CVE-2024-2379
MediumAdvisory
Published 27 Mar 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- 0.017
- 76th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 597
- of 17,781 indexed, latest versions
- Container images
- 594
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 597 of 17,781 indexed charts deploy, on 594 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curldeb | 7.88.1-10, 7.88.1-10+deb12u1, 7.88.1-10+deb12u4, 7.88.1-10+deb12u5+7 more | no fix listed | 408 |
| curlapk | 7.86.0-r1, 7.87.0-r0, 7.87.0-r1, 7.87.0-r2+12 more | 8.7.1-r0 | 186 |
- OSV records
- ALPINE-CVE-2024-2379DEBIAN-CVE-2024-2379
Charts affected
597 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| hatchet-stackhatchetOfficialVerified publisher | 0.18.0 | 1 of 8See more | 7,344 |
| heliconehelicone | 0.1.42 | 1 of 14See more | 24,995 |
| helixhelix | 1.4.3 | 1 of 2See more | 5,568 |
| hellohello-helm-world | 0.1.0 | 1 of 1See more | 652 |
| hello-worldhello-world-pponyVerified publisher | 0.3.0 | 1 of 1See more | 5,839 |
| helm-airportshelm-airports | 0.1.0 | 1 of 7See more | 12,696 |
| esphomehelm-chart-roeiVerified publisher | 2025.3.0 | 1 of 1See more | 6,008 |
| home-assistant-matter-hubhelm-chart-roeiVerified publisher | 3.0.2 | 1 of 1See more | 3,806 |
| logging-stackhelm-charts-alexis-carbillet | 0.1.0 | 1 of 9See more | 12,650 |
| metabasehelm-charts-nr | 0.14.4 | 1 of 1See more | 2,572 |
| supersethelm-charts-nr | 1.1.3 | 1 of 1See more | 2,305 |
| cruise-controlhelm-cruise-controlVerified publisher | 2.1.1 | 1 of 2See more | 1,453 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 9,122 |
| archiveboxhelmforgeVerified publisher | 1.1.12 | 1 of 1See more | 7,633 |
| ckanhelmforgeVerified publisher | 1.3.8 | 1 of 6See more | 9,920 |
| drupalhelmforgeVerified publisher | 1.2.13 | 1 of 2See more | 3,802 |
| jupyterhubhelmforgeVerified publisher | 1.0.6 | 1 of 3See more | 5,341 |
| medikeephelmforgeVerified publisher | 2.0.0 | 1 of 3See more | 6,022 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 1 of 4See more | 9,653 |
| moodlehelmforgeVerified publisher | 1.1.0 | 1 of 2See more | 6,103 |
| ryothelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 6,012 |
| supersethelmforgeVerified publisher | 1.3.6 | 1 of 5See more | 5,714 |
| text-embeddings-inferencehelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 2,541 |
| uptime-kumahelmforgeVerified publisher | 1.5.12 | 1 of 1See more | 30,099 |
| myapphelmingapp | 0.1.0 | 1 of 1See more | 12,607 |
| openaevhelm-openbasVerified publisher | 2.0.5 | 1 of 7See more | 7,437 |
| openbashelm-openbasVerified publisher | 1.8.14 | 2 of 7See more | 25,017 |
| steampipehelm-steampipeVerified publisher | 2.4.1 | 1 of 1See more | 3,124 |
| samplehelmapphelmtraining | 3.0.0 | 1 of 1See more | 5,973 |
| postgres-backup-localheywood8-helm-chartsVerified publisher | 0.1.13 | 1 of 1See more | 2,434 |
| printserverhmediadeVerified publisher | 1.0.2 | 1 of 4See more | 10,839 |
| home-ha-mockhome-ha-mockVerified publisher | 2.0.5 | 1 of 1See more | 3,048 |
| paperlesshomelabcihelmchartstestVerified publisher | 9.1.9 | 1 of 1See more | 16,384 |
| home-security-demohome-security-demoVerified publisher | 2.0.12 | 1 of 3See more | 3,131 |
| hydrahydraVerified publisher | 0.9.5 | 1 of 2See more | 9,011 |
| isolated-vmhydraVerified publisher | 0.9.4 | 1 of 1See more | 7,733 |
| activation-servicei4trustVerified publisher | 2.3.1 | 1 of 1See more | 2,058 |
| ibexaibexaVerified publisher | 3.11.1 | 1 of 10See more | 5,959 |
| ibm-ucv-prodibm-helm | 5.2.6 | 1 of 16See more | 12,105 |
