CVE-2024-29415

High

Advisory

Published 27 May 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.083; 95th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 505; of 17,787 indexed, latest versions
Container images: 501; deployed by those charts
Fix available: None; affected packages

ip SSRF improper categorization in isPublic

Carried by container images the latest versions of 505 of 17,787 indexed charts deploy, on 501 images.

Affected package	Affected versions	Fixed in	Images
ipnpm	1.0.1, 1.1.5, 1.1.6, 1.1.8+3 more	no fix listed	501
node-ipdeb	1.1.5-5, 2.0.0+~1.1.0-1ubuntu1	no fix listed	3

OSV records: GHSA-2p57-rm9w-gvfp UBUNTU-CVE-2024-29415

Charts affected

505 by stars

Chart

Latest

Affected images

Radar Score

workadventureworkadventure

1.1.0

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2024-29415.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	ip@2.0.0	no fix listed
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	ip@2.0.0	no fix listed
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	ip@2.0.0	no fix listed
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	ip@2.0.0	no fix listed

Open the chart page →

16,083

skoonerxd

1.1.0

1 of 1 See more

1,752

helloworldyotron-helm-charts

0.1.0

1 of 1 See more

helloworld yotron-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-29415.

Container image	Digest	Package	Fixed in
a5hut0sh/helloworld :1.0	2ae77620e616	ip@1.1.5	no fix listed

Open the chart page →

1,309

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-29415.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	ip@2.0.0	no fix listed

Open the chart page →

1,589

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-29415.

Container image	Digest	Package	Fixed in
zl0i/alertmanager-matrix-forwarder :v1.0.0	e94047931739	ip@1.1.5	no fix listed

Open the chart page →

3,118

Container images carrying it

501 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
felipecs8/app-movies-series :v1	4e51693fcdf5	ip@1.1.5	no fix listed	1
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	ip@2.0.0	no fix listed	1
fiware/idm :8.3.3	a1b6ed4ae84f	ip@1.1.5	no fix listed	1
fiware/iotagent-json :3.1.0	879b21a0d36d	ip@2.0.0	no fix listed	1
fiware/iotagent-ul :1.14.0	fe11f55a926d	ip@1.1.5	no fix listed	1
flagsmith/flagsmith-frontend :v2.6.0	df02a29e8b0c	ip@1.1.5	no fix listed	1
frappe/frappe-socketio :v13.4.1	2095767a9e82	ip@1.1.5	no fix listed	1
galaxy/galaxy-init :v18.01	0267bad550e6	ip@1.1.5	no fix listed	1
gethue/hue :4.11.0	11b649636e68	ip@1.1.5	no fix listed	1
gethue/hue :4.10.0	5702b2c37ff9	ip@1.1.5	no fix listed	1
glenndehaan/contentbridge :latest	99b9e4f73848	ip@2.0.0	no fix listed	1
gonzague/monopoly :latest	70465995deea	ip@1.1.5	no fix listed	1
governify/collector-dynamic :v1.3.0	6d3d1a5b46a9	ip@1.1.5	no fix listed	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	ip@1.1.5	no fix listed	1
gristlabs/grist :0.7.9	6e71b1914a7e	ip@1.1.5	no fix listed	1
gtato/demo-multiclus-registrator :1.0.0	9a744588fab3	ip@1.1.5	no fix listed	1
gtato/demo-multiclus-registry :1.0.0	2df5174f3cfd	ip@1.1.5	no fix listed	1
halkeye/gitter-slack-bridge :v2.0.1	53eb2b3cd4cb	ip@1.1.5	no fix listed	1
halkeye/hubot :latest	9764d2202130	ip@1.1.5	no fix listed	1
halkeye/irslackd :latest	7638bfba70b0	ip@1.1.5	no fix listed	1
hamid2021/nodejs-dockercli :latest	429d99890c3c	ip@2.0.0	no fix listed	1
hansehe/graphql-gateway :1.0.4	58e09540afbc	ip@2.0.0	no fix listed	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	ip@1.1.5	no fix listed	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	ip@2.0.0	no fix listed	1
helga09/shoes_ukr :v1.1.1	7999bc8b77c0	ip@2.0.0	no fix listed	1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	ip@2.0.0	no fix listed	1
henrywhitaker3/speedtest-tracker :latest	47159a940229	ip@1.1.5	no fix listed	1
heywood8/redisinsight :2.28.0	0bc9ab313d37	ip@2.0.0	no fix listed	1
hhaluk/crypto-watchdog :0.4.0	a6555953d941	ip@1.1.5	no fix listed	1
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	ip@1.1.5	no fix listed	1
hugohg34/server :0.0.2	503e5d8960ff	ip@1.1.5	no fix listed	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	ip@1.1.5	no fix listed	1
i4trust/pdc-portal :2.0.0	3e77858e1219	ip@1.1.5	no fix listed	1
ianw/quickchart :v1.7.1	dc49dd460c37	ip@1.1.5	no fix listed	1
ibarreche/cloud-front-ci :latest	c8970ac1c8dc	ip@1.1.6	no fix listed	1
ibarreche/cloud-indexer-ci :latest	b7a08274e69f	ip@1.1.5	no fix listed	1
ibmcom/app-nav-init :1.0.1	240ff499eb5b	ip@1.1.5	no fix listed	1
ibmcom/app-nav-ui :1.0.1	e2a86997b36b	ip@1.1.5	no fix listed	1
ibmcom/bai-admin-dev :19.0.2	02d882f2836e	ip@1.1.5	no fix listed	1
ibmcom/bai-setup-dev :19.0.2	b8e8df11072d	ip@1.1.5	no fix listed	1
ibmcom/icp-sert-bats :3.2.0	b558f2b444ae	ip@1.1.5	no fix listed	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	ip@1.1.5	no fix listed	1
ibmcom/microclimate-portal :latest	ed5505e5c7ec	ip@1.0.1	no fix listed	1
ibmcom/microclimate-theia :latest	e17bdccc5030	ip@1.1.5	no fix listed	1
ibmcom/voice-gateway-mr :1.0.5.0	0762ab1df6c1	ip@1.1.5	no fix listed	1
improwised/erpnext-worker :v13.4.1	97280b55cbd4	ip@1.1.5	no fix listed	1
inseefrlab/shelly :cloudshell	31f04ca7436b	ip@1.1.5	no fix listed	1
instructure/kinesalite :latest	34400d82f28f	ip@2.0.0	no fix listed	1
intelloop/atlas-cmms-frontend :v1.5.1	2409c2a00ab6	ip@2.0.0	no fix listed	1
interlayhq/interbtc-hydra-processor :master-2c6e16e-1637088364	423d567d47aa	ip@1.1.5	no fix listed	1