StackRadarChart IndexLive demo

CVE-2024-25117

Medium

Advisory

Published 21 Feb 2024In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.8; base score, highest
EPSS: 0.009; 59th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 18; of 17,781 indexed, latest versions
Container images: 14; deployed by those charts
Fix available: 1 of 1; affected package

php-svg-lib lacks path validation on font through SVG inline styles

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 14 images.

Affected package	Affected versions	Fixed in	Images
phenx/php-svg-libcomposer	0.3.4, 0.4.1, 0.5.0, v0.3.3	0.5.2	14

OSV records: GHSA-f3qr-qr4x-j273

Charts affected

18 by stars

Chart

Latest

Affected images

Radar Score

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	phenx/php-svg-lib@0.4.1	0.5.2

Open the chart page →

18,509

commonground-gatewaycommonground-gateway

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	phenx/php-svg-lib@0.3.4	0.5.2

Open the chart page →

9,724

monicageek-cookbook

1 of 1 See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
library/monica :3.7.0-apache	ceb1ba4196ab	phenx/php-svg-lib@0.3.4	0.5.2

Open the chart page →

2,096

opencatalogiopencatalogi

1 of 8 See more

opencatalogi opencatalogi 1.0.6

1 of the 8 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	phenx/php-svg-lib@0.3.4	0.5.2

Open the chart page →

14,838

waardepapierenwaardepapieren

1 of 3 See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	phenx/php-svg-lib@v0.3.3	0.5.2

Open the chart page →

8,079

waardepapieren-baliewaardepapieren-balie

1 of 3 See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	phenx/php-svg-lib@v0.3.3	0.5.2

Open the chart page →

7,871

commonground-gatewaycommonground-gateway-frontend

1 of 4 See more

commonground-gateway commonground-gateway-frontend 0.1.5

1 of the 4 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	phenx/php-svg-lib@0.3.4	0.5.2

Open the chart page →

2,825

conduction-uiconduction-ui

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-php :dev	2744565516e8	phenx/php-svg-lib@v0.3.3	0.5.2

Open the chart page →

12,907

bookstackgeek-cookbook

1 of 1 See more

bookstack geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	phenx/php-svg-lib@v0.3.3	0.5.2

Open the chart page →

1,269

openemrgeek-cookbook

1 of 1 See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
openemr/openemr :6.1.0	89eaa6d9a4e3	phenx/php-svg-lib@0.3.4	0.5.2

Open the chart page →

8,392

akauntingnas-helm-charts

1 of 2 See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.0.15	52811b36ec3a	phenx/php-svg-lib@0.5.0	0.5.2

Open the chart page →

12,813

commonground-gatewayopencatalogi

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	phenx/php-svg-lib@0.3.4	0.5.2

Open the chart page →

9,724

panproto-application-nldesign

1 of 5 See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
conduction/pan-php :dev	24f03c57568f	phenx/php-svg-lib@v0.3.3	0.5.2

Open the chart page →

8,725

1 of 6 See more

shopware robjuz 2.0.0

1 of the 6 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
shyim/shopware :6.4.6.0	a951c0e6b836	phenx/php-svg-lib@0.3.4	0.5.2

Open the chart page →

2,972

bookstackschmitzis

1 of 1 See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
solidnerd/bookstack :21.12	762ffd5c51d3	phenx/php-svg-lib@v0.3.3	0.5.2

Open the chart page →

2,751

commonground-gatewayskeleton-pip

1 of 5 See more

commonground-gateway skeleton-pip 0.1.7

1 of the 5 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	phenx/php-svg-lib@0.3.4	0.5.2

Open the chart page →

2,825

icingawebsvtech-public-helm-charts

1 of 2 See more

icingaweb svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	phenx/php-svg-lib@0.5.0	0.5.2

Open the chart page →

2,038

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-25117.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	phenx/php-svg-lib@0.4.1	0.5.2

Open the chart page →

7,552

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	phenx/php-svg-lib@0.3.4	0.5.2	5
akaunting/akaunting :3.0.15	52811b36ec3a	phenx/php-svg-lib@0.5.0	0.5.2	1
conduction/conduction-ui-php :dev	2744565516e8	phenx/php-svg-lib@v0.3.3	0.5.2	1
conduction/pan-php :dev	24f03c57568f	phenx/php-svg-lib@v0.3.3	0.5.2	1
library/monica :3.7.0-apache	ceb1ba4196ab	phenx/php-svg-lib@0.3.4	0.5.2	1
openemr/openemr :6.1.0	89eaa6d9a4e3	phenx/php-svg-lib@0.3.4	0.5.2	1
shyim/shopware :6.4.6.0	a951c0e6b836	phenx/php-svg-lib@0.3.4	0.5.2	1
snipe/snipe-it :v6.0.14	55fb7636a98c	phenx/php-svg-lib@0.4.1	0.5.2	1
solidnerd/bookstack :21.12	762ffd5c51d3	phenx/php-svg-lib@v0.3.3	0.5.2	1
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	phenx/php-svg-lib@0.5.0	0.5.2	1
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	phenx/php-svg-lib@v0.3.3	0.5.2	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	phenx/php-svg-lib@v0.3.3	0.5.2	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	phenx/php-svg-lib@0.4.1	0.5.2	1
ghcr.io/linuxserver/bookstack :version-v21.12	f05447347ff1	phenx/php-svg-lib@v0.3.3	0.5.2	1