StackRadar

CVE-2019-11236

Medium

Advisory

Published 15 Apr 2019In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.021
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
113
of 17,781 indexed, latest versions
Container images
107
deployed by those charts
Fix available
2 of 2
affected packages

Improper Neutralization of CRLF Sequences in urllib3 library for Python

Carried by container images the latest versions of 113 of 17,781 indexed charts deploy, on 107 images.

Affected packageAffected versionsFixed inImages
urllib3pypi1.7.1, 1.10.2, 1.13.1, 1.19.1+6 more1.24.3107
python-urllib3deb1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.21.7.1-1ubuntu4.1+esm1, 1.13.1-2ubuntu0.16.04.36
OSV records
GHSA-r64q-w8jr-g9qpUBUNTU-CVE-2019-11236
Also known as
PYSEC-2019-132, USN-3990-1, USN-3990-2

Charts affected

113 by stars
ChartLatestAffected imagesRadar Score
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
urllib3@1.24.2
1.24.3

Open the chart page →

9,868
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
urllib3@1.24.1
1.24.3

Open the chart page →

4,515
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
urllib3@1.24.2
1.24.3

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
urllib3@1.24.2
1.24.3

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
urllib3@1.24.2
1.24.3

Open the chart page →

13,874
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
urllib3@1.24.1
1.24.3

Open the chart page →

3,555
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
blacktop/httpie:latestfc5e68e2f5ab
urllib3@1.22
1.24.3

Open the chart page →

6,868
oesopsmxVerified publisher4.0.326 of 25See more

oes opsmx 4.0.32

6 of the 25 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
urllib3@1.24.2
1.24.3
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
urllib3@1.24.2
1.24.3
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
urllib3@1.24.2
1.24.3
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
urllib3@1.24.2
1.24.3
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
urllib3@1.24.2
1.24.3
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
urllib3@1.24.2
1.24.3

Open the chart page →

107,811
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
urllib3@1.24.2
1.24.3

Open the chart page →

31,510
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
urllib3@1.22
1.24.3

Open the chart page →

1,848
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
urllib3@1.24.1
1.24.3

Open the chart page →

5,079
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
urllib3@1.24.1
1.24.3

Open the chart page →

4,196
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
urllib3@1.22
1.24.3

Open the chart page →

13,541
splunk-operatorstakaterVerified publisher0.0.61 of 2See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
splunk/splunk-operator:2.0.0c4e0d3146226
urllib3@1.24.2
1.24.3

Open the chart page →

11,459
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python-urllib3@1.7.1-1build1
urllib3@1.7.1
1.7.1-1ubuntu4.1+esm1
1.24.3

Open the chart page →

41,427
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
urllib3@1.10.2
1.24.3

Open the chart page →

1,650
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
urllib3@1.22
1.24.3

Open the chart page →

3,212
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
urllib3@1.22
1.24.3

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
urllib3@1.22
1.24.3

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.03 of 3See more

twitter-sentiment azure-sample 0.1.0

3 of the 3 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
urllib3@1.22
1.24.3
neilpeterson/get-tweet:v28b645ac1a23e
urllib3@1.22
1.24.3
neilpeterson/process-tweet:latest39ce9f92e899
urllib3@1.22
1.24.3

Open the chart page →

11,833
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
urllib3@1.24.2
1.24.3

Open the chart page →

18,980
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
urllib3@1.24.1
1.24.3

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
urllib3@1.24.1
1.24.3

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
urllib3@1.24.1
1.24.3

Open the chart page →

1,310
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
urllib3@1.21.1
1.24.3

Open the chart page →

2,408
couchdbcloudnativeapp1.1.32 of 3See more

couchdb cloudnativeapp 1.1.3

2 of the 3 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
kocolosk/couchdb-statefulset-assembler:1.2.06effb982154e
urllib3@1.22
1.24.3
library/couchdb:2.3.0ee75c9a737e7
urllib3@1.19.1
1.24.3

