StackRadar

CVE-2024-0056

High

Advisory

Published 9 Jan 2024In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.012
66th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
21
of 17,781 indexed, latest versions
Container images
28
deployed by those charts
Fix available
2 of 2
affected packages

Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 28 images.

Affected packageAffected versionsFixed inImages
Microsoft.Data.SqlClientnuget1.0.19269.1, 2.0.1, 2.0.20168.4, 2.1.2+5 more2.1.7, 3.1.5, 5.1.321
System.Data.SqlClientnuget4.4.2, 4.6.0, 4.6.25519.03, 4.7.0+2 more4.8.611
OSV records
GHSA-98g6-xh36-x2p7
Also known as
BIT-dotnet-2024-0056, BIT-dotnet-sdk-2024-0056

Charts affected

21 by stars
ChartLatestAffected imagesRadar Score
servarrservarr1.0.23 of 10See more

servarr servarr 1.0.2

3 of the 10 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
Microsoft.Data.SqlClient@2.1.2
2.1.7
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
Microsoft.Data.SqlClient@2.1.2
2.1.7
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
Microsoft.Data.SqlClient@2.1.2
2.1.7

Open the chart page →

14,238
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
Microsoft.Data.SqlClient@5.0.0
System.Data.SqlClient@4.8.3
5.1.3
4.8.6

Open the chart page →

6,940
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
Microsoft.Data.SqlClient@2.1.2
2.1.7

Open the chart page →

11,558
voice-biometricslumenvox2.0.16 of 26See more

voice-biometrics lumenvox 2.0.1

6 of the 26 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-identity:2.0.0147854a3c916
Microsoft.Data.SqlClient@2.0.20168.4
2.1.7
lumenvox/cloud-audit:2.0.079428add7f38
Microsoft.Data.SqlClient@2.0.20168.4
2.1.7
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
Microsoft.Data.SqlClient@2.0.1
2.1.7
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
Microsoft.Data.SqlClient@2.0.1
2.1.7
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
Microsoft.Data.SqlClient@2.0.1
2.1.7
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
Microsoft.Data.SqlClient@2.0.20168.4
2.1.7

Open the chart page →

70,741
prowlarrbeluga-cloudVerified publisher1.0.11 of 1See more

prowlarr beluga-cloud 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/prowlarr/prowlarr:1.4.1.3258aa774b3c3425
Microsoft.Data.SqlClient@2.1.2
2.1.7

Open the chart page →

169
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
System.Data.SqlClient@4.6.0
4.8.6

Open the chart page →

10,776
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.13 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

3 of the 7 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.Data.SqlClient@3.0.1
System.Data.SqlClient@4.8.3
3.1.5
4.8.6
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
System.Data.SqlClient@4.8.3
4.8.6
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.Data.SqlClient@2.1.4+7ea7e630ac26dee3a9ceb4e322637a05a47e4854
System.Data.SqlClient@4.8.3
2.1.7
4.8.6

Open the chart page →

10,091
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
simpleidserver/faasgateway:0.0.453c159ea49ca
Microsoft.Data.SqlClient@2.0.20168.4
2.1.7

Open the chart page →

7,617
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
Microsoft.Data.SqlClient@2.1.2
2.1.7

Open the chart page →

10,379
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
System.Data.SqlClient@4.7.0
4.8.6

Open the chart page →

3,192
servarrjacobcolvinVerified publisher0.1.21 of 2See more

servarr jacobcolvin 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
linuxserver/radarr:4.2.42f7a7b7a0ca6
Microsoft.Data.SqlClient@2.1.2
2.1.7

Open the chart page →

206
myweatherhelmmyweather1.3.112 of 7See more

myweatherhelm myweather 1.3.11

2 of the 7 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingservice:1.3.11203ee6853a27
Microsoft.Data.SqlClient@2.1.4
2.1.7
hecrom/myweatherservice:1.3.11c502a4b758f0
Microsoft.Data.SqlClient@2.1.4+7ea7e630ac26dee3a9ceb4e322637a05a47e4854
2.1.7

Open the chart page →

17,929
bagetsimcube1.0.51 of 1See more

baget simcube 1.0.5

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
Microsoft.Data.SqlClient@1.0.19269.1
2.1.7

