Skip to content
QuenchWorks

timescaledb

Chart · Time series · standard · v0.0.26

digest pinnedcosign signedSPDX SBOMSLSA provenanceamd64 · arm64Rebuilt 2026-10-22

PostgreSQL 17 plus the open TimescaleDB extension (Apache-only edition), adding hypertables, continuous aggregates, and time-series functions for high-ingest metrics and event data. Built clean-licensed from source on Wolfi (no TSL community code).

Version

0.0.26 · latest0.0.250.0.24

The latest line lives at the base page; older lines have their own page so you can pin and verify exactly that version. Only the most recent releases are listed — an older chart pins an older image digest.

Deployed image digest

sha256:a8c5a314b5ce71a3ba2fe66c676d1eced63ae2c99f73bb26dbf313ad00454ab6

Chart OCI version

oci://ghcr.io/quenchworks/charts/timescaledb:0.0.26

The chart pins its image by this signed digest, so you never track it yourself. Signatures, SBOM, and provenance attach to the same digest.

Signed
cosign keyless
SBOM
SPDX, on image
Provenance
SLSA build
Architectures
amd64, arm64
Runs as
nonroot (uid 1001)
Root filesystem
read-only
Image size
143.7 MB

Security report (Trivy)

D· 0/100184 fixable · rebuild clears them

Vulnerability detail

timescaledb 2.30.2 · 184 CVE
CVESeverityPackageInstalledFixed inTitle
CVE-2026-111943HIGHpy3-pip-wheel26.2.2-r026.2.2-r2crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates
CVE-2026-114613HIGHpy3-pip-wheel26.2.2-r026.2.2-r1msgpack: msgpack: Denial of Service via memory leak during map deserialization
CVE-2026-14662HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14664HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14668HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14669HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14670HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14671HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14677HIGHecpg-1717.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHlibpq-1717.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-1717.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-17-base17.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-17-client17.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14679HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14680HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-15741HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15742HIGHecpg-1717.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHlibpq-1717.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-1717.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-17-base17.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-17-client17.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-16239HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-18408HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-19385HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-6464HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6471HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-114583MEDIUMpython-3.133.13.16_git20261016-r13.13.18_git20261030-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ...
CVE-2026-114583MEDIUMpython-3.13-base3.13.16_git20261016-r13.13.18_git20261030-r0tarfile.tar_filter could be bypassed using crafted link entries, inclu ...
CVE-2026-115557MEDIUMpython-3.133.13.16_git20261016-r13.13.18_git20261030-r0Python has added a denylist for known compromised certificates to the ...
CVE-2026-115557MEDIUMpython-3.13-base3.13.16_git20261016-r13.13.18_git20261030-r0Python has added a denylist for known compromised certificates to the ...
CVE-2026-12345MEDIUMpython-3.133.13.16_git20261016-r13.13.18_git20261030-r0python: python: Arbitrary file deletion via race condition during temporary directory cleanup
CVE-2026-12345MEDIUMpython-3.13-base3.13.16_git20261016-r13.13.18_git20261030-r0python: python: Arbitrary file deletion via race condition during temporary directory cleanup
CVE-2026-14663MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14666MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14672MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14678MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14681MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-18024MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-6470MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-16241LOWecpg-1717.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWlibpq-1717.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-6469LOWecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
GHSA-xmj3-9gf7-h52wLOWsetuptools83.0.084.1.0setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
0
Critical
114
High
55
Medium
15
Low
0
Unknown

Security report (Trivy) · image timescaledb 2.30.2

Install the chart

Deploy to Kubernetes with hardened defaults. The chart pins its image by signed digest, so you never track it yourself.

Install (latest)

helm install my-timescaledb oci://ghcr.io/quenchworks/charts/timescaledb --version 0.0.26

Deploys images (digest-pinned)

Chart version
0.0.26
App version
2.30.2
Chart license
Apache-2.0
App license
Apache-2.0
Service port
5432
Signed
cosign (keyless)
Values schema
yes
Last published
2026-10-22
Values keys
  • image: repository digest pullPolicy
  • nameOverride
  • architecture
  • ha: replicaCount replicationUsername persistence resources extraParameters podDisruptionBudget
  • auth: enabled username password database existingSecret existingSecretPasswordKey
  • primary: persistence shmVolume resources
  • service: type port
  • podLabels
  • podAnnotations
  • nodeSelector
  • affinity
  • tolerations
  • topologySpreadConstraints
  • priorityClassName
  • schedulerName
  • terminationGracePeriodSeconds
  • updateStrategy
  • extraEnvVars
  • extraEnvVarsCM
  • extraEnvVarsSecret
  • extraVolumes
  • extraVolumeMounts
  • initContainers
  • sidecars
  • lifecycleHooks
  • command
  • args
  • podSecurityContext
  • containerSecurityContext
  • livenessProbe
  • readinessProbe
  • customLivenessProbe
  • customReadinessProbe
  • customStartupProbe
  • metrics: enabled image port resources serviceMonitor prometheusRule
  • serviceAccount: create name annotations
  • rbac: create
  • networkPolicy: enabled allowExternal
  • podDisruptionBudget: enabled minAvailable

Verify the chart

cosign verify ghcr.io/quenchworks/charts/timescaledb:0.0.26 \
  --certificate-identity-regexp 'https://github.com/quenchworks/.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Transparency

The chart publishes its attestations on GitHub and the image it deploys carries its own on the same digest, publicly verifiable with the commands above. Both log to the Sigstore transparency log (Rekor), which cosign verify checks for you.

View the imageView on ArtifactHubChart source

Upstream project: https://www.timescale.com