StackRadar

CVE-2017-15131

High

Advisory

Published 9 Jan 2018In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
32
of 17,781 indexed, latest versions
Container images
31
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 32 of 17,781 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
xdg-user-dirsdeb0.18-1, 0.18-2no fix listed31
OSV records
DEBIAN-CVE-2017-15131

Charts affected

32 by stars
ChartLatestAffected imagesRadar Score
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

6,342
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

3,641
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

9,746
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

4,127
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

10,072
ohifkylesferrazzaVerified publisher0.1.01 of 2See more

ohif kylesferrazza 0.1.0

1 of the 2 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
jodogne/orthanc-plugins:latest6ff510aa29c2
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

3,512
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

3,681
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

5,315
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

7,126
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

8,217
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

8,001
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

15,027
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

9,367
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

12,127
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

3,773
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

13,241
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

9,342
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

29,817
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

7,733
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

10,780
jasperjasperVerified publisher1.0.2021 of 2See more

jasper jasper 1.0.202

1 of the 2 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

5,998
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

3,460
rspamdklicktippVerified publisher1.6.01 of 1See more

rspamd klicktipp 1.6.0

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
rspamd/rspamd:4.1.4e870599c970d
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

1,775
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

13,497
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

37,942
cupsr2dlan-helm-chartsVerified publisher0.1.01 of 1See more

cups r2dlan-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
anujdatar/cups:25.07.01685df04a643b
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

7,685
rawfile-localpvrawfile0.15.21 of 6See more

rawfile-localpv rawfile 0.15.2

1 of the 6 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
xdg-user-dirs@0.18-2
no fix listed

Open the chart page →

2,769
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

11,636
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

9,616
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2017-15131.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
xdg-user-dirs@0.18-1
no fix listed

Open the chart page →

9,117

Container images carrying it

31 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
xdg-user-dirs@0.18-1
no fix listed
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
xdg-user-dirs@0.18-1
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
xdg-user-dirs@0.18-2
no fix listed
1
anujdatar/cups:25.07.01685df04a643b
xdg-user-dirs@0.18-1
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
xdg-user-dirs@0.18-1
no fix listed
1
castopod/castopod:1.15.54e4f0440520f
xdg-user-dirs@0.18-2
no fix listed
1
ckulka/baikal:0.10.1-nginx434bdd162247
xdg-user-dirs@0.18-1
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
xdg-user-dirs@0.18-1
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
xdg-user-dirs@0.18-1
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
xdg-user-dirs@0.18-2
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
xdg-user-dirs@0.18-1
no fix listed
1
falcosecurity/event-generator:latest932956d86c99
xdg-user-dirs@0.18-1
no fix listed
1
jodogne/orthanc-plugins:latest6ff510aa29c2
xdg-user-dirs@0.18-2
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
xdg-user-dirs@0.18-1
no fix listed
1
opea/speecht5:1.0249afad3d268
xdg-user-dirs@0.18-1
no fix listed
1
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
xdg-user-dirs@0.18-2
no fix listed
1
openhab/openhab:5.2.1bfd4a60e90da
xdg-user-dirs@0.18-2
no fix listed
1
rspamd/rspamd:4.1.4e870599c970d
xdg-user-dirs@0.18-2
no fix listed
1
ryshe/terraria:latestb1c89f7f359a
xdg-user-dirs@0.18-1
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
xdg-user-dirs@0.18-1
no fix listed
1
signalen/backend:2.50.14760256000738
xdg-user-dirs@0.18-1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
xdg-user-dirs@0.18-1
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
xdg-user-dirs@0.18-2
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
xdg-user-dirs@0.18-2
no fix listed
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
xdg-user-dirs@0.18-2
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.40d28dbd95b03
xdg-user-dirs@0.18-1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
xdg-user-dirs@0.18-1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
xdg-user-dirs@0.18-1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
xdg-user-dirs@0.18-1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
xdg-user-dirs@0.18-1
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
xdg-user-dirs@0.18-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.