Saltar al contenido
QuenchWorks

DocumentDB 0.114.0

Imagen · Document · standard · v0.114.0

D 175firmada con cosignSPDX SBOMprocedencia SLSAamd64 · arm64Reconstruida 2026-10-22

Servidor autónomo compatible con MongoDB que agrupa PostgreSQL, la extensión DocumentDB y una pasarela de protocolo. Proyecto de la Linux Foundation, verdaderamente abierto bajo MIT.

Versión

1.0.0 · última0.117.00.114.0

La línea más reciente vive en la página base; las líneas más antiguas tienen su propia página para que puedas fijar y verificar exactamente esa versión.

Imagen
ghcr.io/quenchworks/images/documentdb:0.114.0
Firmada
cosign sin llave
SBOM
SPDX, en el digest
Procedencia
compilación SLSA
Arquitecturas
amd64, arm64
Se ejecuta como
nonroot (uid 1001)
Sistema de archivos raíz
solo lectura
Tamaño de la imagen
142.4 MB

Versiones publicadas

3 etiquetas

Cada etiqueta es un índice multiarquitectura (amd64 + arm64) fijado por digest. Etiquetada por versión, nunca :latest.

VersiónTamañoPublicadaDigest
1.0.0última143.7 MB2026-10-22sha256:864394034f53…
0.117.0143.1 MB2026-10-22sha256:eecb7ca2c17b…
0.114.0142.4 MB2026-10-22sha256:baa76c0ffce3…

Informe de seguridad (Trivy)

D· 0/100175 fixable · rebuild clears them

Detalle de vulnerabilidades

documentdb 0.114.0 · 175 CVE
CVEGravedadPaqueteInstaladaCorregida enTítulo
CVE-2026-14662HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14662HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions
CVE-2026-14664HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14664HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp
CVE-2026-14668HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14668HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator
CVE-2026-14669HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14669HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation
CVE-2026-14670HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14670HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow
CVE-2026-14671HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14671HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
CVE-2026-14677HIGHecpg-1717.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHlibpq-1717.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-1717.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-17-base17.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-17-client17.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14677HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl
CVE-2026-14679HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14679HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation
CVE-2026-14680HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-14680HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments
CVE-2026-15741HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15741HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse
CVE-2026-15742HIGHecpg-1717.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHlibpq-1717.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-1717.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-17-base17.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-17-client17.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-15742HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound
CVE-2026-16239HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-16239HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle
CVE-2026-18408HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-18408HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump
CVE-2026-19385HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-19385HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists
CVE-2026-6464HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6464HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN
CVE-2026-6471HIGHecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-6471HIGHpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin
CVE-2026-14663MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14663MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers
CVE-2026-14666MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14666MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access
CVE-2026-14672MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14672MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: User existence oracle in SCRAM authentication
CVE-2026-14678MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14678MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm
CVE-2026-14681MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-14681MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection
CVE-2026-18024MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-18024MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function
CVE-2026-6470MEDIUMecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-6470MEDIUMpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands
CVE-2026-16241LOWecpg-1717.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWlibpq-1717.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-16241LOWpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL ECPG: Denial of Service via integer underflow
CVE-2026-6469LOWecpg-1717.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWlibpq-1717.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-1717.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-17-base17.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-17-client17.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-17-client-base17.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
CVE-2026-6469LOWpostgresql-17-contrib17.10-r117.11-r0postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification
0
Crítica
112
Alta
49
Media
14
Baja
0
Desconocida
fixable per nightly scan · peak 1637 of 115 days with any · 2026-06-29 to 2026-10-22

Descarga la imagen

Ejecútala directamente con Docker, Podman o cualquier carga de trabajo de Kubernetes. Sin root, sistema de archivos raíz de solo lectura, compilada para amd64 y arm64.

Descargar (etiqueta)

docker pull ghcr.io/quenchworks/images/documentdb:0.114.0

Etiquetas

0.114.00.114.0-amd640.114.0-arm64

Las imágenes se etiquetan por versión de la app (nunca :latest): un índice multiarquitectura más etiquetas por arquitectura.

Versión de la app
0.114.0
Arquitecturas
amd64, arm64
Se ejecuta como
nonroot (uid 1001)
Sistema de archivos raíz
solo lectura
Licencia
MIT

Verifica la cadena de suministro

Esta imagen está firmada con cosign y lleva un SBOM SPDX y una atestación de procedencia de compilación SLSA en el mismo digest. Comprueba las tres tú mismo:

# 1. signature — built and signed by QuenchWorks CI
cosign verify ghcr.io/quenchworks/images/documentdb:0.114.0 \
  --certificate-identity-regexp 'https://github.com/quenchworks/.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

# 2. SLSA build provenance — which workflow built it, from what
cosign verify-attestation --type https://slsa.dev/provenance/v1 ghcr.io/quenchworks/images/documentdb:0.114.0 \
  --certificate-identity-regexp 'https://github.com/quenchworks/.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

# 3. SPDX SBOM — the package inventory
cosign verify-attestation --type https://spdx.dev/Document/v2.3 ghcr.io/quenchworks/images/documentdb:0.114.0 \
  --certificate-identity-regexp 'https://github.com/quenchworks/.+' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com

Consulta la guía de SBOM y procedencia para leer el SBOM y usar estas comprobaciones en CI.

Transparencia

Cada imagen lleva su SBOM y su procedencia como atestaciones en el mismo digest, verificables públicamente con los comandos anteriores (comprueban el paquete y el registro de transparencia de Sigstore, Rekor).

Ver el chart de HelmVer el paquete

Proyecto original: https://github.com/documentdb/documentdb