StackRadar

CVE-2024-2004

Low

Advisory

Published 27 Mar 2024In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.5
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
289
of 17,781 indexed, latest versions
Container images
270
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 289 of 17,781 indexed charts deploy, on 270 images.

Affected packageAffected versionsFixed inImages
curlapk7.86.0-r1, 7.87.0-r0, 7.87.0-r1, 7.87.0-r2+12 more8.7.1-r0186
curldeb7.88.1-10, 7.88.1-10+deb12u1, 7.88.1-10+deb12u4, 7.88.1-10+deb12u57.88.1-10+deb12u684
OSV records
ALPINE-CVE-2024-2004DEBIAN-CVE-2024-2004

Charts affected

289 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6

Open the chart page →

11,367
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

2,103
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u6

Open the chart page →

4,802
vertical-pod-autoscalercowboysysopVerified publisher11.1.11 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6

Open the chart page →

6,927
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

6,041
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6

Open the chart page →

8,493
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
curl@8.1.2-r0
8.7.1-r0

Open the chart page →

4,167
quickwitquickwit0.8.161 of 1See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6

Open the chart page →

3,480
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
curl@8.1.1-r1
8.7.1-r0

Open the chart page →

4,285
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
curl@7.87.0-r1
8.7.1-r0

Open the chart page →

2,572
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u6

Open the chart page →

32,902
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
temporalio/server:1.22.4c0a44c26397b
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

14,893
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
openmined/syft-seaweedfs:0.9.53a4144c0bb82
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

17,245
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
curl@8.1.2-r0
8.7.1-r0

Open the chart page →

2,344
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
curl@8.1.2-r0
8.7.1-r0

Open the chart page →

2,709
servarrservarr1.0.24 of 10See more

servarr servarr 1.0.2

4 of the 10 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
curl@8.5.0-r0
8.7.1-r0
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
curl@8.5.0-r0
8.7.1-r0
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
curl@8.5.0-r0
8.7.1-r0
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

14,238
uffizzi-controlleruffizzi-controller2.4.62 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

14,240
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:4.6.1fd916f75415f
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

14,094
lndfold0.3.151 of 4See more

lnd fold 0.3.15

1 of the 4 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
curl@8.3.0-r0
8.7.1-r0

Open the chart page →

8,835
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
alpine/curl:8.5.0513c4f0d7123
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

13,953
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

1,660
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u6

Open the chart page →

96,941
openspeedtestspeedtestVerified publisher0.1.21 of 1See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
openspeedtest/latest:v2.0.0d4d62f4b7d85
curl@8.1.2-r0
8.7.1-r0

Open the chart page →

2,040
uffizzi-appuffizzi-app1.3.02 of 14See more

uffizzi-app uffizzi-app 1.3.0

2 of the 14 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

19,337
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u6

Open the chart page →

9,746
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6

Open the chart page →

4,180
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

24,700
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
curl@8.2.1-r0
8.7.1-r0

Open the chart page →

3,675
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

17,693
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
curl@8.0.1-r0
8.7.1-r0

Open the chart page →

107,811
smockerandrcunsVerified publisher0.0.41 of 1See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
andrcuns/smocker:0.18.5b4a8eb20581a
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

2,173
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
ddosify/selfhosted_frontend:4.1.5bf454ab99d89
curl@8.5.0-r0
8.7.1-r0
library/influxdb:2.6.1-alpine44a366dd7724
curl@7.88.1-r1
8.7.1-r0
library/nginx:1.25.5-alpine516475cc129d
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

22,202
swaggeruichrisfuVerified publisher0.3.71 of 1See more

swaggerui chrisfu 0.3.7

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v5.6.2342808e22de4
curl@8.2.1-r0
8.7.1-r0

Open the chart page →

1,309
commonground-gatewaycommonground-gateway1.5.42 of 7See more

commonground-gateway commonground-gateway 1.5.4

2 of the 7 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
curl@8.5.0-r0
8.7.1-r0
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
curl@7.88.1-10
7.88.1-10+deb12u6

Open the chart page →

9,724
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

1,944
tasmo-admincrystalnetVerified publisher3.0.111 of 1See more

tasmo-admin crystalnet 3.0.11

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

891
dao-2048dao-20481.4.11 of 1See more

dao-2048 dao-2048 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
curl@7.87.0-r1
8.7.1-r0

