CVE-2024-27982

Medium

Advisory

Published 7 May 2024In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.012; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 20; of 17,781 indexed, latest versions
Container images: 17; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 17 images.

Affected package	Affected versions	Fixed in	Images
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 18.13.0+dfsg1-1, 18.19.0+dfsg-6~deb12u1+9 more	18.20.4+dfsg-1~deb12u1	15
nodejsapk	18.17.1-r0, 18.18.2-r0	18.20.1-r0	2

OSV records: ALPINE-CVE-2024-27982 DEBIAN-CVE-2024-27982 UBUNTU-CVE-2024-27982

Charts affected

20 by stars

Chart

Latest

Affected images

Radar Score

swaggeruichrisfu

0.3.7

1 of 1 See more

swaggerui chrisfu 0.3.7

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
swaggerapi/swagger-ui :v5.6.2	342808e22de4	nodejs@18.17.1-r0	18.20.1-r0

Open the chart page →

1,309

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	nodejs@18.20.4-1nodesource1	18.20.4+dfsg-1~deb12u1

Open the chart page →

11,458

huehue

1.0.3

1 of 3 See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
gethue/hue :latest	7d5c1b9f8a79	nodejs@24.13.1-1nodesource1	no fix listed

Open the chart page →

12,397

difykubeblocks

0.5.1

1 of 5 See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
langgenius/dify-api :0.6.11	fca918260dd6	nodejs@18.19.0+dfsg-6~deb12u1	18.20.4+dfsg-1~deb12u1

Open the chart page →

20,403

vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets

0.0.0-main

1 of 2 See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets :0.0.0-main	13e267ad7d94	nodejs@20.20.0-1nodesource1	no fix listed

Open the chart page →

4,010

youtubedl-materialyoutubedl-material

0.0.1

1 of 1 See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
tzahi12345/youtubedl-material :latest	2f943d584711	nodejs@16.14.2-deb-1nodesource1	no fix listed

Open the chart page →

9,783

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	nodejs@22.16.0-1nodesource1	no fix listed

Open the chart page →

14,352

codehubcodehub

6.2.18

1 of 5 See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
jupyterhub/jupyterhub :5.4.6	3974ba945e65	nodejs@18.19.1+dfsg-6ubuntu5	no fix listed

Open the chart page →

13,220

apachedevops

0.1.0

1 of 4 See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	nodejs@16.18.0-deb-1nodesource1	no fix listed

Open the chart page →

30,031

laraveldevops

0.10.3

1 of 4 See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	nodejs@16.18.0-deb-1nodesource1	no fix listed

Open the chart page →

29,033

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
langgenius/dify-api :1.0.0	066035f93856	nodejs@18.19.0+dfsg-6~deb12u2	18.20.4+dfsg-1~deb12u1

Open the chart page →

19,224

arbitrumdysnix

0.1.1

1 of 1 See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	nodejs@18.19.0+dfsg-6~deb12u2	18.20.4+dfsg-1~deb12u1

Open the chart page →

9,244

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	nodejs@18.13.0+dfsg1-1	18.20.4+dfsg-1~deb12u1

Open the chart page →

13,241

deconzjanip81-helm-charts

0.1.1

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	nodejs@18.19.0+dfsg-6~deb12u2	18.20.4+dfsg-1~deb12u1

Open the chart page →

10,780

k8s-dev-podk8s-dev-pod

0.3.1

1 of 1 See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	nodejs@22.16.0-1nodesource1	no fix listed

Open the chart page →

8,811

youtubedl-materialk8s-home-lab-repo

5.1.1

1 of 1 See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
tzahi12345/youtubedl-material :4.3.2	2f943d584711	nodejs@16.14.2-deb-1nodesource1	no fix listed

Open the chart page →

9,783

the0the0

0.9.8

1 of 9 See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
ghcr.io/alexanderwanyoike/the0/runtime :1.14.7	459010a02aff	nodejs@20.20.2-1nodesource1	no fix listed

Open the chart page →

7,248

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	nodejs@20.11.1-1nodesource1	no fix listed

Open the chart page →

9,347

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1	no fix listed

Open the chart page →

14,100

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-27982.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	nodejs@18.18.2-r0	18.20.1-r0

Open the chart page →

1,589

Container images carrying it

17 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	nodejs@16.14.2-deb-1nodesource1	no fix listed	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	nodejs@22.16.0-1nodesource1	no fix listed	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	nodejs@16.18.0-deb-1nodesource1	no fix listed	2
deconzcommunity/deconz :2.29.2	062de2362641	nodejs@18.19.0+dfsg-6~deb12u2	18.20.4+dfsg-1~deb12u1	1
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	nodejs@18.18.2-r0	18.20.1-r0	1
gethue/hue :latest	7d5c1b9f8a79	nodejs@24.13.1-1nodesource1	no fix listed	1
josh5/unmanic :0.2.6	4d49c4816260	nodejs@20.11.1-1nodesource1	no fix listed	1
jupyterhub/jupyterhub :5.4.6	3974ba945e65	nodejs@18.19.1+dfsg-6ubuntu5	no fix listed	1
langgenius/dify-api :1.0.0	066035f93856	nodejs@18.19.0+dfsg-6~deb12u2	18.20.4+dfsg-1~deb12u1	1
langgenius/dify-api :0.6.11	fca918260dd6	nodejs@18.19.0+dfsg-6~deb12u1	18.20.4+dfsg-1~deb12u1	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	nodejs@18.19.0+dfsg-6~deb12u2	18.20.4+dfsg-1~deb12u1	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	nodejs@18.13.0+dfsg1-1	18.20.4+dfsg-1~deb12u1	1
swaggerapi/swagger-ui :v5.6.2	342808e22de4	nodejs@18.17.1-r0	18.20.1-r0	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1	no fix listed	1
ghcr.io/alexanderwanyoike/the0/runtime :1.14.7	459010a02aff	nodejs@20.20.2-1nodesource1	no fix listed	1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets :0.0.0-main	13e267ad7d94	nodejs@20.20.0-1nodesource1	no fix listed	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	nodejs@18.20.4-1nodesource1	18.20.4+dfsg-1~deb12u1	1