CVE-2024-27304
CriticalAdvisory
Published 4 Mar 2024In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.011
- 64th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 131
- of 17,781 indexed, latest versions
- Container images
- 125
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
pgproto3 SQL Injection via Protocol Message Size Overflow
Carried by container images the latest versions of 131 of 17,781 indexed charts deploy, on 125 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v2.0.0, v2.0.1, v2.0.2, v2.0.4+8 more | 2.3.3 | 97 |
| github.com/ | v4.6.0, v4.7.1, v4.8.1, v4.8.2-0.20200910143026-040df1ccef85+12 more | 4.18.2 | 89 |
| github.com/ | v5.0.4, v5.2.0, v5.3.0, v5.3.1+4 more | 5.5.4 | 23 |
| github.com/ | v3.1.1-0.20180608201956-39bbc98d99d7+incompatible, v3.2.0+incompatible, v3.3.0+incompatible, v3.6.0+incompatible+1 more | 4.18.2 | 16 |
- OSV records
- GHSA-7jwh-3vrq-q3m8GHSA-mrww-27vc-gghv
- Also known as
- GO-2024-2606
Charts affected
131 by stars
Container images carrying it
125 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | fbeaef7a8566 | github.com/ github.com/ github.com/ | 2.3.3 4.18.2 5.5.4 | 6 |
| caddy/ | 18d1366fc0e9 | github.com/ github.com/ | 2.3.3 4.18.2 | 3 |
| ethpandaops/ | d8514b9f4c59 | github.com/ | 5.5.4 | 3 |
| oryd/ | 2c93beb5e5f2 | github.com/ github.com/ | 2.3.3 4.18.2 | 3 |
| quay.io/ | 75fb847ac045 | github.com/ github.com/ | 2.3.3 4.18.2 | 3 |
| crate/ | b8d89fa5d19b | github.com/ | 4.18.2 | 2 |
| hashicorp/ | 4db614d40d0e | github.com/ | 4.18.2 | 2 |
| hashicorp/ | 6b4e5dadf082 | github.com/ github.com/ github.com/ | 2.3.3 4.18.2 4.18.2 | 2 |
| hashicorp/ | 8de4d5f31b38 | github.com/ github.com/ github.com/ | 2.3.3 4.18.2 4.18.2 | 2 |
| hoppscotch/ | f1da831950b7 | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| lightninglabs/ | f86bbec4dfb3 | github.com/ | 5.5.4 | 2 |
| mesosphere/ | 073db43d0b8b | github.com/ | 2.3.3 | 2 |
| oryd/ | d06fc5845f63 | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| oryd/ | e8cb9b79a89c | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| otel/ | 7ef2a2ff46b9 | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| rancher/ | 12889bbcd1e8 | github.com/ | 5.5.4 | 2 |
| rookout/ | 4451a6f6b8ec | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| rookout/ | 51c0fce64467 | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| zhenghaoz/ | 033046b432ec | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| zhenghaoz/ | 39c565685b01 | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| zhenghaoz/ | f7739f64c9b0 | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| quay.io/ | b736b345437d | github.com/ github.com/ | 2.3.3 4.18.2 | 2 |
| alex6021710/ | 6c7a47e470c3 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| alex6021710/ | 744b8a924f35 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| almorgv/ | 5f2a7d2b44d8 | github.com/ | 4.18.2 | 1 |
| apache/ | ffe68d6b99c0 | github.com/ | 5.5.4 | 1 |
| aquasec/ | 6672264accce | github.com/ | 5.5.4 | 1 |
| aquasec/ | c329d73fea58 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| artifacthub/ | 28c13565ac5c | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| artifacthub/ | 2a746b289fcd | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| baserow/ | df0c42eb67e8 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| bytesafe/ | ee287384c005 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| cockroachdb/ | 983312754620 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| dollarshaveclub/ | 14a257836529 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| drorivry4/ | e035d49b15ca | github.com/ | 5.5.4 | 1 |
| ethpandaops/ | c937f4ba737c | github.com/ | 5.5.4 | 1 |
| factly/ | 66fafc7b0a17 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| factly/ | 94d21479382e | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| factly/ | be85ff1b9bd3 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| factly/ | 384d384310ef | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| factly/ | 87064eb0463c | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| falcosecurity/ | 828ee36cb13a | github.com/ | 5.5.4 | 1 |
| flanksource/ | 1dacc3195bf9 | github.com/ | 5.5.4 | 1 |
| gboxproxy/ | 3a9f4a711d5c | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| goalert/ | 08d57388b0cb | github.com/ | 5.5.4 | 1 |
| gobitfly/ | 1d08a7986348 | github.com/ | 5.5.4 | 1 |
| goharbor/ | 6412d679fdc3 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| goharbor/ | 86bf3031f4a7 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| goharbor/ | 39435daedd0c | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |
| goharbor/ | 8d5339ff2d74 | github.com/ github.com/ | 2.3.3 4.18.2 | 1 |