CVE-2026-54291
HighAdvisory
Published 12 Jul 2026In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.002
- 15th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 82
- of 17,781 indexed, latest versions
- Container images
- 89
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Silent channel-binding authentication downgrade via unsupported certificate algorithms
Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 89 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| postgresqlmaven | 42.7.4, 42.7.5, 42.7.7, 42.7.8+3 more | 42.7.12 | 89 |
| postgresql-jdbc-driverbitnami | 42.7.7, 42.7.8 | 42.7.12 | 2 |
Charts affected
82 by stars
Container images carrying it
89 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| airbyte/ | 119be7bfb719 | postgresql | 42.7.12 | 2 |
| apache/ | a83cf1980609 | postgresql | 42.7.12 | 2 |
| graviteeio/ | 05fd67a93056 | postgresql | 42.7.12 | 2 |
| graviteeio/ | 27374522cd04 | postgresql | 42.7.12 | 2 |
| nacos/ | 1c191c30c8cd | postgresql | 42.7.12 | 2 |
| ghcr.io/ | 536358d7b17e | postgresql | 42.7.12 | 2 |
| ghcr.io/ | 7752874e71d8 | postgresql | 42.7.12 | 2 |
| ghcr.io/ | 3f2d14563495 | postgresql | 42.7.12 | 2 |
| ghcr.io/ | 900e2b88bd08 | postgresql | 42.7.12 | 2 |
| ghcr.io/ | 2a797804f08c | postgresql | 42.7.12 | 2 |
| ghcr.io/ | 096b8bcbbe45 | postgresql | 42.7.12 | 2 |
| quay.io/ | 044a457e0498 | postgresql | 42.7.12 | 2 |
| 2martens/ | bd1ba6ab84c9 | postgresql | 42.7.12 | 1 |
| ahmetfurkandemir/ | 142231a0b8b7 | postgresql | 42.7.12 | 1 |
| airbyte/ | f71cf4e185d5 | postgresql | 42.7.12 | 1 |
| airbyte/ | d42813fcc191 | postgresql | 42.7.12 | 1 |
| airbyte/ | d97b67a1346d | postgresql | 42.7.12 | 1 |
| airbyte/ | 70e125498a1c | postgresql | 42.7.12 | 1 |
| airbyte/ | 8060b88b29c8 | postgresql | 42.7.12 | 1 |
| airbyte/ | 42093cff86e9 | postgresql | 42.7.12 | 1 |
| alfio/ | 0c836a081446 | postgresql | 42.7.12 | 1 |
| bitnamilegacy/ | da3df0976a9f | postgresql postgresql-jdbc-driver | 42.7.12 42.7.12 | 1 |
| blackducksoftware/ | 90cca32de2cc | postgresql | 42.7.12 | 1 |
| bluerange/ | 07c8f73b55df | postgresql | 42.7.12 | 1 |
| consensys/ | f146a51a1ba3 | postgresql | 42.7.12 | 1 |
| dbeaver/ | 87ab86d00f8c | postgresql | 42.7.12 | 1 |
| dependencytrack/ | 1ba4f004e1ec | postgresql | 42.7.12 | 1 |
| flowable/ | b7ae287502cd | postgresql | 42.7.12 | 1 |
| folioci/ | c3cfa89eee2f | postgresql | 42.7.12 | 1 |
| folioci/ | 48c9b1d180d4 | postgresql | 42.7.12 | 1 |
| folioci/ | c64e4d9dd3fc | postgresql | 42.7.12 | 1 |
| folioci/ | 15ef73b1abd0 | postgresql | 42.7.12 | 1 |
| folioci/ | 29c3f233a498 | postgresql | 42.7.12 | 1 |
| folioci/ | 22f65982efd7 | postgresql | 42.7.12 | 1 |
| folioci/ | 0cc86bf09755 | postgresql | 42.7.12 | 1 |
| folioci/ | f1d7caf4544b | postgresql | 42.7.12 | 1 |
| folioci/ | 1ad1811c9b37 | postgresql | 42.7.12 | 1 |
| folioci/ | 3ae8cb99daa3 | postgresql | 42.7.12 | 1 |
| folioci/ | cc8584e43382 | postgresql | 42.7.12 | 1 |
| folioci/ | cfd6109bf477 | postgresql | 42.7.12 | 1 |
| folioci/ | ae3b069d4ba5 | postgresql | 42.7.12 | 1 |
| folioci/ | b31d75f2bf7b | postgresql | 42.7.12 | 1 |
| folioci/ | 4f12177123dc | postgresql | 42.7.12 | 1 |
| folioci/ | 571fa1ffe8c9 | postgresql | 42.7.12 | 1 |
| folioci/ | f53c327a48e8 | postgresql | 42.7.12 | 1 |
| folioci/ | 6e8beeb70272 | postgresql | 42.7.12 | 1 |
| geonode/ | 81b1d431b7e9 | postgresql | 42.7.12 | 1 |
| glarad/ | 7b02b9e7f1ef | postgresql | 42.7.12 | 1 |
| labs64/ | 0c66feefca17 | postgresql | 42.7.12 | 1 |
| linuxserver/ | b6ce6968ee45 | postgresql | 42.7.12 | 1 |