CVE-2024-23342
HighAdvisory
Published 22 Jan 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.010
- 60th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 57
- of 17,781 indexed, latest versions
- Container images
- 62
- deployed by those charts
- Fix available
- None
- affected packages
Minerva timing attack on P-256 in python-ecdsa
Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 62 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| ecdsapypi | 0.13, 0.13.2, 0.13.3, 0.14.1+7 more | no fix listed | 62 |
| python-ecdsadeb | 0.18.0-3 | no fix listed | 1 |
- OSV records
- DEBIAN-CVE-2024-23342GHSA-wj6h-64fc-37mp
- Also known as
- PYSEC-2026-1325
Charts affected
57 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| home-assistantpascaliskeVerified publisher | 0.1.1 | 1 of 1See more | 4,749 |
| prompt-dbprompt-dbVerified publisher | 1.0.7 | 1 of 3See more | 3,332 |
| esphomeretsamedocVerified publisher | 2026.2.5 | 1 of 1See more | 7,431 |
| kresusrm3lVerified publisher | 0.2.1 | 1 of 3See more | 15,591 |
| weblateslamdev | 0.0.11 | 1 of 2See more | 8,694 |
| mealiesmarthallVerified publisher | 0.0.10 | 1 of 1See more | 5,565 |
| wazuh-manager-filebeatwazuh-manager-filebeat | 0.1.0-gamma | 1 of 1See more | 11,119 |
Container images carrying it
62 by charts deploying them
A fixed version is listed for 0 of the 2 affected packages.