StackRadar

CVE-2024-28859

Medium

Advisory

Published 18 Mar 2024In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
5.0
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
13
of 17,781 indexed, latest versions
Container images
8
deployed by those charts
Fix available
1 of 1
affected package

Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 8 images.

Affected packageAffected versionsFixed inImages
swiftmailer/swiftmailercomposerv5.4.8, v5.4.9, v5.4.12, v6.1.3+1 more6.2.58
OSV records
GHSA-wjv8-pxr6-5f4r

Charts affected

13 by stars
ChartLatestAffected imagesRadar Score
cachetdeliveryheroVerified publisher1.3.51 of 2See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
swiftmailer/swiftmailer@v5.4.9
6.2.5

Open the chart page →

1,896
cachetadnoctemVerified publisher0.3.31 of 2See more

cachet adnoctem 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
swiftmailer/swiftmailer@v5.4.9
6.2.5

Open the chart page →

1,896
polrchristianhuthVerified publisher4.3.01 of 2See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
ajanvier/polr:2.3.091ac61b88c85
swiftmailer/swiftmailer@v5.4.12
6.2.5

Open the chart page →

5,904
nextcloudcloudve1.13.01 of 2See more

nextcloud cloudve 1.13.0

1 of the 2 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
library/nextcloud:17.0.0-apache96104cb965fc
swiftmailer/swiftmailer@v6.1.3
6.2.5

Open the chart page →

3,016
mauticdevtron0.1.31 of 3See more

mautic devtron 0.1.3

1 of the 3 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
swiftmailer/swiftmailer@v5.4.9
6.2.5

Open the chart page →

2,939
mauticdevtron-labs0.1.31 of 3See more

mautic devtron-labs 0.1.3

1 of the 3 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
swiftmailer/swiftmailer@v5.4.9
6.2.5

Open the chart page →

2,939
kanboardgeek-cookbookVerified publisher5.2.01 of 1See more

kanboard geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
kanboard/kanboard:v1.2.200b6d33dbbc16
swiftmailer/swiftmailer@v5.4.8
6.2.5

Open the chart page →

1,688
cachethelm-charts-nr1.3.51 of 2See more

cachet helm-charts-nr 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
swiftmailer/swiftmailer@v5.4.9
6.2.5

Open the chart page →

1,896
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
swiftmailer/swiftmailer@v6.1.3
6.2.5

Open the chart page →

5,332
laravel-chartlaravel-application0.2.01 of 1See more

laravel-chart laravel-application 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
ibarreche/cloud-back-ci:lateste16a469c5791
swiftmailer/swiftmailer@v6.2.3
6.2.5

Open the chart page →

1,835
podcast-helmpodcastwala-helm0.1.01 of 2See more

podcast-helm podcastwala-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
shivani446/podcastwala-php:v1c0d07b7b4c8d
swiftmailer/swiftmailer@v5.4.12
6.2.5

Open the chart page →

621
mauticromholdings0.1.31 of 3See more

mautic romholdings 0.1.3

1 of the 3 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
mautic/mautic:2.13-apachea954c5868d76
swiftmailer/swiftmailer@v5.4.9
6.2.5

Open the chart page →

2,939
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28859.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
swiftmailer/swiftmailer@v5.4.9
6.2.5

Open the chart page →

1,896

Container images carrying it

8 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cachethq/docker:2.3.15a61ff0f67ea7
swiftmailer/swiftmailer@v5.4.9
6.2.5
4
mautic/mautic:2.13-apachea954c5868d76
swiftmailer/swiftmailer@v5.4.9
6.2.5
3
ajanvier/polr:2.3.091ac61b88c85
swiftmailer/swiftmailer@v5.4.12
6.2.5
1
ibarreche/cloud-back-ci:lateste16a469c5791
swiftmailer/swiftmailer@v6.2.3
6.2.5
1
kanboard/kanboard:v1.2.200b6d33dbbc16
swiftmailer/swiftmailer@v5.4.8
6.2.5
1
library/nextcloud:17.0.0-apache96104cb965fc
swiftmailer/swiftmailer@v6.1.3
6.2.5
1
shivani446/podcastwala-php:v1c0d07b7b4c8d
swiftmailer/swiftmailer@v5.4.12
6.2.5
1
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
swiftmailer/swiftmailer@v6.1.3
6.2.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.