CVE-2023-24329

High

Advisory

Published 17 Feb 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.205; 97th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 360; of 17,781 indexed, latest versions
Container images: 345; deployed by those charts
Fix available: 24 of 25; affected packages

Red Hat Security Advisory: python security update

Carried by container images the latest versions of 360 of 17,781 indexed charts deploy, on 345 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+6 more	3.8.10-0ubuntu1~20.04.8	72
python3rpm	3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+14 more	0:3.6.8-51.el8_8.1, 0:3.6.8-51.el8_8.1.rocky.0	66
python3.11deb	3.11.0~rc1-1~22.04, 3.11.2-6	3.11.0~rc1-1~22.04.1~esm1, 3.11.2-6+deb12u2	57
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+11 more	2.7.6-8ubuntu0.6+esm15, 2.7.12-1ubuntu0~16.04.18+esm5, 2.7.17-1~18.04ubuntu1.13, 2.7.18-1~20.04.7+1 more	53
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	3.6.9-1~18.04ubuntu1.13	44
python-chardetrpm	3.0.4-7.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e, 0:3.0.4-19.module+el8.4.0+9822+20bf1249	44
python-idnarpm	2.5-5.el8, 2.5-7.el8_10, 2.5-8.el8_10	0:2.5-7.module+el8.1.0+3111+de3f2d8e, 0:2.8-6.module+el8.4.0+8888+89bc7e79, 0:2.10-3.module+el8.4.0+9822+20bf1249	44
python-pysocksrpm	1.6.8-3.el8	0:1.6.8-6.module+el8.1.0+3111+de3f2d8e, 0:1.7.1-4.module+el8.4.0+9822+20bf1249	44
python-requestsrpm	2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.20.0-6.el8_10	0:2.20.0-3.module+el8.2.0+4577+feefd9b8, 0:2.22.0-9.module+el8.4.0+8888+89bc7e79, 0:2.25.0-2.module+el8.4.0+9822+20bf1249	44
python-urllib3rpm	1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+3 more	0:1.25.7-5.module+el8.5.0+11639+ea5b349d, 0:1.25.10-4.module+el8.5.0+11712+ea2d2be1	44
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	3.5.2-2ubuntu0~16.04.13+esm8	25
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+2 more	3.10.6-1~22.04.2ubuntu1.1	13
python-plyrpm	3.9-8.el8, 3.9-9.el8	0:3.11-10.module+el8.4.0+570+c2eaf144, 0:3.11-10.module+el8.4.0+9579+e9717e18, 0:3.11-10.module+el8.4.0+9822+20bf1249	13
pythonrpm	2.7.5-77.el7_6, 2.7.5-86.el7, 2.7.5-89.el7, 2.7.5-90.el7	0:2.7.5-93.el7_9	11
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7
python3x-piprpm	19.3.1-1.module+el8.4.0+8888+89bc7e79, 19.3.1-6.module+el8.7.0+15823+8950cfa7, 20.2.4-3.module+el8.4.0+9822+20bf1249	0:19.3.1-6.module+el8.7.0+15823+8950cfa7, 0:20.2.4-7.module+el8.6.0+13003+6bb2c488	4
python3x-setuptoolsrpm	41.6.0-4.module+el8.4.0+8888+89bc7e79, 41.6.0-5.module+el8.5.0+12205+a865257a, 50.3.2-3.module+el8.4.0+9822+20bf1249	0:41.6.0-5.module+el8.5.0+12205+a865257a, 0:50.3.2-4.module+el8.5.0+12204+54860423	4
python-sixrpm	1.11.0-8.el8	0:1.12.0-9.module+el8.2.0+5234+f98739b6	4
python2rpm	2.7.17-2.module+el8.3.0+7681+f1f02ded, 2.7.18-4.module+el8.4.0+9577+0b56c8de	0:2.7.18-13.module+el8.8.0+19042+06909d2c.1	2
python2-piprpm	9.0.3-18.module+el8.3.0+7707+eb4bba01	0:9.0.3-19.module+el8.6.0+13001+ad200bd9	2
python38rpm	3.8.6-3.module+el8.4.0+9579+e9717e18	0:3.8.16-1.module+el8.8.0+18967+20d359ae.1	2
python3.9rpm	3.9.16-1.el9	0:3.9.16-1.el9_2.1	2
python-wheelrpm	0.33.6-5.module+el8.4.0+8888+89bc7e79, 1:0.31.1-2.module+el8.1.0+3724+3c097090	0:0.33.6-6.module+el8.5.0+12205+a865257a, 1:0.31.1-3.module+el8.5.0+12203+77770ab7	2
python2-setuptoolsrpm	39.0.1-12.module+el8.3.0+7075+8484f0d0	0:39.0.1-13.module+el8.4.0+9442+27d0e81c	1
python39rpm	3.9.2-1.module+el8.4.0+10237+bdc77aac	0:3.9.16-1.module+el8.8.0+18968+3d7b19f0.1	1

