StackRadar

CVE-2024-28863

Medium

Advisory

Published 21 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
516
of 17,787 indexed, latest versions
Container images
510
deployed by those charts
Fix available
1 of 2
affected packages

Denial of service while parsing a tar file due to lack of folders count validation

Carried by container images the latest versions of 516 of 17,787 indexed charts deploy, on 510 images.

Affected packageAffected versionsFixed inImages
tarnpm1.0.3, 2.2.1, 2.2.2, 4.0.2+18 more6.2.1510
node-tardeb4.4.10+ds1-2ubuntu1, 6.1.13+~cs7.0.5-3no fix listed3
OSV records
GHSA-f5x3-32g6-xq36UBUNTU-CVE-2024-28863

Charts affected

516 by stars
ChartLatestAffected imagesRadar Score
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
tar@6.2.0
6.2.1

Open the chart page →

49,025
hive-appgraphql-hive1.0.01 of 1See more

hive-app graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
tar@6.1.11
6.2.1

Open the chart page →

2,682
hive-emailsgraphql-hive1.0.01 of 1See more

hive-emails graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/emails:59b64c36c866b3555c135c70de76a884e63f86197d2d6d7c099a
tar@6.1.11
6.2.1

Open the chart page →

615
hive-schemagraphql-hive1.0.01 of 1See more

hive-schema graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/schema:59b64c36c866b3555c135c70de76a884e63f8619931d1f6e5ad4
tar@6.1.11
6.2.1

Open the chart page →

615
hive-servergraphql-hive1.0.01 of 1See more

hive-server graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/server:59b64c36c866b3555c135c70de76a884e63f86196d3899d281cc
tar@6.1.11
6.2.1

Open the chart page →

615
hive-storagegraphql-hive1.0.01 of 3See more

hive-storage graphql-hive 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/storage:59b64c36c866b3555c135c70de76a884e63f86199808dac13353
tar@6.1.11
6.2.1

Open the chart page →

615
hive-tokensgraphql-hive1.0.01 of 1See more

hive-tokens graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/tokens:59b64c36c866b3555c135c70de76a884e63f86190f3416d940b4
tar@6.1.11
6.2.1

Open the chart page →

615
hive-usagegraphql-hive1.0.01 of 1See more

hive-usage graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/usage:59b64c36c866b3555c135c70de76a884e63f861953619ee7614e
tar@6.1.11
6.2.1

Open the chart page →

615
hive-usage-ingestorgraphql-hive1.0.01 of 1See more

hive-usage-ingestor graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/usage-ingestor:59b64c36c866b3555c135c70de76a884e63f861947b87c071af4
tar@6.1.11
6.2.1

Open the chart page →

615
hive-webhooksgraphql-hive1.0.01 of 1See more

hive-webhooks graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/webhooks:59b64c36c866b3555c135c70de76a884e63f861918a5c5b5b671
tar@6.1.11
6.2.1

Open the chart page →

615
hive-appgraphql-hive-subcharts1.0.01 of 1See more

hive-app graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
tar@6.1.11
6.2.1

Open the chart page →

2,682
hive-emailsgraphql-hive-subcharts1.0.01 of 1See more

hive-emails graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/emails:59b64c36c866b3555c135c70de76a884e63f86197d2d6d7c099a
tar@6.1.11
6.2.1

Open the chart page →

615
hive-schemagraphql-hive-subcharts1.0.01 of 1See more

hive-schema graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/schema:59b64c36c866b3555c135c70de76a884e63f8619931d1f6e5ad4
tar@6.1.11
6.2.1

Open the chart page →

615
hive-servergraphql-hive-subcharts1.0.01 of 1See more

hive-server graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/server:59b64c36c866b3555c135c70de76a884e63f86196d3899d281cc
tar@6.1.11
6.2.1

Open the chart page →

615
hive-storagegraphql-hive-subcharts1.0.01 of 3See more

hive-storage graphql-hive-subcharts 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/storage:59b64c36c866b3555c135c70de76a884e63f86199808dac13353
tar@6.1.11
6.2.1

Open the chart page →

615
hive-tokensgraphql-hive-subcharts1.0.01 of 1See more

hive-tokens graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/tokens:59b64c36c866b3555c135c70de76a884e63f86190f3416d940b4
tar@6.1.11
6.2.1

Open the chart page →

615
hive-usagegraphql-hive-subcharts1.0.01 of 1See more

hive-usage graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/usage:59b64c36c866b3555c135c70de76a884e63f861953619ee7614e
tar@6.1.11
6.2.1

Open the chart page →

615
hive-usage-ingestorgraphql-hive-subcharts1.0.01 of 1See more

hive-usage-ingestor graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/usage-ingestor:59b64c36c866b3555c135c70de76a884e63f861947b87c071af4
tar@6.1.11
6.2.1

Open the chart page →

615
hive-webhooksgraphql-hive-subcharts1.0.01 of 1See more

hive-webhooks graphql-hive-subcharts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/webhooks:59b64c36c866b3555c135c70de76a884e63f861918a5c5b5b671
tar@6.1.11
6.2.1

Open the chart page →

615
littlelink-serverh2mVerified publisher1.0.11 of 1See more

littlelink-server h2m 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
tar@6.2.0
6.2.1

Open the chart page →

819
h2ph2pVerified publisher1.0.11 of 1See more

h2p h2p 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
dacinfomotion/h2p:latest68fa393b472c
tar@6.1.15
6.2.1

Open the chart page →

1,713
gitter-irc-bridgehalkeye0.1.11 of 1See more

gitter-irc-bridge halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
halkeye/gitter-slack-bridge:v2.0.153eb2b3cd4cb
tar@4.4.13
6.2.1

