CVE-2025-4207

Medium

Advisory

Published 8 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 252; of 17,781 indexed, latest versions
Container images: 254; deployed by those charts
Fix available: 10 of 13; affected packages

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Carried by container images the latest versions of 252 of 17,781 indexed charts deploy, on 254 images.

Affected package	Affected versions	Fixed in	Images
postgresql-15deb	15.3-0+deb12u1, 15.3-1.pgdg120+1, 15.4-2.pgdg120+1, 15.5-0+deb12u1+6 more	15.13-0+deb12u1	76
postgresqlbitnami	11.8.0-10, 11.12.0-7, 14.4.0-0, 14.4.0-11+23 more	13.21.0	28
postgresql-12deb	12.7-0ubuntu0.20.04.1, 12.8-0ubuntu0.20.04.1, 12.9-0ubuntu0.20.04.1, 12.11-0ubuntu0.20.04.1+2 more	12.22-0ubuntu0.20.04.4	17
postgresql16apk	16.1-r0, 16.2-r0, 16.2-r1, 16.3-r0+2 more	16.9-r0	13
PostgreSQLbitnami	15.3.0, 15.4.0, 15.5.0-42, 16.0.0+6 more	13.21.0	11
postgresql-14deb	14.3-1.pgdg22.04+1, 14.4-0ubuntu0.22.04.1, 14.5-0ubuntu0.22.04.1, 14.6-1.pgdg22.04+1+4 more	14.18-0ubuntu0.22.04.1	11
postgresql15apk	15.3-r0, 15.4-r0, 15.5-r0, 15.6-r0+1 more	15.13-r0	8
postgresql-10deb	10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 more	no fix listed	6
postgresql17apk	17.2-r0, 17.4-r0	17.5-r0	3
postgresql-9.5deb	9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.04	no fix listed	3
postgresql-16deb	16.2-1ubuntu4, 16.6-0ubuntu0.24.04.1	16.9-0ubuntu0.24.04.1	2
postgresql-9.3deb	9.3.22-0ubuntu0.14.04	no fix listed	1
postgresql-13deb	13.3-1, 13.4-0+deb11u1, 13.5-0+deb11u1, 13.6-1.pgdg110+1+13 more	13.21-0+deb11u1	85

OSV records: ALPINE-CVE-2025-4207 BIT-postgresql-2025-4207 DEBIAN-CVE-2025-4207 UBUNTU-CVE-2025-4207 DLA-4159-1
Also known as: USN-7520-1

Charts affected

252 by stars

Chart

Latest

Affected images

Radar Score

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	postgresql@16.6.0-1	13.21.0

Open the chart page →

11,577

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1

Open the chart page →

1,838

Container images carrying it

254 by charts deploying them

A fixed version is listed for 10 of the 13 affected packages.

