CVE-2023-24329

High

Advisory

Published 17 Feb 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.205; 97th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 360; of 17,781 indexed, latest versions
Container images: 345; deployed by those charts
Fix available: 24 of 25; affected packages

Red Hat Security Advisory: python security update

Carried by container images the latest versions of 360 of 17,781 indexed charts deploy, on 345 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+6 more	3.8.10-0ubuntu1~20.04.8	72
python3rpm	3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+14 more	0:3.6.8-51.el8_8.1, 0:3.6.8-51.el8_8.1.rocky.0	66
python3.11deb	3.11.0~rc1-1~22.04, 3.11.2-6	3.11.0~rc1-1~22.04.1~esm1, 3.11.2-6+deb12u2	57
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+11 more	2.7.6-8ubuntu0.6+esm15, 2.7.12-1ubuntu0~16.04.18+esm5, 2.7.17-1~18.04ubuntu1.13, 2.7.18-1~20.04.7+1 more	53
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	3.6.9-1~18.04ubuntu1.13	44
python-chardetrpm	3.0.4-7.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e, 0:3.0.4-19.module+el8.4.0+9822+20bf1249	44
python-idnarpm	2.5-5.el8, 2.5-7.el8_10, 2.5-8.el8_10	0:2.5-7.module+el8.1.0+3111+de3f2d8e, 0:2.8-6.module+el8.4.0+8888+89bc7e79, 0:2.10-3.module+el8.4.0+9822+20bf1249	44
python-pysocksrpm	1.6.8-3.el8	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e, 0:1.7.1-4.module+el8.4.0+9822+20bf1249	44
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.20.0-6.el8_10	0:2.20.0-3.module+el8.2.0+4577+feefd9b8, 0:2.22.0-9.module+el8.4.0+8888+89bc7e79, 0:2.25.0-2.module+el8.4.0+9822+20bf1249	44
python-urllib3rpm	1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+3 more	0:1.25.7-5.module+el8.5.0+11639+ea5b349d, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	44
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	3.5.2-2ubuntu0~16.04.13+esm8	25
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+2 more	3.10.6-1~22.04.2ubuntu1.1	13
python-plyrpm	3.9-8.el8, 3.9-9.el8	0:3.11-10.module+el8.4.0+570+c2eaf144, 0:3.11-10.module+el8.4.0+9579+e9717e18, 0:3.11-10.module+el8.4.0+9822+20bf1249	13
pythonrpm	2.7.5-77.el7_6, 2.7.5-86.el7, 2.7.5-89.el7, 2.7.5-90.el7	0:2.7.5-93.el7_9	11
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:19.3.1-6.module+el8.7.0+15823+8950cfa7, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249	0:41.6.0-5.module+el8.5.0+12205+a865257a, 0:50.3.2-4.module+el8.5.0+12204+54860423	4
python-sixrpm	1.11.0-8.el8	0:1.12.0-9.module+el8.2.0+5234+f98739b6	4
python2rpm	2.7.17-2.module+el8.3.0+7681+f1f02ded, 2.7.18-4.module+el8.4.0+9577+0b56c8de	0:2.7.18-13.module+el8.8.0+19042+06909d2c.1	2
python2-piprpm	9.0.3-18.module+el8.3.0+7707+eb4bba01	0:9.0.3-19.module+el8.6.0+13001+ad200bd9	2
python38rpm	3.8.6-3.module+el8.4.0+9579+e9717e18	0:3.8.16-1.module+el8.8.0+18967+20d359ae.1	2
python3.9rpm	3.9.16-1.el9	0:3.9.16-1.el9_2.1	2
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79, 1:0.31.1-2.module+el8.1.0+3724+3c097090	0:0.33.6-6.module+el8.5.0+12205+a865257a, 1:0.31.1-3.module+el8.5.0+12203+77770ab7	2
python2-setuptoolsrpm	39.0.1-12.module+el8.3.0+7075+8484f0d0	0:39.0.1-13.module+el8.4.0+9442+27d0e81c	1
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac	0:3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	1

OSV records: DEBIAN-CVE-2023-24329 RHSA-2023:3555 RHSA-2023:3591 RHSA-2023:3595 RHSA-2023:3776 RHSA-2023:3780 RHSA-2023:3781 RHSA-2023:3811 RHSA-2023:4038 RLSA-2023:3781 UBUNTU-CVE-2023-24329 RLSA-2023:3591
Also known as: RHSA-2023:3796, RHSA-2023:3810, RHSA-2023:3931, RHSA-2023:3932, RHSA-2023:3934, RHSA-2023:3935, RHSA-2023:3936, RHSA-2023:4004, RHSA-2023:4008, RHSA-2023:4032, RLSA-2023:3811, USN-5960-1, USN-6139-1, USN-6891-1, USN-7180-1

Charts affected

360 by stars

Chart

Latest

Affected images

Radar Score

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	python3.5@3.5.2-2ubuntu0~16.04.5	3.5.2-2ubuntu0~16.04.13+esm8

Open the chart page →

15,330

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	python3.11@3.11.2-6	3.11.2-6+deb12u2

Open the chart page →

14,358

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8

Open the chart page →

11,119

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.8

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.8
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	python3@3.6.8-37.el8	0:3.6.8-51.el8_8.1

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	3.6.9-1~18.04ubuntu1.13

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8

Open the chart page →

15,230

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	python3@3.6.8-41.el8	0:3.6.8-51.el8_8.1

