CVE-2024-23337
MediumAdvisory
Published 21 May 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.004
- 37th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 203
- of 17,781 indexed, latest versions
- Container images
- 148
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 203 of 17,781 indexed charts deploy, on 148 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| jqdeb | 1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+5 more | 1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1ubuntu3.1+1 more | 147 |
| jqapk | 1.7.1-r0 | 1.8.0-r0 | 1 |
- OSV records
- ALPINE-CVE-2024-23337DEBIAN-CVE-2024-23337UBUNTU-CVE-2024-23337
- Also known as
- USN-7657-1, USN-7657-2
Charts affected
203 by stars
Container images carrying it
148 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | jq | 1.5+dfsg-1ubuntu0.1+esm3 | 11 |
| library/ | 8e70544b6c76 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 10 |
| oomk8s/ | 7daa08b81954 | jq | 1.5+dfsg-1ubuntu0.1+esm3 | 6 |
| bitnamilegacy/ | c74b703deed2 | jq | no fix listed | 5 |
| library/ | 4be76f674fc4 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 5 |
| hyperledger/ | 4ce6f43ded2e | jq | 1.5+dfsg-1ubuntu0.1+esm3 | 4 |
| library/ | 5e15a3f014ed | jq | 1.6-1ubuntu0.20.04.1+esm1 | 4 |
| library/ | 628741415fc9 | jq | 1.5+dfsg-2ubuntu0.1~esm1 | 4 |
| library/ | 6efa05203990 | jq | 1.5+dfsg-2ubuntu0.1~esm1 | 4 |
| bitnamilegacy/ | cd354d5b2556 | jq | no fix listed | 3 |
| bitnamilegacy/ | 77e65e9d633e | jq | no fix listed | 3 |
| dgraph/ | 3b55ea83fffe | jq | 1.6-1ubuntu0.20.04.1+esm1 | 3 |
| gchq/ | 5ec58edbb2db | jq | 1.7.1-3ubuntu0.24.04.1 | 3 |
| selenium/ | 02f251d48d5f | jq | 1.6-1ubuntu0.20.04.1+esm1 | 3 |
| quay.io/ | 2b6db27eaf3d | jq | 1.6-2.1ubuntu3.1 | 3 |
| apache/ | 7cdfd8deec92 | jq | 1.6-2.1ubuntu3.1 | 2 |
| library/ | 41108d183e97 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 2 |
| library/ | 58b25d51baa1 | jq | 1.5+dfsg-2ubuntu0.1~esm1 | 2 |
| 48n6e/ | a6ed886fddfc | jq | no fix listed | 1 |
| adwerx/ | 840d2b078682 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| agentarea/ | d3c209a5d531 | jq | no fix listed | 1 |
| airbyte/ | 98d2c39d512e | jq | no fix listed | 1 |
| apache/ | 63b8e3e40742 | jq | 1.6-2.1ubuntu3.1 | 1 |
| aristidetm/ | 469dbc951224 | jq | no fix listed | 1 |
| assistiot/ | d157fbe150e3 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| bitnamilegacy/ | 1249fc292e84 | jq | no fix listed | 1 |
| bitnamilegacy/ | 64614ef8290f | jq | no fix listed | 1 |
| bitnamilegacy/ | 744f84cf7493 | jq | no fix listed | 1 |
| bitnamilegacy/ | f5fc0d561d9e | jq | no fix listed | 1 |
| bitnamilegacy/ | 5501c419f42e | jq | no fix listed | 1 |
| bitnamilegacy/ | 6dabb4a2088c | jq | no fix listed | 1 |
| bitnamilegacy/ | 8935e75fa5d1 | jq | no fix listed | 1 |
| bitnamilegacy/ | 952f86d1116c | jq | no fix listed | 1 |
| bitnamilegacy/ | ba9f3b4b0b00 | jq | no fix listed | 1 |
| bitnamilegacy/ | c0ede65eb88e | jq | no fix listed | 1 |
| bitnamilegacy/ | cce234b4381a | jq | no fix listed | 1 |
| bitnamilegacy/ | d7cd0e172c4c | jq | no fix listed | 1 |
| bitnamilegacy/ | 17444b4b2c96 | jq | no fix listed | 1 |
| bitnamilegacy/ | 9ba5d16f9c64 | jq | no fix listed | 1 |
| bitnamilegacy/ | d24925821dd2 | jq | no fix listed | 1 |
| bitnamilegacy/ | e328cff6e450 | jq | no fix listed | 1 |
| cheveo/ | 82240f890884 | jq | 1.6-2.1ubuntu3.1 | 1 |
| circleci/ | 9bdc62f02162 | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |
| cribl/ | 762747cb6796 | jq | 1.5+dfsg-2ubuntu0.1~esm1 | 1 |
| dobtc/ | a870f7cb1105 | jq | no fix listed | 1 |
| falcosecurity/ | 7df783d5269a | jq | no fix listed | 1 |
| fluent/ | e76397ef3983 | jq | no fix listed | 1 |
| free5gmano/ | 36f806935519 | jq | 1.5+dfsg-1ubuntu0.1+esm3 | 1 |
| gradiant/ | 332031245fce | jq | 1.7.1-3ubuntu0.24.04.1 | 1 |
| haugene/ | 059216cfae4b | jq | 1.6-1ubuntu0.20.04.1+esm1 | 1 |