StackRadar

CVE-2024-0727

Medium

Advisory

Published 26 Jan 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,540
of 17,797 indexed, latest versions
Container images
1,551
deployed by those charts
Fix available
5 of 6
affected packages

Null pointer dereference in PKCS12 parsing

Carried by container images the latest versions of 1,540 of 17,797 indexed charts deploy, on 1,551 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+75 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm11, 1.1.1-1ubuntu2.1~18.04.23+esm4, 1.1.1f-1ubuntu2.21+4 more894
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+17 more3.0.12-r4, 3.1.4-r5, 3.2.1-r0430
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+44 more42.0.2314
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-lp151.8.3.1, 1.1.1d-11.6.11.1.1d-150200.11.85.1, 1.1.1w-7.13
OSV records
ALPINE-CVE-2024-0727CGA-695v-9975-r7j4DEBIAN-CVE-2024-0727GHSA-9v9h-cgj8-h64pUBUNTU-CVE-2024-0727openSUSE-SU-2024:13662-1SUSE-SU-2024:0832-1
Also known as
CGA-h3v7-jg5r-3grr, PYSEC-2026-1285, USN-6622-1, USN-6632-1, USN-6709-1, USN-7018-1

Charts affected

1,540 by stars
ChartLatestAffected imagesRadar Score
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

6,338
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
openssl@3.1.3-r0
3.1.4-r5

Open the chart page →

4,218
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

10,606
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

10,551
temporaltemporal0.28.93 of 13See more

temporal temporal 0.28.9

3 of the 13 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.22.0836af062af30
openssl@3.1.1-r1
3.1.4-r5
temporalio/server:1.22.0ddeebf8bad8f
openssl@3.1.1-r1
3.1.4-r5
temporalio/ui:2.16.2af9c9349708f
openssl@3.1.1-r1
3.1.4-r5

Open the chart page →

21,042
tensor_apptensor-app0.2.23 of 3See more

tensor_app tensor-app 0.2.2

3 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
42.0.2
xeladock/mysql_dns:latest4baf531453f1
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.14
xeladock/nginx2:latestc259a67b1dff
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.14

Open the chart page →

17,661
pagestest43221.0.02 of 3See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.21
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

20,262
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
openssl@3.0.2-0ubuntu1.15
no fix listed

Open the chart page →

39,419
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

29,001
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

28,574
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

29,049
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
openssl@3.0.2-0ubuntu1.15
no fix listed

Open the chart page →

5,677
vehicle-dashboardtest-vehi-dash0.1.02 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.14
library/mongo:5.0.217c81758cb295
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.21

Open the chart page →

20,406
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
openssl@3.0.8-r3
3.0.12-r4

Open the chart page →

4,667
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
openssl@3.1.2-r0
3.1.4-r5

Open the chart page →

3,589
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.fips.20

Open the chart page →

10,101
the0the0Verified publisher0.9.82 of 9See more

the0 the0 0.9.8

2 of the 9 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/mongo:7-jammy406a4fdca9fc
openssl@3.0.2-0ubuntu1.26
no fix listed
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
cryptography@41.0.7
42.0.2

Open the chart page →

7,342
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.20+esm11

Open the chart page →

11,025
pagesthiru-pages1.0.02 of 3See more

pages thiru-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.21
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

20,262
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
openssl@3.1.4-r4
3.1.4-r5

Open the chart page →

2,806
pagesthuy-pages1.0.02 of 3See more

pages thuy-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.21
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

20,262
todoapitodoapi-appVerified publisher0.1.01 of 2See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
openssl@1.1.1-1ubuntu2.1~18.04.23
openssl1.0@1.0.2n-1ubuntu5.13
1.1.1-1ubuntu2.1~18.04.23+esm4
1.0.2n-1ubuntu5.13+esm1

Open the chart page →

6,855
netbirdtotmicro1.8.21 of 4See more

netbird totmicro 1.8.2

1 of the 4 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.22.215a3aab9a345
cryptography@3.3.2
42.0.2

Open the chart page →

6,041
nfs-servertranhailongVerified publisher0.1.21 of 1See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
openssl@3.0.8-r0
3.0.12-r4

Open the chart page →

2,331
synapsetranhailongVerified publisher0.1.02 of 2See more

synapse tranhailong 0.1.0

2 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/postgres:15.2-alpined9c304353c03
openssl@3.0.8-r3
3.0.12-r4
matrixdotorg/synapse:v1.78.0def97fd537d8
cryptography@39.0.1
42.0.2