Open the chart page →

6,138

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	python3@3.6.8-41.el8	0:3.6.8-51.el8_8.1

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	python3@3.6.8-48.el8_7	0:3.6.8-51.el8_8.1

Open the chart page →

6,016

Container images carrying it

345 by charts deploying them

A fixed version is listed for 24 of the 25 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/airflow :2.8.4-python3.9	64e58748b6b9	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
apache/airflow :2.8.1	e5560ad0b86e	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8	1
apachepulsar/pulsar :2.9.0	d056c89b7131	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.8	1
apachepulsar/pulsar :2.8.2	d538416d5afe	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e 0:2.5-7.module+el8.1.0+3111+de3f2d8e 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e 0:2.20.0-3.module+el8.2.0+4577+feefd9b8 0:1.25.7-5.module+el8.5.0+11639+ea5b349d	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	python3@3.6.8-37.el8	0:3.6.8-51.el8_8.1	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	python2.7@2.7.18-1~20.04.3	2.7.18-1~20.04.7	1
assistiot/identity-manager_kc :latest	0df4b4fa899a	python3@3.6.8-47.el8_6	0:3.6.8-51.el8_8.1	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	python3.8@3.8.10-0ubuntu1~20.04.7	3.8.10-0ubuntu1~20.04.8	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	python3.10@3.10.6-1~22.04.1	3.10.6-1~22.04.2ubuntu1.1	1
avinash263/pyredis263 :latest	aa2b8727f1a6	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.8	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.8	1
chetangautamm/repo :Opensips_Build	b4b94155ff5a	python3.4@3.4.3-1ubuntu1~14.04.7	no fix listed	1
chetangautamm/repo :sipp.v3	e7f7049e1544	python3.8@3.8.5-1~20.04	3.8.10-0ubuntu1~20.04.8	1
cheyang/distributed-tf :1.6.0	46cc34755493	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	2.7.12-1ubuntu0~16.04.18+esm5 3.5.2-2ubuntu0~16.04.13+esm8	1
citizenstig/httpbin :latest	b81c818ccb86	python3.5@3.5.2-2ubuntu0~16.04.1	3.5.2-2ubuntu0~16.04.13+esm8	1
cloudve/janis-terminal :latest	af56e77ca587	python3.6@3.6.9-1~18.04ubuntu1	3.6.9-1~18.04ubuntu1.13	1
cloudve/ttyd :latest	d79c1c5881c0	python3.6@3.6.9-1~18.04ubuntu1	3.6.9-1~18.04ubuntu1.13	1
cockroachdb/cockroach-operator :v2.1.0	983312754620	python3@3.6.8-37.el8	0:3.6.8-51.el8_8.1	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	python3@3.6.8-31.el8	0:3.6.8-51.el8_8.1	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	python3@3.6.8-31.el8	0:3.6.8-51.el8_8.1	1
confluentinc/cp-kafka :7.1.2.amd64	3bf359d5e340	python3@3.6.8-45.el8	0:3.6.8-51.el8_8.1	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	python3@3.6.8-31.el8	0:3.6.8-51.el8_8.1	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	python3@3.6.8-31.el8	0:3.6.8-51.el8_8.1	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	python3@3.6.8-31.el8	0:3.6.8-51.el8_8.1	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	python3@3.6.8-31.el8	0:3.6.8-51.el8_8.1	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	python3@3.6.8-31.el8	0:3.6.8-51.el8_8.1	1
countly/countly-server :25.05.4	e3c238248f99	python2.7@2.7.18-1~20.04.4 python3.8@3.8.10-0ubuntu1~20.04.2	2.7.18-1~20.04.7 3.8.10-0ubuntu1~20.04.8	1
ctron/hawkbit-operator :0.1.4	8fdea8f76499	python3@3.6.8-23.el8	0:3.6.8-51.el8_8.1	1
daskdev/dask-notebook :1.1.0	052630f5ca04	python3.6@3.6.7-1~18.04	3.6.9-1~18.04ubuntu1.13	1
dellemc/csm-application-mobility-controller :v0.1.0	148ada9060a9	python3@3.6.8-47.el8_6	0:3.6.8-51.el8_8.1	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13	1
esphome/esphome :2024.3.0	9ab8cc88b28c	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	python2.7@2.7.12-1ubuntu0~16.04.2	2.7.12-1ubuntu0~16.04.18+esm5	1
firefart/requesttracker :5.0.4	0d6249906d8c	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
fiware/mintaka :0.7.0	92a3c5cf43c0	python3@3.6.8-45.el8	0:3.6.8-51.el8_8.1	1
fiware/mintaka :latest	efc6793388cc	python3@3.6.8-45.el8	0:3.6.8-51.el8_8.1	1
fiware/orion-ld :1.10.0	3c490a746f65	python-chardet@3.0.4-7.el8 python-idna@2.5-7.el8_10 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-6.el8_10 python-urllib3@1.24.2-8.el8_10	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e 0:2.5-7.module+el8.1.0+3111+de3f2d8e 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e 0:2.22.0-9.module+el8.4.0+8888+89bc7e79 0:1.25.7-5.module+el8.5.0+11639+ea5b349d	1
flyway/flyway :9.15	45b5d7cdc75a	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.8	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	python3.6@3.6.9-1~18.04ubuntu1.9	3.6.9-1~18.04ubuntu1.13	1