StackRadar

CVE-2024-7348

High

Advisory

Published 8 Aug 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
194
of 17,781 indexed, latest versions
Container images
203
deployed by those charts
Fix available
13 of 13
affected packages

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

Carried by container images the latest versions of 194 of 17,781 indexed charts deploy, on 203 images.

Affected packageAffected versionsFixed inImages
postgresqlbitnami11.8.0-10, 11.12.0-7, 14.4.0-0, 14.4.0-11+16 more12.20.020
PostgreSQLbitnami15.3.0, 15.4.0, 15.5.0-42, 16.0.0+6 more12.20.011
postgresql-15deb15.3-0+deb12u1, 15.3-1.pgdg120+1, 15.4-2.pgdg120+1, 15.5-0+deb12u1+2 more15.8-0+deb12u142
postgresql-12deb12.7-0ubuntu0.20.04.1, 12.8-0ubuntu0.20.04.1, 12.9-0ubuntu0.20.04.1, 12.11-0ubuntu0.20.04.1+2 more12.20-0ubuntu0.20.04.117
postgresql15apk15.1-r0, 15.2-r0, 15.3-r0, 15.4-r0+2 more15.8-r011
postgresql-14deb14.3-1.pgdg22.04+1, 14.4-0ubuntu0.22.04.1, 14.5-0ubuntu0.22.04.1, 14.6-1.pgdg22.04+1+3 more14.13-0ubuntu0.22.04.110
postgresql16apk16.1-r0, 16.2-r0, 16.2-r1, 16.3-r016.4-r010
postgresql-10deb10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 more10.23-0ubuntu0.18.04.2+esm26
postgresql-9.5deb9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.049.5.25-0ubuntu0.16.04.1+esm83
postgresqlrpm9.2.24-1.el7_50:9.2.24-9.el7_9.12
postgresql-16deb16.2-1ubuntu416.4-0ubuntu0.24.04.11
postgresql-9.3deb9.3.22-0ubuntu0.14.049.3.24-0ubuntu0.14.04+esm11
postgresql-13deb13.3-1, 13.4-0+deb11u1, 13.5-0+deb11u1, 13.6-1.pgdg110+1+10 more13.16-0+deb11u179
OSV records
ALPINE-CVE-2024-7348BIT-postgresql-2024-7348DEBIAN-CVE-2024-7348RHSA-2024:8495UBUNTU-CVE-2024-7348DSA-5746-1
Also known as
DSA-5745-1, USN-6968-1, USN-6968-2, USN-6968-3

Charts affected

194 by stars
ChartLatestAffected imagesRadar Score
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
postgresql-12@12.7-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
postgresql-12@12.7-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
postgresql-12@12.7-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
postgresql-12@12.7-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
postgresql-12@12.7-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1

Open the chart page →

113,791
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
postgresql15@15.4-r0
15.8-r0

Open the chart page →

5,940
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
postgresql-13@13.9-0+deb11u1
13.16-0+deb11u1

Open the chart page →

5,804
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.5.06887635cc793
postgresql@15.5.0-42
PostgreSQL@15.5.0-42
12.20.0
12.20.0

Open the chart page →

37,373
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
postgresql-13@13.5-0+deb11u1
13.16-0+deb11u1

Open the chart page →

2,850
pritunl-slack-apppritunl-slack-appVerified publisher0.1.71 of 1See more

pritunl-slack-app pritunl-slack-app 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
postgresql-13@13.8-0+deb11u1
13.16-0+deb11u1

Open the chart page →

2,871
atuinrm3lVerified publisher0.11.01 of 3See more

atuin rm3l 0.11.0

1 of the 3 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
postgresql@16.2.0-4
PostgreSQL@16.2.0-4
12.20.0
12.20.0

Open the chart page →

6,521
healthchecksstackhelmVerified publisher0.1.01 of 2See more

healthchecks stackhelm 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
healthchecks/healthchecks:v2.8.1e82bb0836e30
postgresql-13@13.9-0+deb11u1
13.16-0+deb11u1

Open the chart page →

2,236
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
postgresql-12@12.7-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1

Open the chart page →

24,930
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
postgresql-13@13.5-0+deb11u1
13.16-0+deb11u1

Open the chart page →

3,332
postfixadminvolker-raschekVerified publisher0.3.11 of 1See more

postfixadmin volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
volkerraschek/postfixadmin:3.3.13c4f10aebf87b
postgresql-13@13.9-0+deb11u1
13.16-0+deb11u1

Open the chart page →

1,083
postfixadmin-fetchmailvolker-raschekVerified publisher0.4.01 of 1See more

postfixadmin-fetchmail volker-raschek 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
volkerraschek/postfixadmin-fetchmail:0.3.0e4cf12c6249d
postgresql15@15.1-r0
15.8-r0

Open the chart page →

1,259
redirectwyrihaximusnetVerified publisher1.1.01 of 1See more

redirect wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
postgresql16@16.3-r0
16.4-r0

Open the chart page →

1,581
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
postgresql-13@13.11-0+deb11u1
13.16-0+deb11u1

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
postgresql-14@14.7-1.pgdg22.04+1
14.13-0ubuntu0.22.04.1

Open the chart page →

32,501
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r775f4cf61668e5
postgresql@15.3.0-9
PostgreSQL@15.3.0
12.20.0
12.20.0

