CVE-2007-4559

Critical

Advisory

Published 28 Aug 2007In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.271; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 308; of 17,781 indexed, latest versions
Container images: 292; deployed by those charts
Fix available: 4 of 10; affected packages

Red Hat Security Advisory: python3.9 security update

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 292 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more	no fix listed	100
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+9 more	no fix listed	43
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	no fix listed	25
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+3 more	3.10.12-1~22.04.2	15
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7
python3.11deb	3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1	no fix listed	2
python-piprpm	9.0.3-15.el8, 9.0.3-16.el8, 9.0.3-18.el8, 9.0.3-19.el8+4 more	0:9.0.3-23.el8, 0:21.2.3-7.el9	82
python3rpm	3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+14 more	0:3.6.8-56.el8_9	78
python3.9rpm	3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2	0:3.9.18-1.el9_3	4

OSV records: UBUNTU-CVE-2007-4559 RHSA-2023:6659 RHSA-2023:6694 RHSA-2023:7151 RHSA-2023:7176
Also known as: RHSA-2024:0374, RHSA-2024:0587

Charts affected

308 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	python-pip@9.0.3-19.el8 python3@3.6.8-37.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

15,230

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	python-pip@9.0.3-20.el8 python3@3.6.8-41.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9

Open the chart page →

6,138

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	python-pip@9.0.3-20.el8 python3@3.6.8-41.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9

Open the chart page →

6,016

Container images carrying it

292 by charts deploying them

A fixed version is listed for 4 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	python3.6@3.6.9-1~18.04ubuntu1.9	no fix listed	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	python3.8@3.8.10-0ubuntu1~20.04.13	no fix listed	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	python3.8@3.8.10-0ubuntu1~20.04.13	no fix listed	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed no fix listed	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	python3.8@3.8.5-1~20.04.2	no fix listed	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	python-pip@9.0.3-22.el8 python3@3.6.8-51.el8_8.1	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/ctrontesting/iofog-controller :latest	10df27bc5560	python-pip@9.0.3-19.el8 python3@3.6.8-37.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	python-pip@9.0.3-19.el8 python3@3.6.8-37.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	python3.6@3.6.9-1~18.04ubuntu1.8	no fix listed	1
quay.io/fiware/apollo :0.0.10	55330b1b60c1	python-pip@9.0.3-22.el8 python3@3.6.8-45.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/fiware/canis-major :1.5.15	bb40472e4ff5	python-pip@9.0.3-20.el8 python3@3.6.8-41.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/fiware/endpoint-configuration-service :0.4.3	0dc38a87b844	python-pip@9.0.3-22.el8 python3@3.6.8-45.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/fiware/orion-ld :1.0.1	ea838e5b4051	python-pip@9.0.3-19.el8 python3@3.6.8-39.el8_4	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/fiware/trusted-issuers-registry :0.11.1	a8a9ec461034	python-pip@9.0.3-22.el8 python3@3.6.8-45.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	python-pip@9.0.3-16.el8 python3@3.6.8-23.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	python-pip@9.0.3-19.el8 python3@3.6.8-37.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	python-pip@9.0.3-20.el8 python3@3.6.8-41.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/openshift/origin-cli :4.6	6722d5041b47	python-pip@9.0.3-16.el8 python3@3.6.8-24.el8_2	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	python-pip@9.0.3-16.el8 python3@3.6.8-24.el8_2.2	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	python-pip@9.0.3-22.1.el8_6 python3@3.6.8-47.el8_6.4	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	python-pip@9.0.3-19.el8 python3@3.6.8-38.el8_4	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	python-pip@21.2.3-6.el9 python3.9@3.9.16-1.el9_2.1	0:21.2.3-7.el9 0:3.9.18-1.el9_3	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	python-pip@9.0.3-19.el8 python3@3.6.8-37.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/strimzi/operator :0.36.1	e9e03b31007c	python-pip@9.0.3-22.el8 python3@3.6.8-51.el8_8.1	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
quay.io/wi_stefan/dss-validation-service :0.0.1	8e928db29ee1	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7.1	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	python-pip@9.0.3-19.el8 python3@3.6.8-37.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	python3.8@3.8.5-1~20.04.2	no fix listed	1