StackRadar

CVE-2019-0542

High

Advisory

Published 14 Jan 2019In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
4
of 17,781 indexed, latest versions
Container images
4
deployed by those charts
Fix available
1 of 1
affected package

xterm vulnerable to remote code execution

Carried by container images the latest versions of 4 of 17,781 indexed charts deploy, on 4 images.

Affected packageAffected versionsFixed inImages
xtermnpm1.1.3, 3.1.0, 3.2.0, 3.3.03.8.14
OSV records
GHSA-mc23-976p-j42x

Charts affected

4 by stars
ChartLatestAffected imagesRadar Score
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2019-0542.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
xterm@3.3.0
3.8.1

Open the chart page →

29,901
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-0542.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
xterm@1.1.3
3.8.1

Open the chart page →

77,758
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2019-0542.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
xterm@3.1.0
3.8.1

Open the chart page →

12,907
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2019-0542.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
xterm@3.2.0
3.8.1

Open the chart page →

57,669

Container images carrying it

4 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
conduction/conduction-ui-app:devd591f5e6f2a9
xterm@3.1.0
3.8.1
1
daskdev/dask-notebook:1.1.0052630f5ca04
xterm@3.3.0
3.8.1
1
ibmcom/microclimate-theia:lateste17bdccc5030
xterm@3.2.0
3.8.1
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
xterm@1.1.3
3.8.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.