StackRadarChart IndexLive demo

CVE-2024-21490

High

Advisory

Published 10 Feb 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.019; 78th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 19; of 17,781 indexed, latest versions
Container images: 14; deployed by those charts
Fix available: None; affected package

angular vulnerable to super-linear runtime due to backtracking

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 14 images.

Affected package	Affected versions	Fixed in	Images
angularnpm	1.3.20, 1.5.3, 1.7.0, 1.7.8+4 more	no fix listed	14

OSV records: GHSA-4w4v-5hc9-xrr2

Charts affected

19 by stars

Chart

Latest

Affected images

Radar Score

kubernetes-loggingkubernetes-logging

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :2.10.0	485a0019e5d6	angular@1.8.2	no fix listed

Open the chart page →

10,530

kongakonga

1 of 1 See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	angular@1.7.9	no fix listed

Open the chart page →

5,209

siemassist-iot-cybersecurity-monitroting-siem

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-kbn :latest	2297b4350211	angular@1.8.2	no fix listed

Open the chart page →

10,730

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	angular@1.7.9	no fix listed

Open the chart page →

18,277

opendistro-esbeeinventor

1 of 3 See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	angular@1.8.0	no fix listed

Open the chart page →

5,806

registry-uibryanalves

1 of 1 See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
konradkleine/docker-registry-frontend :v2	181aad54ee64	angular@1.3.20	no fix listed

Open the chart page →

4,069

otbrcharts-derwitt-dev

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	angular@1.8.3	no fix listed

Open the chart page →

12,779

kongacreate-databases

1 of 1 See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
pantsel/konga :latest	c8172b75607d	angular@1.7.9	no fix listed

Open the chart page →

5,209

wazuhcsic-charts

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
wazuh/wazuh-dashboard :4.4.1	1787550d2358	angular@1.8.2	no fix listed

Open the chart page →

13,852

openemrgeek-cookbook

1 of 1 See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
openemr/openemr :6.1.0	89eaa6d9a4e3	angular@1.8.2	no fix listed

Open the chart page →

8,392

Governify-Bluejaygovernify

1 of 12 See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
governify/render :v2.2.0	daeca1ce28e6	angular@1.7.0	no fix listed

Open the chart page →

22,512

Governify-Falcongovernify

1 of 10 See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
governify/render :v2.2.0	daeca1ce28e6	angular@1.7.0	no fix listed

Open the chart page →

24,319

cdashkitware

1 of 3 See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
kitware/cdash :v5.3.0	d7767d9b9da4	angular@1.8.3	no fix listed

Open the chart page →

12,062

opendistro-eslsst-sqre

1 of 3 See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	angular@1.7.8	no fix listed

Open the chart page →

7,929

aws-api-gateway-operatormintel

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	angular@1.8.0	no fix listed

Open the chart page →

10,603

standard-application-stackmintel

1 of 12 See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	angular@1.8.0	no fix listed

Open the chart page →

10,603

1 of 1 See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	angular@1.3.20	no fix listed

Open the chart page →

3,827

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	angular@1.5.3	no fix listed

Open the chart page →

4,017

opendistro-eswitcom-gmbh

1 of 3 See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2024-21490.

Container image	Digest	Package	Fixed in
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	angular@1.8.0	no fix listed

Open the chart page →

5,806

Container images carrying it

14 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pantsel/konga :latest	c8172b75607d	angular@1.7.9	no fix listed	3
amazon/opendistro-for-elasticsearch-kibana :1.13.2	c740d7a89475	angular@1.8.0	no fix listed	2
governify/render :v2.2.0	daeca1ce28e6	angular@1.7.0	no fix listed	2
opensearchproject/opensearch-dashboards :1.0.0	39695180364b	angular@1.8.0	no fix listed	2
amazon/opendistro-for-elasticsearch-kibana :1.4.0	5126e2e79a1f	angular@1.7.8	no fix listed	1
assistiot/cybersecurity-monitoring_id-kbn :latest	2297b4350211	angular@1.8.2	no fix listed	1
kitware/cdash :v5.3.0	d7767d9b9da4	angular@1.8.3	no fix listed	1
konradkleine/docker-registry-frontend :v2	181aad54ee64	angular@1.3.20	no fix listed	1
openemr/openemr :6.1.0	89eaa6d9a4e3	angular@1.8.2	no fix listed	1
opensearchproject/opensearch-dashboards :2.10.0	485a0019e5d6	angular@1.8.2	no fix listed	1
openthread/otbr :latest	f307f59f6432	angular@1.8.3	no fix listed	1
polonel/trudesk :1.2.6	0cf6513f6fe3	angular@1.5.3	no fix listed	1
wazuh/wazuh-dashboard :4.4.1	1787550d2358	angular@1.8.2	no fix listed	1
quay.io/t3n/dashkiosk :v2.7.8	c973e166a5dc	angular@1.3.20	no fix listed	1