StackRadar

CVE-2024-31141

Medium

Advisory

Published 19 Nov 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
115
of 17,781 indexed, latest versions
Container images
107
deployed by those charts
Fix available
1 of 1
affected package

Apache Kafka Clients: Privilege escalation to filesystem read-access via automatic ConfigProvider

Carried by container images the latest versions of 115 of 17,781 indexed charts deploy, on 107 images.

Affected packageAffected versionsFixed inImages
kafka-clientsmaven2.3.0, 2.3.1, 2.4.0, 2.4.1+22 more3.7.1107
OSV records
GHSA-2x2g-32r7-p4x8

Charts affected

115 by stars
ChartLatestAffected imagesRadar Score
shenyuerdeng2.4.211 of 2See more

shenyu erdeng 2.4.21

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.4.20bd3b25c4be4
kafka-clients@2.3.1
3.7.1

Open the chart page →

12,513
scorpio-brokerfiware0.3.39 of 10See more

scorpio-broker fiware 0.3.3

9 of the 10 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
kafka-clients@3.0.0
3.7.1

Open the chart page →

55,600
scorpiobrokerfiware0.1.29 of 10See more

scorpiobroker fiware 0.1.2

9 of the 10 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
kafka-clients@3.0.0
3.7.1
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
kafka-clients@3.0.0
3.7.1

Open the chart page →

55,600
scorpio-broker-aaiofiware0.4.151 of 1See more

scorpio-broker-aaio fiware 0.4.15

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
kafka-clients@3.0.0
3.7.1

Open the chart page →

5,286
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
kafka-clients@3.6.1
3.7.1

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
kafka-clients@3.6.1
3.7.1

Open the chart page →

11,961
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.7.1

Open the chart page →

4,547
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
kafka-clients@3.7.0
3.7.1

Open the chart page →

49,025
siembolgresearch0.1.62 of 4See more

siembol gresearch 0.1.6

2 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
kafka-clients@3.1.2
3.7.1
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
kafka-clients@3.1.2
3.7.1

Open the chart page →

14,312
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
kafka-clients@2.8.1
3.7.1

Open the chart page →

10,540
helm-airportshelm-airports0.1.04 of 7See more

helm-airports helm-airports 0.1.0

4 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
dina1993/airports-api:latestac731244aed1
kafka-clients@3.3.2
3.7.1
dina1993/airports-consumer:latest669d146a5e63
kafka-clients@3.3.2
3.7.1
dina1993/airports-producer:latest3d6b0dac1cb4
kafka-clients@3.3.2
3.7.1
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.7.1

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.7.1

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.7.1

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.7.1

Open the chart page →

4,547
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
kafka-clients@3.0.0
3.7.1

Open the chart page →

32,205
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
kafka-clients@2.4.1
3.7.1

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
kafka-clients@2.4.1
3.7.1

Open the chart page →

20,650
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
huertaslopez/i.huertas.2021-v.martinp.2021-planner:2.0.0e2c18bd65472
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,721
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
kafka-clients@3.3.1
3.7.1

Open the chart page →

7,254
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
kafka-clients@3.5.1
3.7.1

Open the chart page →

4,098
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
hugohg34/planner:0.0.2171f61e8d7e2
kafka-clients@3.0.0
3.7.1

Open the chart page →

29,588
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
kafka-clients@2.5.0
3.7.1

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
kafka-clients@2.5.0
3.7.1

Open the chart page →

10,603
mitre-siphonmitre-siphon0.2.91 of 4See more

mitre-siphon mitre-siphon 0.2.9

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
kafka-clients@3.3.2
3.7.1

Open the chart page →

3,083
account-lookup-servicemojaloop13.0.01 of 4See more

account-lookup-service mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.7.1

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.01 of 4See more

account-lookup-service-admin mojaloop 13.0.0

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.7.1

Open the chart page →

11,695
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.7.1

Open the chart page →

12,108
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
kafka-clients@2.8.1
3.7.1

Open the chart page →

16,198
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.7.1

Open the chart page →

11,479
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
kafka-clients@3.3.0
3.7.1

Open the chart page →

19,226
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
adagber/planner:v1.0e5c1ed097752
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,721
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
kafka-clients@2.8.1
3.7.1

Open the chart page →

4,547
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
kafka-clients@3.1.1
3.7.1

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-final:latest427af418b75e
kafka-clients@3.1.1
3.7.1

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
kafka-clients@3.1.1
3.7.1

Open the chart page →

5,873
hive-metastoreolehrgfVerified publisher0.1.01 of 1See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
kafka-clients@2.8.1
3.7.1

Open the chart page →

8,540
apicurioone-acre-fundVerified publisher2.3.02 of 5See more

apicurio one-acre-fund 2.3.0

2 of the 5 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
kafka-clients@3.3.2
3.7.1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
kafka-clients@3.3.2
3.7.1

Open the chart page →

18,667
bpjstk-serviceopenshift1.0.01 of 6See more

bpjstk-service openshift 1.0.0

1 of the 6 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
andrianrf/backoffice-be:latest6036614803d4
kafka-clients@3.1.2
3.7.1

Open the chart page →

34,671
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
kafka-clients@3.0.1
3.7.1

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
kafka-clients@3.0.1
3.7.1

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
kafka-clients@3.0.1
3.7.1

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
kafka-clients@3.0.1
3.7.1

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
kafka-clients@3.0.1
3.7.1

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
kafka-clients@3.0.1
3.7.1

Open the chart page →

13,100
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
openwhisk/invoker:1.0.0f5831ec85525
kafka-clients@2.4.0
3.7.1

Open the chart page →

36,215
dfdeweyosdfir-infrastructureVerified publisher1.0.01 of 3See more

dfdewey osdfir-infrastructure 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.12.0645d3d9390ad
kafka-clients@3.5.1
3.7.1

Open the chart page →

1,190
timesketchosdfir-infrastructureVerified publisher1.0.81 of 6See more

timesketch osdfir-infrastructure 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.14.0466a49f379bb
kafka-clients@3.7.0
3.7.1

Open the chart page →

1,753
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,537
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
pcarrascoponce/planner:v1.0981fc482442c
kafka-clients@3.0.0
3.7.1

Open the chart page →

27,558
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-31141.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
kafka-clients@3.7.0
3.7.1

Open the chart page →

21,211

Container images carrying it

107 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
kafka-clients@2.8.1
3.7.1
1
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
kafka-clients@3.7.0
3.7.1
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
kafka-clients@2.8.2
3.7.1
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
kafka-clients@3.5.1
3.7.1
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
kafka-clients@2.7.0
3.7.1
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
kafka-clients@3.3.2
3.7.1
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
kafka-clients@3.5.1
3.7.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.