Open the chart page →

1,883
data-fairdata354-helmVerified publisher1.1.23 of 12See more

data-fair data354-helm 1.1.2

3 of the 12 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
curl@8.5.0-r0
8.7.1-r0
ghcr.io/data-fair/metrics:0a8d40779eeae
curl@8.1.2-r0
8.7.1-r0
ghcr.io/data-fair/processings:15a9216989707
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

38,346
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
curl@7.87.0-r1
8.7.1-r0

Open the chart page →

5,598
jumpdjjudas21Verified publisher0.1.71 of 1See more

jump djjudas21 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
daledavies/jump:v1.4.10a0c8ad93902
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

728
dragonfly-stackdragonflyVerified publisher0.1.23 of 7See more

dragonfly-stack dragonfly 0.1.2

3 of the 7 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
dragonflyoss/manager:v2.1.49c3ef7f10698d
curl@8.5.0-r0
8.7.1-r0
dragonflyoss/scheduler:v2.1.49523785c77787
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

18,376
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
curl@7.86.0-r1
8.7.1-r0

Open the chart page →

4,614
event-exporterevent-exporterVerified publisher0.1.171 of 1See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
kubestar/event-exporter:latest656606941255
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

1,210
atlas-cmmsf3k-techVerified publisher0.151.52 of 4See more

atlas-cmms f3k-tech 0.151.5

2 of the 4 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-frontend:v1.5.12409c2a00ab6
curl@8.5.0-r0
8.7.1-r0
lachlanevenson/k8s-kubectl:v1.22.1638b7962cd016
curl@7.86.0-r1
8.7.1-r0

Open the chart page →

5,291
featurehubfeaturehub4.1.61 of 7See more

featurehub featurehub 4.1.6

1 of the 7 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

8,240
fedodo.chartfedodo0.5.112 of 4See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
fedodo/fedodo.ui.home:3c69413c4d690
curl@8.1.2-r0
8.7.1-r0
fedodo/fedodo.ui.micro:12b2b540081c21
curl@8.1.2-r0
8.7.1-r0

Open the chart page →

4,399
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
taigaio/taiga-front:latest570c8792ce80
curl@7.88.1-r1
8.7.1-r0

Open the chart page →

8,496
organizrgeek-cookbookVerified publisher7.4.21 of 1See more

organizr geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
organizr/organizr:latest1ce319d73cdf
curl@8.4.0-r0
8.7.1-r0

Open the chart page →

1,533
temporalglasskubeVerified publisher0.45.2-gk.14 of 14See more

temporal glasskube 0.45.2-gk.1

4 of the 14 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
curl@8.5.0-r0
8.7.1-r0
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
curl@8.5.0-r0
8.7.1-r0
temporalio/server:1.25.08a5798191dea
curl@8.5.0-r0
8.7.1-r0
temporalio/ui:2.30.25c2a3645d09c
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

16,346
mysql-checkkfirfer0.3.01 of 1See more

mysql-check kfirfer 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-2004.

Container imageDigestPackageFixed in
kfirfer/mysql-client:0.0.4d23d173f333f
curl@8.5.0-r0
8.7.1-r0

Open the chart page →

785

Container images carrying it

270 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/puckpuck/seashell:1.2ef5e31333821
curl@8.3.0-r0
8.7.1-r0
1
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
curl@8.5.0-r0
8.7.1-r0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u6
1
ghcr.io/vshn/stardog-userrole-operator:v0.3.04774237c9e86
curl@8.5.0-r0
8.7.1-r0
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u6
1
ghcr.io/zazuko/blueprint:v0.1.092ac2f97978e
curl@8.5.0-r0
8.7.1-r0
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u6
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
curl@7.88.1-10+deb12u5
7.88.1-10+deb12u6
1
quay.io/fairwinds/docker-demo:1.4.0d53cb940196c
curl@8.1.0-r0
8.7.1-r0
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
curl@8.0.1-r0
8.7.1-r0
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u6
1
quay.io/yushiwho/sys-stats:e1f9d778c8d08b95c0b
curl@8.5.0-r0
8.7.1-r0
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u6
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
curl@7.87.0-r1
8.7.1-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
curl@8.5.0-r0
8.7.1-r0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
curl@8.1.1-r1
8.7.1-r0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
curl@7.88.1-r1
8.7.1-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
curl@8.5.0-r0
8.7.1-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.