StackRadar

CVE-2024-25629

Medium

Advisory

Published 23 Feb 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
56
of 17,781 indexed, latest versions
Container images
59
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 59 images.

Affected packageAffected versionsFixed inImages
c-aresapk1.18.1-r0, 1.19.1-r0, 1.22.1-r0, 1.24.0-r0+1 more1.19.1-r1, 1.27.0-r032
c-aresdeb1.14.0-1, 1.14.0-1ubuntu0.2, 1.15.0-1ubuntu0.1, 1.15.0-1ubuntu0.4+4 more1.14.0-1ubuntu0.2+esm2, 1.15.0-1ubuntu0.5, 1.18.1-1ubuntu0.22.04.327
OSV records
ALPINE-CVE-2024-25629DEBIAN-CVE-2024-25629UBUNTU-CVE-2024-25629
Also known as
USN-6676-1

Charts affected

56 by stars
ChartLatestAffected imagesRadar Score
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-25629.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
c-ares@1.15.0-1ubuntu0.4
1.15.0-1ubuntu0.5

Open the chart page →

10,902
syncthingsvtech-public-helm-charts1.0.01 of 2See more

syncthing svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-25629.

Container imageDigestPackageFixed in
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
c-ares@1.22.1-r0
1.27.0-r0

Open the chart page →

2,336
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-25629.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
c-ares@1.24.0-r1
1.27.0-r0

Open the chart page →

2,806
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-25629.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
c-ares@1.18.1-1ubuntu0.22.04.2
1.18.1-1ubuntu0.22.04.3

Open the chart page →

13,459
pgbounceryasn77-pgbouncer0.0.81 of 1See more

pgbouncer yasn77-pgbouncer 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-25629.

Container imageDigestPackageFixed in
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
c-ares@1.18.1-r0
1.19.1-r1

Open the chart page →

1,152
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-25629.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
c-ares@1.19.1-r0
1.19.1-r1

Open the chart page →

1,589

Container images carrying it

59 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/arangodb:3.11.81e75d74954a4
c-ares@1.19.1-r0
1.19.1-r1
2
vdiogov/glpi-conteiner:latest6945f84f0058
c-ares@1.18.1-3
no fix listed
2
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
c-ares@1.22.1-r0
1.27.0-r0
2
apachepulsar/pulsar:3.1.016f9fdab3fa6
c-ares@1.18.1-1ubuntu0.22.04.2
1.18.1-1ubuntu0.22.04.3
1
bitnamilegacy/pgbouncer:1.23.192356da09704
c-ares@1.18.1-3
no fix listed
1
blockscout/blockscout:5.1.5c365a8f2dc12
c-ares@1.18.1-r0
1.19.1-r1
1
cradlepoint/pgbouncer:1.0.18f5720b0cd03
c-ares@1.14.0-1
1.14.0-1ubuntu0.2+esm2
1
deconzcommunity/deconz:2.29.2062de2362641
c-ares@1.18.1-3
no fix listed
1
dgtlmoon/sockpuppetbrowser:latestf166a963b550
c-ares@1.19.1-r0
1.19.1-r1
1
grafana/grafana:10.4.0f9811e4e687f
c-ares@1.24.0-r1
1.27.0-r0
1
hyperized/pgbouncer:v1.21.06f64ca124fb5
c-ares@1.19.1-r0
1.19.1-r1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
c-ares@1.18.1-3
no fix listed
1
kfirfer/mysql-client:0.0.4d23d173f333f
c-ares@1.22.1-r0
1.27.0-r0
1
langgenius/dify-api:1.0.0066035f93856
c-ares@1.18.1-3
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
c-ares@1.18.1-3
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.5
1
natsio/nats-box:0.14.31cc420186664
c-ares@1.24.0-r1
1.27.0-r0
1
natsio/nats-box:0.14.2e808e0644ce1
c-ares@1.22.1-r0
1.27.0-r0
1
nodered/node-red:3.0.2-18e2632a7a35dd
c-ares@1.24.0-r1
1.27.0-r0
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
c-ares@1.18.1-3
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
c-ares@1.18.1-3
no fix listed
1
openthread/otbr:latestf307f59f6432
c-ares@1.14.0-1ubuntu0.2
1.14.0-1ubuntu0.2+esm2
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
c-ares@1.14.0-1
1.14.0-1ubuntu0.2+esm2
1
owntracks/recorder:0.9.370105145f719
c-ares@1.18.1-r0
1.19.1-r1
1
punkerside/noroot:v0.0.7be20c81d6ca1
c-ares@1.18.1-r0
1.19.1-r1
1
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
c-ares@1.24.0-r0
1.27.0-r0
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
c-ares@1.18.1-3
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
c-ares@1.15.0-1ubuntu0.1
1.15.0-1ubuntu0.5
1
springhack/frpc_ingress:latest4aceb821da88
c-ares@1.18.1-r0
1.19.1-r1
1
supermq/vernemq:latest944a0be3563e
c-ares@1.24.0-r1
1.27.0-r0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
c-ares@1.15.0-1ubuntu0.4
1.15.0-1ubuntu0.5
1
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
c-ares@1.22.1-r0
1.27.0-r0
1
swaggerapi/swagger-ui:v4.15.511b20aebb92c
c-ares@1.18.1-r0
1.19.1-r1
1
swaggerapi/swagger-ui:v5.6.2342808e22de4
c-ares@1.19.1-r0
1.19.1-r1
1
swaggerapi/swagger-ui:v4.15.27ff9a86f35ff
c-ares@1.18.1-r0
1.19.1-r1
1
temporalio/server:1.25.08a5798191dea
c-ares@1.24.0-r1
1.27.0-r0
1
temporalio/ui:2.30.25c2a3645d09c
c-ares@1.24.0-r1
1.27.0-r0
1
temporalio/ui:2.33.05c586a3c8ec5
c-ares@1.24.0-r1
1.27.0-r0
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
c-ares@1.18.1-1ubuntu0.22.04.1
1.18.1-1ubuntu0.22.04.3
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
c-ares@1.18.1-1build1
1.18.1-1ubuntu0.22.04.3
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
c-ares@1.18.1-1build1
1.18.1-1ubuntu0.22.04.3
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
c-ares@1.18.1-1ubuntu0.22.04.2
1.18.1-1ubuntu0.22.04.3
1
wiktorn/overpass-api:latest9bb5f4a9b54c
c-ares@1.18.1-3
no fix listed
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
c-ares@1.19.1-r0
1.19.1-r1
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
c-ares@1.18.1-3
no fix listed
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
c-ares@1.24.0-r1
1.27.0-r0
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
c-ares@1.22.1-r0
1.27.0-r0
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
c-ares@1.24.0-r1
1.27.0-r0
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
c-ares@1.24.0-r1
1.27.0-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
c-ares@1.18.1-3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.