StackRadar

CVE-2018-13347

Critical

Advisory

Published 6 Jul 2018In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.027
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
68
of 17,781 indexed, latest versions
Container images
62
deployed by those charts
Fix available
1 of 1
affected package

Mercurial mishandles integer addition and subtraction

Carried by container images the latest versions of 68 of 17,781 indexed charts deploy, on 62 images.

Affected packageAffected versionsFixed inImages
mercurialpypi3.1.2, 3.7.3, 4.04.6.162
OSV records
GHSA-3mjj-mr4f-qxmx
Also known as
PYSEC-2018-89

Charts affected

68 by stars
ChartLatestAffected imagesRadar Score
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
mercurial@3.1.2
4.6.1

Open the chart page →

9,154
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
mercurial@4.0
4.6.1

Open the chart page →

18,517
pdc-portali4trustVerified publisher2.3.21 of 1See more

pdc-portal i4trust 2.3.2

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
i4trust/pdc-portal:2.0.03e77858e1219
mercurial@4.0
4.6.1

Open the chart page →

2,723
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.12 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

2 of the 6 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
mercurial@4.0
4.6.1
fjvela/urjc-fjvela-server:1.0.53c840aebce22
mercurial@4.0
4.6.1

Open the chart page →

19,187
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
mercurial@4.0
4.6.1

Open the chart page →

5,104
sentinel-dashboardsentinel-dashboardVerified publisher0.1.01 of 1See more

sentinel-dashboard sentinel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
royalwang/sentinel-dashboard:1.8.4df99e2499f91
mercurial@4.0
4.6.1

Open the chart page →

4,287
statsdstatsd-airflow-smd0.1.191 of 1See more

statsd statsd-airflow-smd 0.1.19

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
mercurial@4.0
4.6.1

Open the chart page →

4,185
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
mercurial@4.0
4.6.1

Open the chart page →

2,616
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
mercurial@4.0
4.6.1
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
mercurial@4.0
4.6.1

Open the chart page →

19,745
mongo-uiappscodeVerified publisher2026.3.301 of 1See more

mongo-ui appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
ghcr.io/kubedb/mongo-gui:latestee0354b7a57a
mercurial@4.0
4.6.1

Open the chart page →

912
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
mercurial@4.0
4.6.1

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
mercurial@4.0
4.6.1

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
mercurial@4.0
4.6.1

Open the chart page →

4,269
burst-schedulerazure-sample0.1.01 of 1See more

burst-scheduler azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/burst-scheduler:v1.23a8877032972
mercurial@4.0
4.6.1

Open the chart page →

2,408
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
mercurial@3.1.2
4.6.1

Open the chart page →

3,212
osba-cosmos-mongodb-demoazure-sample0.1.01 of 1See more

osba-cosmos-mongodb-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
mercurial@3.1.2
4.6.1

Open the chart page →

2,904
osba-mysql-demoazure-sample0.1.01 of 1See more

osba-mysql-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
mercurial@3.1.2
4.6.1

Open the chart page →

2,895
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
mercurial@3.1.2
4.6.1

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
mercurial@3.1.2
4.6.1

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.03 of 3See more

twitter-sentiment azure-sample 0.1.0

3 of the 3 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
mercurial@4.0
4.6.1
neilpeterson/get-tweet:v28b645ac1a23e
mercurial@3.1.2
4.6.1
neilpeterson/process-tweet:latest39ce9f92e899
mercurial@4.0
4.6.1

Open the chart page →

11,833
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
mercurial@4.0
4.6.1

Open the chart page →

5,437
smart-exporterbryanalves0.2.21 of 1See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
bryanalves/smart_exporter:0.2af47dfbb9413
mercurial@4.0
4.6.1

Open the chart page →

4,131
imap-mailbox-exportercamptocamp32.0.01 of 1See more

imap-mailbox-exporter camptocamp3 2.0.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
mercurial@3.1.2
4.6.1

Open the chart page →

2,234
ldap-search-exportercamptocamp31.0.01 of 1See more

ldap-search-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
camptocamp/ldap-search-exporter:latest5e55370dd292
mercurial@3.1.2
4.6.1

Open the chart page →

2,234
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
mercurial@4.0
4.6.1

Open the chart page →

4,790
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
mercurial@3.1.2
4.6.1

