StackRadar

CVE-2024-27304

Critical

Advisory

Published 4 Mar 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
131
of 17,781 indexed, latest versions
Container images
125
deployed by those charts
Fix available
4 of 4
affected packages

pgproto3 SQL Injection via Protocol Message Size Overflow

Carried by container images the latest versions of 131 of 17,781 indexed charts deploy, on 125 images.

Affected packageAffected versionsFixed inImages
github.com/jackc/pgproto3/v2golangv2.0.0, v2.0.1, v2.0.2, v2.0.4+8 more2.3.397
github.com/jackc/pgx/v4golangv4.6.0, v4.7.1, v4.8.1, v4.8.2-0.20200910143026-040df1ccef85+12 more4.18.289
github.com/jackc/pgx/v5golangv5.0.4, v5.2.0, v5.3.0, v5.3.1+4 more5.5.423
github.com/jackc/pgxgolangv3.1.1-0.20180608201956-39bbc98d99d7+incompatible, v3.2.0+incompatible, v3.3.0+incompatible, v3.6.0+incompatible+1 more4.18.216
OSV records
GHSA-7jwh-3vrq-q3m8GHSA-mrww-27vc-gghv
Also known as
GO-2024-2606

Charts affected

131 by stars
ChartLatestAffected imagesRadar Score
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/jackc/pgx@v3.3.0+incompatible
4.18.2

Open the chart page →

5,973
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
github.com/jackc/pgx/v5@v5.3.1
2.3.3
4.18.2
5.5.4

Open the chart page →

68,240
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
github.com/jackc/pgx/v5@v5.3.1
2.3.3
4.18.2
5.5.4

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
github.com/jackc/pgx/v5@v5.3.1
2.3.3
4.18.2
5.5.4

Open the chart page →

32,902
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/jackc/pgproto3/v2@v2.0.4
github.com/jackc/pgx/v4@v4.8.1
2.3.3
4.18.2

Open the chart page →

3,046
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
github.com/jackc/pgproto3/v2@v2.0.0
2.3.3

Open the chart page →

30,699
ai-scale-authdysnixVerified publisher0.1.12 of 3See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
alex6021710/ai-scale-auth:latest6c7a47e470c3
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
alex6021710/ai-scale-migrator:latest744b8a924f35
github.com/jackc/pgproto3/v2@v2.0.7
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2

Open the chart page →

6,141
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
timescale/timescaledb-postgis:latest-pg127758704d4a14
github.com/jackc/pgproto3/v2@v2.0.0
2.3.3

Open the chart page →

11,482
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2

Open the chart page →

2,237
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

23,685
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
github.com/jackc/pgx/v5@v5.5.2
5.5.4

Open the chart page →

1,703
tracoor-agentethereum-helm-chartsVerified publisher0.0.11 of 1See more

tracoor-agent ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/jackc/pgx/v5@v5.4.3
5.5.4

Open the chart page →

905
tracoor-serverethereum-helm-chartsVerified publisher0.0.21 of 1See more

tracoor-server ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/jackc/pgx/v5@v5.4.3
5.5.4

Open the chart page →

905
tracoor-singleethereum-helm-chartsVerified publisher0.0.51 of 2See more

tracoor-single ethereum-helm-charts 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/jackc/pgx/v5@v5.4.3
5.5.4

Open the chart page →

905
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2

Open the chart page →

20,933
degafactlyVerified publisher0.11.132 of 3See more

dega factly 0.11.13

2 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
factly/dega-api:0.15.166fafc7b0a17
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
factly/dega-server:0.15.194d21479382e
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2

Open the chart page →

5,747
kavachfactlyVerified publisher0.9.51 of 2See more

kavach factly 0.9.5

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
factly/kavach-server:0.22.3be85ff1b9bd3
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2

Open the chart page →

3,573
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
factly/mande-server:0.34.1384d384310ef
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2

Open the chart page →

4,777
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/jackc/pgx/v5@v5.4.3
5.5.4

Open the chart page →

6,078
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/jackc/pgx/v5@v5.4.2
5.5.4

Open the chart page →

5,684
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

4,602
limogabe565Verified publisher0.8.01 of 1See more

limo gabe565 0.8.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/gabe565/limo:latest6dfdbc9853bb
github.com/jackc/pgx/v5@v5.3.0
5.5.4

Open the chart page →

1,330
galoygaloymoney0.34.73 of 24See more

galoy galoymoney 0.34.7

3 of the 24 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
oryd/kratos:v1.0.0d06fc5845f63
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

8,677
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/jackc/pgx/v5@v5.3.1
5.5.4

Open the chart page →

2,155
galoygaloymoney20.34.73 of 24See more

galoy galoymoney2 0.34.7

3 of the 24 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
oryd/kratos:v1.0.0d06fc5845f63
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

8,677
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/jackc/pgx/v5@v5.3.1
5.5.4

Open the chart page →

2,155
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
zhenghaoz/gorse-server:0.4.1239c565685b01
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2

