CVE-2024-0397

High

Advisory

Published 17 Jun 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 314; of 17,781 indexed, latest versions
Container images: 283; deployed by those charts
Fix available: 3 of 6; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 314 of 17,781 indexed charts deploy, on 283 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+8 more	3.8.10-0ubuntu1~20.04.11	92
python3.11deb	3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2	3.11.2-6+deb12u3	67
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	no fix listed	54
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+6 more	3.10.12-1~22.04.5	35
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7

OSV records: DEBIAN-CVE-2024-0397 UBUNTU-CVE-2024-0397
Also known as: USN-6928-1

Charts affected

314 by stars

Chart

Latest

Affected images

Radar Score

tfy-distributortruefoundry

0.0.1

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	python3.11@3.11.2-6	3.11.2-6+deb12u3

Open the chart page →

17,323

twentytwenty-crm

0.1.11

1 of 4 See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

5,550

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	python3.11@3.11.2-6	3.11.2-6+deb12u3

Open the chart page →

14,358

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

9,347

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

13,459

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11

Open the chart page →

11,119

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	python3.8@3.8.10-0ubuntu1~20.04.8	3.8.10-0ubuntu1~20.04.11

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.11

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.11

Open the chart page →

28,605

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	python3.6@3.6.9-1~18.04ubuntu1.1	no fix listed

Open the chart page →

10,843

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	python3.8@3.8.10-0ubuntu1~20.04.2	3.8.10-0ubuntu1~20.04.11

Open the chart page →

15,230

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-0397.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5

Open the chart page →

14,100

Container images carrying it

283 by charts deploying them

A fixed version is listed for 3 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
stackstorm/st2api :3.8	6f56d239d280	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2auth :3.8	33ecfda16608	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2notifier :3.8	f190a6212195	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2rulesengine :3.8	259503496ff9	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2scheduler :3.8	b1de2055c362	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2stream :3.8	1c8904a3bf67	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
stashapp/stash :latest	24dbd7607174	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.11	1
statcan/ckan :2.9	3921305425b8	python3.8@3.8.5-1~20.04.3	3.8.10-0ubuntu1~20.04.11	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	python3.8@3.8.5-1~20.04.3	3.8.10-0ubuntu1~20.04.11	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	python2.7@2.7.18-1~20.04.3	no fix listed	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	python3.8@3.8.10-0ubuntu1~20.04.9	3.8.10-0ubuntu1~20.04.11	1
teknas09/bird-pod :latest	12a1fa85c4aa	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
theradius/loggia :0.4	63ba348546ec	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
thongngo3301/stakefish :latest	a341af5976e3	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	python3.10@3.10.6-1~22.04.2ubuntu1	3.10.12-1~22.04.5	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	python3.10@3.10.6-1~22.04.2	3.10.12-1~22.04.5	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	python3.10@3.10.4-3	3.10.12-1~22.04.5	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
tpdock/freeradius :2.2.9	3da600c95a49	python2.7@2.7.12-1ubuntu0~16.04.2	no fix listed	1
trinodb/trino :405	ee80ab5eeab2	python3.10@3.10.6-1~22.04.2	3.10.12-1~22.04.5	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	python3.6@3.6.9-1~18.04ubuntu1.9	no fix listed	1
vlebediantsev/notes-admin-front :latest	007c6670ff48	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
vlebediantsev/notes-project-front :latest	945675fd2636	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
voltha/voltha-cli :1.6.0	c4e41e92f046	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
voltha/voltha-envoy :1.6.0	59ab2a00f712	python3.4@3.4.3-1ubuntu1~14.04.5	no fix listed	1
voltha/voltha-netconf :1.6.0	37f80524c207	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
voltha/voltha-tester :1.7.0	655c3048a602	python2.7@2.7.12-1ubuntu0~16.04.4	no fix listed	1
voltha/voltha-voltha :1.6.0	ff596b62de59	python2.7@2.7.12-1ubuntu0~16.04.3	no fix listed	1
wazuh/wazuh-manager :4.4.1	21994f40e0da	python3.8@3.8.10-0ubuntu1~20.04.7	3.8.10-0ubuntu1~20.04.11	1
woojoong/wowza :latest	ec230db19652	python2.7@2.7.15~rc1-1ubuntu0.1	no fix listed	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.5	1
xeladock/mysql_dns :latest	4baf531453f1	python3.10@3.10.4-3	3.10.12-1~22.04.5	1
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	python3.11@3.11.2-6+deb12u2	3.11.2-6+deb12u3	1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	python3.11@3.11.2-6+deb12u2	3.11.2-6+deb12u3	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	python3.8@3.8.10-0ubuntu1~20.04.1	3.8.10-0ubuntu1~20.04.11	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	python3.10@3.10.4-3ubuntu0.1	3.10.12-1~22.04.5	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	python3.8@3.8.10-0ubuntu1~20.04.6	3.8.10-0ubuntu1~20.04.11	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	python3.11@3.11.2-6+deb12u2	3.11.2-6+deb12u3	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	python3.11@3.11.2-6	3.11.2-6+deb12u3	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed	1