StackRadar

CVE-2025-4207

Medium

Advisory

Published 8 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
252
of 17,781 indexed, latest versions
Container images
254
deployed by those charts
Fix available
10 of 13
affected packages

PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validation

Carried by container images the latest versions of 252 of 17,781 indexed charts deploy, on 254 images.

Affected packageAffected versionsFixed inImages
postgresql-15deb15.3-0+deb12u1, 15.3-1.pgdg120+1, 15.4-2.pgdg120+1, 15.5-0+deb12u1+6 more15.13-0+deb12u176
postgresqlbitnami11.8.0-10, 11.12.0-7, 14.4.0-0, 14.4.0-11+23 more13.21.028
postgresql-12deb12.7-0ubuntu0.20.04.1, 12.8-0ubuntu0.20.04.1, 12.9-0ubuntu0.20.04.1, 12.11-0ubuntu0.20.04.1+2 more12.22-0ubuntu0.20.04.417
postgresql16apk16.1-r0, 16.2-r0, 16.2-r1, 16.3-r0+2 more16.9-r013
PostgreSQLbitnami15.3.0, 15.4.0, 15.5.0-42, 16.0.0+6 more13.21.011
postgresql-14deb14.3-1.pgdg22.04+1, 14.4-0ubuntu0.22.04.1, 14.5-0ubuntu0.22.04.1, 14.6-1.pgdg22.04+1+4 more14.18-0ubuntu0.22.04.111
postgresql15apk15.3-r0, 15.4-r0, 15.5-r0, 15.6-r0+1 more15.13-r08
postgresql-10deb10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 moreno fix listed6
postgresql17apk17.2-r0, 17.4-r017.5-r03
postgresql-9.5deb9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.04no fix listed3
postgresql-16deb16.2-1ubuntu4, 16.6-0ubuntu0.24.04.116.9-0ubuntu0.24.04.12
postgresql-9.3deb9.3.22-0ubuntu0.14.04no fix listed1
postgresql-13deb13.3-1, 13.4-0+deb11u1, 13.5-0+deb11u1, 13.6-1.pgdg110+1+13 more13.21-0+deb11u185
OSV records
ALPINE-CVE-2025-4207BIT-postgresql-2025-4207DEBIAN-CVE-2025-4207UBUNTU-CVE-2025-4207DLA-4159-1
Also known as
USN-7520-1

Charts affected

252 by stars
ChartLatestAffected imagesRadar Score
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
opencsghq/psql:latest57def8e77d0f
postgresql17@17.2-r0
17.5-r0

Open the chart page →

11,335
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
opencsghq/psql:latest57def8e77d0f
postgresql17@17.2-r0
17.5-r0

Open the chart page →

6,632
rtcsic-charts0.1.12 of 5See more

rt csic-charts 0.1.1

2 of the 5 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
postgresql-15@15.3-0+deb12u1
15.13-0+deb12u1
library/postgres:13.11-bullseye5c265bf1fd30
postgresql-13@13.11-1.pgdg110+1
13.21-0+deb11u1

Open the chart page →

15,380
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
aristidetm/k8s-hub:3.3.7ccb516cb8474
postgresql-13@13.14-0+deb11u1
13.21-0+deb11u1

Open the chart page →

16,604
pgcatdasmeta0.1.31 of 2See more

pgcat dasmeta 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
postgresql-15@15.8-0+deb12u1
15.13-0+deb12u1

Open the chart page →

3,139
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
postgresql-10@10.10-0ubuntu0.18.04.1
no fix listed

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
postgresql-10@10.14-0ubuntu0.18.04.1
no fix listed

Open the chart page →

18,863
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
postgresql-16@16.6-0ubuntu0.24.04.1
16.9-0ubuntu0.24.04.1

Open the chart page →

6,123
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
postgresql-16@16.6-0ubuntu0.24.04.1
16.9-0ubuntu0.24.04.1

Open the chart page →

5,974
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
postgresql-10@10.6-0ubuntu0.18.04.1
no fix listed

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
postgresql-10@10.10-0ubuntu0.18.04.1
no fix listed

Open the chart page →

24,335
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
postgresql-15@15.10-0+deb12u1
15.13-0+deb12u1

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
postgresql-15@15.8-0+deb12u1
15.13-0+deb12u1

Open the chart page →

6,075
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
postgresql-14@14.5-0ubuntu0.22.04.1
14.18-0ubuntu0.22.04.1

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
postgresql-14@14.5-0ubuntu0.22.04.1
14.18-0ubuntu0.22.04.1

Open the chart page →

29,033
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
postgresql@17.5.0-9
13.21.0

Open the chart page →

4,046
dbdumpdjjudas21Verified publisher0.0.171 of 1See more

dbdump djjudas21 0.0.17

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
djjudas21/dbdump:0.0.917fc245e29bd
postgresql16@16.2-r0
16.9-r0

Open the chart page →

654
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
postgresql-15@15.5-0+deb12u1
15.13-0+deb12u1

