StackRadar

CVE-2024-29409

Medium

Advisory

Published 14 Mar 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
27
of 17,781 indexed, latest versions
Container images
26
deployed by those charts
Fix available
1 of 1
affected package

nest allows a remote attacker to execute arbitrary code via the Content-Type header

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 26 images.

Affected packageAffected versionsFixed inImages
@nestjs/commonnpm7.6.15, 8.0.6, 8.3.1, 8.4.0+15 more10.4.1626
OSV records
GHSA-cj7v-w2c7-cp7c

Charts affected

27 by stars
ChartLatestAffected imagesRadar Score
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
@nestjs/common@9.4.0
10.4.16

Open the chart page →

2,828
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
@nestjs/common@10.4.5
10.4.16

Open the chart page →

1,721
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
@nestjs/common@10.2.7
10.4.16

Open the chart page →

3,451
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
@nestjs/common@9.2.1
10.4.16
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
@nestjs/common@9.2.1
10.4.16

Open the chart page →

31,510
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
@nestjs/common@8.4.4
10.4.16

Open the chart page →

15,653
open-api-discoveryopen-api-discoveryVerified publisher0.1.11 of 1See more

open-api-discovery open-api-discovery 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
lukasreining/open-api-schema-collector:0.1.050e021c42e33
@nestjs/common@9.2.1
10.4.16

Open the chart page →

2,473
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
@nestjs/common@9.2.0
10.4.16

Open the chart page →

4,455
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
@nestjs/common@8.0.6
10.4.16

Open the chart page →

3,769
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
@nestjs/common@10.2.7
10.4.16

Open the chart page →

3,451
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
@nestjs/common@10.4.4
10.4.16

Open the chart page →

3,614
crypto-watchdoghuseyinnurbaki0.1.01 of 1See more

crypto-watchdog huseyinnurbaki 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
hhaluk/crypto-watchdog:0.4.0a6555953d941
@nestjs/common@7.6.15
10.4.16

Open the chart page →

2,656
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
@nestjs/common@10.2.5
10.4.16

Open the chart page →

9,098
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
@nestjs/common@8.3.1
10.4.16

Open the chart page →

4,230
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
@nestjs/common@8.4.0
10.4.16

Open the chart page →

5,410
component-storekubebb0.0.231 of 1See more

component-store kubebb 0.0.23

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
kubebb/component-store:latestfd8ecbd73213
@nestjs/common@10.0.2
10.4.16

Open the chart page →

2,178
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
kubebb/bff-server:v0.2.0-202312040fbb732379bc
@nestjs/common@9.0.11
10.4.16

Open the chart page →

13,819
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
@nestjs/common@10.3.0
10.4.16

Open the chart page →

9,774
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
neoskop/papergirl:3.2.67f52b5949f03
@nestjs/common@10.3.1
10.4.16

Open the chart page →

6,982
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
@nestjs/common@10.4.7
10.4.16

Open the chart page →

4,219
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
@nestjs/common@8.4.7
10.4.16

Open the chart page →

3,999
ungatep2p-avs0.1.01 of 3See more

ungate p2p-avs 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
@nestjs/common@8.4.7
10.4.16

Open the chart page →

27,373
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
@nestjs/common@9.4.0
10.4.16

Open the chart page →

1,884
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
@nestjs/common@10.3.0
10.4.16

Open the chart page →

6,282
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
@nestjs/common@10.3.10
10.4.16

Open the chart page →

19,560
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
@nestjs/common@9.4.0
10.4.16

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
@nestjs/common@9.4.0
10.4.16

Open the chart page →

5,604
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-29409.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
@nestjs/common@10.3.0
10.4.16

Open the chart page →

17,323

Container images carrying it

26 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hoppscotch/hoppscotch:2024.8.2f1da831950b7
@nestjs/common@10.2.7
10.4.16
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
@nestjs/common@9.4.0
10.4.16
2
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
@nestjs/common@9.2.0
10.4.16
1
cryptexlabs/authf:0.12.11189c07411d7c
@nestjs/common@8.0.6
10.4.16
1
heywood8/redisinsight:2.28.00bc9ab313d37
@nestjs/common@9.4.0
10.4.16
1
hhaluk/crypto-watchdog:0.4.0a6555953d941
@nestjs/common@7.6.15
10.4.16
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
@nestjs/common@10.4.4
10.4.16
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
@nestjs/common@9.0.11
10.4.16
1
kubebb/component-store:latestfd8ecbd73213
@nestjs/common@10.0.2
10.4.16
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
@nestjs/common@9.2.1
10.4.16
1
mishtinetwork/operator:latestbb3fe67a5f7c
@nestjs/common@8.4.7
10.4.16
1
neoskop/papergirl:3.2.67f52b5949f03
@nestjs/common@10.3.1
10.4.16
1
nocodb/nocodb:0.258.06779a4ddedf2
@nestjs/common@10.4.7
10.4.16
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
@nestjs/common@8.3.1
10.4.16
1
redis/redisinsight:2.68019fcf774631
@nestjs/common@10.4.5
10.4.16
1
redis/redisinsight:2.46699d341bd329
@nestjs/common@9.4.0
10.4.16
1
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
@nestjs/common@10.3.10
10.4.16
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
@nestjs/common@8.4.0
10.4.16
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
@nestjs/common@10.2.5
10.4.16
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
@nestjs/common@8.4.7
10.4.16
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
@nestjs/common@10.3.0
10.4.16
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
@nestjs/common@8.4.4
10.4.16
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
@nestjs/common@10.3.0
10.4.16
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
@nestjs/common@10.3.0
10.4.16
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
@nestjs/common@9.2.1
10.4.16
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
@nestjs/common@9.2.1
10.4.16
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.