ghcr.io/zalando/postgres-operator:v1.15.1
Base OS: alpine 3.23.244 vulnerabilities fixed
Patched Image
ghcr.io/verity-org/zalando/postgres-operator:v1.15.1
Supply Chain
Full compliance detailsSignedSLSA L3SBOMRekor
Verify this artifact
Cosign signature
cosign verify \ --certificate-identity-regexp "https://github.com/verity-org/verity/.github/workflows/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ ghcr.io/verity-org/zalando/postgres-operator:v1.15.1
Build provenance
gh attestation verify \ oci://ghcr.io/verity-org/zalando/postgres-operator:v1.15.1 \ --owner verity-org
Before patching
Found 58 vulnerabilities in the original image. 44 fixed by Copa. 14 remaining after patching.
5 CRITICAL22 HIGH28 MEDIUM3 LOW
Fix available — pending patch
These vulnerabilities have upstream fixes but could not be automatically patched. Manual remediation may be required.
- CVE-2025-68121CRITICAL
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.24.13, 1.25.7, 1.26.0-rc.3
- CVE-2026-35469HIGH
- Package
- github.com/moby/spdystream
- Installed
- v0.5.0
- Fixed
- 0.5.1
- CVE-2025-61726HIGH
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.24.12, 1.25.6
- CVE-2025-61728HIGH
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-25679HIGH
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32280HIGH
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32281HIGH
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32283HIGH
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.9, 1.26.2
- CVE-2025-61730MEDIUM
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.24.12, 1.25.6
- CVE-2026-27142MEDIUM
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.8, 1.26.1
- CVE-2026-32282MEDIUM
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32288MEDIUM
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-32289MEDIUM
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.9, 1.26.2
- CVE-2026-27139LOW
- Package
- stdlib
- Installed
- v1.25.5
- Fixed
- 1.25.8, 1.26.1
| ID | Package | Installed | Fixed | Severity |
|---|---|---|---|---|
| CVE-2025-68121 | stdlib | v1.25.5 | 1.24.13, 1.25.7, 1.26.0-rc.3 | CRITICAL |
| CVE-2026-35469 | github.com/moby/spdystream | v0.5.0 | 0.5.1 | HIGH |
| CVE-2025-61726 | stdlib | v1.25.5 | 1.24.12, 1.25.6 | HIGH |
| CVE-2025-61728 | stdlib | v1.25.5 | 1.24.12, 1.25.6 | HIGH |
| CVE-2026-25679 | stdlib | v1.25.5 | 1.25.8, 1.26.1 | HIGH |
| CVE-2026-32280 | stdlib | v1.25.5 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32281 | stdlib | v1.25.5 | 1.25.9, 1.26.2 | HIGH |
| CVE-2026-32283 | stdlib | v1.25.5 | 1.25.9, 1.26.2 | HIGH |
| CVE-2025-61730 | stdlib | v1.25.5 | 1.24.12, 1.25.6 | MEDIUM |
| CVE-2026-27142 | stdlib | v1.25.5 | 1.25.8, 1.26.1 | MEDIUM |
| CVE-2026-32282 | stdlib | v1.25.5 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32288 | stdlib | v1.25.5 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-32289 | stdlib | v1.25.5 | 1.25.9, 1.26.2 | MEDIUM |
| CVE-2026-27139 | stdlib | v1.25.5 | 1.25.8, 1.26.1 | LOW |
Original image reference
ghcr.io/zalando/postgres-operator:v1.15.1