Open the chart page →

1,687
dotstatsuitestatcan0.2.82 of 6See more

dotstatsuite statcan 0.2.8

2 of the 6 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
System.Data.SqlClient@4.4.2
4.8.6
siscc/dotstatsuite-core-sdmxri-nsi:master00d73f06edcf
System.Data.SqlClient@4.4.2
4.8.6

Open the chart page →

3,841
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
System.Data.SqlClient@4.6.25519.03
4.8.6

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
System.Data.SqlClient@4.6.25519.03
4.8.6

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
System.Data.SqlClient@4.6.25519.03
4.8.6

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
System.Data.SqlClient@4.6.25519.03
4.8.6

Open the chart page →

3,329
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
Microsoft.Data.SqlClient@5.1.0
System.Data.SqlClient@4.8.0
5.1.3
4.8.6

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
Microsoft.Data.SqlClient@5.1.0
System.Data.SqlClient@4.8.0
5.1.3
4.8.6

Open the chart page →

9,130
webencryptorwebencryptor1.1.01 of 1See more

webencryptor webencryptor 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-0056.

Container imageDigestPackageFixed in
beubi/webencryptor:latesta02c2e200920
System.Data.SqlClient@4.6.0
4.8.6

Open the chart page →

1,968

Container images carrying it

28 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_worker:v1741e3aaaa812
System.Data.SqlClient@4.6.25519.03
4.8.6
4
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
Microsoft.Data.SqlClient@5.1.0
System.Data.SqlClient@4.8.0
5.1.3
4.8.6
2
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.Data.SqlClient@3.0.1
System.Data.SqlClient@4.8.3
3.1.5
4.8.6
1
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
System.Data.SqlClient@4.8.3
4.8.6
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.Data.SqlClient@2.1.4+7ea7e630ac26dee3a9ceb4e322637a05a47e4854
System.Data.SqlClient@4.8.3
2.1.7
4.8.6
1
beubi/webencryptor:latesta02c2e200920
System.Data.SqlClient@4.6.0
4.8.6
1
hecrom/myweatherprocessingservice:1.3.11203ee6853a27
Microsoft.Data.SqlClient@2.1.4
2.1.7
1
hecrom/myweatherservice:1.3.11c502a4b758f0
Microsoft.Data.SqlClient@2.1.4+7ea7e630ac26dee3a9ceb4e322637a05a47e4854
2.1.7
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
Microsoft.Data.SqlClient@5.0.0
System.Data.SqlClient@4.8.3
5.1.3
4.8.6
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
System.Data.SqlClient@4.6.0
4.8.6
1
linuxserver/radarr:4.2.42f7a7b7a0ca6
Microsoft.Data.SqlClient@2.1.2
2.1.7
1
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
Microsoft.Data.SqlClient@1.0.19269.1
2.1.7
1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
Microsoft.Data.SqlClient@2.0.20168.4
2.1.7
1
lumenvox/cloud-audit:2.0.079428add7f38
Microsoft.Data.SqlClient@2.0.20168.4
2.1.7
1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
Microsoft.Data.SqlClient@2.0.1
2.1.7
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
Microsoft.Data.SqlClient@2.0.1
2.1.7
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
Microsoft.Data.SqlClient@2.0.1
2.1.7
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
Microsoft.Data.SqlClient@2.0.20168.4
2.1.7
1
rnwood/smtp4dev:3.6.1912304153668
System.Data.SqlClient@4.7.0
4.8.6
1
simpleidserver/faasgateway:0.0.453c159ea49ca
Microsoft.Data.SqlClient@2.0.20168.4
2.1.7
1
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
System.Data.SqlClient@4.4.2
4.8.6
1
siscc/dotstatsuite-core-sdmxri-nsi:master00d73f06edcf
System.Data.SqlClient@4.4.2
4.8.6
1
ghcr.io/beluga-cloud/prowlarr/prowlarr:1.4.1.3258aa774b3c3425
Microsoft.Data.SqlClient@2.1.2
2.1.7
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
Microsoft.Data.SqlClient@2.1.2
2.1.7
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
Microsoft.Data.SqlClient@2.1.2
2.1.7
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
Microsoft.Data.SqlClient@2.1.2
2.1.7
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
Microsoft.Data.SqlClient@2.1.2
2.1.7
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
Microsoft.Data.SqlClient@2.1.2
2.1.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.