StackRadar

CVE-2024-28176

Medium

Advisory

Published 7 Mar 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.021
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
53
deployed by those charts
Fix available
1 of 1
affected package

jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 53 images.

Affected packageAffected versionsFixed inImages
josenpm1.26.1, 1.27.1, 2.0.4, 2.0.5+12 more2.0.7, 4.15.553
OSV records
GHSA-hhhv-q57g-882q

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
jose@1.26.1
2.0.7

Open the chart page →

2,838
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
jose@4.15.4
4.15.5

Open the chart page →

2,789
skoonervhdirkVerified publisher0.1.41 of 1See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
jose@4.14.6
4.15.5

Open the chart page →

1,341
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
jose@4.11.1
4.15.5

Open the chart page →

3,474
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
jose@2.0.5
2.0.7

Open the chart page →

22,665
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
jose@4.11.1
4.15.5

Open the chart page →

16,083
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-28176.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
jose@4.11.0
4.15.5

Open the chart page →

1,752

Container images carrying it

53 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
jose@4.15.4
4.15.5
4
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
jose@4.14.6
4.15.5
4
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
jose@2.0.6
2.0.7
3
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
jose@1.27.1
2.0.7
2
mesosphere/kommander:6.100.13917e82333a9
jose@2.0.4
2.0.7
2
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
jose@2.0.5
2.0.7
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
jose@2.0.5
2.0.7
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
jose@2.0.5
2.0.7
1
coldatom/containers-security-api:latesteae9e82da080
jose@4.11.4
4.15.5
1
davdiv/musicociel:deva85f99be882c
jose@4.15.4
4.15.5
1
documenso/documenso:v1.8.17f16a9449f18
jose@4.15.4
4.15.5
1
fanzynoodle/smeejas:0.0.15f9916c1a287
jose@2.0.5
2.0.7
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
jose@2.0.6
2.0.7
1
fiware/idm:8.3.3a1b6ed4ae84f
jose@4.13.1
4.15.5
1
glenndehaan/api-mapper:latest6ff6310683bf
jose@4.15.4
4.15.5
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
jose@2.0.5
2.0.7
1
kubebb/component-store:latestfd8ecbd73213
jose@4.14.4
4.15.5
1
kubevious/backend:1.2.22d9ba6eb46b6
jose@4.14.4
4.15.5
1
kubevious/parser:1.2.299ae7a5168c2
jose@4.14.4
4.15.5
1
kyleslugg/klusterview:latestba8c36dfdfbd
jose@4.14.4
4.15.5
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
jose@4.11.1
4.15.5
1
neoskop/papergirl:3.2.67f52b5949f03
jose@4.15.4
4.15.5
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
jose@4.14.6
4.15.5
1
pawelmalak/flame:2.1.193e7b0abb603
jose@2.0.5
2.0.7
1
pawelmalak/flame:multiarch2.3.19f88b17692a0
jose@2.0.5
2.0.7
1
plumdog/db-operator:latest0c2fa2db0357
jose@2.0.5
2.0.7
1
roadiehq/community-backstage-image:latestef355bf5b639
jose@2.0.5
2.0.7
1
solidproject/community-server:6.0.2ccc4acb7e9a1
jose@4.14.1
4.15.5
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
jose@4.11.1
4.15.5
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
jose@4.11.1
4.15.5
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
jose@4.11.1
4.15.5
1
sqlpad/sqlpad:6.7d3d2f430dffd
jose@2.0.5
2.0.7
1
temporalio/web:1.14.033cfa863d8ce
jose@2.0.5
2.0.7
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
jose@4.11.1
4.15.5
1
ymuski/skooner:latest67819ca511b5
jose@4.11.0
4.15.5
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
jose@4.15.4
4.15.5
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
jose@4.15.4
4.15.5
1
ghcr.io/ajnart/homarr:lateste103abadfb52
jose@4.15.4
4.15.5
1
ghcr.io/curium-rocks/k8s-jacoco-operator:maina558ceae6cdb
jose@4.11.1
4.15.5
1
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
jose@4.11.1
4.15.5
1
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
jose@4.11.1
4.15.5
1
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
jose@4.9.2
4.15.5
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
jose@2.0.6
2.0.7
1
ghcr.io/data-fair/metrics:0a8d40779eeae
jose@2.0.5
2.0.7
1
ghcr.io/data-fair/processings:15a9216989707
jose@2.0.6
2.0.7
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
jose@2.0.5
2.0.7
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
jose@1.26.1
2.0.7
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
jose@4.14.4
4.15.5
1
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
jose@2.0.5
2.0.7
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
jose@2.0.5
2.0.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.