StackRadar

CVE-2026-6477

High

Advisory

Published 14 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.005
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
270
of 17,781 indexed, latest versions
Container images
247
deployed by those charts
Fix available
10 of 14
affected packages

PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory

Carried by container images the latest versions of 270 of 17,781 indexed charts deploy, on 247 images.

Affected packageAffected versionsFixed inImages
postgresql-15deb15.3-0+deb12u1, 15.3-1.pgdg120+1, 15.4-2.pgdg120+1, 15.5-0+deb12u1+11 more15.18-0+deb12u1109
postgresql-17deb17.5-1, 17.5-1.pgdg130+1, 17.6-0+deb13u1, 17.6-1build1+5 more17.10-0+deb13u1, 17.10-0ubuntu0.25.10.130
postgresql-12deb12.7-0ubuntu0.20.04.1, 12.8-0ubuntu0.20.04.1, 12.9-0ubuntu0.20.04.1, 12.11-0ubuntu0.20.04.1+2 moreno fix listed17
postgresql-14deb14.3-1.pgdg22.04+1, 14.4-0ubuntu0.22.04.1, 14.5-0ubuntu0.22.04.1, 14.6-1.pgdg22.04+1+5 more14.23-0ubuntu0.22.04.113
postgresql18apk18.1-r0, 18.2-r0, 18.3-r018.4-r011
postgresql17apk17.2-r0, 17.4-r0, 17.5-r0, 17.6-r0+2 more17.10-r010
postgresql-10deb10.6-0ubuntu0.18.04.1, 10.10-0ubuntu0.18.04.1, 10.12-0ubuntu0.18.04.1, 10.14-0ubuntu0.18.04.1+1 moreno fix listed6
postgresql-16deb16.2-1ubuntu4, 16.6-0ubuntu0.24.04.1, 16.9-0ubuntu0.24.04.1, 16.10-0ubuntu0.24.04.1+1 more16.14-0ubuntu0.24.04.16
postgresql16apk16.3-r0, 16.9-r016.14-r05
postgresql-9.5deb9.5.10-0ubuntu0.16.04, 9.5.14-0ubuntu0.16.04no fix listed3
postgresql-9.3deb9.3.22-0ubuntu0.14.04no fix listed1
postgresqlbitnami11.8.0-10, 11.12.0-7, 14.4.0-0, 14.4.0-11+25 more14.23.030
PostgreSQLbitnami15.3.0, 15.4.0, 15.5.0-42, 16.0.0+6 more14.23.011
libpqrpm13.5-1.el9, 13.11-1.el9, 13.23-1.el9_70:13.23-3.el9_85
OSV records
ALPINE-CVE-2026-6477BIT-postgresql-2026-6477DEBIAN-CVE-2026-6477RHSA-2026:44308UBUNTU-CVE-2026-6477
Also known as
RHSA-2026:49909, USN-8294-1

Charts affected

270 by stars
ChartLatestAffected imagesRadar Score
airflowapache-airflowOfficialVerified publisher1.22.01 of 4See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.1.0-debian-11-r1529e3dd0e7e7a
postgresql@16.1.0-14
PostgreSQL@16.1.0
14.23.0
14.23.0

Open the chart page →

3,195
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1

Open the chart page →

8,811
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
postgresql-17@17.6-0+deb13u1
17.10-0+deb13u1

Open the chart page →

5,366
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
postgresql-14@14.4-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1

Open the chart page →

9,145
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
postgresql@17.5.0-14
14.23.0

Open the chart page →

6,699
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
postgresql@16.3.0-3
PostgreSQL@16.3.0-3
14.23.0
14.23.0

Open the chart page →

19,391
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
postgresql@15.3.0-3
PostgreSQL@15.3.0
14.23.0
14.23.0

Open the chart page →

22,002
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
postgresql17@17.6-r0
17.10-r0

Open the chart page →

16,251
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.02 of 5See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
postgresql@15.4.0-6
PostgreSQL@15.4.0
14.23.0
14.23.0
openproject/hocuspocus:release-338001b288dc1359dfb5
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1

Open the chart page →

19,926
zabbixcetic3.1.32 of 5See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
postgresql-14@14.5-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
postgresql-14@14.5-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1

Open the chart page →

33,725
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
postgresql@14.4.0-0
14.23.0

Open the chart page →

9,203
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
postgresql-15@15.7-0+deb12u1
15.18-0+deb12u1

Open the chart page →

6,543
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
postgresql@15.4.0-6
PostgreSQL@15.4.0
14.23.0
14.23.0

Open the chart page →

8,364
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1

Open the chart page →

5,987
litellm-helmlitellm1.100.11 of 2See more

litellm-helm litellm 1.100.1

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
postgresql@16.2.0-2
PostgreSQL@16.2.0-2
14.23.0
14.23.0