OSV records: DEBIAN-CVE-2023-24329 RHSA-2023:3555 RHSA-2023:3591 RHSA-2023:3595 RHSA-2023:3776 RHSA-2023:3780 RHSA-2023:3781 RHSA-2023:3811 RHSA-2023:4038 RLSA-2023:3781 UBUNTU-CVE-2023-24329 RLSA-2023:3591
Also known as: RHSA-2023:3796, RHSA-2023:3810, RHSA-2023:3931, RHSA-2023:3932, RHSA-2023:3934, RHSA-2023:3935, RHSA-2023:3936, RHSA-2023:4004, RHSA-2023:4008, RHSA-2023:4032, RLSA-2023:3811, USN-5960-1, USN-6139-1, USN-6891-1, USN-7180-1

Charts affected

360 by stars

Chart

Latest

Affected images

Radar Score

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	python3.5@3.5.2-2ubuntu0~16.04.5	3.5.2-2ubuntu0~16.04.13+esm8

Open the chart page →

15,330

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	python3.11@3.11.2-6	3.11.2-6+deb12u2

Open the chart page →

14,358

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8

Open the chart page →

11,119

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.8

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

2 of 3 See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.8
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	python3@3.6.8-37.el8	0:3.6.8-51.el8_8.1

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	3.6.9-1~18.04ubuntu1.13

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8

Open the chart page →

15,230

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	python3@3.6.8-41.el8	0:3.6.8-51.el8_8.1

Open the chart page →

6,138

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	python3@3.6.8-41.el8	0:3.6.8-51.el8_8.1

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-24329.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	python3@3.6.8-48.el8_7	0:3.6.8-51.el8_8.1

Open the chart page →

6,016

Container images carrying it

345 by charts deploying them

A fixed version is listed for 24 of the 25 affected packages.