Open the chart page →

3,179
orchestra-login-portaltremolo2.3.981 of 1See more

orchestra-login-portal tremolo 2.3.98

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

3,015
posteetrivy-operator2.14.02 of 3See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
aquasec/postee:2.12.0-amd640795cba777e7
openssl@3.1.1-r1
3.1.4-r5
aquasec/postee-ui:2.12.0-amd64c0467c3941dc
openssl@3.1.1-r1
3.1.4-r5

Open the chart page →

4,816
tfy-distributortruefoundryVerified publisher0.0.14 of 4See more

tfy-distributor truefoundry 0.0.1

4 of the 4 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/nats:2.10.7-alpine1bcddab51b80
openssl@3.1.4-r1
3.1.4-r5
natsio/nats-server-config-reloader:0.14.08c28b75bc416
openssl@3.1.1-r1
3.1.4-r5
natsio/prometheus-nats-exporter:0.13.02adf791d9f9f
openssl@3.1.3-r0
3.1.4-r5
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

17,403
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
openssl@3.0.2-0ubuntu1.15
no fix listed

Open the chart page →

5,616
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20

Open the chart page →

4,135
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
42.0.2

Open the chart page →

8,674
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
cryptography@41.0.7
42.0.2

Open the chart page →

45,540
uoappuoapp1.1.01 of 1See more

uoapp uoapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
okaforuchena/uo-docker:V1.0.0004e81250f48
openssl@3.0.10-r0
3.0.12-r4

Open the chart page →

1,189
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm11

Open the chart page →

15,364
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
42.0.2

Open the chart page →

3,176
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
openssl@3.0.9-1
3.0.13-1~deb12u1

Open the chart page →

14,444
demo-frontendv2flyVerified publisher0.0.31 of 1See more

demo-frontend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
quay.io/yushiwho/sys-stats:e1f9d778c8d08b95c0b
openssl@3.1.4-r1
3.1.4-r5

Open the chart page →

753
skoonervhdirkVerified publisher0.1.41 of 1See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
openssl@3.1.2-r0
3.1.4-r5

Open the chart page →

1,343
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.21
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.21

Open the chart page →

26,834
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
openssl@3.0.2-0ubuntu1.10
no fix listed
3.0.2-0ubuntu1.14

Open the chart page →

9,495
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cryptography@41.0.7
42.0.2

Open the chart page →

4,337
twenty-crmvictorlane0.0.12 of 3See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
redis/redis-stack-server:latest798ab84d9f26
openssl@3.0.2-0ubuntu1.20
no fix listed
twentycrm/twenty-postgres-spilo:latest2f78405a78be
cryptography@3.4.8
openssl@3.0.2-0ubuntu1.14
42.0.2
no fix listed

Open the chart page →

13,617
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.21
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

20,262
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
openssl@1.1.1-1ubuntu2.1~18.04.10
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

7,906
websitewaldo-visionVerified publisher0.33.02 of 2See more

website waldo-vision 0.33.0

2 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
openssl@3.0.8-r3
3.0.12-r4
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
openssl@3.0.8-r3
3.0.12-r4

Open the chart page →

3,479
kongwallarmVerified publisher4.6.32 of 7See more

kong wallarm 4.6.3

2 of the 7 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
wallarm/ingress-tarantool:4.6.0-1ba00516618ea
openssl@3.0.8-r0
3.0.12-r4
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.21

Open the chart page →

11,451
wallarm-ingress-rcwallarmVerified publisher4.8.41 of 2See more

wallarm-ingress-rc wallarm 4.8.4

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
wallarm/ingress-controller:4.8.0-1a591b9c91570
openssl@3.1.3-r0
3.1.4-r5

Open the chart page →

2,635
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.21
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

20,262
consulwarjiang1.3.02 of 2See more

consul warjiang 1.3.0

2 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
openssl@3.1.4-r0
3.1.4-r5
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
openssl@3.1.4-r0
3.1.4-r5

Open the chart page →

4,073
eth-validatorwateim1.4.52 of 3See more

eth-validator wateim 1.4.5

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
sigp/lighthouse:latest9a62bb870545
openssl@3.0.2-0ubuntu1.26
no fix listed
wateim/lighthouse-launch:latest2520149ee574
openssl@3.0.2-0ubuntu1.18
no fix listed

Open the chart page →

5,104

Container images carrying it

1,551 by charts deploying them

A fixed version is listed for 5 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.12-r4
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.