CVE-2024-23337
MediumAdvisory
Published 21 May 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.004
- 37th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 203
- of 17,781 indexed, latest versions
- Container images
- 148
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 203 of 17,781 indexed charts deploy, on 148 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jqdeb | 1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+5 more | 1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1ubuntu3.1+1 more | 147 |
| jqapk | 1.7.1-r0 | 1.8.0-r0 | 1 |
- OSV records
- ALPINE-CVE-2024-23337DEBIAN-CVE-2024-23337UBUNTU-CVE-2024-23337
- Also known as
- USN-7657-1, USN-7657-2
Charts affected
203 by stars
Container images carrying it
148 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| scholtz2/ | f12ce1cfb72e | jq | 1.6-2.1ubuntu3.1 | 1 |
| scholtz2/ | 5aaa5d4ab8b8 | jq | 1.6-2.1ubuntu3.1 | 1 |
| scholtz2/ | 64966de56d9f | jq | 1.6-2.1ubuntu3.1 | 1 |
| someblackmagic/ | 6eca64b6b440 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| supabase/ | aa1c92c0cf32 | jq | no fix listed | 1 |
| svtechnmaa/ | 6e368ace0977 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| timescale/ | a8e3322e1cf9 | jq | 1.6-2.1ubuntu3.1 | 1 |
| timescale/ | cdb9ae118899 | jq | 1.6-2.1ubuntu3.1 | 1 |
| timescale/ | e8d0a9cc3db5 | jq | 1.6-2.1ubuntu3.1 | 1 |
| timescale/ | ed719c0cd19d | jq | 1.6-2.1ubuntu3.1 | 1 |
| twentycrm/ | 2f78405a78be | jq | 1.6-2.1ubuntu3.1 | 1 |
| unitycatalog/ | 3a688197b218 | jq | no fix listed | 1 |
| vinanrra/ | f9534490bd2b | jq | 1.5+dfsg-2ubuntu0.1~esm1 | 1 |
| wiktorn/ | 9bb5f4a9b54c | jq | no fix listed | 1 |
| wolveix/ | 199be1064b18 | jq | 1.6-2.1ubuntu3.1 | 1 |
| wolveix/ | 464d11e36e10 | jq | 1.6-2.1ubuntu3.1 | 1 |
| ghcr.io/ | 744bc929a579 | jq | no fix listed | 1 |
| ghcr.io/ | 8766ba08bf1a | jq | no fix listed | 1 |
| ghcr.io/ | 1aba0ffe55ea | jq | 1.6-2.1ubuntu3.1 | 1 |
| ghcr.io/ | 6fde1edc0983 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | ca7dc7362968 | jq | no fix listed | 1 |
| ghcr.io/ | 726a947bb65b | jq | no fix listed | 1 |
| ghcr.io/ | a982103d91d3 | jq | no fix listed | 1 |
| ghcr.io/ | ebcf66281fc1 | jq | no fix listed | 1 |
| ghcr.io/ | cc4975f1a0be | jq | 1.8.0-r0 | 1 |
| ghcr.io/ | c9bd82dc5fda | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | 3a4715b46aa2 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | e5571acd10ce | jq | 1.6-2.1ubuntu3.1 | 1 |
| ghcr.io/ | ef756c7d784b | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | 61deadd1ec78 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | 4273dfaf0295 | jq | 1.6-2.1ubuntu3.1 | 1 |
| ghcr.io/ | 0eb230e2381a | jq | 1.6-2.1ubuntu3.1 | 1 |
| ghcr.io/ | 6011182e3946 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | 779858b5e11d | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | 4ed7a896dd2b | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | f52e66eff50b | jq | 1.5+dfsg-2ubuntu0.1~esm1 | 1 |
| ghcr.io/ | b5ade0d9cc6b | jq | no fix listed | 1 |
| ghcr.io/ | e6d2775e77ec | jq | 1.7.1-3ubuntu0.24.04.1 | 1 |
| ghcr.io/ | 5bc5ca66d55a | jq | no fix listed | 1 |
| ghcr.io/ | d7f93d2182fe | jq | no fix listed | 1 |
| ghcr.io/ | ff2af53897e7 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | c79b2e64a211 | jq | no fix listed | 1 |
| ghcr.io/ | ed07e7ca098d | jq | no fix listed | 1 |
| ghcr.io/ | 8bb9411e47e0 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | 26953ec68d5d | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| ghcr.io/ | d7c43c3135c6 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| quay.io/ | 351d6685dc6f | jq | 1.6-2.1ubuntu3.1 | 1 |
| quay.io/ | c6a934439421 | jq | 1.5+dfsg-1ubuntu0.1+esm3 | 1 |