Open the chart page →

4,086
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
mercurial@4.0
4.6.1

Open the chart page →

6,497
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
mercurial@4.0
4.6.1

Open the chart page →

5,060
robot-shopcloud-native-toolkit1.1.13 of 12See more

robot-shop cloud-native-toolkit 1.1.1

3 of the 12 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
robotshop/rs-cart:latest388349d5cb3c
mercurial@4.0
4.6.1
robotshop/rs-catalogue:latestd545747c1b97
mercurial@4.0
4.6.1
robotshop/rs-user:latestea509182c180
mercurial@4.0
4.6.1

Open the chart page →

29,555
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
mercurial@3.7.3
4.6.1

Open the chart page →

70,895
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
mercurial@4.0
4.6.1

Open the chart page →

8,245
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
mercurial@4.0
4.6.1

Open the chart page →

3,553
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mercurial@4.0
4.6.1

Open the chart page →

27,550
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
mercurial@4.0
4.6.1

Open the chart page →

4,223
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mercurial@4.0
4.6.1

Open the chart page →

24,656
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mercurial@4.0
4.6.1

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mercurial@4.0
4.6.1

Open the chart page →

27,256
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
mercurial@4.0
4.6.1

Open the chart page →

3,260
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
mercurial@3.1.2
4.6.1

Open the chart page →

3,186
comcastgeek-cookbookVerified publisher6.4.21 of 1See more

comcast geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
billimek/comcastusage-for-influxdb:latest801bba1228ac
mercurial@3.1.2
4.6.1

Open the chart page →

3,245
gitter-irc-bridgehalkeye0.1.11 of 1See more

gitter-irc-bridge halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
mercurial@4.0
4.6.1

Open the chart page →

3,642
resurrectbothalkeye0.1.51 of 1See more

resurrectbot halkeye 0.1.5

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
halkeye/slack-resurrect:v0.1.477b05e95fdb5
mercurial@4.0
4.6.1

Open the chart page →

3,809
prometheus-aws-costs-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-aws-costs-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
mercurial@4.0
4.6.1

Open the chart page →

3,553
jenkinsjenkins-x0.10.381 of 2See more

jenkins jenkins-x 0.10.38

1 of the 2 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
jenkinsci/jenkins:2.67a1f33f004659
mercurial@4.0
4.6.1

Open the chart page →

10,682
oauth2-proxyjenkins-x0.2.31 of 1See more

oauth2-proxy jenkins-x 0.2.3

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
a5huynh/oauth2_proxy:2.20c7307d31ca8
mercurial@3.1.2
4.6.1

Open the chart page →

2,392
annotation-tooljtektVerified publisher0.1.51 of 2See more

annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
mercurial@4.0
4.6.1

Open the chart page →

2,315
polygonal-annotation-tooljtektVerified publisher0.1.51 of 2See more

polygonal-annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
mercurial@4.0
4.6.1

Open the chart page →

2,231
statsdkeyporttech0.1.191 of 1See more

statsd keyporttech 0.1.19

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
mercurial@4.0
4.6.1

Open the chart page →

4,185
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
mercurial@4.0
4.6.1

Open the chart page →

5,287
buildkite-exporterminaVerified publisher0.1.41 of 1See more

buildkite-exporter mina 0.1.4

1 of the 1 container images this version deploys carry CVE-2018-13347.

Container imageDigestPackageFixed in
codaprotocol/buildkite-exporter:0.2.137c68e67a401
mercurial@4.0
4.6.1

Open the chart page →

2,599

Container images carrying it

62 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
raykrueger/riemann:0.2.14c8baf3de57bb
mercurial@4.0
4.6.1
1
robotshop/rs-cart:latest388349d5cb3c
mercurial@4.0
4.6.1
1
robotshop/rs-catalogue:latestd545747c1b97
mercurial@4.0
4.6.1
1
robotshop/rs-user:latestea509182c180
mercurial@4.0
4.6.1
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
mercurial@4.0
4.6.1
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
mercurial@4.0
4.6.1
1
slagattollas/server-practica:latest6dd8ead8e2b1
mercurial@4.0
4.6.1
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
mercurial@3.1.2
4.6.1
1
ghcr.io/kubedb/mongo-gui:latestee0354b7a57a
mercurial@4.0
4.6.1
1
ghcr.io/leoquote/mergeable:latest451706815103
mercurial@4.0
4.6.1
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
mercurial@4.0
4.6.1
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
mercurial@4.0
4.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.