StackRadar

CVE-2024-21907

High

Advisory

Published 22 Jun 2022In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.329
98th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
21
deployed by those charts
Fix available
1 of 1
affected package

Improper Handling of Exceptional Conditions in Newtonsoft.Json

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 21 images.

Affected packageAffected versionsFixed inImages
Newtonsoft.Jsonnuget9.0.1, 10.0.2, 10.0.3, 11.0.2+3 more13.0.121
OSV records
GHSA-5crp-9r3c-p9vr

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
Newtonsoft.Json@12.0.3
13.0.1

Open the chart page →

7,880
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
Newtonsoft.Json@11.0.2
13.0.1

Open the chart page →

13,635
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
Newtonsoft.Json@11.0.2
13.0.1

Open the chart page →

6,940
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
Newtonsoft.Json@12.0.3
13.0.1

Open the chart page →

6,810
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
testhubio/testhub-api:on-prem56badee134b9
Newtonsoft.Json@12.0.2
13.0.1

Open the chart page →

7,517
automatedconfigurationassist-iot-automated-configuration1.0.01 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
eventstore/eventstore:20.10.2-buster-slimc82d2479f468
Newtonsoft.Json@11.0.2
13.0.1

Open the chart page →

14,728
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
Newtonsoft.Json@12.0.1
13.0.1

Open the chart page →

10,776
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
Newtonsoft.Json@9.0.1
13.0.1

Open the chart page →

10,541
kafkamagicdysnixVerified publisher0.2.31 of 1See more

kafkamagic dysnix 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
Newtonsoft.Json@12.0.3
13.0.1

Open the chart page →

1,906
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
simpleidserver/faaskubernetes:0.0.49007e742dd48
Newtonsoft.Json@11.0.2
13.0.1

Open the chart page →

7,617
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
Newtonsoft.Json@12.0.3
13.0.1

Open the chart page →

14,283
nbxplorerkronkltdVerified publisher0.1.51 of 2See more

nbxplorer kronkltd 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
Newtonsoft.Json@12.0.2
13.0.1

Open the chart page →

1,669
myweatherhelmmyweather1.3.112 of 7See more

myweatherhelm myweather 1.3.11

2 of the 7 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingservice:1.3.11203ee6853a27
Newtonsoft.Json@11.0.2
13.0.1
hecrom/myweatherservice:1.3.11c502a4b758f0
Newtonsoft.Json@11.0.2
13.0.1

Open the chart page →

17,929
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
Newtonsoft.Json@10.0.3
13.0.1

Open the chart page →

55,726
bagetsimcube1.0.51 of 1See more

baget simcube 1.0.5

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
Newtonsoft.Json@9.0.1
13.0.1

Open the chart page →

1,687
dotstatsuitestatcan0.2.82 of 6See more

dotstatsuite statcan 0.2.8

2 of the 6 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
Newtonsoft.Json@12.0.2
13.0.1
siscc/dotstatsuite-core-sdmxri-nsi:master00d73f06edcf
Newtonsoft.Json@11.0.2
13.0.1

Open the chart page →

3,841
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Newtonsoft.Json@9.0.1
13.0.1

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Newtonsoft.Json@9.0.1
13.0.1

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Newtonsoft.Json@9.0.1
13.0.1

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Newtonsoft.Json@9.0.1
13.0.1

Open the chart page →

3,329
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
Newtonsoft.Json@10.0.2
13.0.1

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
Newtonsoft.Json@10.0.2
13.0.1

Open the chart page →

9,130
webencryptorwebencryptor1.1.01 of 1See more

webencryptor webencryptor 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-21907.

Container imageDigestPackageFixed in
beubi/webencryptor:latesta02c2e200920
Newtonsoft.Json@11.0.2
13.0.1

Open the chart page →

1,968

Container images carrying it

21 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Newtonsoft.Json@9.0.1
13.0.1
4
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
Newtonsoft.Json@10.0.2
13.0.1
2
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
Newtonsoft.Json@11.0.2
13.0.1
1
beubi/webencryptor:latesta02c2e200920
Newtonsoft.Json@11.0.2
13.0.1
1
craigwillis/c2metadata-bd:latestae317d7e4724
Newtonsoft.Json@10.0.3
13.0.1
1
datalust/seq:5.0.832-pre9c731bb207a6
Newtonsoft.Json@9.0.1
13.0.1
1
digitsy/kafka-magic:2.0.3.4f91d7f56b55d
Newtonsoft.Json@12.0.3
13.0.1
1
eventstore/eventstore:20.10.2-buster-slimc82d2479f468
Newtonsoft.Json@11.0.2
13.0.1
1
hecrom/myweatherprocessingservice:1.3.11203ee6853a27
Newtonsoft.Json@11.0.2
13.0.1
1
hecrom/myweatherservice:1.3.11c502a4b758f0
Newtonsoft.Json@11.0.2
13.0.1
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
Newtonsoft.Json@11.0.2
13.0.1
1
linuxserver/jellyfin:10.7.72427dde159a2
Newtonsoft.Json@12.0.3
13.0.1
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
Newtonsoft.Json@12.0.1
13.0.1
1
loicsharma/baget:0b46f0ec87216e1dc6839277712ee07c1c2b611aa880c78ae80b
Newtonsoft.Json@9.0.1
13.0.1
1
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
Newtonsoft.Json@12.0.2
13.0.1
1
openproject/community:12.0.2734743d11094
Newtonsoft.Json@12.0.3
13.0.1
1
simpleidserver/faaskubernetes:0.0.49007e742dd48
Newtonsoft.Json@11.0.2
13.0.1
1
siscc/dotstatsuite-core-auth-management:9a653e82bb1e9a45b6fa
Newtonsoft.Json@12.0.2
13.0.1
1
siscc/dotstatsuite-core-sdmxri-nsi:master00d73f06edcf
Newtonsoft.Json@11.0.2
13.0.1
1
testhubio/testhub-api:on-prem56badee134b9
Newtonsoft.Json@12.0.2
13.0.1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
Newtonsoft.Json@12.0.3
13.0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.