StackRadar

CVE-2024-26620

High

Advisory

Published 11 Mar 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
47
of 18,219 indexed, latest versions
Container images
43
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 47 of 18,219 indexed charts deploy, on 43 images.

Affected packageAffected versionsFixed inImages
linuxdeb6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+3 more6.1.76-143
OSV records
DEBIAN-CVE-2024-26620

Charts affected

47 by stars
ChartLatestAffected imagesRadar Score
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
linux@6.1.27-1
6.1.76-1

Open the chart page →

88,003
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.76-1

Open the chart page →

119,903
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
linux@6.1.69-1
6.1.76-1

Open the chart page →

94,807
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
linux@6.1.52-1
6.1.76-1

Open the chart page →

269,860
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
linux@6.1.69-1
6.1.76-1

Open the chart page →

101,569
anchore-admission-controlleranchore-charts0.9.31 of 2See more

anchore-admission-controller anchore-charts 0.9.3

1 of the 2 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
linux@6.1.69-1
6.1.76-1

Open the chart page →

83,603
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
linux@6.1.52-1
6.1.76-1

Open the chart page →

275,366
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
linux@6.1.55-1
6.1.76-1

Open the chart page →

94,712
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.76-1

Open the chart page →

217,278
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.76-1

Open the chart page →

217,278
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.76-1

Open the chart page →

119,903
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
linux@6.1.38-4
6.1.76-1

Open the chart page →

88,652
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
linux@6.1.55-1
6.1.76-1

Open the chart page →

92,689
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
linux@6.1.69-1
6.1.76-1

Open the chart page →

196,721
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
linux@6.1.52-1
6.1.76-1

Open the chart page →

156,820
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
linux@6.1.27-1
6.1.76-1

Open the chart page →

88,003
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
linux@6.1.69-1
6.1.76-1

Open the chart page →

96,413
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
linux@6.1.55-1
6.1.76-1

Open the chart page →

314,677
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
linux@6.1.55-1
6.1.76-1

Open the chart page →

96,052
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
linux@6.1.52-1
6.1.76-1

Open the chart page →

230,017
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
linux@6.1.27-1
6.1.76-1

Open the chart page →

88,003
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
linux@6.1.27-1
6.1.76-1

Open the chart page →

91,775
servicesmicroslacVerified publisher0.4.04 of 8See more

services microslac 0.4.0

4 of the 8 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
microslac/auth:latest5c1eb1f5c64d
linux@6.1.38-4
6.1.76-1
microslac/conversations:latest1b24afcd71ff
linux@6.1.38-4
6.1.76-1
microslac/teams:latest0f75997fcbe5
linux@6.1.38-4
6.1.76-1
microslac/users:latest216ea6832a56
linux@6.1.38-4
6.1.76-1

Open the chart page →

357,905
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
linux@6.1.55-1
6.1.76-1

Open the chart page →

105,694
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
linux@6.1.55-1
6.1.76-1

Open the chart page →

110,327
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
linux@6.1.67-1
6.1.76-1

Open the chart page →

90,118
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
linux@6.1.37-1
6.1.76-1

Open the chart page →

94,923
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
linux@6.1.52-1
6.1.76-1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
linux@6.1.38-4
6.1.76-1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
linux@6.1.38-4
6.1.76-1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
linux@6.1.38-4
6.1.76-1

Open the chart page →

606,696
redisnineinfra-charts0.7.51 of 1See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
linux@6.1.67-1
6.1.76-1

Open the chart page →

80,156
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
linux@6.1.38-4
6.1.76-1

Open the chart page →

97,275
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
linux@6.1.38-4
6.1.76-1

Open the chart page →

97,353
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
linux@6.1.38-4
6.1.76-1

Open the chart page →

97,331
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
linux@6.1.69-1
6.1.76-1

Open the chart page →

88,485
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
linux@6.1.52-1
6.1.76-1

Open the chart page →

9,089
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
linux@6.1.27-1
6.1.76-1

Open the chart page →

98,860
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
linux@6.1.38-4
6.1.76-1

Open the chart page →

86,174
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.76-1

Open the chart page →

217,278
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.76-1

Open the chart page →

119,903
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
linux@6.1.27-1
6.1.76-1

