StackRadar

CVE-2024-28176

Medium

Advisory

Published 7 Mar 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.021
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
53
deployed by those charts
Fix available
1 of 1
affected package

jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 53 images.

Affected packageAffected versionsFixed inImages
josenpm1.26.1, 1.27.1, 2.0.4, 2.0.5+12 more2.0.7, 4.15.553
OSV records
GHSA-hhhv-q57g-882q

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
jose@4.15.4
4.15.5

Open the chart page →

2,581
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
jose@1.27.1
2.0.7

Open the chart page →

8,213
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
jose@4.14.4
4.15.5

Open the chart page →

3,795
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
davdiv/musicociel:deva85f99be882c
jose@4.15.4
4.15.5

Open the chart page →

4,406
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
jose@4.14.1
4.15.5

Open the chart page →

1,613
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jose@2.0.6
2.0.7

Open the chart page →

10,311
kubeviouskubevious1.2.22 of 7See more

kubevious kubevious 1.2.2

2 of the 7 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
jose@4.14.4
4.15.5
kubevious/parser:1.2.299ae7a5168c2
jose@4.14.4
4.15.5

Open the chart page →

14,204
skoonerchristianhuthVerified publisher0.4.01 of 1See more

skooner christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
jose@4.14.6
4.15.5

Open the chart page →

1,341
data-fairdata354-helmVerified publisher1.1.24 of 12See more

data-fair data354-helm 1.1.2

4 of the 12 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
jose@2.0.6
2.0.7
ghcr.io/data-fair/metrics:0a8d40779eeae
jose@2.0.5
2.0.7
ghcr.io/data-fair/processings:15a9216989707
jose@2.0.6
2.0.7
ghcr.io/data-fair/simple-directory:438a4f32fad82
jose@2.0.5
2.0.7

Open the chart page →

38,346
open-api-discoveryopen-api-discoveryVerified publisher0.1.11 of 1See more

open-api-discovery open-api-discovery 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
lukasreining/open-api-schema-collector:0.1.050e021c42e33
jose@4.11.1
4.15.5

Open the chart page →

2,473
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
jose@2.0.5
2.0.7

Open the chart page →

2,449
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
jose@2.0.5
2.0.7
assistiot/smart-orchestrator_enabler:latest89f37e88c871
jose@2.0.5
2.0.7
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
jose@2.0.5
2.0.7

Open the chart page →

45,363
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jose@4.15.4
4.15.5

Open the chart page →

1,722
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jose@4.15.4
4.15.5

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jose@4.15.4
4.15.5

Open the chart page →

1,722
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
coldatom/containers-security-api:latesteae9e82da080
jose@4.11.4
4.15.5

Open the chart page →

9,146
db-operatordb-operatorVerified publisher0.1.01 of 1See more

db-operator db-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
plumdog/db-operator:latest0c2fa2db0357
jose@2.0.5
2.0.7

Open the chart page →

3,042
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
jose@4.15.4
4.15.5

Open the chart page →

2,862
smeejasfanzynoodle0.0.11 of 1See more

smeejas fanzynoodle 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
fanzynoodle/smeejas:0.0.15f9916c1a287
jose@2.0.5
2.0.7

Open the chart page →

4,127
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
jose@2.0.6
2.0.7

Open the chart page →

64,489
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
jose@4.13.1
4.15.5

Open the chart page →

3,159
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
jose@2.0.5
2.0.7

Open the chart page →

2,172
api-mapperglenndehaanVerified publisher1.2.01 of 1See more

api-mapper glenndehaan 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
glenndehaan/api-mapper:latest6ff6310683bf
jose@4.15.4
4.15.5

Open the chart page →

1,158
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jose@2.0.6
2.0.7

Open the chart page →

2,682
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jose@2.0.6
2.0.7

Open the chart page →

2,682
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
jose@1.27.1
2.0.7

Open the chart page →

8,213
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
jose@2.0.5
2.0.7

Open the chart page →

7,232
audiobookshelfk8s-home-lab-repo2.0.11 of 1See more

audiobookshelf k8s-home-lab-repo 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
jose@4.15.4
4.15.5

Open the chart page →

2,350
k8s-jacoco-operatork8s-jacoco-operator0.4.01 of 4See more

k8s-jacoco-operator k8s-jacoco-operator 0.4.0

1 of the 4 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/k8s-jacoco-operator:maina558ceae6cdb
jose@4.11.1
4.15.5

Open the chart page →

2,437
k8s-mutating-webhookk8s-mutating-webhook0.3.01 of 2See more

k8s-mutating-webhook k8s-mutating-webhook 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
jose@4.11.1
4.15.5

Open the chart page →

2,009
k8s-validating-webhookk8s-validating-webhook0.4.01 of 2See more

k8s-validating-webhook k8s-validating-webhook 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
jose@4.11.1
4.15.5

Open the chart page →

2,009
kube-admission-controller-starterk8s-validating-webhook0.2.01 of 2See more

kube-admission-controller-starter k8s-validating-webhook 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
jose@4.9.2
4.15.5

Open the chart page →

2,166
skoonerkfirfer0.0.61 of 1See more

skooner kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
jose@4.14.6
4.15.5

Open the chart page →

1,341
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
jose@2.0.5
2.0.7

Open the chart page →

3,397
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
jose@4.14.4
4.15.5

Open the chart page →

2,178
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
jose@2.0.5
2.0.7

Open the chart page →

13,819
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
jose@4.14.4
4.15.5

Open the chart page →

9,774
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
jose@2.0.4
2.0.7

Open the chart page →

68,284
opsportalmesosphere-stable0.9.51 of 3See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
mesosphere/kommander:6.100.13917e82333a9
jose@2.0.4
2.0.7

Open the chart page →

7,027
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
jose@2.0.5
2.0.7

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
jose@2.0.5
2.0.7

Open the chart page →

8,361
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
neoskop/papergirl:3.2.67f52b5949f03
jose@4.15.4
4.15.5

Open the chart page →

6,982
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
jose@4.8.1
4.15.5

Open the chart page →

9,968
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
jose@4.14.6
4.15.5

Open the chart page →

2,969
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jose@4.15.4
4.15.5

Open the chart page →

1,722
skoonerskooner0.2.21 of 1See more

skooner skooner 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
jose@4.14.6
4.15.5

Open the chart page →

1,341
k8soketisoketi1.0.11 of 1See more

k8soketi soketi 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
jose@4.10.4
4.15.5

Open the chart page →

2,267
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
jose@4.11.1
4.15.5

Open the chart page →

14,679
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
jose@4.11.1
4.15.5

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
jose@4.11.1
4.15.5

Open the chart page →

14,221

Container images carrying it

53 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
jose@4.11.1
4.15.5
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
jose@4.8.1
4.15.5
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
jose@4.10.4
4.15.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.