StackRadar

CVE-2024-27282

Medium

Advisory

Published 14 May 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.6
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
6
of 17,781 indexed, latest versions
Container images
10
deployed by those charts
Fix available
3 of 4
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 6 of 17,781 indexed charts deploy, on 10 images.

Affected packageAffected versionsFixed inImages
ruby2.7deb2.7.0-5ubuntu1.4, 2.7.0-5ubuntu1.5, 2.7.0-5ubuntu1.82.7.0-5ubuntu1.136
ruby2.3deb2.3.1-2~16.04.5no fix listed2
rubybitnami2.7.4-13.1.51
ruby3.0deb3.0.2-7ubuntu2.43.0.2-7ubuntu2.61
OSV records
BIT-ruby-2024-27282UBUNTU-CVE-2024-27282
Also known as
BIT-ruby-min-2024-27282, USN-6838-1, USN-7734-1

Charts affected

6 by stars
ChartLatestAffected imagesRadar Score
puppetserverpuppetserver9.5.21 of 5See more

puppetserver puppetserver 9.5.2

1 of the 5 container images this version deploys carry CVE-2024-27282.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
ruby3.0@3.0.2-7ubuntu2.4
3.0.2-7ubuntu2.6

Open the chart page →

14,184
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2024-27282.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ruby2.7@2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.13
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
ruby2.7@2.7.0-5ubuntu1.4
2.7.0-5ubuntu1.13
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
ruby2.7@2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.13
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ruby2.7@2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.13
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
ruby2.7@2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.13

Open the chart page →

113,791
yelbfairwinds-incubator0.1.11 of 5See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-27282.

Container imageDigestPackageFixed in
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
ruby@2.7.4-1
3.1.5

Open the chart page →

5,089
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2024-27282.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
ruby2.3@2.3.1-2~16.04.5
no fix listed

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2024-27282.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
ruby2.3@2.3.1-2~16.04.5
no fix listed

Open the chart page →

38,865
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-27282.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
ruby2.7@2.7.0-5ubuntu1.8
2.7.0-5ubuntu1.13

Open the chart page →

11,405

Container images carrying it

10 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
muluder/prograncontrollermcord:0.1.843b597a93da7
ruby2.3@2.3.1-2~16.04.5
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
ruby2.3@2.3.1-2~16.04.5
no fix listed
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
ruby2.7@2.7.0-5ubuntu1.8
2.7.0-5ubuntu1.13
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ruby2.7@2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.13
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
ruby2.7@2.7.0-5ubuntu1.4
2.7.0-5ubuntu1.13
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
ruby2.7@2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.13
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ruby2.7@2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.13
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
ruby2.7@2.7.0-5ubuntu1.5
2.7.0-5ubuntu1.13
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
ruby3.0@3.0.2-7ubuntu2.4
3.0.2-7ubuntu2.6
1
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
ruby@2.7.4-1
3.1.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.