Open the chart page →

9,722
axosyslog-collectoraxosyslogVerified publisher0.8.11 of 1See more

axosyslog-collector axosyslog 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
postgresql15@15.5-r0
15.8-r0

Open the chart page →

1,516
stablecalltelemetry0.7.11 of 9See more

stable calltelemetry 0.7.1

1 of the 9 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
calltelemetry/web:0.6.7457a7e353542
postgresql-13@13.7-0+deb11u1
13.16-0+deb11u1

Open the chart page →

7,702
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
postgresql-13@13.9-0+deb11u1
13.16-0+deb11u1

Open the chart page →

2,507
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
postgresql16@16.3-r0
16.4-r0

Open the chart page →

16,198
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

5,982
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
robotshop/rs-payment:latest774b52c6180d
postgresql-13@13.3-1
13.16-0+deb11u1

Open the chart page →

29,555
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
postgresql-9.3@9.3.22-0ubuntu0.14.04
9.3.24-0ubuntu0.14.04+esm1

Open the chart page →

70,895
postgresqlcowboysysopVerified publisher15.5.71 of 1See more

postgresql cowboysysop 15.5.7

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
postgresql@16.3.0-11
PostgreSQL@16.3.0-11
12.20.0
12.20.0

Open the chart page →

4,770
rtcsic-charts0.1.12 of 5See more

rt csic-charts 0.1.1

2 of the 5 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1
library/postgres:13.11-bullseye5c265bf1fd30
postgresql-13@13.11-1.pgdg110+1
13.16-0+deb11u1

Open the chart page →

15,380
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
aristidetm/k8s-hub:3.3.7ccb516cb8474
postgresql-13@13.14-0+deb11u1
13.16-0+deb11u1

Open the chart page →

16,604
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
postgresql-10@10.10-0ubuntu0.18.04.1
10.23-0ubuntu0.18.04.2+esm2

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
postgresql-10@10.14-0ubuntu0.18.04.1
10.23-0ubuntu0.18.04.2+esm2

Open the chart page →

18,863
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
postgresql-10@10.6-0ubuntu0.18.04.1
10.23-0ubuntu0.18.04.2+esm2

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
postgresql-10@10.10-0ubuntu0.18.04.1
10.23-0ubuntu0.18.04.2+esm2

Open the chart page →

24,335
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
postgresql-14@14.5-0ubuntu0.22.04.1
14.13-0ubuntu0.22.04.1

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
postgresql-14@14.5-0ubuntu0.22.04.1
14.13-0ubuntu0.22.04.1

Open the chart page →

29,033
dbdumpdjjudas21Verified publisher0.0.171 of 1See more

dbdump djjudas21 0.0.17

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
djjudas21/dbdump:0.0.917fc245e29bd
postgresql16@16.2-r0
16.4-r0

Open the chart page →

654
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
postgresql-15@15.5-0+deb12u1
15.8-0+deb12u1

Open the chart page →

14,627
codecovdoubanVerified publisher0.2.43 of 8See more

codecov douban 0.2.4

3 of the 8 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
postgresql15@15.6-r0
15.8-r0
codecov/self-hosted-worker:24.4.1837f546b479b
postgresql15@15.6-r0
15.8-r0
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
postgresql-14@14.6-1.pgdg22.04+1
14.13-0ubuntu0.22.04.1

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
postgresql-13@13.7-0+deb11u1
13.16-0+deb11u1

Open the chart page →

4,550
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
postgresql-13@13.3-1
13.16-0+deb11u1

Open the chart page →

3,421
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
postgresql-14@14.3-1.pgdg22.04+1
14.13-0ubuntu0.22.04.1

Open the chart page →

30,699
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.4258958fe2ff2
postgresql15@15.4-r0
15.8-r0

Open the chart page →

20,205
pgdump-to-s3duck-helm0.1.41 of 1See more

pgdump-to-s3 duck-helm 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
postgresql-13@13.7-0+deb11u1
13.16-0+deb11u1

Open the chart page →

1,362
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
postgresql-13@13.11-0+deb11u1
13.16-0+deb11u1

Open the chart page →

1,998
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
postgresql-13@13.8-0+deb11u1
13.16-0+deb11u1

Open the chart page →

7,541
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
postgresql-13@13.8-0+deb11u1
13.16-0+deb11u1

Open the chart page →

7,541
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
postgresql@15.3.0-3
PostgreSQL@15.3.0
12.20.0
12.20.0

Open the chart page →

2,991
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
postgresql-13@13.9-0+deb11u1
13.16-0+deb11u1

Open the chart page →

4,085
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
postgresql-13@13.5-0+deb11u1
13.16-0+deb11u1

Open the chart page →

4,127
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
stratospire/activityrelay:0.2.3a4c34cb01117
postgresql-13@13.8-0+deb11u1
13.16-0+deb11u1

Open the chart page →

13,450
forms-catalogueforms-catalogue0.1.01 of 2See more

forms-catalogue forms-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
postgresql-13@13.3-1
13.16-0+deb11u1

Open the chart page →

2,188
icinga2g0dscookie0.2.01 of 1See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
postgresql-13@13.8-0+deb11u1
13.16-0+deb11u1

Open the chart page →

4,428

Container images carrying it

203 by charts deploying them

A fixed version is listed for 13 of the 13 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
postgresql-13@13.3-1
13.16-0+deb11u1
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
postgresql-13@13.3-1
13.16-0+deb11u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.