CVE-2019-11324
HighAdvisory
Published 18 Apr 2019In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.028
- 86th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 66
- of 17,781 indexed, latest versions
- Container images
- 58
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper Certificate Validation in urllib3
Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 58 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| urllib3pypi | 1.7.1, 1.10.2, 1.13.1, 1.19.1+5 more | 1.24.2 | 58 |
- OSV records
- GHSA-mh33-7rrq-662w
- Also known as
- PYSEC-2019-133
Charts affected
66 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| dmaap-listenersmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| elasticsearchsmo-helm-chart | 6.0.0 | 1 of 5See more | 24,776 |
| logsmo-helm-chart | 6.0.0 | 1 of 6See more | 29,220 |
| mariadb-initsmo-helm-chart | 6.0.0 | 1 of 2See more | 24,776 |
| msbsmo-helm-chart | 6.0.0 | 1 of 6See more | 27,477 |
| pndasmo-helm-chart | 6.0.0 | 1 of 3See more | 27,477 |
| pombasmo-helm-chart | 6.0.0 | 1 of 17See more | 29,220 |
| portalsmo-helm-chart | 6.0.0 | 1 of 8See more | 27,477 |
| sdcsmo-helm-chart | 6.0.0 | 1 of 14See more | 25,769 |
| sdnc-ansible-serversmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| sdnc-portalsmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| sdnc-promsmo-helm-chart | 6.0.0 | 1 of 2See more | 24,776 |
| sdnc-websmo-helm-chart | 6.0.0 | 1 of 3See more | 24,776 |
| ueb-listenersmo-helm-chart | 6.0.0 | 1 of 3See more | 25,769 |
| icinga2-reportsvtech-public-helm-charts | 1.0.0 | 1 of 1See more | 1,779 |
| kongwallarmVerified publisher | 4.6.3 | 1 of 7See more | 11,405 |
Container images carrying it
58 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | urllib3 | 1.24.2 | 11 |
| oomk8s/ | 7daa08b81954 | urllib3 | 1.24.2 | 6 |
| hjacobs/ | 58221b57d4d2 | urllib3 | 1.24.2 | 2 |
| omecproject/ | cfdb566dd949 | urllib3 | 1.24.2 | 2 |
| wurstmeister/ | 7a7fd44a7210 | urllib3 | 1.24.2 | 2 |
| amancevice/ | c8c04bfe3d66 | urllib3 | 1.24.2 | 1 |
| amundsendev/ | 99dda9502c3e | urllib3 | 1.24.2 | 1 |
| apache/ | 9f895c8ae371 | urllib3 | 1.24.2 | 1 |
| aquasec/ | 0bf607ce9308 | urllib3 | 1.24.2 | 1 |
| billimek/ | 801bba1228ac | urllib3 | 1.24.2 | 1 |
| billimek/ | bf8158556035 | urllib3 | 1.24.2 | 1 |
| blacktop/ | fc5e68e2f5ab | urllib3 | 1.24.2 | 1 |
| camptocamp/ | bff736b15623 | urllib3 | 1.24.2 | 1 |
| camptocamp/ | 2924b43dbf40 | urllib3 | 1.24.2 | 1 |
| ceph/ | 90f30824a96e | urllib3 | 1.24.2 | 1 |
| daskdev/ | 4ecd7bc35500 | urllib3 | 1.24.2 | 1 |
| daskdev/ | 052630f5ca04 | urllib3 | 1.24.2 | 1 |
| deconzcommunity/ | 6541bbb78952 | urllib3 | 1.24.2 | 1 |
| elastichq/ | bb3bd22c2b87 | urllib3 | 1.24.2 | 1 |
| fossology/ | 8bd1f22ba7bb | urllib3 | 1.24.2 | 1 |
| galaxy/ | 0267bad550e6 | urllib3 | 1.24.2 | 1 |
| galaxy/ | 8e577a626dfd | urllib3 | 1.24.2 | 1 |
| getsentry/ | 6ac37974fd2a | urllib3 | 1.24.2 | 1 |
| greenbirdit/ | e99d53bdc944 | urllib3 | 1.24.2 | 1 |
| kiwigrid/ | 899ccd0b1f54 | urllib3 | 1.24.2 | 1 |
| kocolosk/ | 6effb982154e | urllib3 | 1.24.2 | 1 |
| kubeaws/ | c9cd2ba4373a | urllib3 | 1.24.2 | 1 |
| kubesphere/ | b8ad79759bcd | urllib3 | 1.24.2 | 1 |
| library/ | ee75c9a737e7 | urllib3 | 1.24.2 | 1 |
| linuxserver/ | 89cd8d5fb1ac | urllib3 | 1.24.2 | 1 |
| linuxserver/ | 0ac871624394 | urllib3 | 1.24.2 | 1 |
| linuxserver/ | 2ce561a95e7b | urllib3 | 1.24.2 | 1 |
| louislam/ | 0b55bcb83a1c | urllib3 | 1.24.2 | 1 |
| louislam/ | 3d632903e6af | urllib3 | 1.24.2 | 1 |
| louislam/ | 96510915e6be | urllib3 | 1.24.2 | 1 |
| louislam/ | a4eab252e5a2 | urllib3 | 1.24.2 | 1 |
| louislam/ | a84767d7934f | urllib3 | 1.24.2 | 1 |
| louislam/ | bc6f244ecf27 | urllib3 | 1.24.2 | 1 |
| muluder/ | 43b597a93da7 | urllib3 | 1.24.2 | 1 |
| neilpeterson/ | 64fd8dab075f | urllib3 | 1.24.2 | 1 |
| neilpeterson/ | 8b645ac1a23e | urllib3 | 1.24.2 | 1 |
| neilpeterson/ | 6527b05d5d03 | urllib3 | 1.24.2 | 1 |
| neilpeterson/ | 29d229ab446e | urllib3 | 1.24.2 | 1 |
| neilpeterson/ | 969af3cb8466 | urllib3 | 1.24.2 | 1 |
| neilpeterson/ | 39ce9f92e899 | urllib3 | 1.24.2 | 1 |
| nlmacamp/ | 5dbb8589f824 | urllib3 | 1.24.2 | 1 |
| omecproject/ | 5715e5648aa0 | urllib3 | 1.24.2 | 1 |
| omecproject/ | d109a8e57e71 | urllib3 | 1.24.2 | 1 |
| opendatacube/ | 91870111837c | urllib3 | 1.24.2 | 1 |
| opendatacube/ | 1b90cdf68831 | urllib3 | 1.24.2 | 1 |