Container image	Digest	Package	Fixed in	Used by
socialmediamacroscope/classification_predict :0.1.2	4fb86885d64d	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/classification_split :0.1.2	4bfda60829fe	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/classification_train :0.1.2	07477060bba8	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/clowder_create_collection :0.1.0	c969f7677983	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/clowder_create_dataset :0.1.0	9b4211832429	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/clowder_create_space :0.1.0	999f2ff2c128	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/clowder_list :0.1.0	51cb17626519	postgresql-13@13.10-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/clowder_upload_file :0.1.2	74e35f64db68	postgresql-13@13.11-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	postgresql-15@15.3-0+deb12u1	15.13-0+deb12u1	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	postgresql-15@15.3-0+deb12u1	15.13-0+deb12u1	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	postgresql-15@15.3-0+deb12u1	15.13-0+deb12u1	1
socialmediamacroscope/screen_name_prompt :0.1.2	724f3f5702e0	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	postgresql-15@15.3-0+deb12u1	15.13-0+deb12u1	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	postgresql-12@12.11-0ubuntu0.20.04.1	12.22-0ubuntu0.20.04.4	1
statcan/ckan :2.9	3921305425b8	postgresql-12@12.7-0ubuntu0.20.04.1	12.22-0ubuntu0.20.04.4	1
stratospire/activityrelay :0.2.3	a4c34cb01117	postgresql-13@13.8-0+deb11u1	13.21-0+deb11u1	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	postgresql-15@15.6-0+deb12u1	15.13-0+deb12u1	1
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	postgresql-13@13.13-0+deb11u1	13.21-0+deb11u1	1
teknas09/bird-pod :latest	12a1fa85c4aa	postgresql-15@15.6-0+deb12u1	15.13-0+deb12u1	1
temporalio/admin-tools :1.22.4	258958fe2ff2	postgresql15@15.4-r0	15.13-r0	1
temporalio/admin-tools :1.26.2	37e2e33dbd7b	postgresql16@16.3-r0	16.9-r0	1
temporalio/admin-tools :1.22.0	836af062af30	postgresql15@15.3-r0	15.13-r0	1
temporalio/admin-tools :1.25.0-tctl-1.18.1-cli-1.0.0	cda4901bab53	postgresql16@16.3-r0	16.9-r0	1
theradius/loggia :0.4	63ba348546ec	postgresql-15@15.5-0+deb12u1	15.13-0+deb12u1	1
thingsboard/toolbox :1.13.0	1bd61a0da6d3	postgresql15@15.10-r0	15.13-r0	1
thongngo3301/stakefish :latest	a341af5976e3	postgresql-15@15.3-0+deb12u1	15.13-0+deb12u1	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	postgresql-14@14.7-1.pgdg22.04+1	14.18-0ubuntu0.22.04.1	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	postgresql-14@14.6-1.pgdg22.04+1	14.18-0ubuntu0.22.04.1	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	postgresql-14@14.3-1.pgdg22.04+1	14.18-0ubuntu0.22.04.1	1
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	postgresql16@16.3-r0	16.9-r0	1
tpdock/freeradius :2.2.9	3da600c95a49	postgresql-9.5@9.5.10-0ubuntu0.16.04	no fix listed	1
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	postgresql-15@15.10-0+deb12u1	15.13-0+deb12u1	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	postgresql-14@14.11-1.pgdg22.04+1	14.18-0ubuntu0.22.04.1	1
ubcctlt/barman :v2.19	cbbbbc8ae16b	postgresql-13@13.6-1.pgdg110+1	13.21-0+deb11u1	1
uffizzi/app :latest	66e9e3937c60	postgresql-13@13.14-0+deb11u1	13.21-0+deb11u1	1
vaultwarden/server :1.29.1	c2849f8189e4	postgresql-13@13.11-0+deb11u1	13.21-0+deb11u1	1
vlebediantsev/notes-admin-front :latest	007c6670ff48	postgresql-15@15.3-0+deb12u1	15.13-0+deb12u1	1
vlebediantsev/notes-project-front :latest	945675fd2636	postgresql-15@15.3-0+deb12u1	15.13-0+deb12u1	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	postgresql-15@15.3-0+deb12u1	15.13-0+deb12u1	1
volkerraschek/postfixadmin :3.3.13	c4f10aebf87b	postgresql-13@13.9-0+deb11u1	13.21-0+deb11u1	1
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	postgresql-15@15.8-0+deb12u1	15.13-0+deb12u1	1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	postgresql-15@15.8-0+deb12u1	15.13-0+deb12u1	1
youssef11gaber10/deployment-ui-react :latest	ba6853e35c60	postgresql-13@13.7-0+deb11u1	13.21-0+deb11u1	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	postgresql-12@12.8-0ubuntu0.20.04.1	12.22-0ubuntu0.20.04.4	1
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	postgresql-14@14.5-0ubuntu0.22.04.1	14.18-0ubuntu0.22.04.1	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	postgresql-12@12.8-0ubuntu0.20.04.1	12.22-0ubuntu0.20.04.4	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	postgresql-14@14.5-0ubuntu0.22.04.1	14.18-0ubuntu0.22.04.1	1
zzorica/k8s-mgmt-pod :0.5.2	640ca4de2922	postgresql-13@13.7-0+deb11u1	13.21-0+deb11u1	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	postgresql-15@15.8-0+deb12u1	15.13-0+deb12u1	1
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	postgresql-13@13.8-0+deb11u1	13.21-0+deb11u1	1