StackRadar

GHSA-fqpg-rq76-99pq

Medium

Advisory

Published 2 Jul 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
1 of 1
affected package

Panic in Pipeline when PgConn is busy or closed in github.com/jackc/pgx

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
github.com/jackc/pgx/v5golangv5.0.4, v5.2.0, v5.3.0, v5.3.1+2 more5.5.220
OSV records
GHSA-fqpg-rq76-99pqGO-2024-2567

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

32,902
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

1,942
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/jackc/pgx/v5@v5.4.2
5.5.2

Open the chart page →

5,299
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

3,048
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

2,489
mesherykubesphere-stable0.5.02 of 13See more

meshery kubesphere-stable 0.5.0

2 of the 13 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/jackc/pgx/v5@v5.4.3
5.5.2
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

24,690
falco-ui-serverappscodeVerified publisher2026.1.151 of 2See more

falco-ui-server appscode 2026.1.15

1 of the 2 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
github.com/jackc/pgx/v5@v5.4.2
5.5.2

Open the chart page →

2,872
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

1,330
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.27.0828ee36cb13a
github.com/jackc/pgx/v5@v5.0.4
5.5.2

Open the chart page →

9,146
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

32,902
tracoor-agentethereum-helm-chartsVerified publisher0.0.11 of 1See more

tracoor-agent ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

905
tracoor-serverethereum-helm-chartsVerified publisher0.0.21 of 1See more

tracoor-server ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

905
tracoor-singleethereum-helm-chartsVerified publisher0.0.51 of 2See more

tracoor-single ethereum-helm-charts 0.0.5

1 of the 2 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
ethpandaops/tracoor:latestd8514b9f4c59
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

905
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

6,078
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/jackc/pgx/v5@v5.4.2
5.5.2

Open the chart page →

5,684
limogabe565Verified publisher0.8.01 of 1See more

limo gabe565 0.8.0

1 of the 1 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
ghcr.io/gabe565/limo:latest6dfdbc9853bb
github.com/jackc/pgx/v5@v5.3.0
5.5.2

Open the chart page →

1,330
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

2,155
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

2,155
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
github.com/jackc/pgx/v5@v5.4.2
5.5.2

Open the chart page →

1,554
kube-benchm9sweeperVerified publisher1.6.01 of 1See more

kube-bench m9sweeper 1.6.0

1 of the 1 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.6.176672264accce
github.com/jackc/pgx/v5@v5.2.0
5.5.2

Open the chart page →

1,400
cloudnative-pgnineinfra-charts0.19.11 of 1See more

cloudnative-pg nineinfra-charts 0.19.1

1 of the 1 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/cloudnative-pg:1.21.19f707d91de1c
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

1,187
regoregoOfficialVerified publisher0.1.31 of 1See more

rego rego 0.1.3

1 of the 1 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
drorivry4/rego:lateste035d49b15ca
github.com/jackc/pgx/v5@v5.4.3
5.5.2

Open the chart page →

2,919
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

32,902
apache-shardingsphere-operator-chartsshardingsphere0.3.01 of 2See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
apache/shardingsphere-operator:0.3.0ffe68d6b99c0
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

1,698
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry GHSA-fqpg-rq76-99pq.

Container imageDigestPackageFixed in
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/jackc/pgx/v5@v5.3.1
5.5.2

Open the chart page →

2,991

Container images carrying it

20 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
github.com/jackc/pgx/v5@v5.3.1
github.com/jackc/pgx/v5@v5.3.1
5.5.2
5.5.2
6
ethpandaops/tracoor:latestd8514b9f4c59
github.com/jackc/pgx/v5@v5.4.3
github.com/jackc/pgx/v5@v5.4.3
5.5.2
5.5.2
3
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/jackc/pgx/v5@v5.3.1
github.com/jackc/pgx/v5@v5.3.1
5.5.2
5.5.2
2
rancher/kine:v0.11.412889bbcd1e8
github.com/jackc/pgx/v5@v5.4.2
github.com/jackc/pgx/v5@v5.4.2
5.5.2
5.5.2
2
apache/shardingsphere-operator:0.3.0ffe68d6b99c0
github.com/jackc/pgx/v5@v5.3.1
github.com/jackc/pgx/v5@v5.3.1
5.5.2
5.5.2
1
aquasec/kube-bench:v0.6.176672264accce
github.com/jackc/pgx/v5@v5.2.0
github.com/jackc/pgx/v5@v5.2.0
5.5.2
5.5.2
1
drorivry4/rego:lateste035d49b15ca
github.com/jackc/pgx/v5@v5.4.3
github.com/jackc/pgx/v5@v5.4.3
5.5.2
5.5.2
1
falcosecurity/falcosidekick:2.27.0828ee36cb13a
github.com/jackc/pgx/v5@v5.0.4
github.com/jackc/pgx/v5@v5.0.4
5.5.2
5.5.2
1
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/jackc/pgx/v5@v5.4.3
github.com/jackc/pgx/v5@v5.4.3
5.5.2
5.5.2
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
github.com/jackc/pgx/v5@v5.4.3
github.com/jackc/pgx/v5@v5.4.3
5.5.2
5.5.2
1
juicedata/juicefs-csi-driver:v0.20.043978fc60798
github.com/jackc/pgx/v5@v5.3.1
github.com/jackc/pgx/v5@v5.3.1
5.5.2
5.5.2
1
kubeshop/tracetest:v1.7.173d7e3a2db43
github.com/jackc/pgx/v5@v5.4.2
github.com/jackc/pgx/v5@v5.4.2
5.5.2
5.5.2
1
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/jackc/pgx/v5@v5.4.3
github.com/jackc/pgx/v5@v5.4.3
5.5.2
5.5.2
1
layer5/meshery-istio:stable-latestfde47c141ec6
github.com/jackc/pgx/v5@v5.4.3
github.com/jackc/pgx/v5@v5.4.3
5.5.2
5.5.2
1
pomerium/pomerium:v0.22.19c69b10a2126
github.com/jackc/pgx/v5@v5.3.1
github.com/jackc/pgx/v5@v5.3.1
5.5.2
5.5.2
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/jackc/pgx/v5@v5.4.2
github.com/jackc/pgx/v5@v5.4.2
5.5.2
5.5.2
1
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
github.com/jackc/pgx/v5@v5.4.3
github.com/jackc/pgx/v5@v5.4.3
5.5.2
5.5.2
1
ghcr.io/cloudnative-pg/cloudnative-pg:1.21.19f707d91de1c
github.com/jackc/pgx/v5@v5.4.3
github.com/jackc/pgx/v5@v5.4.3
5.5.2
5.5.2
1
ghcr.io/gabe565/limo:latest6dfdbc9853bb
github.com/jackc/pgx/v5@v5.3.0
github.com/jackc/pgx/v5@v5.3.0
5.5.2
5.5.2
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/jackc/pgx/v5@v5.3.1
github.com/jackc/pgx/v5@v5.3.1
5.5.2
5.5.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.