StackRadar

CVE-2019-12761

High

Advisory

Published 6 Jun 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.021
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
18
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
2 of 2
affected packages

Code Injection in PyXDG

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
pyxdgpypi0.250.2617
pyxdgdeb0.25-4ubuntu10.25-4ubuntu1.15
OSV records
GHSA-r6v3-hpxj-r8rvUBUNTU-CVE-2019-12761
Also known as
PYSEC-2019-199, SNYK-PYTHON-PYXDG-174562, USN-4700-1

Charts affected

18 by stars
ChartLatestAffected imagesRadar Score
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
ceticasbl/pg-ldap-sync:latest6c0aa7567145
pyxdg@0.25
0.26

Open the chart page →

52,919
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
pyxdg@0.25
0.26

Open the chart page →

22,773
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
pyxdg@0.25
0.26

Open the chart page →

12,046
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
pyxdg@0.25
0.26

Open the chart page →

13,541
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26

Open the chart page →

12,007
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
pyxdg@0.25
0.26

Open the chart page →

22,891
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
pyxdg@0.25
0.26

Open the chart page →

1,310
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26

Open the chart page →

14,270
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
pyxdg@0.25
0.26

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
pyxdg@0.25
0.26

Open the chart page →

10,466
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
pyxdg@0.25
0.26

Open the chart page →

2,114
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyxdg@0.25
0.26

Open the chart page →

13,551
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26

Open the chart page →

14,813
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
pyxdg@0.25
0.26

Open the chart page →

15,855
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
pyxdg@0.25
0.26
socialmediamacroscope/image_crawler:0.1.2f508216be63c
pyxdg@0.25
0.26

Open the chart page →

109,294
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26

Open the chart page →

40,715
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26

Open the chart page →

36,215
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2019-12761.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
pyxdg@0.25
0.26

Open the chart page →

10,466

Container images carrying it

17 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
argoproj/argocd:v1.8.1830e86cacefd
pyxdg@0.25
0.26
3
a10networks/acos-prometheus-exporter:latest8dc58d434d71
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
pyxdg@0.25
0.26
1
camptocamp/snow-webhook:latest2924b43dbf40
pyxdg@0.25
0.26
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
pyxdg@0.25
0.26
1
cloudve/janis-terminal:latestaf56e77ca587
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26
1
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
pyxdg@0.25
0.26
1
gethue/hue:4.10.05702b2c37ff9
pyxdg@0.25
0.26
1
kennethreitz/httpbin:latest599fe5e50731
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
pyxdg@0.25
0.26
1
linuxserver/deluge:18.04.10ac871624394
pyxdg@0.25
0.26
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyxdg@0.25
0.26
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
pyxdg@0.25-4ubuntu1
pyxdg@0.25
0.25-4ubuntu1.1
0.26
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
pyxdg@0.25
0.26
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
pyxdg@0.25
0.26
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
pyxdg@0.25
0.26
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.