StackRadar

CVE-2024-7348

High

Advisory

Published 8 Aug 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
194
of 17,781 indexed, latest versions
Container images
203
deployed by those charts
Fix available
13 of 13
affected packages

PostgreSQL relation replacement during pg_dump executes arbitrary SQL

Carried by container images the latest versions of 194 of 17,781 indexed charts deploy, on 203 images.

Affected packageAffected versionsFixed inImages
postgresqlbitnami11.8.0-10, 11.12.0-7, 14.4.0-0, 14.4.0-11+16 more12.20.020
PostgreSQLbitnami15.3.0, 15.4.0, 15.5.0-42, 16.0.0+6 more12.20.011
postgresql-15deb15.3-0+deb12u1, 15.3-1.pgdg120+1, 15.4-2.pgdg120+1, 15.5-0+deb12u1+2 more15.8-0+deb12u142
postgresql-12deb12.7-0ubuntu0.20.04.1, 12.8-0ubuntu0.20.04.1, 12.9-0ubuntu0.20.04.1, 12.11-0ubuntu0.20.04.1+2 more12.20-0ubuntu0.20.04.117
postgresql15apk15.1-r0, 15.2-r0, 15.3-r0, 15.4-r0+2 more15.8-r011
postgresql-14deb14.3-1.pgdg22.04+1, 14.4-0ubuntu0.22.04.1, 14.5-0ubuntu0.22.04.1, 14.6-1.pgdg22.04+1+3 more14.13-0ubuntu0.22.04.110
postgresql16apk16.1-r0, 16.2-r0, 16.2-r1, 16.3-r016.4-r010
postgresql-10deb10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 more10.23-0ubuntu0.18.04.2+esm26
postgresql-9.5deb9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.049.5.25-0ubuntu0.16.04.1+esm83
postgresqlrpm9.2.24-1.el7_50:9.2.24-9.el7_9.12
postgresql-16deb16.2-1ubuntu416.4-0ubuntu0.24.04.11
postgresql-9.3deb9.3.22-0ubuntu0.14.049.3.24-0ubuntu0.14.04+esm11
postgresql-13deb13.3-1, 13.4-0+deb11u1, 13.5-0+deb11u1, 13.6-1.pgdg110+1+10 more13.16-0+deb11u179
OSV records
ALPINE-CVE-2024-7348BIT-postgresql-2024-7348DEBIAN-CVE-2024-7348RHSA-2024:8495UBUNTU-CVE-2024-7348DSA-5746-1
Also known as
DSA-5745-1, USN-6968-1, USN-6968-2, USN-6968-3

Charts affected

194 by stars
ChartLatestAffected imagesRadar Score
postgresql-backupphntom0.1.91 of 1See more

postgresql-backup phntom 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
phntom/postgresql-backup-s3:1.0.2249b6488f618b
postgresql15@15.1-r0
15.8-r0

Open the chart page →

2,556
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

16,196
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
postgresql-15@15.7-0+deb12u1
15.8-0+deb12u1

Open the chart page →

11,347
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
postgresql-15@15.7-0+deb12u1
15.8-0+deb12u1

Open the chart page →

11,923
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

12,912
polyaxonpolyaxon2.16.41 of 5See more

polyaxon polyaxon 2.16.4

1 of the 5 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
postgresql@16.4.0-10
12.20.0

Open the chart page →

13,741
postgres-controllerpostgres-controller1.3.61 of 1See more

postgres-controller postgres-controller 1.3.6

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
evgkrsk/postgres-controller:0.6.237f0e1f435c3
postgresql15@15.1-r0
15.8-r0

Open the chart page →

1,782
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1

Open the chart page →

14,537
python-apppython-app-chart0.1.01 of 2See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
mnaggar3396/python-app:latest371d8ed84b15
postgresql-13@13.7-0+deb11u1
13.16-0+deb11u1

Open the chart page →

3,382
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
postgresql-13@13.7-0+deb11u1
13.16-0+deb11u1

