StackRadar

CVE-2017-18342

Critical

Advisory

Published 27 Jun 2018In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.057
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
78
of 17,781 indexed, latest versions
Container images
57
deployed by those charts
Fix available
1 of 2
affected packages

PyYAML insecurely deserializes YAML strings leading to arbitrary code execution

Carried by container images the latest versions of 78 of 17,781 indexed charts deploy, on 57 images.

Affected packageAffected versionsFixed inImages
pyyamlpypi3.10, 3.12, 3.135.157
pyyamldeb3.10-4ubuntu0.1, 3.12-1build2no fix listed5
OSV records
GHSA-rprw-h62v-c2w7UBUNTU-CVE-2017-18342
Also known as
PYSEC-2018-49

Charts affected

78 by stars
ChartLatestAffected imagesRadar Score
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
pyyaml@3.13
5.1

Open the chart page →

5,919
openldaphelm-openldapVerified publisher2.0.42 of 3See more

openldap helm-openldap 2.0.4

2 of the 3 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
pyyaml@3.13
5.1
osixia/phpldapadmin:0.9.0d112b82be133
pyyaml@3.13
5.1

Open the chart page →

6,219
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
pyyaml@3.13
5.1

Open the chart page →

4,515
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
ceticasbl/pg-ldap-sync:latest6c0aa7567145
pyyaml@3.13
5.1
osixia/openldap:1.2.4d212a12aa728
pyyaml@3.12
5.1
osixia/phpldapadmin:0.7.11ab629698ae0
pyyaml@3.12
5.1

Open the chart page →

52,919
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
pyyaml@3.13
5.1

Open the chart page →

96,941
ecr-proxyevryfs-ossVerified publisher0.2.91 of 1See more

ecr-proxy evryfs-oss 0.2.9

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
esailors/aws-ecr-http-proxy:1.5.15608ae045fa7
pyyaml@3.12
5.1

Open the chart page →

1,523
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
pyyaml@3.13
5.1

Open the chart page →

3,555
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/openldap:1.2.4d212a12aa728
pyyaml@3.12
5.1

Open the chart page →

107,811
openldapalphani-helm-chartsVerified publisher2.4.571 of 2See more

openldap alphani-helm-charts 2.4.57

1 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
pyyaml@3.12
5.1

Open the chart page →

3,067
phpldapadminalphani-helm-chartsVerified publisher0.1.31 of 1See more

phpldapadmin alphani-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
pyyaml@3.12
5.1

Open the chart page →

2,559
agentbuildkite0.6.41 of 1See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
buildkite/agent:3.25.0aec38cfaae0e
pyyaml@3.13
5.1

Open the chart page →

2,663
phpldapadmincetic0.1.41 of 1See more

phpldapadmin cetic 0.1.4

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.11ab629698ae0
pyyaml@3.12
5.1

Open the chart page →

2,559
openldapfluktuid0.1.11 of 2See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
pyyaml@3.13
5.1

Open the chart page →

3,313
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
pyyaml@3.13
5.1

Open the chart page →

5,079
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
pyyaml@3.13
5.1

Open the chart page →

4,196
scienceboxsciencebox0.0.71 of 17See more

sciencebox sciencebox 0.0.7

1 of the 17 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
pyyaml@3.13
5.1

Open the chart page →

6,587
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
pyyaml@3.10
5.1

Open the chart page →

1,650
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
pyyaml@3.13
5.1

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
pyyaml@3.13
5.1

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
pyyaml@3.13
5.1

Open the chart page →

1,310
openldapccowleyVerified publisher2.0.42 of 3See more

openldap ccowley 2.0.4

2 of the 3 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
pyyaml@3.13
5.1
osixia/phpldapadmin:0.9.0d112b82be133
pyyaml@3.13
5.1

Open the chart page →

6,219
tsoragecetic0.4.111 of 8See more

tsorage cetic 0.4.11

1 of the 8 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:5.0.1c87b1c07fb53
pyyaml@3.13
5.1

