CVE-2024-0397

High

Advisory

Published 17 Jun 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 314; of 17,781 indexed, latest versions
Container images: 283; deployed by those charts
Fix available: 3 of 6; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 314 of 17,781 indexed charts deploy, on 283 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+8 more	3.8.10-0ubuntu1~20.04.11	92
python3.11deb	3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2	3.11.2-6+deb12u3	67
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	no fix listed	54
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+6 more	3.10.12-1~22.04.5	35
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7

OSV records: DEBIAN-CVE-2024-0397 UBUNTU-CVE-2024-0397
Also known as: USN-6928-1

Charts affected

314 by stars

Chart

Latest

Affected images

Radar Score

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	python3.11@3.11.2-6	3.11.2-6+deb12u3

Open the chart page →

17,323

twentytwenty-crm

0.1.11

1 of 4 See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

5,550

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	python3.11@3.11.2-6	3.11.2-6+deb12u3

Open the chart page →

14,358

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

9,347

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

13,459

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11

Open the chart page →

11,119

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.11

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.11

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11

Open the chart page →

15,230

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

14,100

Container images carrying it

283 by charts deploying them

A fixed version is listed for 3 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
opea/codegen-ui :1.0	2bee4eb66f3e	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
opea/codetrans-ui :1.0	3ef121f34610	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
opea/docsum-ui :1.0	7f854e9bffaf	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	python3.6@3.6.7-1~18.04	no fix listed	1
opendatacube/restcube :latest	91870111837c	python3.6@3.6.7-1~18.04	no fix listed	1
opendatacube/wms :latest	1b90cdf68831	python3.6@3.6.7-1~18.04	no fix listed	1
openelevation/open-elevation :latest	82fb21612e86	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	1
openkm/openkm-ce :6.3.11	3bc465a7461b	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.11	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11	1
openthread/otbr :latest	f307f59f6432	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed no fix listed	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	python2.7@2.7.17-1~18.04ubuntu1.2	no fix listed	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	python3.4@3.4.3-1ubuntu1~14.04.6	no fix listed	1
project2team4/react :latest	3ff031a08887	python3.8@3.8.10-0ubuntu1~20.04.4	3.8.10-0ubuntu1~20.04.11	1
psorab/elibrary :latest	53b68896c4ce	python3.8@3.8.10-0ubuntu1~20.04.7	3.8.10-0ubuntu1~20.04.11	1
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	python2.7@2.7.18-1~20.04.3	no fix listed	1
puppet/puppet-agent :7.14.0	0b6fd9a6b7da	python3.6@3.6.9-1~18.04ubuntu1.6	no fix listed	1
rancher/local-path-provisioner :v0.0.5	e66f32d19eb9	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
razorbladex401/dayz :latest	6a4d79248e7d	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5	1
redis/redis-stack-server :7.4.0-v0	887cf87cc744	python3.10@3.10.12-1~22.04.4	3.10.12-1~22.04.5	1
resouer/redis-slave :v2	e2f198b49ba7	python2.7@2.7.6-8 python3.4@3.4.0-2ubuntu1	no fix listed no fix listed	1
rezachalak/bzen-mongo :1.0.0	34f694325191	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11	1
santisbon/evwatcher :latest	c4e994ca4540	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
santisbon/evworker :latest	e807283f8d69	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
santisbon/speedtest :latest	8ee3a1697227	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
scrapinghub/splash :3.4.1	a5f89bc84606	python3.6@3.6.9-1~18.04	no fix listed	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.11	1
seafileltd/seafile-mc :10.0.1	70628f29c663	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.11	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	python3.8@3.8.10-0ubuntu1~20.04	3.8.10-0ubuntu1~20.04.11	1
seldonio/locust-core :0.8	1d0da98a2d76	python2.7@2.7.12-1ubuntu0~16.04.4	no fix listed	1
sismics/docs :v1.10	f4b0ef019cf1	python3.6@3.6.6-1~18.04	no fix listed	1
snipe/snipe-it :v6.0.14	55fb7636a98c	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.11	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	python3.8@3.8.10-0ubuntu1~20.04.4	3.8.10-0ubuntu1~20.04.11	1
speckle/speckle-monitor-deployment :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	2faf1508c1d3	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
speckle/speckle-monitor-deployment :2.20.2-branch.testing4.134160-9fad4b2	3c8fbe855665	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
speckle/speckle-monitor-deployment :2.20.6-branch.testing1.154030-9b09114	738c77eb6f97	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
speckle/speckle-monitor-deployment :2.18.12-branch.testing3.88744-f55b341	81335b40696a	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
speckle/speckle-monitor-deployment :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	b696ac5022ab	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
speckle/speckle-monitor-deployment :2.21.3-branch.testing5.219631-2153bef	cf72ad0f25fb	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
speckle/speckle-monitor-deployment :2.18.11-branch.testing2.88634-335d469	d6790a97ad47	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
speckle/speckle-monitor-deployment :2.17.14-branch.testing.72707.921a5f8	ff1641ac3f1b	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
stackstorm/st2actionrunner :3.8	88235ba70cad	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1