

gitlab-code-review-notifier almorgv 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
almorgv/gitlab-code-review-notifier:0.1.25f2a7d2b44d8
github.com/jackc/pgx@v3.6.2+incompatible
4.18.2

Open the chart page →

2,115
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2

Open the chart page →

28,131
falco-ui-serverappscodeVerified publisher2026.1.151 of 2See more

falco-ui-server appscode 2026.1.15

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/jackc/pgx/v5@v5.4.2
5.5.4

Open the chart page →

2,872
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2

Open the chart page →

32,501
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

10,145
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2

Open the chart page →

13,459
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/jackc/pgx/v5@v5.4.3
5.5.4

Open the chart page →

1,330
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
github.com/jackc/pgproto3/v2@v2.0.4
github.com/jackc/pgx@v3.6.2+incompatible
2.3.3
4.18.2

Open the chart page →

20,900
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2

Open the chart page →

25,151
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

8,009
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.27.0828ee36cb13a
github.com/jackc/pgx/v5@v5.0.4
5.5.4

Open the chart page →

9,146
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/jackc/pgx@v3.3.0+incompatible
4.18.2

Open the chart page →

5,973

Container images carrying it

125 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
github.com/jackc/pgx/v5@v5.5.2
5.5.4
1
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/jackc/pgx/v5@v5.4.3
5.5.4
1
ghcr.io/cloudnative-pg/cloudnative-pg:1.17.14dd365800b62
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.1
2.3.3
4.18.2
1
ghcr.io/cloudnative-pg/cloudnative-pg:1.21.19f707d91de1c
github.com/jackc/pgx/v5@v5.4.3
5.5.4
1
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2
1
ghcr.io/cncf/gitvote/dbmigrator:v1.5.0f1e7efe440da
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
1
ghcr.io/gabe565/limo:latest6dfdbc9853bb
github.com/jackc/pgx/v5@v5.3.0
5.5.4
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2
1
ghcr.io/netsoc/iamd:1.1.22fe6b69b20d7
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
1
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
github.com/jackc/pgx@v3.6.2+incompatible
4.18.2
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.8.1
2.3.3
4.18.2
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
github.com/jackc/pgx/v5@v5.3.1
2.3.3
4.18.2
5.5.4
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.