StackRadar

CVE-2024-12718

Medium

Advisory

Published 3 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
68
of 17,781 indexed, latest versions
Container images
62
deployed by those charts
Fix available
3 of 3
affected packages

Bypass extraction filter to modify file metadata outside extraction directory

Carried by container images the latest versions of 68 of 17,781 indexed charts deploy, on 62 images.

Affected packageAffected versionsFixed inImages
python3apk3.11.6-r1, 3.11.8-r0, 3.11.9-r0, 3.11.10-r0+8 more3.11.13-r0, 3.12.11-r046
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+1 more3.12.3-1ubuntu0.714
pythonbitnami3.11.11-0, 3.12.8-03.9.232
OSV records
ALPINE-CVE-2024-12718BIT-python-2024-12718UBUNTU-CVE-2024-12718
Also known as
BIT-libpython-2024-12718, BIT-python-min-2024-12718, PSF-2025-5, USN-7583-1

Charts affected

68 by stars
ChartLatestAffected imagesRadar Score
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
python3@3.11.9-r0
3.11.13-r0

Open the chart page →

5,332
qbittorrentnoxleonardo0918000.1.01 of 1See more

qbittorrentnox leonardo091800 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
python3@3.11.6-r1
3.11.13-r0

Open the chart page →

1,118
delugelinkding0.2.31 of 1See more

deluge linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
python3@3.12.10-r1
3.12.11-r0

Open the chart page →

1,433
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
python3@3.12.3-r1
3.12.11-r0

Open the chart page →

4,647
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
python3@3.12.3-r1
3.12.11-r0

Open the chart page →

4,560
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
python3@3.11.10-r0
3.11.13-r0

Open the chart page →

2,293
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
python3@3.12.7-r0
3.12.11-r0

Open the chart page →

5,826
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
python3@3.12.8-r1
3.12.11-r0

Open the chart page →

960
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.7

Open the chart page →

16,196
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
python3@3.12.3-r1
3.12.11-r0

Open the chart page →

25,934
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
python3@3.12.7-r0
3.12.11-r0

Open the chart page →

1,338
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
python3@3.11.9-r0
3.11.13-r0

Open the chart page →

21,211
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
python3@3.11.9-r0
3.11.13-r0

Open the chart page →

4,038
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
python3@3.12.7-r0
3.12.11-r0

Open the chart page →

1,713
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
python3@3.12.9-r0
3.12.11-r0

Open the chart page →

2,817
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
python3@3.11.6-r1
3.11.13-r0

Open the chart page →

2,806
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
3.12.3-1ubuntu0.7

Open the chart page →

45,239
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
python3@3.12.9-r0
3.12.11-r0

Open the chart page →

4,768

Container images carrying it

62 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
python3@3.12.10-r0
3.12.11-r0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
python3@3.12.3-r1
3.12.11-r0
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.7
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
python3@3.11.9-r0
3.11.13-r0
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.7
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
python3@3.11.9-r0
3.11.13-r0
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
python3@3.11.6-r1
3.11.13-r0
1
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
python3@3.12.10-r0
3.12.11-r0
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
python3@3.12.8-r1
3.12.11-r0
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
python3@3.12.7-r0
3.12.11-r0
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
python3@3.11.12-r1
3.12.11-r0
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
python3@3.12.6-r0
3.12.11-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.