Open the chart page →

2,110
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
urllib3@1.23
1.24.3
daskdev/dask-notebook:1.1.0052630f5ca04
urllib3@1.24.1
1.24.3

Open the chart page →

29,901
k8s-spot-termination-handlercloudnativeapp1.2.11 of 1See more

k8s-spot-termination-handler cloudnativeapp 1.2.1

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
urllib3@1.24.1
1.24.3

Open the chart page →

2,095
kube-huntercloudnativeapp1.0.21 of 1See more

kube-hunter cloudnativeapp 1.0.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
aquasec/kube-hunter:1950bf607ce9308
urllib3@1.24.1
1.24.3

Open the chart page →

1,305
locustcloudnativeapp1.0.01 of 1See more

locust cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
greenbirdit/locust:0.9.0e99d53bdc944
urllib3@1.24.1
1.24.3

Open the chart page →

1,352
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
urllib3@1.24.1
1.24.3

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
urllib3@1.22
1.24.3

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
urllib3@1.22
1.24.3

Open the chart page →

77,758
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
urllib3@1.24.2
1.24.3

Open the chart page →

25,151
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python-urllib3@1.7.1-1ubuntu4
urllib3@1.7.1
1.7.1-1ubuntu4.1+esm1
1.24.3
galaxy/galaxy-stable:v18.018e577a626dfd
python-urllib3@1.7.1-1ubuntu4
urllib3@1.22
1.7.1-1ubuntu4.1+esm1
1.24.3

Open the chart page →

70,895
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
urllib3@1.24.1
1.24.3

Open the chart page →

3,871
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
urllib3@1.24.2
1.24.3

Open the chart page →

27,728
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
urllib3@1.24.2
1.24.3

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
urllib3@1.24.2
1.24.3

Open the chart page →

24,335
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
urllib3@1.24.1
1.24.3

Open the chart page →

4,217
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
amundsendev/amundsen-search:2.4.099dda9502c3e
urllib3@1.22
1.24.3

Open the chart page →

11,174
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
fiware/orion-ld:1.10.03c490a746f65
urllib3@1.24.2
1.24.3

Open the chart page →

9,764
orionfiware1.6.111 of 2See more

orion fiware 1.6.11

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.10.0b7ee7569a9a8
urllib3@1.24.2
1.24.3

Open the chart page →

10,637
kube-ops-viewfluent-operatorVerified publisher0.1.21 of 1See more

kube-ops-view fluent-operator 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
urllib3@1.22
1.24.3

Open the chart page →

1,848
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
urllib3@1.24.1
1.24.3

Open the chart page →

3,474
comcastgeek-cookbookVerified publisher6.4.21 of 1See more

comcast geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
billimek/comcastusage-for-influxdb:latest801bba1228ac
urllib3@1.24
1.24.3

Open the chart page →

3,245
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
urllib3@1.22
1.24.3

Open the chart page →

13,551
modem-statsgeek-cookbookVerified publisher6.4.21 of 1See more

modem-stats geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
billimek/sb6183-for-influxdb:latestbf8158556035
urllib3@1.22
1.24.3

Open the chart page →

1,075
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
urllib3@1.24.2
1.24.3

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
urllib3@1.24.2
1.24.3
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
urllib3@1.24.2
1.24.3
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
urllib3@1.24.2
1.24.3
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
urllib3@1.24.2
1.24.3
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
urllib3@1.24.2
1.24.3

Open the chart page →

89,959

Container images carrying it

107 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
urllib3@1.24.2
1.24.3
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
urllib3@1.24.2
1.24.3
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
urllib3@1.24.2
1.24.3
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
urllib3@1.24.2
1.24.3
1
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
urllib3@1.24.2
1.24.3
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
urllib3@1.24.2
1.24.3
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
urllib3@1.24.2
1.24.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.