StackRadar

CVE-2019-11236

Medium

Advisory

Published 15 Apr 2019In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.021
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
113
of 17,781 indexed, latest versions
Container images
107
deployed by those charts
Fix available
2 of 2
affected packages

Improper Neutralization of CRLF Sequences in urllib3 library for Python

Carried by container images the latest versions of 113 of 17,781 indexed charts deploy, on 107 images.

Affected packageAffected versionsFixed inImages
urllib3pypi1.7.1, 1.10.2, 1.13.1, 1.19.1+6 more1.24.3107
python-urllib3deb1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.21.7.1-1ubuntu4.1+esm1, 1.13.1-2ubuntu0.16.04.36
OSV records
GHSA-r64q-w8jr-g9qpUBUNTU-CVE-2019-11236
Also known as
PYSEC-2019-132, USN-3990-1, USN-3990-2

Charts affected

113 by stars
ChartLatestAffected imagesRadar Score
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
urllib3@1.24.2
1.24.3

Open the chart page →

18,980
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
urllib3@1.24.2
1.24.3

Open the chart page →

9,249
rbd-provisionerkubesphere-testVerified publisher0.1.11 of 1See more

rbd-provisioner kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
kubesphere/rbd-provisioner:v2.1.1-k8s1.11b8ad79759bcd
urllib3@1.10.2
1.24.3

Open the chart page →

242
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
urllib3@1.24.2
1.24.3

Open the chart page →

9,378
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
urllib3@1.24.1
1.24.3

Open the chart page →

3,294
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
urllib3@1.22
1.24.3

Open the chart page →

4,911
nfl-walletnfl-walletVerified publisher0.1.31 of 4See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
urllib3@1.24.2
1.24.3

Open the chart page →

13,041
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python-urllib3@1.7.1-1build1
urllib3@1.7.1
1.7.1-1ubuntu4.1+esm1
1.24.3

Open the chart page →

41,427
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
urllib3@1.24.2
1.24.3

Open the chart page →

18,023
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
urllib3@1.22
1.24.3
omecproject/onos-progran:1.0.05715e5648aa0
python-urllib3@1.13.1-2ubuntu0.16.04.1
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.24.3
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
urllib3@1.22
1.24.3

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
urllib3@1.22
1.24.3

Open the chart page →

26,211
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
python-urllib3@1.13.1-2ubuntu0.16.04.1
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.24.3

Open the chart page →

38,865
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
urllib3@1.22
1.24.3

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
python-urllib3@1.13.1-2ubuntu0.16.04.2
urllib3@1.13.1
1.13.1-2ubuntu0.16.04.3
1.24.3
voltha/voltha-netconf:1.6.037f80524c207
urllib3@1.22
1.24.3
voltha/voltha-ofagent:1.6.09ee8c1f4428c
urllib3@1.22
1.24.3
voltha/voltha-voltha:1.6.0ff596b62de59
urllib3@1.22
1.24.3

Open the chart page →

93,855
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
urllib3@1.24.2
1.24.3

Open the chart page →

11,796
bpjstk-serviceopenshift1.0.01 of 6See more

bpjstk-service openshift 1.0.0

1 of the 6 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
andrianrf/backoffice:latest047a7837651e
urllib3@1.24.2
1.24.3

Open the chart page →

34,671
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
urllib3@1.24.2
1.24.3

Open the chart page →

7,519
exporteropenshift1.0.471 of 3See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
urllib3@1.24.2
1.24.3

Open the chart page →

13,000
hamiopenshift2.10.0-r0-openshift.c4e22e881 of 2See more

hami openshift 2.10.0-r0-openshift.c4e22e88

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
ghcr.io/dynamia-ai/hami-enterprise:v2.10.0-r0-openshift.c4e22e88745504757300
urllib3@1.24.2
1.24.3

Open the chart page →

4,749
kite-agentopenshift1.0.01 of 1See more

kite-agent openshift 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/fengyuanxing/zte_endogenous_security/kite-agent:V2.0.0734808044936
urllib3@1.24.2
1.24.3

Open the chart page →

5,863
orion-ldopenshift1.0.31 of 2See more

orion-ld openshift 1.0.3

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
urllib3@1.24.2
1.24.3

Open the chart page →

14,727
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
urllib3@1.24.2
1.24.3

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
urllib3@1.24.2
1.24.3

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
urllib3@1.24.2
1.24.3

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
urllib3@1.24.2
1.24.3

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
urllib3@1.24.2
1.24.3

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
urllib3@1.24.2
1.24.3

Open the chart page →

13,100
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
apache/couchdb:2.39f895c8ae371
urllib3@1.19.1
1.24.3

Open the chart page →

36,215
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
urllib3@1.24.2
1.24.3

Open the chart page →

15,466
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
urllib3@1.24.2
1.24.3

Open the chart page →

15,466
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
urllib3@1.24.2
1.24.3

Open the chart page →

12,754
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
urllib3@1.24.2
1.24.3

Open the chart page →

12,248
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
urllib3@1.24.2
1.24.3

Open the chart page →

15,291
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
urllib3@1.24.2
1.24.3

Open the chart page →

15,291
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
urllib3@1.24.2
1.24.3

Open the chart page →

16,047
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
urllib3@1.24.2
1.24.3

Open the chart page →

29,227
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
urllib3@1.24.2
1.24.3

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
urllib3@1.24.2
1.24.3

Open the chart page →

20,462
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
urllib3@1.24.1
1.24.3

Open the chart page →

4,744
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
urllib3@1.24.2
1.24.3

Open the chart page →

21,997
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
urllib3@1.24.1
1.24.3

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
urllib3@1.24.1
1.24.3

Open the chart page →

25,803
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.24.3

Open the chart page →

28,470
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
urllib3@1.24.1
1.24.3

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
urllib3@1.24.1
1.24.3

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.24.3

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
urllib3@1.24.1
1.24.3

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.24.3

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.24.3

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2019-11236.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
urllib3@1.22
1.24.3

Open the chart page →

29,220

Container images carrying it

107 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
urllib3@1.24.2
1.24.3
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
urllib3@1.24.2
1.24.3
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
urllib3@1.24.2
1.24.3
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
urllib3@1.24.2
1.24.3
1
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
urllib3@1.24.2
1.24.3
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
urllib3@1.24.2
1.24.3
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
urllib3@1.24.2
1.24.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.