StackRadar

CVE-2024-12254

High

Advisory

Published 6 Dec 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.019
78th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
30
of 17,781 indexed, latest versions
Container images
27
deployed by those charts
Fix available
4 of 4
affected packages

Unbounded memory buffering in SelectorSocketTransport.writelines()

Carried by container images the latest versions of 30 of 17,781 indexed charts deploy, on 27 images.

Affected packageAffected versionsFixed inImages
python3apk3.11.12-r1, 3.12.3-r1, 3.12.6-r0, 3.12.7-r03.12.8-r117
pythonbitnami3.12.8-03.12.91
python-3.12apk3.12.0-r13.12.8-r11
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.33.12.3-1ubuntu0.48
OSV records
ALPINE-CVE-2024-12254BIT-python-2024-12254CGA-ggv7-6g36-j69xUBUNTU-CVE-2024-12254
Also known as
BIT-libpython-2024-12254, BIT-python-min-2024-12254, CGA-hj5f-wf32-ph23, PSF-2024-14, USN-7219-1

Charts affected

30 by stars
ChartLatestAffected imagesRadar Score
plane-cemakeplaneOfficialVerified publisher1.8.11 of 11See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
library/rabbitmq:3.13.6-management-alpine611107e29cce
python3@3.12.3-r1
3.12.8-r1

Open the chart page →

4,854
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
supabase/storage-api:v1.12.0f983fb50bd95
python3@3.12.7-r0
3.12.8-r1

Open the chart page →

23,123
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4

Open the chart page →

4,147
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
python3.12@3.12.3-1ubuntu0.2
3.12.3-1ubuntu0.4

Open the chart page →

4,309
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
python3@3.12.7-r0
3.12.8-r1

Open the chart page →

6,416
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
library/rabbitmq:3.12-management-alpine0b44fbcc3a4b
python3@3.12.7-r0
3.12.8-r1

Open the chart page →

11,764
plane-enterprisemakeplaneOfficialVerified publisher3.7.11 of 13See more

plane-enterprise makeplane 3.7.1

1 of the 13 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
library/rabbitmq:3.13.6-management-alpine611107e29cce
python3@3.12.3-r1
3.12.8-r1

Open the chart page →

4,942
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4

Open the chart page →

4,137
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
python3@3.12.3-r1
3.12.8-r1

Open the chart page →

4,460
redirectwyrihaximusnetVerified publisher1.1.01 of 1See more

redirect wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
python3@3.12.6-r0
3.12.8-r1

Open the chart page →

1,581
raponchiygdrassilOfficialVerified publisher0.4.01 of 1See more

raponchi ygdrassil 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
elautoestopista/raponchi:0.3.0b6f74db9fc81
python3@3.12.3-r1
3.12.8-r1

Open the chart page →

1,315
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
python@3.12.8-0
3.12.9

Open the chart page →

40,238
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.26.237e2e33dbd7b
python3@3.12.6-r0
3.12.8-r1

Open the chart page →

16,198
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4

Open the chart page →

6,123
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4

Open the chart page →

5,974
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
python3.12@3.12.3-1
3.12.3-1ubuntu0.4

Open the chart page →

16,954
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
python3@3.12.6-r0
3.12.8-r1

Open the chart page →

2,590
twampyhelm-charts-darox0.0.21 of 1See more

twampy helm-charts-darox 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
dariomader/twampy:v0.0.2d2f4a8c5e690
python-3.12@3.12.0-r1
3.12.8-r1

Open the chart page →

2,057
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
3.12.3-1ubuntu0.4

Open the chart page →

45,239
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4

Open the chart page →

6,568
zileank8s-home-lab-repo1.0.11 of 1See more

zilean k8s-home-lab-repo 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
python3@3.11.12-r1
3.12.8-r1

Open the chart page →

2,025
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
python3@3.12.3-r1
3.12.8-r1

Open the chart page →

1,733
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
python3@3.12.3-r1
3.12.8-r1

Open the chart page →

4,647
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
python3@3.12.3-r1
3.12.8-r1

Open the chart page →

4,560
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
python3@3.12.7-r0
3.12.8-r1

Open the chart page →

5,826
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
python3@3.12.3-r1
3.12.8-r1

Open the chart page →

25,934
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
python3@3.12.7-r0
3.12.8-r1

Open the chart page →

1,338
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
python3@3.12.7-r0
3.12.8-r1

Open the chart page →

1,713
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-12254.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
3.12.3-1ubuntu0.4

Open the chart page →

45,239

Container images carrying it

27 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
3.12.3-1ubuntu0.4
2
library/rabbitmq:3.13.6-management-alpine611107e29cce
python3@3.12.3-r1
3.12.8-r1
2
opendatacube/ows:latest668cbb41473c
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4
2
alpine/k8s:1.30.2cd560fce90f7
python3@3.12.3-r1
3.12.8-r1
1
alpine/k8s:1.28.13e5c0b053fed7
python3@3.12.3-r1
3.12.8-r1
1
dariomader/twampy:v0.0.2d2f4a8c5e690
python-3.12@3.12.0-r1
3.12.8-r1
1
dpage/pgadmin4:8.13561c1f8f99f2
python3@3.12.7-r0
3.12.8-r1
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
python3@3.12.3-r1
3.12.8-r1
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
python3@3.12.6-r0
3.12.8-r1
1
leantime/leantime:3.3.3ad4bfb0699d3
python3@3.12.7-r0
3.12.8-r1
1
library/rabbitmq:3.12-management-alpine0b44fbcc3a4b
python3@3.12.7-r0
3.12.8-r1
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
python3@3.12.3-r1
3.12.8-r1
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
python3@3.12.7-r0
3.12.8-r1
1
photoprism/photoprism:240711-cefc6fd632ca74
python3.12@3.12.3-1
3.12.3-1ubuntu0.4
1
supabase/storage-api:v1.12.0f983fb50bd95
python3@3.12.7-r0
3.12.8-r1
1
temporalio/admin-tools:1.26.237e2e33dbd7b
python3@3.12.6-r0
3.12.8-r1
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
python3@3.12.3-r1
3.12.8-r1
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
python@3.12.8-0
3.12.9
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
python3.12@3.12.3-1ubuntu0.2
3.12.3-1ubuntu0.4
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
python3@3.12.3-r1
3.12.8-r1
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.4
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
python3@3.12.7-r0
3.12.8-r1
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
python3@3.11.12-r1
3.12.8-r1
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
python3@3.12.6-r0
3.12.8-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.