Open the chart page →

3,642
hubothalkeye0.0.11 of 1See more

hubot halkeye 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
halkeye/hubot:latest9764d2202130
tar@4.4.13
6.2.1

Open the chart page →

2,116
irslackdhalkeye0.1.01 of 1See more

irslackd halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
halkeye/irslackd:latest7638bfba70b0
tar@2.2.1
6.2.1

Open the chart page →

2,064
matrix-appservice-gitterhalkeye0.1.01 of 1See more

matrix-appservice-gitter halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
matrixdotorg/matrix-appservice-gitter:latest0d37b4d42b47
tar@4.4.13
6.2.1

Open the chart page →

3,003
theloungehalkeye4.3.11 of 1See more

thelounge halkeye 4.3.1

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
thelounge/thelounge:4.3.0-alpine0037aa258261
tar@4.4.19
6.2.1

Open the chart page →

1,938
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
tar@6.1.15
6.2.1

Open the chart page →

24,995
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
tar@6.1.11
6.2.1

Open the chart page →

10,627
zigbee2mqtthelm-chart-roeiVerified publisher1.19.01 of 1See more

zigbee2mqtt helm-chart-roei 1.19.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
tar@4.4.13
6.2.1

Open the chart page →

2,173
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
tar@2.2.2
6.2.1

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
tar@4.4.13
6.2.1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
tar@4.4.13
6.2.1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
tar@4.4.13
6.2.1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
tar@4.4.13
6.2.1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
tar@4.4.13
6.2.1

Open the chart page →

89,959
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
tar@2.2.2
6.2.1

Open the chart page →

8,213
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
tar@6.2.0
6.2.1

Open the chart page →

25,017
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
tar@4.4.19
6.2.1

Open the chart page →

4,253
http-folderhttp-folder2.0.01 of 1See more

http-folder http-folder 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
aureliengasser/http-folder:1.1.111c4318c2571
tar@4.4.13
6.2.1

Open the chart page →

1,847
crypto-watchdoghuseyinnurbaki0.1.01 of 1See more

crypto-watchdog huseyinnurbaki 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
hhaluk/crypto-watchdog:0.4.0a6555953d941
tar@4.4.13
6.2.1

Open the chart page →

2,656
ibm-app-navigatoribm-charts1.0.12 of 5See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ibmcom/app-nav-init:1.0.1240ff499eb5b
tar@4.0.2
6.2.1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
tar@4.0.2
6.2.1

Open the chart page →

32,915
ibm-business-automation-insights-devibm-charts3.2.02 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

2 of the 6 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
tar@4.4.6
6.2.1
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
tar@2.2.1
6.2.1

Open the chart page →

39,349
ibm-kerify-devibm-charts1.0.01 of 1See more

ibm-kerify-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
tar@2.2.1
6.2.1

Open the chart page →

8,221
ibm-microclimateibm-charts0.1.03 of 8See more

ibm-microclimate ibm-charts 0.1.0

3 of the 8 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
tar@2.2.1
6.2.1
ibmcom/microclimate-portal:latested5505e5c7ec
tar@4.0.2
6.2.1
ibmcom/microclimate-theia:lateste17bdccc5030
tar@2.2.1
6.2.1

Open the chart page →

57,669
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
tar@2.2.1
6.2.1

Open the chart page →

4,505
erpnextimprowisedVerified publisher3.3.02 of 3See more

erpnext improwised 3.3.0

2 of the 3 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
frappe/frappe-socketio:v13.4.12095767a9e82
tar@6.1.0
6.2.1
improwised/erpnext-worker:v13.4.197280b55cbd4
tar@4.4.13
6.2.1

Open the chart page →

6,501
indexer-chartindexer-application0.1.01 of 1See more

indexer-chart indexer-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ibarreche/cloud-indexer-ci:latestb7a08274e69f
tar@2.2.1
6.2.1

Open the chart page →

3,289
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
tar@6.1.11
6.2.1

Open the chart page →

4,944
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
tar@6.1.11
6.2.1

Open the chart page →

10,494
interbtc-hydrainterlay0.1.153 of 4See more

interbtc-hydra interlay 0.1.15

3 of the 4 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
tar@6.1.11
6.2.1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
tar@4.4.19
6.2.1
subsquid/hydra-indexer-status-service:5.0.0-alpha.37a4136013909c
tar@4.4.19
6.2.1

Open the chart page →

6,831
interlay-firesquidinterlay0.1.113 of 4See more

interlay-firesquid interlay 0.1.11

3 of the 4 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
tar@6.1.11
6.2.1
subsquid/substrate-explorer:firesquid0889a857f192
tar@6.1.11
6.2.1
subsquid/substrate-ingest:firesquidfa549779e9b1
tar@6.1.11
6.2.1

Open the chart page →

4,667
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
tar@4.4.13
6.2.1

Open the chart page →

7,232
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
istio/examples-bookinfo-ratings-v1:1.15.009b9d6958a13
tar@2.2.1
6.2.1

Open the chart page →

18,980
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-28863.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
tar@6.1.11
6.2.1

Open the chart page →

2,363

Container images carrying it

510 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
tar@6.1.0
6.2.1
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
tar@4.4.15
6.2.1
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
tar@4.4.13
6.2.1
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
tar@6.1.11
6.2.1
1
quay.io/soketi/pws:0.8-16-alpine399d2e6b10ef
tar@6.1.11
6.2.1
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
tar@6.1.11
6.2.1
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
tar@4.4.13
6.2.1
1
quay.io/wekan/wekan:v5.65cb17600883a3
tar@6.1.11
6.2.1
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
tar@4.4.13
6.2.1
1
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
tar@6.1.11
6.2.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.