StackRadarChart IndexLive demo

CVE-2024-21529

High

Advisory

Published 11 Sept 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.008; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 13; of 17,781 indexed, latest versions
Container images: 10; deployed by those charts
Fix available: 1 of 1; affected package

dset Prototype Pollution vulnerability

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 10 images.

Affected package	Affected versions	Fixed in	Images
dsetnpm	2.1.0, 3.1.2, 3.1.3	3.1.4	10

OSV records: GHSA-f6v4-cf5j-vf3w

Charts affected

13 by stars

Chart

Latest

Affected images

Radar Score

cosmocosmo-platform

1 of 10 See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	dset@3.1.3	3.1.4

Open the chart page →

28,839

hoppscotchdeliveryhero

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	dset@3.1.3	3.1.4

Open the chart page →

3,451

graphql-hivegraphql-hive

1 of 17 See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
ghcr.io/kamilkisiela/graphql-hive/app :59b64c36c866b3555c135c70de76a884e63f8619	a4a3639899f7	dset@2.1.0	3.1.4

Open the chart page →

10,311

hive-appgraphql-hive

1 of 1 See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
ghcr.io/kamilkisiela/graphql-hive/app :59b64c36c866b3555c135c70de76a884e63f8619	a4a3639899f7	dset@2.1.0	3.1.4

Open the chart page →

2,682

hive-appgraphql-hive-subcharts

1 of 1 See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
ghcr.io/kamilkisiela/graphql-hive/app :59b64c36c866b3555c135c70de76a884e63f8619	a4a3639899f7	dset@2.1.0	3.1.4

Open the chart page →

2,682

hoppscotchhelm-charts-nr

1 of 1 See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	dset@3.1.3	3.1.4

Open the chart page →

3,451

component-storekubebb

1 of 1 See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
kubebb/component-store :latest	fd8ecbd73213	dset@3.1.2	3.1.4

Open the chart page →

2,178

speckle-server-branch-hotfix-2.19.1speckle

2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of 5 See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4b6a0750d5aa	dset@3.1.2	3.1.4

Open the chart page →

16,368

speckle-server-branch-hotfix-2.20.2speckle

2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of 5 See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	52f8eabf5cea	dset@3.1.2	3.1.4

Open the chart page →

16,400

speckle-server-branch-testing1speckle

2.20.6-branch.testing1.154030-9b09114

1 of 5 See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.20.6-branch.testing1.154030-9b09114	e8413f57b327	dset@3.1.2	3.1.4

Open the chart page →

16,400

speckle-server-branch-testing4speckle

2.20.2-branch.testing4.134160-9fad4b2

1 of 5 See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.20.2-branch.testing4.134160-9fad4b2	687f43ab16f3	dset@3.1.2	3.1.4

Open the chart page →

16,019

speckle-server-branch-testing5speckle

2.21.3-branch.testing5.219631-2153bef

1 of 5 See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.21.3-branch.testing5.219631-2153bef	8fd157733393	dset@3.1.2	3.1.4

Open the chart page →

15,635

speckle-server-branch-testing6speckle

2.25.10-branch.testing6.645-b125c1e

1 of 4 See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2024-21529.

Container image	Digest	Package	Fixed in
speckle/speckle-server :2.25.10-branch.testing6.645-b125c1e	75cdf256067b	dset@3.1.2	3.1.4

Open the chart page →

11,100

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kamilkisiela/graphql-hive/app :59b64c36c866b3555c135c70de76a884e63f8619	a4a3639899f7	dset@2.1.0	3.1.4	3
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	dset@3.1.3	3.1.4	2
kubebb/component-store :latest	fd8ecbd73213	dset@3.1.2	3.1.4	1
speckle/speckle-server :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4b6a0750d5aa	dset@3.1.2	3.1.4	1
speckle/speckle-server :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	52f8eabf5cea	dset@3.1.2	3.1.4	1
speckle/speckle-server :2.20.2-branch.testing4.134160-9fad4b2	687f43ab16f3	dset@3.1.2	3.1.4	1
speckle/speckle-server :2.25.10-branch.testing6.645-b125c1e	75cdf256067b	dset@3.1.2	3.1.4	1
speckle/speckle-server :2.21.3-branch.testing5.219631-2153bef	8fd157733393	dset@3.1.2	3.1.4	1
speckle/speckle-server :2.20.6-branch.testing1.154030-9b09114	e8413f57b327	dset@3.1.2	3.1.4	1
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	dset@3.1.3	3.1.4	1