StackRadar

CVE-2026-14672

Medium

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
152
of 17,781 indexed, latest versions
Container images
130
deployed by those charts
Fix available
7 of 8
affected packages

PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 130 images.

Affected packageAffected versionsFixed inImages
postgresql-17deb17.5-1, 17.5-1.pgdg130+1, 17.6-0+deb13u1, 17.6-2.pgdg13+1+7 more17.11, 17.11-0+deb13u155
postgresql18apk18.1-r0, 18.2-r0, 18.3-r0, 18.4-r018.5-r026
postgresqlbitnami16.1.0-14, 16.1.0-34, 16.2.0-2, 16.2.0-4+15 more16.15.020
postgresql17apk17.2-r0, 17.4-r0, 17.5-r0, 17.6-r0+3 more17.11-r012
postgresql-16deb16.2-1ubuntu4, 16.6-0ubuntu0.24.04.1, 16.9-0ubuntu0.24.04.1, 16.10-0ubuntu0.24.04.1+2 more16.15-0ubuntu0.24.04.111
PostgreSQLbitnami16.0.0, 16.1.0, 16.1.0-34, 16.2.0-2+3 more16.15.07
postgresql-18deb18.4-0ubuntu0.26.04.1, 18.4-1.pgdg26.04+118.6-0ubuntu0.26.04.14
postgresql-9.3deb9.3.22-0ubuntu0.14.04no fix listed1
OSV records
ALPINE-CVE-2026-14672BIT-postgresql-2026-14672DEBIAN-CVE-2026-14672UBUNTU-CVE-2026-14672ECHO-1137-4f23-2f4e
Also known as
USN-8653-1

Charts affected

152 by stars
ChartLatestAffected imagesRadar Score
mumble-serverjuniorjpdj0.1.411 of 1See more

mumble-server juniorjpdj 0.1.41

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
postgresql-16@16.14-0ubuntu0.24.04.1
16.15-0ubuntu0.24.04.1

Open the chart page →

2,099
bazarrk8s-home-lab-repo11.3.21 of 1See more

bazarr k8s-home-lab-repo 11.3.2

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
postgresql18@18.4-r0
18.5-r0

Open the chart page →

1,794
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
postgresql-17@17.9-0+deb13u1
17.11-0+deb13u1

Open the chart page →

9,103
syslog-ngk8s-home-lab-repo3.1.11 of 1See more

syslog-ng k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
postgresql18@18.4-r0
18.5-r0

Open the chart page →

1,298
vaultwardenk8s-home-lab-repo6.2.31 of 1See more

vaultwarden k8s-home-lab-repo 6.2.3

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.79a8eec71f4a5
postgresql-17@17.9-0+deb13u1
17.11-0+deb13u1

Open the chart page →

2,854
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
postgresql@17.5.0-14
16.15.0

Open the chart page →

14,801
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
postgresql-17@17.8-0+deb13u1
17.11-0+deb13u1

Open the chart page →

4,568
kestra-starterkestraOfficialVerified publisher2.0.11 of 5See more

kestra-starter kestra 2.0.1

1 of the 5 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
library/postgres:17.5aadf2c0696f5
postgresql-17@17.5-1.pgdg130+1
17.11-0+deb13u1

Open the chart page →

5,455
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
postgresql@17.2.0-4
16.15.0

Open the chart page →

12,062
proxysqlklicktippVerified publisher1.3.01 of 1See more

proxysql klicktipp 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.8947a7abad45b
postgresql-17@17.9-0+deb13u1
17.11-0+deb13u1

Open the chart page →

2,520
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
postgresql@16.3.0-12
16.15.0

Open the chart page →

9,098
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
postgresql-17@17.9-0+deb13u1
17.11-0+deb13u1

Open the chart page →

9,620
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1

Open the chart page →

4,382
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1

Open the chart page →

2,035
vaultwardenleprechaun-charts0.1.281 of 1See more

vaultwarden leprechaun-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1

Open the chart page →

2,035
bazarrm0nsterrr-bazarrVerified publisher2.3.01 of 1See more

bazarr m0nsterrr-bazarr 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.6.0cd63bbd0986c
postgresql18@18.4-r0
18.5-r0

Open the chart page →

898
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
postgresql18@18.3-r0
18.5-r0

Open the chart page →

3,706
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
postgresql-17@17.9-0+deb13u1
17.11-0+deb13u1

Open the chart page →

11,950
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
vaultwarden/server:1.35.443498a94b22f
postgresql-17@17.8-0+deb13u1
17.11-0+deb13u1

Open the chart page →

4,710
szurubooru-servermy0nVerified publisher0.2.51 of 3See more

szurubooru-server my0n 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
szurubooru/server:2.5accf2ad9fbc3
postgresql17@17.10-r0
17.11-r0

Open the chart page →

1,043
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.03ba6e6f11388
postgresql@16.4.0-20
16.15.0

