StackRadar

CVE-2024-23337

Medium

Advisory

Published 21 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
203
of 17,781 indexed, latest versions
Container images
148
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 203 of 17,781 indexed charts deploy, on 148 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+5 more1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1ubuntu3.1+1 more147
jqapk1.7.1-r01.8.0-r01
OSV records
ALPINE-CVE-2024-23337DEBIAN-CVE-2024-23337UBUNTU-CVE-2024-23337
Also known as
USN-7657-1, USN-7657-2

Charts affected

203 by stars
ChartLatestAffected imagesRadar Score
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-23337.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

9,347
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-23337.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

13,459
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-23337.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

28,605

Container images carrying it

148 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
haveagitgat/tdarr_node:2.17.013ff0913202dd
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
jq@1.6-2.1
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
jordan/icinga2:latestf75025fe8ea8
jq@1.6-2.1+deb12u1
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
jq@1.6-2.1+deb12u2
no fix listed
1
library/mongo:7.0.140032d2ca20db
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
library/mongo:4.4.1305678ae4e5e1
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:3.6146c1fd999a6
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
library/mongo:5.0.32-focal3b6c281e1c08
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:4.4-bionic3d0e6df9fd5b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:5.0.14-focal50cae5081ab4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:6.0.12646902910d6a
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
library/mongo:4.2699d652ed674
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:4.2.16ca49afbcb2b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:6.0.271a63fc2438e
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:5.0.217c81758cb295
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:4.2.21-bionic9cb28f7291d9
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:7.0.12ae1cf99fa7bf
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
library/mongo:4.4.18d23ec07162ca
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:8.0.11dca8d11fe467
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
linuxserver/code-server:4.10.1a5e43a05ae79
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
linuxserver/foldingathome:7.6.219a997426d71e
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
linuxserver/plex:1.25.24a13ced2326c
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
linuxserver/unifi-controller:8.0.240ae315a3a456
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
linuxserver/unifi-controller:7.3.83ab105cc50322
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
litmuschaos/mongo:4.2.899961210d467
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
mbround18/valheim:3.1.070bd4da591cd
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
mlikiowa/napcat-docker:latest1336a777f9a4
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
jq@1.6-2.1+deb12u1
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
jq@1.6-2.1
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
jq@1.6-2.1
no fix listed
1
omecproject/openmme:master-latest64776cb9edb3
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
jq@1.6-2.1+deb12u1
no fix listed
1
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
jq@1.6-2.1+deb12u1
no fix listed
1
opencsghq/kubectl:latestb6d87e1048c2
jq@1.6-2.1
no fix listed
1
opendatacube/restcube:latest91870111837c
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
opendatacube/wms:latest1b90cdf68831
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
owncloud/server:10.15.051d9b74fc2a8
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
photoprism/photoprism:220629-jammy2954334adbda
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
photoprism/photoprism:240711-cefc6fd632ca74
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
1
project2team4/react:latest3ff031a08887
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
rezachalak/bzen-mongo:1.0.034f694325191
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
robotshop/rs-mongodb:latest119b545823cd
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ryshe/terraria:latestb1c89f7f359a
jq@1.6-2.1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.