StackRadar

CVE-2019-18218

High

Advisory

Published 21 Oct 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.018
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
156
of 17,781 indexed, latest versions
Container images
131
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: file security update

Carried by container images the latest versions of 156 of 17,781 indexed charts deploy, on 131 images.

Affected packageAffected versionsFixed inImages
filedeb1:5.14-2ubuntu3.2, 1:5.14-2ubuntu3.3, 1:5.14-2ubuntu3.4, 1:5.22+15-2+deb8u3+10 more1:5.14-2ubuntu3.4+esm1, 1:5.22+15-2+deb8u6, 1:5.25-2ubuntu1.3, 1:5.30-1+deb9u3+2 more85
filerpm5.32-lp151.7.22, 5.33-8.el8, 5.33-13.el8, 5.33-13.el8_2.1+2 more0:5.33-20.el8, 5.32-lp151.8.3.143
fileapk5.32-r0, 5.35-r05.32-r2, 5.36-r13
OSV records
ALPINE-CVE-2019-18218RHSA-2021:4374UBUNTU-CVE-2019-18218DLA-1969-1DSA-4550-1openSUSE-SU-2020:0677-1
Also known as
USN-4172-1, USN-4172-2

Charts affected

156 by stars
ChartLatestAffected imagesRadar Score
Wordressuvaise-wordpress0.2.01 of 2See more

Wordress uvaise-wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-18218.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6

Open the chart page →

1,339
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2019-18218.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
file@5.33-16.el8_3.1
0:5.33-20.el8

Open the chart page →

28,605
cadencewenerme0.23.01 of 5See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2019-18218.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3

Open the chart page →

10,127
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2019-18218.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
file@5.33-16.el8
0:5.33-20.el8

Open the chart page →

6,915
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2019-18218.

Container imageDigestPackageFixed in
library/cassandra:3.11.3ce85468c5bad
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3

Open the chart page →

22,665
Wordresswordpress0.2.01 of 2See more

Wordress wordpress 0.2.0

1 of the 2 container images this version deploys carry CVE-2019-18218.

Container imageDigestPackageFixed in
library/wordpress:4.8-apache6216f64ab88f
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6

Open the chart page →

1,339

Container images carrying it

131 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
craftypath/sops-operator:v0.8.0402a0024c732
file@5.33-16.el8_3.1
0:5.33-20.el8
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
file@5.33-16.el8_3.1
0:5.33-20.el8
1
eaudeweb/mailtrap:2.3b8ad9b7e19bb
file@1:5.35-4
1:5.35-4+deb10u1
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
file@1:5.25-2ubuntu1
1:5.25-2ubuntu1.3
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
file@1:5.22+15-2+deb8u4
1:5.22+15-2+deb8u6
1
galaxy/galaxy-init:v18.010267bad550e6
file@1:5.14-2ubuntu3.3
1:5.14-2ubuntu3.4+esm1
1
galaxy/galaxy-stable:v18.018e577a626dfd
file@1:5.14-2ubuntu3.3
1:5.14-2ubuntu3.4+esm1
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3
1
hickey/puppet_forge:1.10.0c1148a09ef20
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
file@1:5.25-2ubuntu1.1
1:5.25-2ubuntu1.3
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
file@5.33-16.el8
0:5.33-20.el8
1
ibmcom/ibm-storage-enabler-for-containers-db:2.1.09a766604a73b
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
file@1:5.25-2ubuntu1.1
1:5.25-2ubuntu1.3
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
file@1:5.25-2ubuntu1
1:5.25-2ubuntu1.3
1
ibmcom/microclimate-theia:lateste17bdccc5030
file@1:5.25-2ubuntu1
1:5.25-2ubuntu1.3
1
ibmcom/skydive:0.22.0395e60cc6e3d
file@1:5.32-2ubuntu0.2
1:5.32-2ubuntu0.3
1
kennethreitz/httpbin:latest599fe5e50731
file@1:5.32-2ubuntu0.1
1:5.32-2ubuntu0.3
1
library/cassandra:2.1.20cb079c0d7a57
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3
1
library/nextcloud:17.0.0-apache96104cb965fc
file@1:5.35-4
1:5.35-4+deb10u1
1
library/postgres:9.6.52f2b1f4d9d83
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
library/postgres:10.49625c2fb3498
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
file@5.33-16.el8
0:5.33-20.el8
1
minio/operator:v4.1.02adc5be088f5
file@5.33-16.el8_3.1
0:5.33-20.el8
1
muluder/prograncontrollermcord:0.1.843b597a93da7
file@1:5.25-2ubuntu1
1:5.25-2ubuntu1.3
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3
1
ncsapolyglot/converters-openjpeg:latest2ba4af461d51
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
neilpeterson/aks-helloworld:v1fb47732ef36b
file@1:5.30-1+deb9u1
1:5.30-1+deb9u3
1
neilpeterson/chart-tweet:latest64fd8dab075f
file@1:5.30-1+deb9u1
1:5.30-1+deb9u3
1
neilpeterson/get-tweet:v28b645ac1a23e
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
neilpeterson/osba-storage-demo:latest29d229ab446e
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
neilpeterson/process-tweet:latest39ce9f92e899
file@1:5.30-1+deb9u1
1:5.30-1+deb9u3
1
nodered/node-red-docker:0.19.6-v8070643219ea2
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3
1
omecproject/onos-progran:1.0.05715e5648aa0
file@1:5.25-2ubuntu1
1:5.25-2ubuntu1.3
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
file@1:5.25-2ubuntu1.1
1:5.25-2ubuntu1.3
1
opsmx11/issuegen:v2.1.05c50ca123d88
file@1:5.14-2ubuntu3.3
1:5.14-2ubuntu3.4+esm1
1
osixia/phpldapadmin:0.7.058cce1b08592
file@1:5.30-1
1:5.30-1+deb9u3
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
file@1:5.30-1+deb9u2
1:5.30-1+deb9u3
1
pcm32/galaxy-postgres:9.6.5_for_18.01301fb89914ef
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
file@5.33-8.el8
0:5.33-20.el8
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
file@1:5.25-2ubuntu1.1
1:5.25-2ubuntu1.3
1
resouer/redis-slave:v2e2f198b49ba7
file@1:5.14-2ubuntu3.3
1:5.14-2ubuntu3.4+esm1
1
seldonio/locust-core:0.81d0da98a2d76
file@1:5.25-2ubuntu1.2
1:5.25-2ubuntu1.3
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
file@5.33-16.el8_3.1
0:5.33-20.el8
1
sismics/docs:v1.10f4b0ef019cf1
file@1:5.32-2ubuntu0.1
1:5.32-2ubuntu0.3
1
stakater/logrotate:3.13.05c0e01c23993
file@5.32-r0
5.32-r2
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
file@1:5.22+15-2+deb8u3
1:5.22+15-2+deb8u6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.