StackRadar

CVE-2024-0727

Medium

Advisory

Published 26 Jan 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,540
of 17,790 indexed, latest versions
Container images
1,552
deployed by those charts
Fix available
5 of 6
affected packages

Null pointer dereference in PKCS12 parsing

Carried by container images the latest versions of 1,540 of 17,790 indexed charts deploy, on 1,552 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+75 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm11, 1.1.1-1ubuntu2.1~18.04.23+esm4, 1.1.1f-1ubuntu2.21+4 more895
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+17 more3.0.12-r4, 3.1.4-r5, 3.2.1-r0430
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+44 more42.0.2314
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-lp151.8.3.1, 1.1.1d-11.6.11.1.1d-150200.11.85.1, 1.1.1w-7.13
OSV records
ALPINE-CVE-2024-0727CGA-695v-9975-r7j4DEBIAN-CVE-2024-0727GHSA-9v9h-cgj8-h64pUBUNTU-CVE-2024-0727openSUSE-SU-2024:13662-1SUSE-SU-2024:0832-1
Also known as
CGA-h3v7-jg5r-3grr, PYSEC-2026-1285, USN-6622-1, USN-6632-1, USN-6709-1, USN-7018-1

Charts affected

1,540 by stars
ChartLatestAffected imagesRadar Score
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
openssl@3.1.1-r1
3.1.4-r5

Open the chart page →

2,585
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
cryptography@39.0.1
openssl@3.0.11-1~deb12u2
42.0.2
3.0.13-1~deb12u1

Open the chart page →

8,864
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
cryptography@38.0.1
42.0.2

Open the chart page →

5,861
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
openssl@3.0.2-0ubuntu1.17
no fix listed

Open the chart page →

10,911
dragonfly-stackdragonflyVerified publisher0.1.22 of 7See more

dragonfly-stack dragonfly 0.1.2

2 of the 7 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
openssl@3.0.7-r0
3.0.12-r4

Open the chart page →

18,480
nydus-snapshotterdragonflyVerified publisher0.0.102 of 2See more

nydus-snapshotter dragonfly 0.0.10

2 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
openssl@3.0.7-r0
3.0.12-r4
ghcr.io/liubin/toml-cli:v0.0.734a1da9f0f83
openssl@3.0.7-r0
3.0.12-r4

Open the chart page →

3,668
elchi-stackelchi1.13.04 of 10See more

elchi-stack elchi 1.13.0

4 of the 10 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.81ffa82edee00
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.fips.20
envoyproxy/envoy:v1.33.056da5afd7df3
openssl@3.0.2-0ubuntu1.18
no fix listed
library/mongo:6.0.12646902910d6a
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.14
victoriametrics/victoria-metrics:v1.93.577a9815d0640
openssl@3.1.2-r0
3.1.4-r5

Open the chart page →

15,540
navidromeemmas-chartsVerified publisher0.0.61 of 1See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
deluan/navidrome:0.50.02cf4442b0099
openssl@3.1.3-r0
3.1.4-r5

Open the chart page →

2,129
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

3,096
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
openssl@3.0.7-r0
3.0.12-r4

Open the chart page →

4,632
lighthouseethereum-helm-chartsVerified publisher1.1.91 of 2See more

lighthouse ethereum-helm-charts 1.1.9

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
sigp/lighthouse:latest9a62bb870545
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

1,590
events-exporterevents-exporter0.0.41 of 1See more

events-exporter events-exporter 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
openssl@3.0.7-r2
3.0.12-r4

Open the chart page →

2,135
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

6,511
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.22.1638b7962cd016
openssl@3.0.7-r0
3.0.12-r4

Open the chart page →

5,295
fastapi-microservice-appfast-api-microservice-app1.3.01 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

1 of the 4 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/mongo:7.0b6421fd6d1c5
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

9,655
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/nats:2.10.5-alpine85319e5e541b
openssl@3.1.4-r1
3.1.4-r5
natsio/nats-box:0.14.1a67913df95f1
openssl@3.1.3-r0
3.1.4-r5
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
openssl@3.1.1-r1
3.1.4-r5

Open the chart page →

8,240
fedodo.chartfedodo0.5.114 of 4See more

fedodo.chart fedodo 0.5.11

4 of the 4 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
fedodo/fedodo.be.activitypub:14728dada8e3216
openssl@3.0.8-r3
3.0.12-r4
fedodo/fedodo.be.auth:208f8eb7a1207e
openssl@3.0.8-r3
3.0.12-r4
fedodo/fedodo.ui.home:3c69413c4d690
openssl@3.0.9-r1
3.0.12-r4
fedodo/fedodo.ui.micro:12b2b540081c21
openssl@3.0.9-r1
3.0.12-r4