Open the chart page →

5,003
flagsmithflagsmithOfficialVerified publisher0.83.01 of 4See more

flagsmith flagsmith 0.83.0

1 of the 4 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
postgresql@15.3.0-3
PostgreSQL@15.3.0
14.23.0
14.23.0

Open the chart page →

2,110
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
postgresql@14.13.0-20
14.23.0

Open the chart page →

5,786
ilumilumOfficialVerified publisher6.7.32 of 19See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.1.0-debian-11-r2504f3b0dfdb15
postgresql@16.1.0-34
PostgreSQL@16.1.0-34
14.23.0
14.23.0
bitnamilegacy/postgresql:16233f361c5819
postgresql@16.6.0-1
14.23.0

Open the chart page →

23,228
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
postgresql-17@17.5-1
17.10-0+deb13u1

Open the chart page →

5,634
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
postgresql@17.6.0-2
14.23.0

Open the chart page →

8,489
zabbix-serveraekondratievVerified publisher1.0.62 of 4See more

zabbix-server aekondratiev 1.0.6

2 of the 4 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
postgresql-12@12.8-0ubuntu0.20.04.1
no fix listed
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
postgresql-12@12.8-0ubuntu0.20.04.1
no fix listed

Open the chart page →

30,668
convoyconvoyVerified publisher3.7.131 of 3See more

convoy convoy 3.7.13

1 of the 3 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
postgresql@17.6.0-2
14.23.0

Open the chart page →

5,896
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
postgresql-17@17.9-0+deb13u1
17.10-0+deb13u1

Open the chart page →

2,901
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
postgresql@16.4.0-12
14.23.0

Open the chart page →

17,263
headwind-mdmchristianhuthVerified publisher5.10.11 of 2See more

headwind-mdm christianhuth 5.10.1

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
postgresql@17.6.0-2
14.23.0

Open the chart page →

5,870
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
postgresql@14.13.0-20
14.23.0

Open the chart page →

10,428
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
postgresql-15@15.3-0+deb12u1
15.18-0+deb12u1

Open the chart page →

96,941
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
postgresql@16.6.0-1
14.23.0

Open the chart page →

5,779
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
postgresql@15.2.0-4
14.23.0

Open the chart page →

3,569
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
postgresql-15@15.10-1.pgdg120+1
15.18-0+deb12u1

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
postgresql@15.4.0-6
PostgreSQL@15.4.0
14.23.0
14.23.0

Open the chart page →

28,839
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
postgresql-17@17.8-0+deb13u1
17.10-0+deb13u1

Open the chart page →

9,316
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
postgresql17@17.4-r0
17.10-r0

Open the chart page →

2,286
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
postgresql@14.13.0-20
14.23.0

Open the chart page →

10,530
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.28cfde8170c92f
postgresql18@18.2-r0
18.4-r0

Open the chart page →

30,816
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
postgresql18@18.2-r0
18.4-r0

Open the chart page →

4,634
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
postgresql@17.5.0-14
14.23.0

Open the chart page →

4,060
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
postgresql@16.4.0-12
14.23.0

Open the chart page →

8,690
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
postgresql-14@14.18-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1

Open the chart page →

5,751
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.261 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

1 of the 6 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.0.0-debian-11-r3b8a21df9b747
PostgreSQL@16.0.0
14.23.0

Open the chart page →

14,566
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
postgresql@15.4.0-6
PostgreSQL@15.4.0
14.23.0
14.23.0

Open the chart page →

28,534
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
postgresql-10@10.15-0ubuntu0.18.04.1
no fix listed

Open the chart page →

18,137
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
postgresql-17@17.6-0+deb13u1
17.10-0+deb13u1

Open the chart page →

12,037
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
postgresql16@16.3-r0
16.14-r0

Open the chart page →

2,388
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
postgresql-12@12.7-0ubuntu0.20.04.1
no fix listed

Open the chart page →

13,145
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
postgresql@17.4.0-9
14.23.0

Open the chart page →

15,863
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
postgresql-15@15.16-0+deb12u1
15.18-0+deb12u1

Open the chart page →

8,466
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
postgresql-17@17.7-0+deb13u1
17.10-0+deb13u1

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
postgresql-15@15.8-0+deb12u1
15.18-0+deb12u1

Open the chart page →

13,761
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-6477.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
postgresql-16@16.10-0ubuntu0.24.04.1
16.14-0ubuntu0.24.04.1

Open the chart page →

4,854

Container images carrying it

247 by charts deploying them

A fixed version is listed for 10 of the 14 affected packages.