Open the chart page →

15,369
jupyterhub-metricsncsaVerified publisher1.3.01 of 5See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
postgresql17@17.8-r0
17.11-r0

Open the chart page →

4,132
firecrawlobeoneVerified publisher3.0.11 of 5See more

firecrawl obeone 3.0.1

1 of the 5 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
postgresql-17@17.9-1.pgdg13+1
17.11-0+deb13u1

Open the chart page →

9,995
hiveopstty0.1.81 of 4See more

hive opstty 0.1.8

1 of the 4 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
postgresql@16.6.0-1
16.15.0

Open the chart page →

4,523
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
postgresql-17@17.6-0+deb13u1
17.11-0+deb13u1

Open the chart page →

3,854
vaultwardenpascaliskeVerified publisher2.0.01 of 1See more

vaultwarden pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
postgresql-17@17.6-0+deb13u1
17.11-0+deb13u1

Open the chart page →

3,408
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
postgresql@17.6.0-2
16.15.0

Open the chart page →

25,934
polyaxonpolyaxon2.16.41 of 5See more

polyaxon polyaxon 2.16.4

1 of the 5 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
postgresql@16.4.0-10
16.15.0

Open the chart page →

13,741
pgbouncerpostgres-pgbouncerVerified publisher0.4.01 of 1See more

pgbouncer postgres-pgbouncer 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
edoburu/pgbouncer:latest4c1ca296ef52
postgresql18@18.4-r0
18.5-r0

Open the chart page →

651
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1

Open the chart page →

3,332
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
postgresql@17.5.0-11
16.15.0

Open the chart page →

15,591
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
postgresql-17@17.6-0+deb13u1
17.11-0+deb13u1

Open the chart page →

10,605
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
postgresql17@17.7-r0
17.11-r0

Open the chart page →

4,499
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
postgresql@17.2.0-1
16.15.0

Open the chart page →

7,413
linkdingrubxkubeVerified publisher1.2.31 of 1See more

linkding rubxkube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.46.20c0a9a04c7eb
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1

Open the chart page →

2,051
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
postgresql-17@17.6-0+deb13u1
17.11-0+deb13u1

Open the chart page →

9,534
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
postgresql-17@17.6-0+deb13u1
17.11-0+deb13u1

Open the chart page →

9,755
pev2schichtelVerified publisher0.3.01 of 1See more

pev2 schichtel 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
dalibo/explain.dalibo.com:2.20.12a0b749c2f7f
postgresql18@18.2-r0
18.5-r0

Open the chart page →

1,178
teamspeak3schichtelVerified publisher1.0.21 of 1See more

teamspeak3 schichtel 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
library/teamspeak:3.13.74d3fa1c0db9a
postgresql18@18.3-r0
18.5-r0

Open the chart page →

774
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
postgresql-18@18.4-0ubuntu0.26.04.1
18.6-0ubuntu0.26.04.1

Open the chart page →

10,348
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
postgresql18@18.4-r0
18.5-r0

Open the chart page →

1,437
servicexssl-hep1.8.59 of 16See more

servicex ssl-hep 1.8.5

9 of the 16 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.51d12f943cec5
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1

Open the chart page →

66,266
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
postgresql-16@16.10-0ubuntu0.24.04.1
16.15-0ubuntu0.24.04.1

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
postgresql-16@16.10-0ubuntu0.24.04.1
16.15-0ubuntu0.24.04.1

Open the chart page →

12,460
mybbsudermanjr0.1.01 of 3See more

mybb sudermanjr 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
mybb/mybb:1.8f2a54bce31c5
postgresql18@18.4-r0
18.5-r0

Open the chart page →

2,157
teamspeaksyntaxerror404Verified publisher1.0.101 of 1See more

teamspeak syntaxerror404 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
library/teamspeak:3.13.815acbc64c92f
postgresql18@18.4-r0
18.5-r0

Open the chart page →

449
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
postgresql@17.6.0-2
16.15.0

Open the chart page →

5,535
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
twentycrm/twenty:v2.22.0e7d9948bf284
postgresql18@18.4-r0
18.5-r0

Open the chart page →

5,550
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
postgresql-16@16.2-1ubuntu4
16.15-0ubuntu0.24.04.1

Open the chart page →

45,239
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-14672.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
postgresql17@17.5-r0
17.11-r0

