CVE-2024-24758
MediumAdvisory
Published 16 Feb 2024In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.5
- base score, highest
- EPSS
- 0.008
- 53rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 25
- of 17,781 indexed, latest versions
- Container images
- 22
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 22 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| node-undicideb | 5.15.0+dfsg1+~cs20.10.9.3-1+deb12u1, 5.15.0+dfsg1+~cs20.10.9.3-1+deb12u3, 5.15.0+dfsg1+~cs20.10.9.3-1+deb12u4, 5.26.3+dfsg1+~cs23.10.12-2 | no fix listed | 8 |
| undicinpm | 4.15.0, 5.0.0, 5.6.0, 5.11.0+8 more | 5.28.3 | 22 |
Charts affected
25 by stars
Container images carrying it
22 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | a4a3639899f7 | undici | 5.28.3 | 3 |
| tzahi12345/ | 2f943d584711 | undici | 5.28.3 | 2 |
| cryptexlabs/ | 189c07411d7c | undici | 5.28.3 | 1 |
| deconzcommunity/ | 062de2362641 | node-undici undici | no fix listed 5.28.3 | 1 |
| ethereumoptimism/ | e07968a0e686 | undici | 5.28.3 | 1 |
| jupyterhub/ | 3974ba945e65 | node-undici undici | no fix listed 5.28.3 | 1 |
| kubebb/ | fd8ecbd73213 | undici | 5.28.3 | 1 |
| langgenius/ | 066035f93856 | node-undici undici | no fix listed 5.28.3 | 1 |
| langgenius/ | fca918260dd6 | node-undici undici | no fix listed 5.28.3 | 1 |
| library/ | 2654b1e90413 | undici | 5.28.3 | 1 |
| library/ | 83f7bf209844 | undici | 5.28.3 | 1 |
| library/ | ac533a6988ee | undici | 5.28.3 | 1 |
| offchainlabs/ | 9f779fa84b7b | node-undici undici | no fix listed 5.28.3 | 1 |
| offchainlabs/ | e95865866129 | node-undici undici | no fix listed 5.28.3 | 1 |
| polonel/ | 0cf6513f6fe3 | undici | 5.28.3 | 1 |
| sbs20/ | dad1fd6e9a98 | node-undici undici | no fix listed 5.28.3 | 1 |
| speckle/ | 49d10dcdfb91 | undici | 5.28.3 | 1 |
| vividplanet/ | ae1c5b1cbecb | undici | 5.28.3 | 1 |
| ghcr.io/ | 4ddbb244c82f | undici | 5.28.3 | 1 |
| ghcr.io/ | 8e53861be292 | node-undici undici | no fix listed 5.28.3 | 1 |
| ghcr.io/ | 0708d30433d4 | undici | 5.28.3 | 1 |
| quay.io/ | 4cd9ea9434c4 | undici | 5.28.3 | 1 |