CVE-2026-32286
HighAdvisory
Published 16 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.006
- 49th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 160
- of 17,781 indexed, latest versions
- Container images
- 162
- deployed by those charts
- Fix available
- None
- affected package
Denial of service in github.com/jackc/pgproto3/v2
Carried by container images the latest versions of 160 of 17,781 indexed charts deploy, on 162 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v2.0.0, v2.0.1, v2.0.2, v2.0.4+9 more | no fix listed | 162 |
- OSV records
- GHSA-jqcq-xjh3-6g23
- Also known as
- GO-2026-4518
Charts affected
160 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| trilliansigstoreVerified publisher | 0.3.17 | 2 of 5See more | 2,808 |
| bytesafe-cesimcube | 1.0.4 | 1 of 3See more | 1,494 |
| harborsoftonic | 1.13.0 | 3 of 8See more | 7,672 |
| orchestratorsubstraVerified publisher | 8.8.0 | 1 of 3See more | 2,991 |
| telegraf-ds-k3stelegraf-ds-k3s | 1.0.0 | 1 of 1See more | 3,764 |
| tfy-cloudflaredtruefoundryVerified publisher | 0.5.0 | 1 of 2See more | 2,015 |
| twitter-apptwitter-helm | 0.1.12 | 1 of 8See more | 6,132 |
| twenty-crmvictorlane | 0.0.1 | 1 of 3See more | 13,459 |
| wexa-studiowexa-studio | 1.2.0 | 1 of 15See more | 14,983 |
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
Container images carrying it
162 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| otel/ | 995f17004231 | github.com/ | no fix listed | 1 |
| otel/ | c6671841470b | github.com/ | no fix listed | 1 |
| reportportal/ | 464468240d7b | github.com/ | no fix listed | 1 |
| schemahero/ | 1609e1a05cd3 | github.com/ | no fix listed | 1 |
| scholtz2/ | 3a3b3d3277d2 | github.com/ | no fix listed | 1 |
| scholtz2/ | 6770214bc881 | github.com/ | no fix listed | 1 |
| sky5367/ | d3150f201471 | github.com/ | no fix listed | 1 |
| stakkato95/ | 8412d8a8cac3 | github.com/ | no fix listed | 1 |
| supabase/ | 385184459f57 | github.com/ | no fix listed | 1 |
| supabase/ | 7174d551d720 | github.com/ | no fix listed | 1 |
| supabase/ | ba4ddc594b0b | github.com/ | no fix listed | 1 |
| thesisrobot/ | 287129953689 | github.com/ | no fix listed | 1 |
| thesisrobot/ | d94c8dbf6dac | github.com/ | no fix listed | 1 |
| timescale/ | 645fd9e92d76 | github.com/ | no fix listed | 1 |
| timescale/ | a8e3322e1cf9 | github.com/ | no fix listed | 1 |
| timescale/ | cdb9ae118899 | github.com/ | no fix listed | 1 |
| timescale/ | e8d0a9cc3db5 | github.com/ | no fix listed | 1 |
| timescale/ | ed719c0cd19d | github.com/ | no fix listed | 1 |
| timescale/ | 7758704d4a14 | github.com/ | no fix listed | 1 |
| treeverse/ | 478f37a6cffc | github.com/ | no fix listed | 1 |
| twentycrm/ | 2f78405a78be | github.com/ | no fix listed | 1 |
| yugabytedb/ | 3926eedf0ff4 | github.com/ | no fix listed | 1 |
| yugabytedb/ | de2e00278645 | github.com/ | no fix listed | 1 |
| zabbix/ | 7322a94c5d7a | github.com/ | no fix listed | 1 |
| zabbix/ | e5b594057c9c | github.com/ | no fix listed | 1 |
| gcr.io/ | e225fe7eaa55 | github.com/ | no fix listed | 1 |
| ghcr.io/ | b15824464acb | github.com/ | no fix listed | 1 |
| ghcr.io/ | 62c44a384e13 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 4dd365800b62 | github.com/ | no fix listed | 1 |
| ghcr.io/ | c022fd42de45 | github.com/ | no fix listed | 1 |
| ghcr.io/ | f1e7efe440da | github.com/ | no fix listed | 1 |
| ghcr.io/ | 8bfed3d49a08 | github.com/ | no fix listed | 1 |
| ghcr.io/ | f5654f745d4c | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5c9e99ff7167 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 03c1ddbda33b | github.com/ | no fix listed | 1 |
| ghcr.io/ | 7db1a1bf3dae | github.com/ | no fix listed | 1 |
| ghcr.io/ | c4b1d3d0f052 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 528f2174fa2f | github.com/ | no fix listed | 1 |
| ghcr.io/ | b3256cbc7b68 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 2fe6b69b20d7 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 5bc5ca66d55a | github.com/ | no fix listed | 1 |
| ghcr.io/ | d7f93d2182fe | github.com/ | no fix listed | 1 |
| ghcr.io/ | c0c8d53df9f3 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 14450f52a708 | github.com/ | no fix listed | 1 |
| ghcr.io/ | ffaf6629b97b | github.com/ | no fix listed | 1 |
| ghcr.io/ | c72eb6f93a26 | github.com/ | no fix listed | 1 |
| ghcr.io/ | ab41ffa78f69 | github.com/ | no fix listed | 1 |
| ghcr.io/ | fafb72e98f22 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 647e45284a80 | github.com/ | no fix listed | 1 |
| ghcr.io/ | 9f157fe035f1 | github.com/ | no fix listed | 1 |