CVE-2026-32286
HighAdvisory
Published 16 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.006
- 49th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 160
- of 17,781 indexed, latest versions
- Container images
- 162
- deployed by those charts
- Fix available
- None
- affected package
Denial of service in github.com/jackc/pgproto3/v2
Carried by container images the latest versions of 160 of 17,781 indexed charts deploy, on 162 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v2.0.0, v2.0.1, v2.0.2, v2.0.4+9 more | no fix listed | 162 |
- OSV records
- GHSA-jqcq-xjh3-6g23
- Also known as
- GO-2026-4518
Charts affected
160 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| trilliansigstoreVerified publisher | 0.3.17 | 2 of 5See more | 2,808 |
| bytesafe-cesimcube | 1.0.4 | 1 of 3See more | 1,494 |
| harborsoftonic | 1.13.0 | 3 of 8See more | 7,672 |
| orchestratorsubstraVerified publisher | 8.8.0 | 1 of 3See more | 2,991 |
| telegraf-ds-k3stelegraf-ds-k3s | 1.0.0 | 1 of 1See more | 3,764 |
| tfy-cloudflaredtruefoundryVerified publisher | 0.5.0 | 1 of 2See more | 2,015 |
| twitter-apptwitter-helm | 0.1.12 | 1 of 8See more | 6,132 |
| twenty-crmvictorlane | 0.0.1 | 1 of 3See more | 13,459 |
| wexa-studiowexa-studio | 1.2.0 | 1 of 15See more | 14,983 |
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
Container images carrying it
162 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | fbeaef7a8566 | github.com/ | no fix listed | 6 |
| caddy/ | 18d1366fc0e9 | github.com/ | no fix listed | 3 |
| migrate/ | cc4ad8e19d66 | github.com/ | no fix listed | 3 |
| oryd/ | 2c93beb5e5f2 | github.com/ | no fix listed | 3 |
| ghcr.io/ | 5a878e4e4f03 | github.com/ | no fix listed | 3 |
| ghcr.io/ | 28c5ff40963f | github.com/ | no fix listed | 3 |
| quay.io/ | 75fb847ac045 | github.com/ | no fix listed | 3 |
| grafana/ | 7790f6f7fbd8 | github.com/ | no fix listed | 2 |
| grafana/ | f94b1c82957a | github.com/ | no fix listed | 2 |
| hashicorp/ | 6b4e5dadf082 | github.com/ | no fix listed | 2 |
| hashicorp/ | 8de4d5f31b38 | github.com/ | no fix listed | 2 |
| hoppscotch/ | f1da831950b7 | github.com/ | no fix listed | 2 |
| lightninglabs/ | f86bbec4dfb3 | github.com/ | no fix listed | 2 |
| mesosphere/ | 073db43d0b8b | github.com/ | no fix listed | 2 |
| oryd/ | d06fc5845f63 | github.com/ | no fix listed | 2 |
| oryd/ | fe2428f103a6 | github.com/ | no fix listed | 2 |
| oryd/ | e8cb9b79a89c | github.com/ | no fix listed | 2 |
| otel/ | 7ef2a2ff46b9 | github.com/ | no fix listed | 2 |
| rookout/ | 4451a6f6b8ec | github.com/ | no fix listed | 2 |
| rookout/ | 51c0fce64467 | github.com/ | no fix listed | 2 |
| zhenghaoz/ | 033046b432ec | github.com/ | no fix listed | 2 |
| zhenghaoz/ | 39c565685b01 | github.com/ | no fix listed | 2 |
| zhenghaoz/ | f7739f64c9b0 | github.com/ | no fix listed | 2 |
| quay.io/ | b736b345437d | github.com/ | no fix listed | 2 |
| alex6021710/ | 6c7a47e470c3 | github.com/ | no fix listed | 1 |
| alex6021710/ | 744b8a924f35 | github.com/ | no fix listed | 1 |
| apecloud/ | 98abc64aa985 | github.com/ | no fix listed | 1 |
| aquasec/ | c329d73fea58 | github.com/ | no fix listed | 1 |
| artifacthub/ | 28c13565ac5c | github.com/ | no fix listed | 1 |
| artifacthub/ | 2a746b289fcd | github.com/ | no fix listed | 1 |
| artifacthub/ | 111918d8c399 | github.com/ | no fix listed | 1 |
| artifacthub/ | 7d3a91c539dc | github.com/ | no fix listed | 1 |
| artifacthub/ | 2d8365601f0e | github.com/ | no fix listed | 1 |
| artifacthub/ | 323d026e78c3 | github.com/ | no fix listed | 1 |
| artifacthub/ | 5368d21a6e5c | github.com/ | no fix listed | 1 |
| artifacthub/ | 6596c8c4d955 | github.com/ | no fix listed | 1 |
| baserow/ | df0c42eb67e8 | github.com/ | no fix listed | 1 |
| bytebase/ | 9fcde38c0d5f | github.com/ | no fix listed | 1 |
| bytesafe/ | ee287384c005 | github.com/ | no fix listed | 1 |
| cockroachdb/ | 983312754620 | github.com/ | no fix listed | 1 |
| dollarshaveclub/ | 14a257836529 | github.com/ | no fix listed | 1 |
| ethpandaops/ | 1a9c3264f0a9 | github.com/ | no fix listed | 1 |
| ethpandaops/ | 2381ea793a12 | github.com/ | no fix listed | 1 |
| factly/ | 66fafc7b0a17 | github.com/ | no fix listed | 1 |
| factly/ | 94d21479382e | github.com/ | no fix listed | 1 |
| factly/ | be85ff1b9bd3 | github.com/ | no fix listed | 1 |
| factly/ | 384d384310ef | github.com/ | no fix listed | 1 |
| factly/ | 87064eb0463c | github.com/ | no fix listed | 1 |
| flanksource/ | 689687a7cf95 | github.com/ | no fix listed | 1 |
| flashcatcloud/ | 42e6ab16472e | github.com/ | no fix listed | 1 |