StackRadar

CVE-2024-12718

Medium

Advisory

Published 3 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
69
of 17,787 indexed, latest versions
Container images
63
deployed by those charts
Fix available
3 of 3
affected packages

Bypass extraction filter to modify file metadata outside extraction directory

Carried by container images the latest versions of 69 of 17,787 indexed charts deploy, on 63 images.

Affected packageAffected versionsFixed inImages
python3apk3.11.6-r1, 3.11.8-r0, 3.11.9-r0, 3.11.10-r0+8 more3.11.13-r0, 3.12.11-r046
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3+2 more3.12.3-1ubuntu0.715
pythonbitnami3.11.11-0, 3.12.8-03.9.232
OSV records
ALPINE-CVE-2024-12718BIT-python-2024-12718UBUNTU-CVE-2024-12718
Also known as
BIT-libpython-2024-12718, BIT-python-min-2024-12718, PSF-2025-5, USN-7583-1

Charts affected

69 by stars
ChartLatestAffected imagesRadar Score
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
python3@3.12.10-r0
3.12.11-r0

Open the chart page →

4,440
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
python3@3.11.9-r0
3.11.13-r0

Open the chart page →

5,331
qbittorrentnoxleonardo0918000.1.01 of 1See more

qbittorrentnox leonardo091800 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
python3@3.11.6-r1
3.11.13-r0

Open the chart page →

1,118
delugelinkding0.2.31 of 1See more

deluge linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
python3@3.12.10-r1
3.12.11-r0

Open the chart page →

1,432
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
python3@3.12.3-r1
3.12.11-r0

Open the chart page →

4,659
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
python3@3.12.3-r1
3.12.11-r0

Open the chart page →

4,560
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
python3@3.11.10-r0
3.11.13-r0

Open the chart page →

2,292
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
python3@3.12.7-r0
3.12.11-r0

Open the chart page →

5,825
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
python3@3.12.8-r1
3.12.11-r0

Open the chart page →

959
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.7

Open the chart page →

15,077
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
python3@3.12.3-r1
3.12.11-r0

Open the chart page →

25,626
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
python3@3.12.7-r0
3.12.11-r0

Open the chart page →

1,337
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
python3@3.11.9-r0
3.11.13-r0

Open the chart page →

20,812
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
python3@3.11.9-r0
3.11.13-r0

Open the chart page →

4,039
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
python3@3.12.7-r0
3.12.11-r0

Open the chart page →

1,712
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
python3@3.12.9-r0
3.12.11-r0

Open the chart page →

2,817
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
python3@3.11.6-r1
3.11.13-r0

Open the chart page →

2,805
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
3.12.3-1ubuntu0.7

Open the chart page →

45,392
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2024-12718.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
python3@3.12.9-r0
3.12.11-r0

Open the chart page →

4,769

Container images carrying it

63 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
3.12.3-1ubuntu0.7
2
library/rabbitmq:3.13.6-management-alpine611107e29cce
python3@3.12.3-r1
3.12.11-r0
2
library/rabbitmq:4.1.0-management935b3f84c1e4
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.7
2
opendatacube/ows:latest668cbb41473c
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.7
2
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
python3@3.11.9-r0
3.11.13-r0
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.7
2
ghcr.io/eosc-lot-1/s3cmd:2-alpine49bce0dd876d
python3@3.11.9-r0
3.11.13-r0
2
alpine/k8s:1.32.47e1e7d5b7a96
python3@3.12.10-r0
3.12.11-r0
1
alpine/k8s:1.31.49c4976d47656
python3@3.12.8-r1
3.12.11-r0
1
alpine/k8s:1.30.0bd01dae02676
python3@3.11.9-r0
3.11.13-r0
1
alpine/k8s:1.30.2cd560fce90f7
python3@3.12.3-r1
3.12.11-r0
1
alpine/k8s:1.28.13e5c0b053fed7
python3@3.12.3-r1
3.12.11-r0
1
alpine/k8s:1.32.3eec354133193
python3@3.12.9-r0
3.12.11-r0
1
atlassian/jira-software:9.7.264a75aa4ec4e
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.7
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
python@3.11.11-0
3.9.23
1
devopstales/kubedash:3.1.08bb837da5aec
python3@3.12.10-r1
3.12.11-r0
1
dinutac/jinja2docker:2.1.89340dde8a8a4
python3@3.11.6-r1
3.11.13-r0
1
dpage/pgadmin4:8.418cd5711fc9a
python3@3.11.8-r0
3.11.13-r0
1
dpage/pgadmin4:9.252cb72a9e3da
python3@3.12.9-r0
3.12.11-r0
1
dpage/pgadmin4:8.13561c1f8f99f2
python3@3.12.7-r0
3.12.11-r0
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
python3@3.12.3-r1
3.12.11-r0
1
extrim/perlite:1.5.99cb7eb5598b6
python3@3.12.9-r0
3.12.11-r0
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
python3@3.12.6-r0
3.12.11-r0
1
grpl/grapple-cli:0.2.127c00aafee6629
python3.12@3.12.3-1ubuntu0.1
3.12.3-1ubuntu0.7
1
knspar/phronetis:0.1.4609499d2dc91a
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.7
1
leantime/leantime:3.3.3ad4bfb0699d3
python3@3.12.7-r0
3.12.11-r0
1
library/rabbitmq:3.12-management-alpine0b44fbcc3a4b
python3@3.12.7-r0
3.12.11-r0
1
librenms/librenms:24.11.00920bc9117a8
python3@3.11.10-r0
3.11.13-r0
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
python3@3.12.10-r1
3.12.11-r0
1
mauricenino/dashdot:5.9.2236997816917
python3@3.12.9-r0
3.12.11-r0
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
python3@3.12.3-r1
3.12.11-r0
1
nodered/node-red:3.0.2-18e2632a7a35dd
python3@3.11.6-r1
3.11.13-r0
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
python3@3.12.7-r0
3.12.11-r0
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
python3@3.11.9-r0
3.11.13-r0
1
photoprism/photoprism:240711-cefc6fd632ca74
python3.12@3.12.3-1
3.12.3-1ubuntu0.7
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
python3@3.11.9-r0
3.11.13-r0
1
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
python3@3.11.6-r1
3.11.13-r0
1
saidsef/scapy-containerised:v2025.02f17f7c435891
python3@3.12.9-r0
3.12.11-r0
1
supabase/storage-api:v1.12.0f983fb50bd95
python3@3.12.7-r0
3.12.11-r0
1
temporalio/admin-tools:1.26.237e2e33dbd7b
python3@3.12.6-r0
3.12.11-r0
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
python3@3.11.9-r0
3.11.13-r0
1
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
python3@3.11.9-r0
3.11.13-r0
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
python3.12@3.12.3-1ubuntu0.4
3.12.3-1ubuntu0.7
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
python3@3.12.10-r0
3.12.11-r0
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
python3@3.12.3-r1
3.12.11-r0
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
python@3.12.8-0
3.9.23
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
python3@3.12.9-r0
3.12.11-r0
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.7
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
python3.12@3.12.3-1ubuntu0.2
3.12.3-1ubuntu0.7
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
python3.12@3.12.3-1ubuntu0.3
3.12.3-1ubuntu0.7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.