CVE-2018-18074
HighAdvisory
Published 9 Oct 2018In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.074
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 53
- of 17,781 indexed, latest versions
- Container images
- 46
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Insufficiently Protected Credentials in Requests
Carried by container images the latest versions of 53 of 17,781 indexed charts deploy, on 46 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| requestspypi | 2.2.1, 2.6.0, 2.9.1, 2.10.0+5 more | 2.20.0 | 37 |
| python-pipdeb | 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1 | 9.0.1-2.3~ubuntu1.18.04.2 | 20 |
| requestsdeb | 2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3 | 2.2.1-1ubuntu0.4, 2.9.1-3ubuntu0.1 | 5 |
- OSV records
- GHSA-x84v-xcm2-53pgUBUNTU-CVE-2018-18074
- Also known as
- PYSEC-2018-28, USN-3790-1
Charts affected
53 by stars
Container images carrying it
46 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | python-pip | no fix listed | 11 |
| oomk8s/ | 7daa08b81954 | python-pip requests | no fix listed 2.20.0 | 6 |
| omecproject/ | cfdb566dd949 | python-pip requests | no fix listed 2.20.0 | 2 |
| wurstmeister/ | 7a7fd44a7210 | requests requests | 2.2.1-1ubuntu0.4 2.20.0 | 2 |
| a10networks/ | 8dc58d434d71 | python-pip | 9.0.1-2.3~ubuntu1.18.04.2 | 1 |
| amancevice/ | c8c04bfe3d66 | requests | 2.20.0 | 1 |
| apache/ | 9f895c8ae371 | requests | 2.20.0 | 1 |
| billimek/ | bf8158556035 | requests | 2.20.0 | 1 |
| blacktop/ | fc5e68e2f5ab | requests | 2.20.0 | 1 |
| ceph/ | 90f30824a96e | requests | 2.20.0 | 1 |
| citizenstig/ | b81c818ccb86 | python-pip | no fix listed | 1 |
| cloudve/ | af56e77ca587 | python-pip | 9.0.1-2.3~ubuntu1.18.04.2 | 1 |
| confluentinc/ | 1bbda887bc53 | requests | 2.20.0 | 1 |
| confluentinc/ | c87b1c07fb53 | requests | 2.20.0 | 1 |
| daskdev/ | 4ecd7bc35500 | requests | 2.20.0 | 1 |
| galaxy/ | 0267bad550e6 | requests requests | 2.2.1-1ubuntu0.4 2.20.0 | 1 |
| galaxy/ | 8e577a626dfd | requests requests | 2.2.1-1ubuntu0.4 2.20.0 | 1 |
| kennethreitz/ | 599fe5e50731 | python-pip | 9.0.1-2.3~ubuntu1.18.04.2 | 1 |
| kocolosk/ | 6effb982154e | requests | 2.20.0 | 1 |
| kubesphere/ | b8ad79759bcd | requests | 2.20.0 | 1 |
| library/ | ee75c9a737e7 | requests | 2.20.0 | 1 |
| linuxserver/ | 0ac871624394 | requests | 2.20.0 | 1 |
| linuxserver/ | 2ce561a95e7b | requests | 2.20.0 | 1 |
| muluder/ | 43b597a93da7 | requests requests | 2.9.1-3ubuntu0.1 2.20.0 | 1 |
| neilpeterson/ | 64fd8dab075f | requests | 2.20.0 | 1 |
| neilpeterson/ | 8b645ac1a23e | requests | 2.20.0 | 1 |
| neilpeterson/ | 6527b05d5d03 | requests | 2.20.0 | 1 |
| neilpeterson/ | 29d229ab446e | requests | 2.20.0 | 1 |
| neilpeterson/ | 969af3cb8466 | requests | 2.20.0 | 1 |
| neilpeterson/ | 39ce9f92e899 | requests | 2.20.0 | 1 |
| nlmacamp/ | 5dbb8589f824 | requests | 2.20.0 | 1 |
| omecproject/ | bcc5f19fd676 | python-pip | 9.0.1-2.3~ubuntu1.18.04.2 | 1 |
| omecproject/ | 5715e5648aa0 | requests requests | 2.9.1-3ubuntu0.1 2.20.0 | 1 |
| omecproject/ | d109a8e57e71 | python-pip requests | no fix listed 2.20.0 | 1 |
| opendatacube/ | 5d810e8504b8 | python-pip | 9.0.1-2.3~ubuntu1.18.04.2 | 1 |
| opendatacube/ | 91870111837c | python-pip requests | 9.0.1-2.3~ubuntu1.18.04.2 2.20.0 | 1 |
| opendatacube/ | 1b90cdf68831 | python-pip requests | 9.0.1-2.3~ubuntu1.18.04.2 2.20.0 | 1 |
| openwhisk/ | 63dc3d2a0904 | requests | 2.20.0 | 1 |
| scrapinghub/ | a5f89bc84606 | python-pip | 9.0.1-2.3~ubuntu1.18.04.2 | 1 |
| seldonio/ | 1d0da98a2d76 | python-pip | no fix listed | 1 |
| timothyclarke/ | 22c41e5ca7e2 | python-pip requests | no fix listed 2.20.0 | 1 |
| voltha/ | c4e41e92f046 | python-pip requests | no fix listed 2.20.0 | 1 |
| voltha/ | 37f80524c207 | python-pip requests | no fix listed 2.20.0 | 1 |
| voltha/ | 9ee8c1f4428c | python-pip requests | no fix listed 2.20.0 | 1 |
| voltha/ | 655c3048a602 | python-pip requests | no fix listed 2.20.0 | 1 |
| voltha/ | ff596b62de59 | python-pip requests | no fix listed 2.20.0 | 1 |