| ilum-unity-catalogilumVerified publisher | 0.1.0 | 1 of 4See more | 11,812 |
| healthchecksimprowisedVerified publisher | 1.1.1 | 1 of 2See more | 2,628 |
| influxdb-enterpriseinfluxdata | 0.2.1 | 2 of 2See more | 5,939 |
| influxdbinfluxdb2 | 0.1.0 | 1 of 1See more | 2,333 |
| intelowlintelowl-helm | 6.6.1-01-06-2026 | 1 of 5See more | 17,852 |
| daveit-at-mOfficialVerified publisher | 0.2.15 | 1 of 11See more | 15,089 |
| opencloudjacobcolvinVerified publisher | 0.2.3 | 6 of 13See more | 45,239 |
| koptimizejaconiVerified publisher | 0.5.4 | 1 of 2See more | 5,713 |
| deconzjanip81-helm-chartsVerified publisher | 0.1.1 | 1 of 1See more | 10,780 |
| jasperjasperVerified publisher | 1.0.202 | 1 of 2See more | 5,998 |
| esphomejeffrescVerified publisher | 0.2.2 | 1 of 1See more | 5,040 |
Container images carrying it
594 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 76d28575b71c | curl | no fix listed | 7 |
| bitnamilegacy/ | 9e635efba431 | curl | no fix listed | 6 |
| quay.io/ | 95d6f0e05636 | curl | no fix listed | 6 |
| bitnamilegacy/ | c74b703deed2 | curl | no fix listed | 5 |
| flaresolverr/ | 139dfee1c6f8 | curl | no fix listed | 5 |
| natsio/ | a67913df95f1 | curl | 8.7.1-r0 | 5 |
| ghcr.io/ | b72cf734d85f | curl | 8.7.1-r0 | 5 |
| bitnamilegacy/ | fac502149c40 | curl | no fix listed | 4 |
| library/ | 287ff321f9e3 | curl | no fix listed | 4 |
| apache/ | 16b50bbef664 | curl | no fix listed | 3 |
| bitnamilegacy/ | cd354d5b2556 | curl | no fix listed | 3 |
| bitnamilegacy/ | 77e65e9d633e | curl | no fix listed | 3 |
| dnationcloud/ | 78fed4f3c130 | curl | no fix listed | 3 |
| grafana/ | 0dc5a246ab16 | curl | 8.7.1-r0 | 3 |
| library/ | 516475cc129d | curl | 8.7.1-r0 | 3 |
| library/ | a484819eb602 | curl | no fix listed | 3 |
| library/ | be23f54a88d3 | curl | no fix listed | 3 |
| nginxinc/ | be76a26e238d | curl | 8.7.1-r0 | 3 |
| pnnlmiscscripts/ | 9a2fe06a1472 | curl | 8.7.1-r0 | 3 |
| rcdelacruz/ | 38007f358355 | curl | 8.7.1-r0 | 3 |
| rss3/ | d1d2ae6efd05 | curl | 8.7.1-r0 | 3 |
| ghcr.io/ | 6a5594b7b32c | curl | no fix listed | 3 |
| quay.io/ | 6545dac92173 | curl | no fix listed | 3 |
| quay.io/ | 709c7da19c5a | curl | no fix listed | 3 |
| quay.io/ | fd916f75415f | curl | 8.7.1-r0 | 3 |
| registry.k8s.io/ | e5c4824e7375 | curl | 8.7.1-r0 | 3 |
| agoldis/ | e061e5714238 | curl | 8.7.1-r0 | 2 |
| bitnamilegacy/ | 00176a47afa0 | curl | no fix listed | 2 |
| bitnamilegacy/ | f12387ec882b | curl | no fix listed | 2 |
| cfssl/ | c9018c2ddf0b | curl | no fix listed | 2 |
| chatwoot/ | d530ab8c1753 | curl | 8.7.1-r0 | 2 |
| cs3org/ | 02a9e78757b4 | curl | 8.7.1-r0 | 2 |
| daniacobext/ | 9eae4d39fc33 | curl | 8.7.1-r0 | 2 |
| dtzar/ | 55429449408e | curl | 8.7.1-r0 | 2 |
| ethersphere/ | 0558799ca992 | curl | 8.7.1-r0 | 2 |
| gjeanmart/ | 926264c8f2d1 | curl | no fix listed | 2 |
| grafana/ | 079600c9517b | curl | 8.7.1-r0 | 2 |
| jenkins/ | b470bcdc4ecd | curl | no fix listed | 2 |
| krtk6160/ | cc82a694f818 | curl | 8.7.1-r0 | 2 |
| lachlanevenson/ | af5cea3f2e40 | curl | 8.7.1-r0 | 2 |
| library/ | 44a366dd7724 | curl | 8.7.1-r0 | 2 |
| library/ | b8d940ca9376 | curl | no fix listed | 2 |
| library/ | 77e5d4a6ad90 | curl | 8.7.1-r0 | 2 |
| library/ | 98f8ec75657d | curl | no fix listed | 2 |
| library/ | 6e75aa8f767c | curl | no fix listed | 2 |
| library/ | eedf63967cdb | curl | no fix listed | 2 |
| louislam/ | 917318f9d7be | curl | no fix listed | 2 |
| louislam/ | 9aeb4e51d038 | curl | no fix listed | 2 |
| louislam/ | a8610b3b4c38 | curl | no fix listed | 2 |
| metabase/ | 1fb334ce4820 | curl | 8.7.1-r0 | 2 |