CVE-2007-4559

Critical

Advisory

Published 28 Aug 2007In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.271; 98th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 308; of 17,781 indexed, latest versions
Container images: 292; deployed by those charts
Fix available: 4 of 10; affected packages

Red Hat Security Advisory: python3.9 security update

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 292 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more	no fix listed	100
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+9 more	no fix listed	43
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	no fix listed	25
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+3 more	3.10.12-1~22.04.2	15
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7
python3.11deb	3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1	no fix listed	2
python-piprpm	9.0.3-15.el8, 9.0.3-16.el8, 9.0.3-18.el8, 9.0.3-19.el8+4 more	0:9.0.3-23.el8, 0:21.2.3-7.el9	82
python3rpm	3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+14 more	0:3.6.8-56.el8_9	78
python3.9rpm	3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2	0:3.9.18-1.el9_3	4

OSV records: UBUNTU-CVE-2007-4559 RHSA-2023:6659 RHSA-2023:6694 RHSA-2023:7151 RHSA-2023:7176
Also known as: RHSA-2024:0374, RHSA-2024:0587

Charts affected

308 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	python-pip@9.0.3-19.el8 python3@3.6.8-37.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

15,230

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	python-pip@9.0.3-20.el8 python3@3.6.8-41.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9

Open the chart page →

6,138

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	python-pip@9.0.3-20.el8 python3@3.6.8-41.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2007-4559.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9

Open the chart page →

6,016

Container images carrying it

292 by charts deploying them

A fixed version is listed for 4 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
oomk8s/readiness-check :2.0.2	875814cc853d	python2.7@2.7.12-1ubuntu0~16.04.4 python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed no fix listed	11
codeurjc/server :v1.0	310bea5b1ee7	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	8
oomk8s/readiness-check :2.0.0	7daa08b81954	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	6
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	no fix listed no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	python2.7@2.7.12-1ubuntu0~16.04.4 python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed no fix listed	4
mastercloudapps/server :v2.23	f3d24dfe2686	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	4
quay.io/strimzi/operator :0.37.0	52f376e64b9b	python-pip@9.0.3-22.el8 python3@3.6.8-51.el8_8.1	0:9.0.3-23.el8 0:3.6.8-56.el8_9	4
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	python3.8@3.8.10-0ubuntu1~20.04	no fix listed	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	python2.7@2.7.12-1ubuntu0~16.04.4	no fix listed	3
selenium/hub :3.141.59	02f251d48d5f	python3.8@3.8.10-0ubuntu1~20.04	no fix listed	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	python3.10@3.10.6-1~22.04.2	3.10.12-1~22.04.2	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python-pip@9.0.3-22.el8 python3@3.6.8-47.el8_6.2	0:9.0.3-23.el8 0:3.6.8-56.el8_9	3
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	python-pip@9.0.3-22.el8 python3@3.6.8-51.el8_8.1	0:9.0.3-23.el8 0:3.6.8-56.el8_9	2
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	python-pip@9.0.3-22.el8 python3@3.6.8-51.el8_8.1	0:9.0.3-23.el8 0:3.6.8-56.el8_9	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	python2.7@2.7.17-1~18.04	no fix listed	2
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed	2
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed	2
istio/proxyv2 :1.10.3	a78b7a165744	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	2
library/cassandra :3.11.6	5aa8400b4b3b	python2.7@2.7.17-1~18.04ubuntu1.1	no fix listed	2
library/rabbitmq :3.12.1-management	f020c06da226	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.2	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed	2
minio/operator :v4.3.7	54393e03f3b2	python-pip@9.0.3-20.el8 python3@3.6.8-41.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	python2.7@2.7.12-1ubuntu0~16.04.4 python3.5@3.5.2-2ubuntu0~16.04.5	no fix listed no fix listed	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	2
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	python-pip@9.0.3-22.el8 python3@3.6.8-45.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	python3.8@3.8.10-0ubuntu1~20.04.9	no fix listed	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	python3.10@3.10.4-3	3.10.12-1~22.04.2	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	python3.10@3.10.6-1~22.04.2ubuntu1	3.10.12-1~22.04.2	2
wurstmeister/zookeeper :latest	7a7fd44a7210	python2.7@2.7.6-8 python3.4@3.4.0-2ubuntu1	no fix listed no fix listed	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	python2.7@2.7.18-13ubuntu1.1 python3.10@3.10.6-1~22.04	no fix listed 3.10.12-1~22.04.2	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	python3.8@3.8.10-0ubuntu1~20.04	no fix listed	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	python2.7@2.7.17-1~18.04ubuntu1.2	no fix listed	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed	2
quay.io/keycloak/keycloak :20.0	054ef67eb7da	python-pip@9.0.3-22.el8 python3@3.6.8-48.el8_7	0:9.0.3-23.el8 0:3.6.8-56.el8_9	2
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	python-pip@9.0.3-20.el8 python3@3.6.8-41.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	python-pip@9.0.3-19.el8 python3@3.6.8-39.el8_4.1	0:9.0.3-23.el8 0:3.6.8-56.el8_9	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	python-pip@9.0.3-19.el8 python3@3.6.8-39.el8_4.1	0:9.0.3-23.el8 0:3.6.8-56.el8_9	2
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	python3.6@3.6.9-1~18.04ubuntu1	no fix listed	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	python3.8@3.8.5-1~20.04	no fix listed	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	python3.8@3.8.5-1~20.04.3	no fix listed	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	python3.6@3.6.9-1~18.04ubuntu1.7	no fix listed	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	python-pip@9.0.3-19.el8 python3@3.6.8-37.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	python-pip@9.0.3-15.el8 python3@3.6.8-15.1.el8	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1
andrianrf/backoffice-be :latest	6036614803d4	python-pip@21.2.3-6.el9 python3.9@3.9.16-1.el9	0:21.2.3-7.el9 0:3.9.18-1.el9_3	1
andrianrf/iso-server :latest	7da47f525c7d	python-pip@21.2.3-6.el9 python3.9@3.9.16-1.el9	0:21.2.3-7.el9 0:3.9.18-1.el9_3	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed	1
apachepulsar/pulsar :2.9.0	d056c89b7131	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed	1
apachepulsar/pulsar :2.8.2	d538416d5afe	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	python-pip@9.0.3-22.el8 python3@3.6.8-51.el8_8.2	0:9.0.3-23.el8 0:3.6.8-56.el8_9	1