Container image	Digest	Package	Fixed in	Used by
istio/proxyv2 :1.10.0	88c6c693e67a	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13	1
jakowenko/double-take :1.6.0	b858bac9e32a	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.8	1
jedi132000/nextapp :latest	dc2a81e92f23	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.8	1
jmferrer/azure-devops-agent :latest	030f68ec6998	python3.5@3.5.2-2ubuntu0~16.04.9	3.5.2-2ubuntu0~16.04.13+esm8	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python3.8@3.8.5-1~20.04	3.8.10-0ubuntu1~20.04.8	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.8	1
kennethreitz/httpbin :latest	599fe5e50731	python3.6@3.6.6-1~18.04	3.6.9-1~18.04ubuntu1.13	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.8	1
knspar/phronetis-operator :0.1.6	0c4f0543ee58	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
kubeoperator/webkubectl :v2.4.0	be8f0d624640	python3.6@3.6.9-1~18.04ubuntu1	3.6.9-1~18.04ubuntu1.13	1
library/cassandra :3.11.10	b095ff3248c6	python2.7@2.7.18-1~20.04.1	2.7.18-1~20.04.7	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.8	1
library/rabbitmq :3.7-management	b6dd45cc35b3	python3.6@3.6.9-1~18.04ubuntu1.1	3.6.9-1~18.04ubuntu1.13	1
library/wordpress :6.4.3-apache	8ae66efb09a2	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	python2.7@2.7.17-1~18.04ubuntu1.6 python3.6@3.6.9-1~18.04ubuntu1.4	2.7.17-1~18.04ubuntu1.13 3.6.9-1~18.04ubuntu1.13	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.8	1
linuxserver/codimd :latest	b801bbcf6386	python2.7@2.7.17-1~18.04ubuntu1.2	2.7.17-1~18.04ubuntu1.13	1
linuxserver/deluge :18.04.1	0ac871624394	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13	1
linuxserver/lazylibrarian :version-1152df82	f93d2560e233	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13	1
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.8	1
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	python3.6@3.6.9-1~18.04ubuntu1.4	3.6.9-1~18.04ubuntu1.13	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.2	2.7.18-1~20.04.7 3.8.10-0ubuntu1~20.04.8	1
mariadb/maxscale :23.02.2	56c5e0908148	python-ply@3.9-9.el8 python3@3.6.8-51.el8.rocky.0	0:3.11-10.module+el8.4.0+570+c2eaf144 0:3.6.8-51.el8_8.1.rocky.0	1
mediagis/nominatim :3.7	c15e941485ef	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.8	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	python3@3.6.8-41.el8	0:3.6.8-51.el8_8.1	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
mshanley80/httpbin2022 :latest	5b189a70c0fb	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.8	1
muhammedgamal/fp23 :latest	74b4cd69b6fa	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	2.7.12-1ubuntu0~16.04.18+esm5 3.5.2-2ubuntu0~16.04.13+esm8	1
netboxcommunity/netbox :v3.2.8	3d652dca5351	python3.10@3.10.4-3ubuntu0.1	3.10.6-1~22.04.2ubuntu1.1	1
omecproject/c3po-hssdb :master-latest	28a90cc26716	python2.7@2.7.18-1~20.04.1	2.7.18-1~20.04.7	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	python3.6@3.6.9-1~18.04	3.6.9-1~18.04ubuntu1.13	1
omecproject/onos-progran :1.0.0	5715e5648aa0	python2.7@2.7.12-1ubuntu0~16.04.3 python3.5@3.5.2-2ubuntu0~16.04.4	2.7.12-1ubuntu0~16.04.18+esm5 3.5.2-2ubuntu0~16.04.13+esm8	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	python2.7@2.7.12-1ubuntu0~16.04.4 python3.5@3.5.2-2ubuntu0~16.04.5	2.7.12-1ubuntu0~16.04.18+esm5 3.5.2-2ubuntu0~16.04.13+esm8	1
opea/codegen-ui :1.0	2bee4eb66f3e	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
opea/codetrans-ui :1.0	3ef121f34610	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
opea/docsum-ui :1.0	7f854e9bffaf	python3.11@3.11.2-6	3.11.2-6+deb12u2	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	python3.6@3.6.7-1~18.04	3.6.9-1~18.04ubuntu1.13	1
opendatacube/restcube :latest	91870111837c	python3.6@3.6.7-1~18.04	3.6.9-1~18.04ubuntu1.13	1
opendatacube/wms :latest	1b90cdf68831	python3.6@3.6.7-1~18.04	3.6.9-1~18.04ubuntu1.13	1
openelevation/open-elevation :latest	82fb21612e86	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.8	1
openkm/openkm-ce :6.3.11	3bc465a7461b	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.8	1
openthread/otbr :latest	f307f59f6432	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	2.7.17-1~18.04ubuntu1.13 3.6.9-1~18.04ubuntu1.13	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	python2.7@2.7.17-1~18.04ubuntu1.2	2.7.17-1~18.04ubuntu1.13	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	python3.4@3.4.3-1ubuntu1~14.04.6	no fix listed	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	python3@3.6.8-15.1.el8	0:3.6.8-51.el8_8.1	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	python-chardet@3.0.4-7.el8 python-idna@2.5-5.el8 python-pysocks@1.6.8-3.el8 python-requests@2.20.0-3.el8_8 python-urllib3@1.24.2-5.el8	0:3.0.4-10.module+el8.1.0+3111+de3f2d8e 0:2.5-7.module+el8.1.0+3111+de3f2d8e 0:1.6.8-6.module+el8.1.0+3111+de3f2d8e 0:2.20.0-3.module+el8.2.0+4577+feefd9b8 0:1.25.7-5.module+el8.5.0+11639+ea5b349d	1
project2team4/react :latest	3ff031a08887	python3.8@3.8.10-0ubuntu1~20.04.4	3.8.10-0ubuntu1~20.04.8	1
psorab/elibrary :latest	53b68896c4ce	python3.8@3.8.10-0ubuntu1~20.04.7	3.8.10-0ubuntu1~20.04.8	1