Open the chart page →

14,983

Container images carrying it

130 by charts deploying them

A fixed version is listed for 7 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
postgresql@17.6.0-2
16.15.0
11
bitnamilegacy/postgresql:17.5.0:latest42a8200d3597
postgresql@17.5.0-14
16.15.0
5
bitnamilegacy/postgresql:16233f361c5819
postgresql@16.6.0-1
16.15.0
4
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
postgresql@17.6.0-0
16.15.0
4
opencsghq/psql:latest57def8e77d0f
postgresql17@17.2-r0
17.11-r0
3
vaultwarden/server:1.37.1ebdfe70701c6
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
postgresql@16.6.0-1
16.15.0
3
apache/tika:2.9.2.1-fullae0b86d3c4d0
postgresql-16@16.2-1ubuntu4
16.15-0ubuntu0.24.04.1
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
postgresql@16.4.0-12
16.15.0
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
postgresql-17@17.8-0+deb13u1
17.11-0+deb13u1
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
postgresql-17@17.9-0+deb13u1
17.11-0+deb13u1
2
kurento/kurento-media-server:latest03c0d34d0828
postgresql-16@16.10-0ubuntu0.24.04.1
16.15-0ubuntu0.24.04.1
2
opendatacube/ows:latest668cbb41473c
postgresql-16@16.6-0ubuntu0.24.04.1
16.15-0ubuntu0.24.04.1
2
taigaio/taiga-back:latest4beed8f62c9f
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
2
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
postgresql-16@16.14-0ubuntu0.24.04.1
16.15-0ubuntu0.24.04.1
2
alpine/psql:18.339824ef2b7fc
postgresql18@18.3-r0
18.5-r0
1
appwrite/appwrite:1.9.01aaa70127114
postgresql18@18.2-r0
18.5-r0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
postgresql18@18.4-r0
18.5-r0
1
arunvelsriram/utils:latest655ad18fd8d6
postgresql-16@16.9-0ubuntu0.24.04.1
16.15-0ubuntu0.24.04.1
1
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
postgresql@16.4.0-10
16.15.0
1
bitnamilegacy/postgresql:16.1.0-debian-11-r2504f3b0dfdb15
postgresql@16.1.0-34
PostgreSQL@16.1.0-34
16.15.0
16.15.0
1
bitnamilegacy/postgresql:16.1.0-debian-11-r1529e3dd0e7e7a
postgresql@16.1.0-14
PostgreSQL@16.1.0
16.15.0
16.15.0
1
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
postgresql@16.3.0-3
PostgreSQL@16.3.0-3
16.15.0
16.15.0
1
bitnamilegacy/postgresql:16.4.03ba6e6f11388
postgresql@16.4.0-20
16.15.0
1
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
postgresql@17.5.0-11
16.15.0
1
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
postgresql@17.5.0-9
16.15.0
1
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
postgresql@16.2.0-4
PostgreSQL@16.2.0-4
16.15.0
16.15.0
1
bitnamilegacy/postgresql:16.0.0-debian-11-r3b8a21df9b747
PostgreSQL@16.0.0
16.15.0
1
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
postgresql@16.3.0-11
PostgreSQL@16.3.0-11
16.15.0
16.15.0
1
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
postgresql@17.2.0-4
16.15.0
1
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
postgresql@17.2.0-1
16.15.0
1
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
postgresql@16.2.0-2
PostgreSQL@16.2.0-2
16.15.0
16.15.0
1
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
postgresql@17.4.0-9
16.15.0
1
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
postgresql@16.3.0-12
16.15.0
1
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
postgresql18@18.3-r0
18.5-r0
1
boky/postfix:5.1.0aafc77238423
postgresql-17@17.6-0+deb13u1
17.11-0+deb13u1
1
budibase/apps:3.41.344fe6feab985
postgresql18@18.4-r0
18.5-r0
1
castopod/castopod:1.15.54e4f0440520f
postgresql-17@17.8-0+deb13u1
17.11-0+deb13u1
1
chatwoot/chatwoot:v4.15.167ebc751c171
postgresql17@17.10-r0
17.11-r0
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
postgresql-17@17.9-0+deb13u1
17.11-0+deb13u1
1
coturn/coturn:4.10.0-r1f4c2af06c3c5
postgresql-17@17.9-0+deb13u1
17.11-0+deb13u1
1
cr0hn/ja-shortener:v0.1.414482d0bc4a1
postgresql17@17.5-r0
17.11-r0
1
dalibo/explain.dalibo.com:2.20.12a0b749c2f7f
postgresql18@18.2-r0
18.5-r0
1
docuseal/docuseal:2.4.17493fd7f6728
postgresql18@18.3-r0
18.5-r0
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
postgresql-17@17.6-0+deb13u1
17.11-0+deb13u1
1
edoburu/pgbouncer:latest4c1ca296ef52
postgresql18@18.4-r0
18.5-r0
1
espocrm/espocrm:9.3.101b5a24504ed9
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
1
fireflyiii/core:version-6.6.6ae69fdd95cde
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
1
fluent/fluent-bit:4.2.6a52221a2a3eb
postgresql-17@17.10-0+deb13u1
17.11-0+deb13u1
1
galaxy/galaxy-stable:v18.018e577a626dfd
postgresql-9.3@9.3.22-0ubuntu0.14.04
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.