Container imageDigestPackageFixed inUsed by
lsstsqre/nublado2:2.0.1b75bf8aaafa4
postgresql-12@12.9-0ubuntu0.20.04.1
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
postgresql-15@15.16-0+deb12u1
15.18-0+deb12u1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
postgresql-15@15.12-0+deb12u2
15.18-0+deb12u1
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
postgresql-15@15.8-0+deb12u1
15.18-0+deb12u1
1
matterlabs/external-node:v24.0.06cbfea4c694a
postgresql-15@15.6-0+deb12u1
15.18-0+deb12u1
1
mediagis/nominatim:3.7c15e941485ef
postgresql-12@12.12-0ubuntu0.20.04.1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
postgresql-14@14.10-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1
1
middlewareeng/middleware:0.3.1747d880812f1
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1
1
mindsdb/mindsdb:latest163011c09299
postgresql-17@17.9-0+deb13u1
17.10-0+deb13u1
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
postgresql-15@15.12-0+deb12u2
15.18-0+deb12u1
1
moreillon/api-proxy:latestd7d4a5463525
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1
1
moreillon/food-manager:lateste8fd856e593d
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1
1
moreillon/group-manager:latest3caa8f710ee0
postgresql-15@15.16-0+deb12u1
15.18-0+deb12u1
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
postgresql-15@15.5-0+deb12u1
15.18-0+deb12u1
1
muhammedgamal/fp23:latest74b4cd69b6fa
postgresql-15@15.6-0+deb12u1
15.18-0+deb12u1
1
netboxcommunity/netbox:v3.2.83d652dca5351
postgresql-14@14.4-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1
1
novosga/novosga:latest34b9acbe6e51
postgresql18@18.3-r0
18.4-r0
1
octoboxio/octobox:latestd909041c46eb
postgresql18@18.1-r0
18.4-r0
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
postgresql-9.5@9.5.14-0ubuntu0.16.04
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
postgresql-15@15.6-0+deb12u1
15.18-0+deb12u1
1
opea/codetrans-ui:1.03ef121f34610
postgresql-15@15.6-0+deb12u1
15.18-0+deb12u1
1
opea/docsum-ui:1.07f854e9bffaf
postgresql-15@15.6-0+deb12u1
15.18-0+deb12u1
1
opendatacube/explorer:latest120457ffcd69
postgresql-16@16.10-0ubuntu0.24.04.1
16.14-0ubuntu0.24.04.1
1
opendatacube/pipelines:wofs-1.225d810e8504b8
postgresql-10@10.6-0ubuntu0.18.04.1
no fix listed
1
opendatacube/restcube:latest91870111837c
postgresql-10@10.10-0ubuntu0.18.04.1
no fix listed
1
opendatacube/wms:latest1b90cdf68831
postgresql-10@10.10-0ubuntu0.18.04.1
no fix listed
1
opendatacube/wps:latest80df355a660b
postgresql-14@14.18-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1
1
openelevation/open-elevation:latest82fb21612e86
postgresql-12@12.7-0ubuntu0.20.04.1
no fix listed
1
openkm/openkm-ce:6.3.113bc465a7461b
postgresql-12@12.12-0ubuntu0.20.04.1
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1
1
owncloud/server:10.15.051d9b74fc2a8
postgresql-12@12.19-0ubuntu0.20.04.1
no fix listed
1
oxfordsemantic/rdfox:5.6db17910eb855
postgresql-12@12.9-0ubuntu0.20.04.1
no fix listed
1
oxfordsemantic/rdfox-init:5.6baf570ff968d
postgresql-12@12.9-0ubuntu0.20.04.1
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
postgresql-15@15.12-0+deb12u2
15.18-0+deb12u1
1
photoprism/photoprism:251130db16ee6b1ba3
postgresql-17@17.6-1build1
17.10-0ubuntu0.25.10.1
1
proxysql/proxysql:3.0.8947a7abad45b
postgresql-17@17.9-0+deb13u1
17.10-0+deb13u1
1
psono/psono-server:5.0.03b974b43ea03
postgresql16@16.3-r0
16.14-r0
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
postgresql-12@12.12-0ubuntu0.20.04.1
no fix listed
1
redash/redash:25.8.000d813437db5
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1
1
redash/redash:26.3.0c5c9148f5c38
postgresql-15@15.16-0+deb12u1
15.18-0+deb12u1
1
resurfaceio/resurface:3.7.84d5cda2f64109
postgresql-14@14.17-0ubuntu0.22.04.1
14.23-0ubuntu0.22.04.1
1
robjuz/postgresql-nominatim:latest805c7bab76df
postgresql@11.12.0-7
14.23.0
1
rocketchat/freeswitch:stablecfba5c20a5cc
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1
1
rommapp/romm:4.4.1b909e95d1aab
postgresql17@17.7-r0
17.10-r0
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
postgresql-15@15.8-0+deb12u1
15.18-0+deb12u1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
postgresql-15@15.8-0+deb12u1
15.18-0+deb12u1
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
postgresql-15@15.13-0+deb12u1
15.18-0+deb12u1
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
postgresql-15@15.3-0+deb12u1
15.18-0+deb12u1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
postgresql-15@15.3-0+deb12u1
15.18-0+deb12u1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
postgresql-15@15.3-0+deb12u1
15.18-0+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.