CVE-2024-0397

High

Advisory

Published 17 Jun 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 314; of 17,781 indexed, latest versions
Container images: 283; deployed by those charts
Fix available: 3 of 6; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 314 of 17,781 indexed charts deploy, on 283 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+8 more	3.8.10-0ubuntu1~20.04.11	92
python3.11deb	3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2	3.11.2-6+deb12u3	67
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	no fix listed	54
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+6 more	3.10.12-1~22.04.5	35
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7

OSV records: DEBIAN-CVE-2024-0397 UBUNTU-CVE-2024-0397
Also known as: USN-6928-1

Charts affected

314 by stars

Chart

Latest

Affected images

Radar Score

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	python3.11@3.11.2-6	3.11.2-6+deb12u3

Open the chart page →

17,323

twentytwenty-crm

0.1.11

1 of 4 See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

5,550

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	python3.11@3.11.2-6	3.11.2-6+deb12u3

Open the chart page →

14,358

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

9,347

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

13,459

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11

Open the chart page →

11,119

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.11

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.11

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11

Open the chart page →

15,230

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

14,100

Container images carrying it

283 by charts deploying them

A fixed version is listed for 3 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
apachepulsar/pulsar :2.9.0	d056c89b7131	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.11	1
apachepulsar/pulsar :2.8.2	d538416d5afe	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	python2.7@2.7.18-1~20.04.3	no fix listed	1
assistiot/open_api_backend :1.1.2	30812ba93555	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	python3.8@3.8.10-0ubuntu1~20.04.7	3.8.10-0ubuntu1~20.04.11	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	python3.10@3.10.6-1~22.04.1	3.10.12-1~22.04.5	1
atlassian/jira-software :8.14.0	37bc46cbec1a	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5	1
avinash263/pyredis263 :latest	aa2b8727f1a6	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11	1
beanbag/reviewboard :latest	6b840f546e1c	python3.11@3.11.0~rc1-1~22.04.1	no fix listed	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.11	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	1
chetangautamm/repo :Opensips_Build	b4b94155ff5a	python3.4@3.4.3-1ubuntu1~14.04.7	no fix listed	1
chetangautamm/repo :sipp.v3	e7f7049e1544	python3.8@3.8.5-1~20.04	3.8.10-0ubuntu1~20.04.11	1
cheyang/distributed-tf :1.6.0	46cc34755493	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
cloudve/janis-terminal :latest	af56e77ca587	python3.6@3.6.9-1~18.04ubuntu1	no fix listed	1
cloudve/ttyd :latest	d79c1c5881c0	python3.6@3.6.9-1~18.04ubuntu1	no fix listed	1
countly/countly-server :25.05.4	e3c238248f99	python2.7@2.7.18-1~20.04.4 python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed 3.8.10-0ubuntu1~20.04.11	1
daskdev/dask-notebook :1.1.0	052630f5ca04	python3.6@3.6.7-1~18.04	no fix listed	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1
esphome/esphome :2024.3.0	9ab8cc88b28c	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	python2.7@2.7.12-1ubuntu0~16.04.2	no fix listed	1
firefart/requesttracker :5.0.4	0d6249906d8c	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
flyway/flyway :9.15	45b5d7cdc75a	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.11	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	python3.6@3.6.9-1~18.04ubuntu1.9	no fix listed	1
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	python3.6@3.6.9-1~18.04ubuntu1.8	no fix listed	1
freeradius/freeradius-server :3.2.8	af6fd34a5b78	python2.7@2.7.18-13ubuntu1.5	no fix listed	1
galaxy/cloudman-server :latest	e5c265fe9fcd	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.11	1
galaxy/galaxy-init :v18.01	0267bad550e6	python2.7@2.7.6-8ubuntu0.4 python3.4@3.4.3-1ubuntu1~14.04.6	no fix listed no fix listed	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	python2.7@2.7.6-8ubuntu0.4 python3.4@3.4.3-1ubuntu1~14.04.6	no fix listed no fix listed	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed	1
gethue/hue :4.11.0	11b649636e68	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.11	1
gethue/hue :4.10.0	5702b2c37ff9	python2.7@2.7.17-1~18.04ubuntu1.6 python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed no fix listed	1
gethue/hue :latest	7d5c1b9f8a79	python3.11@3.11.0~rc1-1~22.04	no fix listed	1
hasura/graphql-engine :v2.34.0-ce	0111b0204136	python3.10@3.10.6-1~22.04.2ubuntu1.1	3.10.12-1~22.04.5	1
haugene/transmission-openvpn :4.0	059216cfae4b	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	1
haveagitgat/tdarr :2.00.18	1256348872ce	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed 3.8.10-0ubuntu1~20.04.11	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	python3.8@3.8.5-1~20.04	3.8.10-0ubuntu1~20.04.11	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	python2.7@2.7.18-1~20.04.3 python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed 3.8.10-0ubuntu1~20.04.11	1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
ibmcom/icp-swift-sample :latest	b5d8c6714dbc	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
ibmcom/microclimate-theia :latest	e17bdccc5030	python2.7@2.7.12-1ubuntu0~16.04.2	no fix listed	1