StackRadar

CVE-2024-21508

Critical

Advisory

Published 11 Apr 2024In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.026
84th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
33
of 17,781 indexed, latest versions
Container images
31
deployed by those charts
Fix available
1 of 1
affected package

mysql2 Remote Code Execution (RCE) via the readCodeFor function

Carried by container images the latest versions of 33 of 17,781 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
mysql2npm2.0.1, 2.1.0, 2.2.5, 2.3.0+6 more3.9.431
OSV records
GHSA-fpw7-j2hg-69v5

Charts affected

33 by stars
ChartLatestAffected imagesRadar Score
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
mysql2@3.9.2
3.9.4

Open the chart page →

5,639
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
mysql2@2.3.0
3.9.4

Open the chart page →

2,213
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
mysql2@2.2.5
3.9.4

Open the chart page →

5,946
kubeviouskubevious1.2.24 of 7See more

kubevious kubevious 1.2.2

4 of the 7 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
mysql2@3.5.0
3.9.4
kubevious/collector:1.2.1f58226f9d84e
mysql2@3.5.0
3.9.4
kubevious/guard:1.2.19bf567704de2
mysql2@2.3.3
3.9.4
kubevious/parser:1.2.299ae7a5168c2
mysql2@3.5.0
3.9.4

Open the chart page →

14,204
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
mysql2@2.3.3
3.9.4

Open the chart page →

7,776
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
mysql2@3.6.1
3.9.4

Open the chart page →

1,636
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
mysql2@2.2.5
3.9.4

Open the chart page →

2,851
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
mysql2@2.3.3
3.9.4

Open the chart page →

4,455
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
mysql2@2.3.3
3.9.4

Open the chart page →

3,769
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.9.4

Open the chart page →

27,550
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.9.4

Open the chart page →

24,656
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.9.4

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.9.4

Open the chart page →

27,256
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
mysql2@2.3.3
3.9.4

Open the chart page →

27,096
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
mysql2@2.3.3
3.9.4

Open the chart page →

3,159
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
mysql2@3.9.1
3.9.4

Open the chart page →

9,019
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
mysql2@2.2.5
3.9.4

Open the chart page →

4,253
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
mysql2@2.2.5
3.9.4

Open the chart page →

3,397
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
mysql2@2.3.3
3.9.4

Open the chart page →

4,230
kubevious-agentkubevious1.0.41 of 1See more

kubevious-agent kubevious 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
kubevious/parser:1.0.151acf1a1f0b47
mysql2@2.3.3
3.9.4

Open the chart page →

1,927
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
mysql2@2.3.3
3.9.4

Open the chart page →

29,588
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
mysql2@2.3.3
3.9.4

Open the chart page →

9,668
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
mysql2@2.1.0
3.9.4

Open the chart page →

6,684
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
mysql2@2.2.5
3.9.4

Open the chart page →

27,465
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
mysql2@2.0.1
3.9.4

Open the chart page →

6,524
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
slagattollas/server-practica:latest6dd8ead8e2b1
mysql2@2.2.5
3.9.4

Open the chart page →

28,484
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
mysql2@3.6.5
3.9.4

Open the chart page →

6,282
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
mysql2@2.3.3
3.9.4

Open the chart page →

4,744
hedgedocschmitzis0.1.121 of 1See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.9.4

Open the chart page →

3,118
simple-db-app-chartsimple-db-app0.1.01 of 2See more

simple-db-app-chart simple-db-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.9.4

Open the chart page →

1,925
simple-db-app-chart-with-dependencysimple-db-app0.1.01 of 3See more

simple-db-app-chart-with-dependency simple-db-app 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.9.4

Open the chart page →

1,925
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
mysql2@2.3.3
3.9.4

Open the chart page →

3,576
hedgedocvista0.1.11 of 1See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-21508.

Container imageDigestPackageFixed in
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.9.4

Open the chart page →

3,118

Container images carrying it

31 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oscarsotosanchez/server:v1.06e2e1279126b
mysql2@2.2.5
3.9.4
4
htmlprogrammer2001/simple-db-app:1.0a7e0a233a9bc
mysql2@2.3.3
3.9.4
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
mysql2@2.3.3
3.9.4
2
arturisimo/server-urjc:v1.0d8dc4430531e
mysql2@2.3.3
3.9.4
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
mysql2@2.3.3
3.9.4
1
catalysm/csmm:latestf003b35f54d9
mysql2@2.3.3
3.9.4
1
cryptexlabs/authf:0.12.11189c07411d7c
mysql2@2.3.3
3.9.4
1
fiware/idm:8.3.3a1b6ed4ae84f
mysql2@2.3.3
3.9.4
1
hugohg34/server:0.0.2503e5d8960ff
mysql2@2.3.3
3.9.4
1
kubevious/backend:1.2.22d9ba6eb46b6
mysql2@3.5.0
3.9.4
1
kubevious/collector:1.2.1f58226f9d84e
mysql2@3.5.0
3.9.4
1
kubevious/guard:1.2.19bf567704de2
mysql2@2.3.3
3.9.4
1
kubevious/parser:1.0.151acf1a1f0b47
mysql2@2.3.3
3.9.4
1
kubevious/parser:1.2.299ae7a5168c2
mysql2@3.5.0
3.9.4
1
library/ghost:5.79.083f7bf209844
mysql2@3.9.1
3.9.4
1
linuxserver/codimd:latestb801bbcf6386
mysql2@2.2.5
3.9.4
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
mysql2@2.3.3
3.9.4
1
mozilla/sentencecollector:2.0.91da6ff5c4895
mysql2@2.1.0
3.9.4
1
n8nio/n8n:0.212.0a9195bc499a3
mysql2@2.3.3
3.9.4
1
n8nio/n8n:1.33.1dd171d45102a
mysql2@3.9.2
3.9.4
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
mysql2@2.3.3
3.9.4
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
mysql2@2.3.0
3.9.4
1
phntom/codimd:2.4.31b9aafbb62e6
mysql2@2.0.1
3.9.4
1
requarks/wiki:canary-2.5.2438b5865a7386c
mysql2@2.2.5
3.9.4
1
slagattollas/server-practica:latest6dd8ead8e2b1
mysql2@2.2.5
3.9.4
1
sqlpad/sqlpad:6.7d3d2f430dffd
mysql2@2.2.5
3.9.4
1
zooz/predator:1.6f491d1f7a865
mysql2@2.2.5
3.9.4
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
mysql2@2.2.5
3.9.4
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
mysql2@2.3.3
3.9.4
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
mysql2@3.6.5
3.9.4
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
mysql2@3.6.1
3.9.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.