Open the chart page →

4,380
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

24,995
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2

Open the chart page →

3,451
cratedb-adapterhmdmph0.1.01 of 1See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
github.com/jackc/pgx@v3.1.1-0.20180608201956-39bbc98d99d7+incompatible
4.18.2

Open the chart page →

2,913
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2

Open the chart page →

3,614
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
github.com/jackc/pgproto3/v2@v2.0.7
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2

Open the chart page →

2,645
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2
4.18.2

Open the chart page →

4,478
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2
4.18.2

Open the chart page →

4,478
twitch-predictions-recorderjacobcolvinVerified publisher0.1.01 of 1See more

twitch-predictions-recorder jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
macropower/twitch_predictions_recorder:v0.21e9c4fb89787
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

2,669
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2
4.18.2

Open the chart page →

3,968
lndkronkltdVerified publisher0.3.91 of 4See more

lnd kronkltd 0.3.9

1 of the 4 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2

Open the chart page →

8,451
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2

Open the chart page →

2,871
kubeclaritykubeclarity2.23.31 of 5See more

kubeclarity kubeclarity 2.23.3

1 of the 5 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2

Open the chart page →

5,496
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
github.com/jackc/pgx/v5@v5.4.2
5.5.4

Open the chart page →

1,554
harborkubesphereVerified publisher1.9.35 of 11See more

harbor kubesphere 1.9.3

5 of the 11 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.12.0
2.3.3
4.18.2
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.12.0
2.3.3
4.18.2
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
github.com/jackc/pgproto3/v2@v2.1.1
2.3.3
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
github.com/jackc/pgproto3/v2@v2.0.1
github.com/jackc/pgx/v4@v4.12.0
2.3.3
4.18.2
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.12.0
2.3.3
4.18.2

Open the chart page →

17,798
kube-benchlemontechVerified publisher0.1.01 of 1See more

kube-bench lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.6.9c329d73fea58
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2

Open the chart page →

1,632
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2

Open the chart page →

2,101
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/jackc/pgproto3/v2@v2.0.1
github.com/jackc/pgx/v4@v4.6.0
2.3.3
4.18.2

Open the chart page →

3,764
kube-benchm9sweeperVerified publisher1.6.01 of 1See more

kube-bench m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.6.176672264accce
github.com/jackc/pgx/v5@v5.2.0
5.5.4

Open the chart page →

1,400
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
timescale/timescaledb:latest-pg12645fd9e92d76
github.com/jackc/pgproto3/v2@v2.3.0
github.com/jackc/pgx/v4@v4.16.1
2.3.3
4.18.2

Open the chart page →

24,400
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/jackc/pgproto3/v2@v2.0.1
2.3.3

Open the chart page →

12,010
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2024-27304.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/jackc/pgproto3/v2@v2.0.1
2.3.3

Open the chart page →

68,284

Container images carrying it

125 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
github.com/jackc/pgx/v5@v5.5.2
5.5.4
1
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/jackc/pgx/v5@v5.4.3
5.5.4
1
ghcr.io/cloudnative-pg/cloudnative-pg:1.17.14dd365800b62
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.1
2.3.3
4.18.2
1
ghcr.io/cloudnative-pg/cloudnative-pg:1.21.19f707d91de1c
github.com/jackc/pgx/v5@v5.4.3
5.5.4
1
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2
1
ghcr.io/cncf/gitvote/dbmigrator:v1.5.0f1e7efe440da
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.7.1
2.3.3
4.18.2
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
1
ghcr.io/gabe565/limo:latest6dfdbc9853bb
github.com/jackc/pgx/v5@v5.3.0
5.5.4
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2
1
ghcr.io/netsoc/iamd:1.1.22fe6b69b20d7
github.com/jackc/pgproto3/v2@v2.0.6
github.com/jackc/pgx/v4@v4.10.1
2.3.3
4.18.2
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
1
ghcr.io/openfaasltd/postgres-connector:0.2.3379e583a0a75
github.com/jackc/pgx@v3.6.2+incompatible
4.18.2
1
ghcr.io/riotkit-org/backup-repository:v4.0.0ab41ffa78f69
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.15.0
2.3.3
4.18.2
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
github.com/jackc/pgproto3/v2@v2.0.2
github.com/jackc/pgx/v4@v4.8.1
2.3.3
4.18.2
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
github.com/jackc/pgx/v5@v5.3.1
2.3.3
4.18.2
5.5.4
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
github.com/jackc/pgproto3/v2@v2.3.1
github.com/jackc/pgx/v4@v4.17.2
2.3.3
4.18.2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
github.com/jackc/pgproto3/v2@v2.2.0
github.com/jackc/pgx/v4@v4.14.0
2.3.3
4.18.2
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
github.com/jackc/pgproto3/v2@v2.1.1
github.com/jackc/pgx/v4@v4.13.0
2.3.3
4.18.2
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx@v3.3.0+incompatible
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
4.18.2
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.1
2.3.3
4.18.2
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/jackc/pgproto3/v2@v2.3.2
github.com/jackc/pgx/v4@v4.18.0
2.3.3
4.18.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.