Open the chart page →

4,403
taigafermosit0.0.112 of 7See more

taiga fermosit 0.0.11

2 of the 7 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
taigaio/taiga-events:latest92fc0822564f
openssl@3.1.2-r0
3.1.4-r5
taigaio/taiga-front:latest570c8792ce80
openssl@3.0.8-r3
3.0.12-r4

Open the chart page →

8,541
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
openssl@1.1.1-1ubuntu2.1~18.04.5
openssl1.0@1.0.2n-1ubuntu5.3
1.1.1-1ubuntu2.1~18.04.23+esm4
1.0.2n-1ubuntu5.13+esm1

Open the chart page →

12,941
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
42.0.2

Open the chart page →

2,034
garmgarmVerified publisher4.2.01 of 3See more

garm garm 4.2.0

1 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
envsubst/envsubst:latest90963c70db69
openssl@3.1.2-r0
3.1.4-r5

Open the chart page →

834
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
cryptography@3.4.7
42.0.2

Open the chart page →

3,461
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.21

Open the chart page →

17,440
games-on-whalesgeek-cookbookVerified publisher1.8.24 of 7See more

games-on-whales geek-cookbook 1.8.2

4 of the 7 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.21
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.21
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.21
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
cryptography@3.3.2
42.0.2

Open the chart page →

35,444
healthchecksgeek-cookbookVerified publisher4.4.21 of 1See more

healthchecks geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
linuxserver/healthchecks:version-v1.20.050792a72fc71
cryptography@3.4.7
42.0.2

Open the chart page →

1,667
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.21

Open the chart page →

15,728
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
42.0.2

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cryptography@2.1.4
openssl@1.1.1-1ubuntu2.1~18.04.9
42.0.2
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

11,680
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

11,582
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.14

Open the chart page →

5,178
organizrgeek-cookbookVerified publisher7.4.21 of 1See more

organizr geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
organizr/organizr:latest1ce319d73cdf
openssl@3.1.4-r1
3.1.4-r5

Open the chart page →

1,532
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
cryptography@37.0.4
42.0.2

Open the chart page →

3,925
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

8,038
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.21

Open the chart page →

11,602
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
42.0.2

Open the chart page →

7,802
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
cryptography@3.4.7
openssl@1.1.1f-1ubuntu2.4
42.0.2
1.1.1f-1ubuntu2.21

Open the chart page →

10,275
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.14

Open the chart page →

13,098
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.21

Open the chart page →

15,917
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.21
haveagitgat/tdarr_node:2.00.101e3f9328327d
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.21

Open the chart page →

31,185
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
cryptography@2.6.1
42.0.2

Open the chart page →

5,086
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.21

Open the chart page →

7,701
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.33 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

3 of the 9 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.8512bb8a21483
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.fips.20
confluentinc/cp-kafka:7.4.4c0224a1adf7a
cryptography@41.0.7
42.0.2
library/postgres:15.38775adb39f0d
openssl@3.0.9-1
3.0.13-1~deb12u1

Open the chart page →

15,635
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/mariadb:10.6.218a16204dc96c
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20

Open the chart page →

6,462
docker-registrygmelilloVerified publisher1.9.91 of 1See more

docker-registry gmelillo 1.9.9

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/registry:2.8.1dbaa3e69f563
openssl@3.1.0-r4
3.1.4-r5

Open the chart page →

487
carettagroundcover0.0.162 of 3See more

caretta groundcover 0.0.16

2 of the 3 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
quay.io/groundcover/caretta:v0.0.16ed8f5118e3a4
openssl@3.0.8-r0
3.0.12-r4
quay.io/groundcover/victoria-metrics:v1.85.380ddeb90d18d
openssl@3.0.7-r0
3.0.12-r4

Open the chart page →

6,808
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
cryptography@3.1.1
42.0.2

Open the chart page →

3,345
hawkhawk1.1.52 of 4See more

hawk hawk 1.1.5

2 of the 4 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.14

Open the chart page →

13,676
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
library/mongo:5.0.32-focal3b6c281e1c08
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20

Open the chart page →

4,754
velerohelmforgeVerified publisher1.4.101 of 2See more

velero helmforge 1.4.10

1 of the 2 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
openssl@3.0.2-0ubuntu1.25
no fix listed

Open the chart page →

1,442
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-0727.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
cryptography@2.6.1
42.0.2

Open the chart page →

4,203

Container images carrying it

1,552 by charts deploying them

A fixed version is listed for 5 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
openssl@3.1.0-r4
3.1.4-r5
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.12-r4
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.