StackRadar

CVE-2018-13874

Critical

Advisory

Published 10 Jul 2018In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.019
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
21
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
hdf5deb1.10.0-patch1+docs-4, 1.10.4+repack-11ubuntu1, 1.10.7+repack-4ubuntu2, 1.10.10+repack-3.1ubuntu4+1 moreno fix listed20
OSV records
UBUNTU-CVE-2018-13874

Charts affected

21 by stars
ChartLatestAffected imagesRadar Score
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

8,690
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
hdf5@1.14.5+repack-3build1
no fix listed

Open the chart page →

11,103
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

12,930
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
hdf5@1.10.4+repack-11ubuntu1
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
hdf5@1.10.4+repack-11ubuntu1
no fix listed

Open the chart page →

45,832
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

32,501
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

20,900
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
hdf5@1.10.0-patch1+docs-4
no fix listed

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
hdf5@1.10.0-patch1+docs-4
no fix listed

Open the chart page →

18,863
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
hdf5@1.10.0-patch1+docs-4
no fix listed

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
hdf5@1.10.0-patch1+docs-4
no fix listed

Open the chart page →

24,335
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

16,954
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

30,699
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

14,290
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

45,239
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
hdf5@1.10.4+repack-11ubuntu1
no fix listed

Open the chart page →

22,658
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

12,460
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

8,193
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed

Open the chart page →

45,239
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2018-13874.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
hdf5@1.10.7+repack-4ubuntu2
no fix listed

Open the chart page →

7,849

Container images carrying it

20 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
2
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
hdf5@1.10.0-patch1+docs-4
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
1
mediagis/nominatim:3.7c15e941485ef
hdf5@1.10.4+repack-11ubuntu1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
opendatacube/pipelines:wofs-1.225d810e8504b8
hdf5@1.10.0-patch1+docs-4
no fix listed
1
opendatacube/restcube:latest91870111837c
hdf5@1.10.0-patch1+docs-4
no fix listed
1
opendatacube/wms:latest1b90cdf68831
hdf5@1.10.0-patch1+docs-4
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
hdf5@1.14.5+repack-3build1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
hdf5@1.10.10+repack-3.1ubuntu4
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
timescale/timescaledb-ha:pg16d7db8f1085a3
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
hdf5@1.10.7+repack-4ubuntu2
no fix listed
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
hdf5@1.10.4+repack-11ubuntu1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
hdf5@1.10.4+repack-11ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.