StackRadarChart IndexLive demo

CVE-2019-1010083

High

Advisory

Published 17 Jul 2019In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.019; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 15; of 17,781 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 1 of 1; affected package

Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage

Carried by container images the latest versions of 15 of 17,781 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
flaskpypi	0.10.1, 0.11.1, 0.12, 0.12.2+2 more	1.0	13

OSV records: GHSA-5wv5-4vpf-pj6m
Also known as: PYSEC-2019-179

Charts affected

15 by stars

Chart

Latest

Affected images

Radar Score

octoprinthalkeye

1 of 1 See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
octoprint/octoprint :1.4.0	106c26efcd8a	flask@0.12.5	1.0

Open the chart page →

3,608

radosgwananace-charts

1 of 1 See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
ceph/daemon :latest-nautilus	90f30824a96e	flask@0.10.1	1.0

Open the chart page →

1,650

aks-helloworldazure-sample

1 of 1 See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
neilpeterson/aks-helloworld :v1	fb47732ef36b	flask@0.12.2	1.0

Open the chart page →

4,269

azure-voteazure-sample

1 of 2 See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
neilpeterson/azure-vote-front :v3	84062718347c	flask@0.12.2	1.0

Open the chart page →

5,224

azure-vote-osbaazure-sample

1 of 1 See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
neilpeterson/azure-vote-front :v3	84062718347c	flask@0.12.2	1.0

Open the chart page →

4,269

twitter-sentimentazure-sample

1 of 3 See more

twitter-sentiment azure-sample 0.1.0

1 of the 3 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
neilpeterson/chart-tweet :latest	64fd8dab075f	flask@0.12.2	1.0

Open the chart page →

11,833

supersetcloudnativeapp

1 of 1 See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
amancevice/superset :0.28.1	c8c04bfe3d66	flask@0.12.2	1.0

Open the chart page →

5,060

testdeploymentapp

1 of 1 See more

test deploymentapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
cbanuka/pythonapp :latest	c742770d4247	flask@0.10.1	1.0

Open the chart page →

409

deepflowkubesphere-stable

1 of 8 See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-app :v6.2.6.5	a1888d35e787	flask@0.11.1	1.0

Open the chart page →

18,316

sample-bookinfokubesphere-test

1 of 4 See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
kubesphere/examples-bookinfo-productpage-v1 :1.13.0	378f49ec9c44	flask@0.12.4	1.0

Open the chart page →

9,378

elasticsearch2ncsa

1 of 2 See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
elastichq/elasticsearch-hq :latest	bb3bd22c2b87	flask@0.12.4	1.0

Open the chart page →

4,911

openwhiskopenwhisk

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
openwhisk/kafkaprovider :2.1.0	63dc3d2a0904	flask@0.11.1	1.0

Open the chart page →

36,215

1 of 1 See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
citizenstig/httpbin :latest	b81c818ccb86	flask@0.12	1.0

Open the chart page →

11,422

ceph-csi-cephfswikimedia

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	flask@0.12.2	1.0

Open the chart page →

10,285

ceph-csi-rbdwikimedia

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2019-1010083.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	flask@0.12.2	1.0

Open the chart page →

11,784

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
neilpeterson/azure-vote-front :v3	84062718347c	flask@0.12.2	1.0	2
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	flask@0.12.2	1.0	2
amancevice/superset :0.28.1	c8c04bfe3d66	flask@0.12.2	1.0	1
cbanuka/pythonapp :latest	c742770d4247	flask@0.10.1	1.0	1
ceph/daemon :latest-nautilus	90f30824a96e	flask@0.10.1	1.0	1
citizenstig/httpbin :latest	b81c818ccb86	flask@0.12	1.0	1
deepflowce/deepflow-app :v6.2.6.5	a1888d35e787	flask@0.11.1	1.0	1
elastichq/elasticsearch-hq :latest	bb3bd22c2b87	flask@0.12.4	1.0	1
kubesphere/examples-bookinfo-productpage-v1 :1.13.0	378f49ec9c44	flask@0.12.4	1.0	1
neilpeterson/aks-helloworld :v1	fb47732ef36b	flask@0.12.2	1.0	1
neilpeterson/chart-tweet :latest	64fd8dab075f	flask@0.12.2	1.0	1
octoprint/octoprint :1.4.0	106c26efcd8a	flask@0.12.5	1.0	1
openwhisk/kafkaprovider :2.1.0	63dc3d2a0904	flask@0.11.1	1.0	1