Open the chart page →

2,983
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

12,566
vaultwardenqbittorrent-helm5.4.01 of 1See more

vaultwarden qbittorrent-helm 5.4.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
vaultwarden/server:1.29.1c2849f8189e4
postgresql-13@13.11-0+deb11u1
13.16-0+deb11u1

Open the chart page →

680
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
postgresql16@16.2-r1
16.4-r0
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
postgresql16@16.2-r1
16.4-r0

Open the chart page →

21,211
rdfoxrdfox-helm-chart0.1.22 of 2See more

rdfox rdfox-helm-chart 0.1.2

2 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
oxfordsemantic/rdfox:5.6db17910eb855
postgresql-12@12.9-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1
oxfordsemantic/rdfox-init:5.6baf570ff968d
postgresql-12@12.9-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1

Open the chart page →

12,802
remla23-team17remla23-team171.0.02 of 2See more

remla23-team17 remla23-team17 1.0.0

2 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
postgresql-13@13.11-0+deb11u1
13.16-0+deb11u1
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
postgresql-13@13.11-0+deb11u1
13.16-0+deb11u1

Open the chart page →

4,447
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
postgresql-13@13.7-0+deb11u1
13.16-0+deb11u1

Open the chart page →

25,737
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
postgresql-13@13.3-1
13.16-0+deb11u1

Open the chart page →

2,201
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
fluent/fluent-bit:2.2.00fa18c71d821
postgresql-13@13.11-0+deb11u1
13.16-0+deb11u1

Open the chart page →

4,600
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
postgresql-13@13.9-0+deb11u1
13.16-0+deb11u1

Open the chart page →

6,026
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1

Open the chart page →

16,620
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
postgresql-13@13.7-1.pgdg110+1
13.16-0+deb11u1

Open the chart page →

2,637
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
postgresql@14.4.0-11
12.20.0

Open the chart page →

11,636
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
helga09/shoes_ukr:v1.1.17999bc8b77c0
postgresql-13@13.10-0+deb11u1
13.16-0+deb11u1

Open the chart page →

7,574
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
postgresql-12@12.11-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1

Open the chart page →

30,687
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1

Open the chart page →

20,223
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

13,390
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
postgresql-12@12.12-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1

Open the chart page →

12,655
icingawebsvtech-public-helm-charts1.0.01 of 2See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
postgresql-13@13.13-0+deb11u1
13.16-0+deb11u1

Open the chart page →

2,038
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.0836af062af30
postgresql15@15.3-r0
15.8-r0

Open the chart page →

21,005
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

28,814
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

28,858
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
postgresql-12@12.19-0ubuntu0.20.04.1
12.20-0ubuntu0.20.04.1

Open the chart page →

10,006
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
postgresql-13@13.9-0+deb11u1
13.16-0+deb11u1

Open the chart page →

3,164
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
postgresql-15@15.5-0+deb12u1
15.8-0+deb12u1

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
postgresql-16@16.2-1ubuntu4
16.4-0ubuntu0.24.04.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1

Open the chart page →

14,358
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
postgresql-14@14.11-1.pgdg22.04+1
14.13-0ubuntu0.22.04.1

Open the chart page →

13,459
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
postgresql-13@13.7-0+deb11u1
13.16-0+deb11u1

Open the chart page →

3,392
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
postgresql-15@15.6-0+deb12u1
15.8-0+deb12u1

Open the chart page →

7,085
vaultwardenwitcom-gmbh0.2.01 of 2See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
vaultwarden/server:1.25.239f34c5159a2
postgresql-13@13.7-0+deb11u1
13.16-0+deb11u1

Open the chart page →

1,585
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-7348.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
postgresql-13@13.9-0+deb11u1
13.16-0+deb11u1

Open the chart page →

1,838

Container images carrying it

203 by charts deploying them

A fixed version is listed for 13 of the 13 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
postgresql-15@15.3-0+deb12u1
15.8-0+deb12u1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
postgresql-13@13.3-1
13.16-0+deb11u1
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
postgresql-13@13.3-1
13.16-0+deb11u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.