StackRadar

CVE-2024-12401

Medium

Advisory

Published 20 Nov 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
35
deployed by those charts
Fix available
1 of 1
affected package

cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 35 images.

Affected packageAffected versionsFixed inImages
github.com/cert-manager/cert-managergolangv1.9.1, v1.11.0, v1.11.1-0.20230119150913-7ebb5f515e4f, v1.11.1-0.20230130103339-4c0f3dbe0ef1+13 more1.12.14, 1.15.4, 1.16.235
OSV records
GHSA-r4pg-vg54-wxx4
Also known as
GO-2024-3282

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/cert-manager/cert-manager@v1.13.2-0.20231026154503-eca879c9d5de
1.15.4

Open the chart page →

19,337
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/cert-manager/cert-manager@v1.13.1-0.20230926135348-f64cbc05f510
1.15.4

Open the chart page →

11,582
adcs-issueradcs-issuer3.0.21 of 1See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
djkormo/adcs-issuer:2.1.29f34e87e7586
github.com/cert-manager/cert-manager@v1.14.3
1.15.4

Open the chart page →

828
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
github.com/cert-manager/cert-manager@v1.12.0
1.12.14

Open the chart page →

1,067
cert-manager-webhook-gandicert-manager-webhook-gandi0.6.01 of 1See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
github.com/cert-manager/cert-manager@v1.15.3
1.15.4

Open the chart page →

1,024
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.11 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

1 of the 5 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/cert-manager/cert-manager@v1.13.1-0.20230926135348-f64cbc05f510
1.15.4

Open the chart page →

7,087
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.01 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

1 of the 5 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/cert-manager/cert-manager@v1.13.1-0.20230926135348-f64cbc05f510
1.15.4

Open the chart page →

5,941
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.21 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

1 of the 5 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/cert-manager/cert-manager@v1.13.1-0.20230926135348-f64cbc05f510
1.15.4

Open the chart page →

6,872
kubedb-oneappscodeVerified publisher2023.12.287 of 10See more

kubedb-one appscode 2023.12.28

7 of the 10 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/cert-manager/cert-manager@v1.9.1
1.12.14

Open the chart page →

15,200
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/cert-manager/cert-manager@v1.13.1
1.15.4

Open the chart page →

2,770
cert-manager-desec-webhookcert-manager-desec-webhook1.0.11 of 1See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
github.com/cert-manager/cert-manager@v1.15.1
1.15.4

Open the chart page →

1,263
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
github.com/cert-manager/cert-manager@v1.13.1
1.15.4

Open the chart page →

1,271
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
github.com/cert-manager/cert-manager@v1.12.2
1.12.14

Open the chart page →

1,752
cert-manager-webhook-regerycert-manager-webhook-regery1.0.01 of 1See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
github.com/cert-manager/cert-manager@v1.15.1
1.15.4

Open the chart page →

882
piraeusdtrdnk-helm-chartsVerified publisher2.2.01 of 1See more

piraeus dtrdnk-helm-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/piraeusdatastore/piraeus-operator:v2.2.0ec4022c8b0e3
github.com/cert-manager/cert-manager@v1.11.0
1.12.14

Open the chart page →

1,042
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
github.com/cert-manager/cert-manager@v1.16.1
1.16.2

Open the chart page →

1,284
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/cert-manager/cert-manager@v1.12.0-beta.1.0.20230512140741-9935a18130c1
1.12.14

Open the chart page →

11,186
fpga-cloudinaccelVerified publisher1.2.22 of 3See more

fpga-cloud inaccel 1.2.2

2 of the 3 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
inaccel/cloud-init:latesta5d3d0af05c1
github.com/cert-manager/cert-manager@v1.14.0
1.15.4
inaccel/kubevirt-hack:latestbdfd61803a70
github.com/cert-manager/cert-manager@v1.14.3
1.15.4

Open the chart page →

3,152
fpga-operatorinaccelVerified publisher2.8.21 of 7See more

fpga-operator inaccel 2.8.2

1 of the 7 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
inaccel/reef:latestc967218739f3
github.com/cert-manager/cert-manager@v1.14.0
1.15.4

Open the chart page →

5,759
infisical-pki-issuerinfisical-charts1.0.01 of 1See more

infisical-pki-issuer infisical-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
infisical/pki-issuer:latestff38294270e3
github.com/cert-manager/cert-manager@v1.15.3
1.15.4

Open the chart page →

566
fpga-operatorkubesphere-stable2.7.41 of 7See more

fpga-operator kubesphere-stable 2.7.4

1 of the 7 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
inaccel/reef:latestc967218739f3
github.com/cert-manager/cert-manager@v1.14.0
1.15.4

Open the chart page →

5,759
kafka-operatormesosphere-stable0.25.11 of 2See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.25.113dcbc7ebfc6
github.com/cert-manager/cert-manager@v1.11.2
1.12.14

