Bitnami/pgpool vulnerabilities

1 known vulnerability in Bitnami/pgpool from Broadcom. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Bitnami: Initialization of a Resource with an Insecure Default

  CVE-2025-22248May 13, 2025VMware

  The bitnami/pgpool Docker image, and the bitnami/postgres-ha k8s chart, under default configurations, comes with an 'repmgr' user that allows unauthenticated access to the database inside the cluster. The PGPOOL_SR_CHECK_USER is the user that Pgpool itself use