StackRadarChart IndexLive demo

CVE-2024-28849

Medium

Advisory

Published 14 Mar 2024In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.010; 62nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 230; of 17,781 indexed, latest versions
Container images: 221; deployed by those charts
Fix available: 1 of 1; affected package

follow-redirects' Proxy-Authorization header kept across hosts

Carried by container images the latest versions of 230 of 17,781 indexed charts deploy, on 221 images.

Affected package	Affected versions	Fixed in	Images
follow-redirectsnpm	1.0.0, 1.2.5, 1.5.10, 1.6.1+22 more	1.15.6	221

OSV records: GHSA-cxjh-pqwp-8mfp

Charts affected

230 by stars

Chart

Latest

Affected images

Radar Score

uptime-kumasarab97

1 of 1 See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.22.1	0b55bcb83a1c	follow-redirects@1.15.2	1.15.6

Open the chart page →

4,744

unifi-protectschichtel

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	follow-redirects@1.15.1	1.15.6

Open the chart page →

5,582

hedgedocschmitzis

1 of 1 See more

hedgedoc schmitzis 0.1.12

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
quay.io/hedgedoc/hedgedoc :1.9.4	e09967519a1d	follow-redirects@1.15.1	1.15.6

Open the chart page →

3,118

dashysergiotocalini

1 of 1 See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
ghcr.io/lissy93/dashy :2.1.1	acb40032ad4b	follow-redirects@1.15.3	1.15.6

Open the chart page →

3,143

parkingsikalabs

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	follow-redirects@1.11.0	1.15.6

Open the chart page →

3,696

skoonerskooner

1 of 1 See more

skooner skooner 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
ghcr.io/skooner-k8s/skooner :stable	60c1562e4d51	follow-redirects@1.15.2	1.15.6

Open the chart page →

1,341

sneakerssneakers

1 of 4 See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
helga09/shoes_ukr :v1.1.1	7999bc8b77c0	follow-redirects@1.15.2	1.15.6

Open the chart page →

7,574

speedtest-trackersoblivionscall

1 of 1 See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
henrywhitaker3/speedtest-tracker :latest	47159a940229	follow-redirects@1.13.0	1.15.6

Open the chart page →

2,460

sorry-cypresssoftonic

1 of 4 See more

sorry-cypress softonic 1.20.0

1 of the 4 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
agoldis/sorry-cypress-director :2.5.11	10228ecd353b	follow-redirects@1.15.0	1.15.6

Open the chart page →

4,285

1 of 1 See more

k8soketi soketi 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
quay.io/soketi/k8soketi :0.1-18-debian	4cd9ea9434c4	follow-redirects@1.15.2	1.15.6

Open the chart page →

2,267

pwssoketi

1 of 1 See more

pws soketi 0.2.4

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
quay.io/soketi/pws :0.8-16-alpine	399d2e6b10ef	follow-redirects@1.14.4	1.15.6

Open the chart page →

3,228

alertmanager-to-alerta-botsomeblackmagic

1 of 1 See more

alertmanager-to-alerta-bot someblackmagic 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
someblackmagic/alertmanager-to-alerta-bot :latest	78bf43744ea5	follow-redirects@1.14.5	1.15.6

Open the chart page →

2,121

alert-mappersomeblackmagic

1 of 1 See more

alert-mapper someblackmagic 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
someblackmagic/alert-mapper :v0.1.0	88351d85c04c	follow-redirects@1.14.5	1.15.6

Open the chart page →

1,890

nordmart-reviewstakater

1 of 3 See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	follow-redirects@1.14.1	1.15.6

Open the chart page →

11,554

nordmart-review-instancestakater

1 of 3 See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	follow-redirects@1.14.1	1.15.6

Open the chart page →

11,554

fdi-dotstatsuite-dlmstatcan

1 of 1 See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
siscc/dotstatsuite-data-lifecycle-manager :v14.0.0	b6f9a7c888fc	follow-redirects@1.5.10	1.15.6

Open the chart page →

3,881

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	follow-redirects@1.14.1	1.15.6

Open the chart page →

4,017

chatqnatest-opea

1 of 11 See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	follow-redirects@1.15.5	1.15.6

Open the chart page →

39,090

redis-vector-dbtest-opea

1 of 1 See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	follow-redirects@1.15.5	1.15.6