Open the chart page →

12,018
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
pyyaml@3.10-4ubuntu0.1
pyyaml@3.10
no fix listed
5.1

Open the chart page →

30,140
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
pyyaml@3.13
5.1

Open the chart page →

2,408
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
pyyaml@3.13
5.1
daskdev/dask-notebook:1.1.0052630f5ca04
pyyaml@3.13
5.1

Open the chart page →

29,901
k8s-spot-termination-handlercloudnativeapp1.2.11 of 1See more

k8s-spot-termination-handler cloudnativeapp 1.2.1

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
pyyaml@3.13
5.1

Open the chart page →

2,095
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
pyyaml@3.13
5.1

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
pyyaml@3.12
5.1

Open the chart page →

5,060
openldapcloud-native-toolkit0.1.91 of 3See more

openldap cloud-native-toolkit 0.1.9

1 of the 3 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.7.058cce1b08592
pyyaml@3.12
5.1

Open the chart page →

2,782
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
pyyaml@3.10-4ubuntu0.1
pyyaml@3.10
no fix listed
5.1
galaxy/galaxy-stable:v18.018e577a626dfd
pyyaml@3.10-4ubuntu0.1
pyyaml@3.10
no fix listed
5.1

Open the chart page →

70,895
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
pyyaml@3.13
5.1

Open the chart page →

16,860
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
kfserving/models-web-app:v0.6.1f322d6ffdfa3
pyyaml@3.13
5.1

Open the chart page →

3,830
openldapcsic-charts0.1.11 of 2See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
pyyaml@3.13
5.1

Open the chart page →

5,293
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
pyyaml@3.12-1build2
pyyaml@3.12
no fix listed
5.1

Open the chart page →

27,728
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
pyyaml@3.12
5.1

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
pyyaml@3.12-1build2
pyyaml@3.12
no fix listed
5.1

Open the chart page →

24,335
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
pyyaml@3.13
5.1

Open the chart page →

4,217
openldap-stack-haeclipse-aeriosVerified publisher4.1.21 of 4See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
osixia/phpldapadmin:0.9.0d112b82be133
pyyaml@3.13
5.1

Open the chart page →

7,534
my-chartfleet-web-app0.1.01 of 6See more

my-chart fleet-web-app 0.1.0

1 of the 6 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
richardchesterwood/k8s-fleetman-webapp-angular:release2ed7d720878ac
pyyaml@3.12
5.1

Open the chart page →

24,296
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
pyyaml@3.13
5.1

Open the chart page →

3,474
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
pyyaml@3.13
5.1

Open the chart page →

7,232
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
pyyaml@3.13
5.1

Open the chart page →

14,813
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
pyyaml@3.13
5.1

Open the chart page →

70,530
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
pyyaml@3.13
5.1

Open the chart page →

18,316
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
pyyaml@3.13
5.1

Open the chart page →

3,294
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
pyyaml@3.13
5.1

Open the chart page →

4,911
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
pyyaml@3.12
5.1

Open the chart page →

55,726
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
pyyaml@3.12
5.1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
pyyaml@3.12
5.1

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
pyyaml@3.12
5.1

Open the chart page →

26,211
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2017-18342.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
pyyaml@3.12
5.1

Open the chart page →

12,609

Container images carrying it

57 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
voltha/voltha-netconf:1.6.037f80524c207
pyyaml@3.12
5.1
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
pyyaml@3.12
5.1
1
voltha/voltha-tester:1.7.0655c3048a602
pyyaml@3.12
5.1
1
voltha/voltha-voltha:1.6.0ff596b62de59
pyyaml@3.12
5.1
1
wallarm/ingress-python:4.6.0-15cb2ae08b40f
pyyaml@3.13
5.1
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
pyyaml@3.13
5.1
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
pyyaml@3.13
5.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.