StackRadar

CVE-2024-29370

Medium

Advisory

Published 17 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
27
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 27 images.

Affected packageAffected versionsFixed inImages
python-josepypi3.0.1, 3.1.0, 3.2.0, 3.3.0no fix listed27
python-josedeb3.3.0+dfsg-4no fix listed1
OSV records
DEBIAN-CVE-2024-29370PYSEC-2025-185
Also known as
GHSA-h4pw-wxh7-4vjj

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
python-jose@3.3.0
no fix listed

Open the chart page →

9,145
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
python-jose@3.3.0
no fix listed

Open the chart page →

7,705
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
python-jose@3.3.0
no fix listed

Open the chart page →

6,041
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
python-jose@3.3.0
no fix listed

Open the chart page →

7,579
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
python-jose@3.1.0
no fix listed

Open the chart page →

10,730
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
python-jose@3.3.0
no fix listed

Open the chart page →

1,944
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
python-jose@3.3.0
no fix listed
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
python-jose@3.3.0
no fix listed
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
python-jose@3.3.0
no fix listed

Open the chart page →

37,373
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
python-jose@3.3.0
no fix listed

Open the chart page →

18,277
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
python-jose@3.3.0
no fix listed

Open the chart page →

9,412
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
python-jose@3.1.0
no fix listed

Open the chart page →

3,891
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
python-jose@3.1.0
no fix listed

Open the chart page →

13,852
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
python-jose@3.3.0
no fix listed

Open the chart page →

6,179
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-jose@3.0.1
no fix listed

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-jose@3.0.1
no fix listed

Open the chart page →

24,335
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
python-jose@3.3.0
no fix listed

Open the chart page →

4,647
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
python-jose@3.3.0
no fix listed

Open the chart page →

6,447
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
python-jose@3.2.0
no fix listed
lsstsqre/sciplat-hub:latest5e0ade6bed1c
python-jose@3.2.0
no fix listed
lsstsqre/wfdispatcher:lateste9feb99f524d
python-jose@3.2.0
no fix listed

Open the chart page →

5,786
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
python-jose@3.3.0
no fix listed

Open the chart page →

2,298
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
python-jose@3.3.0
no fix listed

Open the chart page →

3,332
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
python-jose@3.3.0+dfsg-4
python-jose@3.3.0
no fix listed
no fix listed

Open the chart page →

15,591
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
python-jose@3.1.0
no fix listed

Open the chart page →

8,694
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
python-jose@3.3.0
no fix listed

Open the chart page →

5,565
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-29370.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
python-jose@3.1.0
no fix listed

Open the chart page →

11,119

Container images carrying it

27 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
python-jose@3.1.0
no fix listed
1
assistiot/open_api_backend:1.1.230812ba93555
python-jose@3.3.0
no fix listed
1
bnjbvr/kresus:0.22.137e216b182c8
python-jose@3.3.0+dfsg-4
python-jose@3.3.0
no fix listed
no fix listed
1
camptocamp/ekorre:0.1.035c91d5fda04
python-jose@3.1.0
no fix listed
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
python-jose@3.3.0
no fix listed
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
python-jose@3.3.0
no fix listed
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
python-jose@3.3.0
no fix listed
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
python-jose@3.3.0
no fix listed
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
python-jose@3.3.0
no fix listed
1
homeassistant/home-assistant:2023.12.48d000332b09b
python-jose@3.3.0
no fix listed
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
python-jose@3.1.0
no fix listed
1
localstack/localstack:3.19d278167f2b7
python-jose@3.3.0
no fix listed
1
lsstsqre/prepuller:latest19c2dfc4e4ff
python-jose@3.2.0
no fix listed
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
python-jose@3.2.0
no fix listed
1
lsstsqre/wfdispatcher:lateste9feb99f524d
python-jose@3.2.0
no fix listed
1
marcoimme/oidcmock:latestb6035c0721a8
python-jose@3.3.0
no fix listed
1
netboxcommunity/netbox:v3.2.83d652dca5351
python-jose@3.3.0
no fix listed
1
opendatacube/restcube:latest91870111837c
python-jose@3.0.1
no fix listed
1
opendatacube/wms:latest1b90cdf68831
python-jose@3.0.1
no fix listed
1
wazuh/wazuh-manager:4.4.121994f40e0da
python-jose@3.1.0
no fix listed
1
weblate/weblate:3.11.3-182848df56ecd
python-jose@3.1.0
no fix listed
1
zurdi15/romm:2.3.12db88fe44c89
python-jose@3.3.0
no fix listed
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
python-jose@3.3.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
python-jose@3.3.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
python-jose@3.3.0
no fix listed
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
python-jose@3.3.0
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
python-jose@3.3.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.