Open the chart page →

14,627
codecovdoubanVerified publisher0.2.43 of 8See more

codecov douban 0.2.4

3 of the 8 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
postgresql15@15.6-r0
15.13-r0
codecov/self-hosted-worker:24.4.1837f546b479b
postgresql15@15.6-r0
15.13-r0
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
postgresql-14@14.6-1.pgdg22.04+1
14.18-0ubuntu0.22.04.1

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
postgresql-13@13.7-0+deb11u1
13.21-0+deb11u1

Open the chart page →

4,550
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
postgresql-13@13.3-1
13.21-0+deb11u1

Open the chart page →

3,421
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
postgresql-14@14.3-1.pgdg22.04+1
14.18-0ubuntu0.22.04.1

Open the chart page →

30,699
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.4258958fe2ff2
postgresql15@15.4-r0
15.13-r0

Open the chart page →

20,205
pgdump-to-s3duck-helm0.1.41 of 1See more

pgdump-to-s3 duck-helm 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
postgresql-13@13.7-0+deb11u1
13.21-0+deb11u1

Open the chart page →

1,362
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
postgresql-13@13.11-0+deb11u1
13.21-0+deb11u1

Open the chart page →

1,998
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
postgresql-13@13.8-0+deb11u1
13.21-0+deb11u1

Open the chart page →

7,541
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
postgresql-13@13.8-0+deb11u1
13.21-0+deb11u1

Open the chart page →

7,541
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
postgresql@15.3.0-3
PostgreSQL@15.3.0
13.21.0
13.21.0

Open the chart page →

2,991
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
postgresql-13@13.9-0+deb11u1
13.21-0+deb11u1

Open the chart page →

4,085
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
postgresql-13@13.5-0+deb11u1
13.21-0+deb11u1

Open the chart page →

4,127
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
stratospire/activityrelay:0.2.3a4c34cb01117
postgresql-13@13.8-0+deb11u1
13.21-0+deb11u1

Open the chart page →

13,450
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
postgresql-15@15.8-0+deb12u1
15.13-0+deb12u1

Open the chart page →

10,741
fibfibonacci-cluster-appsVerified publisher1.0.01 of 5See more

fib fibonacci-cluster-apps 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
golenski/db-init:1.0.086ca17cd3063
postgresql-13@13.16-0+deb11u1
13.21-0+deb11u1

Open the chart page →

16,927
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
postgresql-13@13.18-0+deb11u1
13.21-0+deb11u1

Open the chart page →

7,691
forms-catalogueforms-catalogue0.1.01 of 2See more

forms-catalogue forms-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
postgresql-13@13.3-1
13.21-0+deb11u1

Open the chart page →

2,188
icinga2g0dscookie0.2.01 of 1See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
postgresql-13@13.8-0+deb11u1
13.21-0+deb11u1

Open the chart page →

4,428
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
postgresql17@17.2-r0
17.5-r0

Open the chart page →

2,438
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
postgresql16@16.6-r0
16.9-r0

Open the chart page →

2,183
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
postgresql-12@12.12-0ubuntu0.20.04.1
12.22-0ubuntu0.20.04.4

Open the chart page →

27,949
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
postgresql-15@15.3-0+deb12u1
15.13-0+deb12u1

Open the chart page →

24,995
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
fluent/fluent-bit:2.15766d881ddb1
postgresql-13@13.11-0+deb11u1
13.21-0+deb11u1

Open the chart page →

12,650
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
postgresql-15@15.6-0+deb12u1
15.13-0+deb12u1

Open the chart page →

12,607
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
postgresql-14@14.10-0ubuntu0.22.04.1
14.18-0ubuntu0.22.04.1

Open the chart page →

14,290
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
postgresql-15@15.5-0+deb12u1
15.13-0+deb12u1

Open the chart page →

16,384
ilum-hive-metastoreilumVerified publisher1.2.01 of 2See more

ilum-hive-metastore ilum 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
postgresql@16.6.0-1
13.21.0

Open the chart page →

3,571
ilum-marquezilumVerified publisher6.7.01 of 3See more

ilum-marquez ilum 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
postgresql@16.6.0-1
13.21.0

Open the chart page →

6,254
pgcatimprowisedVerified publisher0.1.01 of 1See more

pgcat improwised 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
postgresql-15@15.5-0+deb12u1
15.13-0+deb12u1

Open the chart page →

3,775
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
postgresql-15@15.5-0+deb12u1
15.13-0+deb12u1

Open the chart page →

17,852
daveit-at-mOfficialVerified publisher0.2.151 of 11See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
postgresql@17.5.0-14
13.21.0

Open the chart page →

15,089
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-4207.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
postgresql-16@16.2-1ubuntu4
16.9-0ubuntu0.24.04.1

Open the chart page →

45,239

Container images carrying it

254 by charts deploying them

A fixed version is listed for 10 of the 13 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
postgresql-13@13.13-0+deb11u1
13.21-0+deb11u1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
postgresql-15@15.3-0+deb12u1
15.13-0+deb12u1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
postgresql-13@13.3-1
13.21-0+deb11u1
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
postgresql-13@13.3-1
13.21-0+deb11u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.