Open the chart page →

5,604

vehicle-dashboardtest-vehi-dash

2 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
samajh/alprbackend :latest	ea742b4372ad	follow-redirects@1.15.2	1.15.6
samajh/alprfrontend :latest	05ef4fddbb75	follow-redirects@1.15.2	1.15.6

Open the chart page →

20,270

csmmth-charts

1 of 3 See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
catalysm/csmm :latest	f003b35f54d9	follow-redirects@1.14.5	1.15.6

Open the chart page →

3,576

thingsboardthingsboard

1 of 12 See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
thingsboard/tb-web-ui :3.4.1	57f98ed53b3d	follow-redirects@1.15.1	1.15.6

Open the chart page →

25,394

node-redthl-charts

1 of 1 See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
nodered/node-red :3.0.2-18	e2632a7a35dd	follow-redirects@1.15.5	1.15.6

Open the chart page →

2,806

jupyterhubuninettsigma2

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
jupyterhub/configurable-http-proxy :4.5.3	9e2c0107c7a3	follow-redirects@1.14.8	1.15.6

Open the chart page →

8,607

genievhdirk

1 of 1 See more

genie vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
stanfordoval/almond-server :latest	1a63cdccedaf	follow-redirects@1.14.6	1.15.6

Open the chart page →

3,129

1 of 1 See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
ghcr.io/skooner-k8s/skooner :stable	60c1562e4d51	follow-redirects@1.15.2	1.15.6

Open the chart page →

1,341

1 of 1 See more

hedgedoc vista 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
quay.io/hedgedoc/hedgedoc :1.9.4	e09967519a1d	follow-redirects@1.15.1	1.15.6

Open the chart page →

3,118

queryservice-gatewaywbstack

1 of 1 See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	follow-redirects@1.9.0	1.15.6

Open the chart page →

2,559

workadventureworkadventure

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	follow-redirects@1.15.2	1.15.6
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	follow-redirects@1.15.2	1.15.6
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	follow-redirects@1.15.2	1.15.6
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	follow-redirects@1.15.2	1.15.6

Open the chart page →

16,083

1 of 1 See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-28849.

Container image	Digest	Package	Fixed in
ymuski/skooner :latest	67819ca511b5	follow-redirects@1.14.8	1.15.6

Open the chart page →

1,752

Container images carrying it

221 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/m9sweeper/dash :1.6.0	2e27cdff8344	follow-redirects@1.15.5	1.15.6	1
ghcr.io/mario-f/kubevis :v1.4.0	763daf9caf8e	follow-redirects@1.14.1	1.15.6	1
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	follow-redirects@1.15.2	1.15.6	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	follow-redirects@1.15.1	1.15.6	1
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	follow-redirects@1.15.2	1.15.6	1
ghcr.io/sct/overseerr :1.26.1	254d16af8f71	follow-redirects@1.13.0	1.15.6	1
ghcr.io/sct/overseerr :1.35.0	6197516c9d7b	follow-redirects@1.15.2	1.15.6	1
ghcr.io/wbstack/queryservice-gateway :2.2	ab8e2f583e56	follow-redirects@1.9.0	1.15.6	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	follow-redirects@1.15.3	1.15.6	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	follow-redirects@1.15.3	1.15.6	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	follow-redirects@1.15.3	1.15.6	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	follow-redirects@1.14.9	1.15.6	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	follow-redirects@1.7.0	1.15.6	1
quay.io/ibmgaragecloud/slack-notifications :latest	041df93e2bac	follow-redirects@1.14.1	1.15.6	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	follow-redirects@1.14.5	1.15.6	1
quay.io/netwarps/blockscout	becd3e39360a	follow-redirects@1.14.8	1.15.6	1
quay.io/netwarps/walletconnect-relay :v2.1.3-rc.1	5d90b9c193e0	follow-redirects@1.15.1	1.15.6	1
quay.io/soketi/k8soketi :0.1-18-debian	4cd9ea9434c4	follow-redirects@1.15.2	1.15.6	1
quay.io/soketi/pws :0.8-16-alpine	399d2e6b10ef	follow-redirects@1.14.4	1.15.6	1
quay.io/soketi/soketi :1.6-16-debian	713223456cf1	follow-redirects@1.15.2	1.15.6	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	follow-redirects@1.2.5	1.15.6	1