Open the chart page →

105,426
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
linux@6.1.27-1
6.1.76-1

Open the chart page →

101,565
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
linux@6.1.38-4
6.1.76-1
santisbon/evworker:lateste807283f8d69
linux@6.1.38-4
6.1.76-1

Open the chart page →

176,560
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
linux@6.1.38-4
6.1.76-1

Open the chart page →

94,934
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
linux@6.1.52-1
6.1.76-1

Open the chart page →

103,596
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
linux@6.1.67-1
6.1.76-1

Open the chart page →

82,319
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
linux@6.1.69-1
6.1.76-1

Open the chart page →

95,252
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
linux@6.1.38-4
6.1.76-1

Open the chart page →

96,285
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2024-26620.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
6.1.76-1

Open the chart page →

94,339

Container images carrying it

43 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
linux@6.1.55-1
6.1.76-1
6
gjeanmart/safe-ganache-node:latest926264c8f2d1
linux@6.1.27-1
6.1.76-1
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
linux@6.1.27-1
6.1.76-1
2
library/python:3.7eedf63967cdb
linux@6.1.52-1
6.1.76-1
2
library/redis:7.2.3a7cee7c8178f
linux@6.1.67-1
6.1.76-1
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
linux@6.1.55-1
6.1.76-1
2
uffizzi/controller:latest0344805f267b
linux@6.1.69-1
6.1.76-1
2
akaunting/akaunting:3.0.1552811b36ec3a
linux@6.1.37-1
6.1.76-1
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
linux@6.1.52-1
6.1.76-1
1
avinash263/pyredis263:latestaa2b8727f1a6
linux@6.1.27-1
6.1.76-1
1
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
linux@6.1.69-1
6.1.76-1
1
domainmod/domainmod:4.23.04017bfe4c597
linux@6.1.38-4
6.1.76-1
1
firefart/requesttracker:5.0.40d6249906d8c
linux@6.1.55-1
6.1.76-1
1
gulacedia/web-dvwa-new:v367b467d961ca
linux@6.1.27-1
6.1.76-1
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
linux@6.1.52-1
6.1.76-1
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
linux@6.1.27-1
6.1.76-1
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
linux@6.1.38-4
6.1.76-1
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
linux@6.1.52-1
6.1.76-1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
linux@6.1.69-1
6.1.76-1
1
microslac/auth:latest5c1eb1f5c64d
linux@6.1.38-4
6.1.76-1
1
microslac/conversations:latest1b24afcd71ff
linux@6.1.38-4
6.1.76-1
1
microslac/teams:latest0f75997fcbe5
linux@6.1.38-4
6.1.76-1
1
microslac/users:latest216ea6832a56
linux@6.1.38-4
6.1.76-1
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
linux@6.1.55-1
6.1.76-1
1
santisbon/evwatcher:latestc4e994ca4540
linux@6.1.38-4
6.1.76-1
1
santisbon/evworker:lateste807283f8d69
linux@6.1.38-4
6.1.76-1
1
santisbon/speedtest:latest8ee3a1697227
linux@6.1.38-4
6.1.76-1
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
linux@6.1.52-1
6.1.76-1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
linux@6.1.38-4
6.1.76-1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
linux@6.1.38-4
6.1.76-1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
linux@6.1.38-4
6.1.76-1
1
theradius/loggia:0.463ba348546ec
linux@6.1.69-1
6.1.76-1
1
thongngo3301/stakefish:latesta341af5976e3
linux@6.1.52-1
6.1.76-1
1
vlebediantsev/notes-admin-front:latest007c6670ff48
linux@6.1.38-4
6.1.76-1
1
vlebediantsev/notes-project-front:latest945675fd2636
linux@6.1.38-4
6.1.76-1
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
linux@6.1.38-4
6.1.76-1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
linux@6.1.67-1
6.1.76-1
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
linux@6.1.69-1
6.1.76-1
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
linux@6.1.27-1
6.1.76-1
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
linux@6.1.55-1
6.1.76-1
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
linux@6.1.55-1
6.1.76-1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
linux@6.1.69-1
6.1.76-1
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
linux@6.1.38-4
6.1.76-1
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.