Open the chart page →

1,241
osm-edgeopenshift1.2.1-ubi83 of 7See more

osm-edge openshift 1.2.1-ubi8

3 of the 7 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
github.com/cert-manager/cert-manager@v1.11.0
1.12.14

Open the chart page →

19,455
osm-edgeosm-edgeVerified publisher1.3.93 of 7See more

osm-edge osm-edge 1.3.9

3 of the 7 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
flomesh/osm-edge-bootstrap:1.3.9b188e128cbfe
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
flomesh/osm-edge-controller:1.3.9add7a4da4622
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
flomesh/osm-edge-injector:1.3.947287e3ad324
github.com/cert-manager/cert-manager@v1.11.0
1.12.14

Open the chart page →

5,589
cert-manager-webhook-cloudnsschichtelVerified publisher1.2.01 of 1See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/cert-manager/cert-manager@v1.14.1
1.15.4

Open the chart page →

1,396
cert-manager-desec-webhookschmitzis0.0.11 of 1See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
su541/cert-manager-desec-webhook:latest371ee33f83c1
github.com/cert-manager/cert-manager@v1.11.1-0.20230119150913-7ebb5f515e4f
1.12.14

Open the chart page →

1,770
cert-manager-webhook-bunnyschmitzis0.1.11 of 1See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
github.com/cert-manager/cert-manager@v1.11.1-0.20230130103339-4c0f3dbe0ef1
1.12.14

Open the chart page →

1,498
shopwareshopware-storeVerified publisher2.1.11 of 5See more

shopware shopware-store 2.1.1

1 of the 5 container images this version deploys carry CVE-2024-12401.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
github.com/cert-manager/cert-manager@v1.14.1
1.15.4

Open the chart page →

4,876

Container images carrying it

35 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
github.com/cert-manager/cert-manager@v1.13.1-0.20230926135348-f64cbc05f510
1.15.4
4
inaccel/reef:latestc967218739f3
github.com/cert-manager/cert-manager@v1.14.0
1.15.4
2
darioackermann/cert-manager-webhook-regery:latest0d450bc4acc4
github.com/cert-manager/cert-manager@v1.15.1
1.15.4
1
djkormo/adcs-issuer:2.1.29f34e87e7586
github.com/cert-manager/cert-manager@v1.14.3
1.15.4
1
flomesh/osm-edge-bootstrap:1.3.9b188e128cbfe
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
1
flomesh/osm-edge-controller:1.3.9add7a4da4622
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
1
flomesh/osm-edge-injector:1.3.947287e3ad324
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
1
inaccel/cloud-init:latesta5d3d0af05c1
github.com/cert-manager/cert-manager@v1.14.0
1.15.4
1
inaccel/kubevirt-hack:latestbdfd61803a70
github.com/cert-manager/cert-manager@v1.14.3
1.15.4
1
infisical/pki-issuer:latestff38294270e3
github.com/cert-manager/cert-manager@v1.15.3
1.15.4
1
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
github.com/cert-manager/cert-manager@v1.16.1
1.16.2
1
okteto/civo-webhook:0.5.357cd51176538
github.com/cert-manager/cert-manager@v1.13.1
1.15.4
1
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
github.com/cert-manager/cert-manager@v1.14.1
1.15.4
1
su541/cert-manager-desec-webhook:latest371ee33f83c1
github.com/cert-manager/cert-manager@v1.11.1-0.20230119150913-7ebb5f515e4f
1.12.14
1
ghcr.io/banzaicloud/kafka-operator:v0.25.113dcbc7ebfc6
github.com/cert-manager/cert-manager@v1.11.2
1.12.14
1
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
github.com/cert-manager/cert-manager@v1.12.2
1.12.14
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
1
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
github.com/cert-manager/cert-manager@v1.15.1
1.15.4
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
github.com/cert-manager/cert-manager@v1.12.0
1.12.14
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/cert-manager/cert-manager@v1.14.1
1.15.4
1
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
github.com/cert-manager/cert-manager@v1.11.1-0.20230130103339-4c0f3dbe0ef1
1.12.14
1
ghcr.io/sintef/cert-manager-webhook-gandi:0.6.06819b34ccac8
github.com/cert-manager/cert-manager@v1.15.3
1.15.4
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/cert-manager/cert-manager@v1.9.1
1.12.14
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
1
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
1
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
1
quay.io/jetstack/cert-manager-ctl:v1.13.24d9fce2c050e
github.com/cert-manager/cert-manager@v1.13.2-0.20231026154503-eca879c9d5de
1.15.4
1
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/cert-manager/cert-manager@v1.12.0-beta.1.0.20230512140741-9935a18130c1
1.12.14
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/cert-manager/cert-manager@v1.13.1
1.15.4
1
quay.io/piraeusdatastore/piraeus-operator:v2.2.0ec4022c8b0e3
github.com/cert-manager/cert-manager@v1.11.0
1.12.14
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.