CVE-2024-34397

Medium

Advisory

Published 7 May 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.2; base score, highest
EPSS: 0.008; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 364; of 17,781 indexed, latest versions
Container images: 409; deployed by those charts
Fix available: 2 of 2; affected packages

glib2.0 - security update

Carried by container images the latest versions of 364 of 17,781 indexed charts deploy, on 409 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+25 more	2.58.3-2+deb10u6, 2.64.6-1~ubuntu20.04.7, 2.66.8-1+deb11u2, 2.72.4-0ubuntu2.3+1 more	379
glib2rpm	2.68.4-5.el9, 2.68.4-6.el9, 2.68.4-11.el9, 2.68.4-14.el9	0:2.68.4-14.el9_4.1	30

OSV records: DEBIAN-CVE-2024-34397 UBUNTU-CVE-2024-34397 RHSA-2024:6464 DLA-3814-1 DSA-5682-1 RLSA-2024:6464
Also known as: RHSA-2025:10780, USN-6768-1

Charts affected

364 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

11,405

apiwbstack

0.36.0

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,019

mediawikiwbstack

0.14.0

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,132

tool-cradlewbstack

0.2.0

1 of 1 See more

tool-cradle wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/cradle :2.0.1	1c7a78c54f77	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,316

tool-quickstatementswbstack

0.4.0

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,698

tool-widarwbstack

0.4.0

1 of 1 See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/widar :1.3	1702fc9df79f	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,480

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed

Open the chart page →

9,743

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6

Open the chart page →

2,670

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

28,605

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,021

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

1,838

Container images carrying it

409 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
andrianrf/backoffice-be :latest	6036614803d4	glib2@2.68.4-6.el9	0:2.68.4-14.el9_4.1	1
andrianrf/iso-server :latest	7da47f525c7d	glib2@2.68.4-6.el9	0:2.68.4-14.el9_4.1	1
anguda/ant-media :2.5	c435285fc241	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
apache/druid :29.0.1	0cef139b6bf1	glib2.0@2.74.6-2	2.74.6-2+deb12u1	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
apachepulsar/pulsar :2.6.1	4db6ff0b4045	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
apachepulsar/pulsar :2.9.0	d056c89b7131	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
apachepulsar/pulsar :2.8.2	d538416d5afe	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
apache/tika :2.9.0.0	92d055a84e9e	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.3	1
archish27/python-fastapi-postgres :latest	6610071a2101	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
arfath29/3-tier-app-backend :latest	ee0750b18406	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
arfath29/3-tier-app-frontend :latest	384b3e377f47	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
arturisimo/server-urjc :v1.0	d8dc4430531e	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
asdkant/fastapi-hello-world :latest	a23d8bf7c885	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
assistiot/dlt_api :2.1.0	c8a170683be7	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
assistiot/resource-provisioning_prc :1.0.0	8b5d118bdf0e	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	glib2.0@2.74.6-2	2.74.6-2+deb12u1	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
avinash263/pyredis263 :latest	aa2b8727f1a6	glib2.0@2.74.6-2	2.74.6-2+deb12u1	1
azhar008/flaskapplication :latest	a1e827b0adea	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
buntha/mlflow :2.1.1	154542cc3083	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
camptocamp/bucket-cloner :latest	acfafc308d88	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
camptocamp/ekorre :0.1.0	35c91d5fda04	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
camptocamp/snow-webhook :latest	2924b43dbf40	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
cdignam/kodiak :v0.54.0	5a6a55b39cee	glib2.0@2.58.3-2	2.58.3-2+deb10u6	1
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	glib2.0@2.58.3-2	2.58.3-2+deb10u6	1
chetangautamm/repo :sipp.v3	e7f7049e1544	glib2.0@2.64.6-1~ubuntu20.04.1	2.64.6-1~ubuntu20.04.7	1
cheyang/distributed-tf :1.6.0	46cc34755493	glib2.0@2.48.2-0ubuntu1	no fix listed	1
chubaofs/cfs-client :3.2.0	15ff74209ce7	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
chubaofs/cfs-server :3.2.0	205030e045f2	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
ckulka/baikal :0.8.0	aedb1f4f3fa0	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
cleveritcz/opencve :1.5.0	c75c1636e0b7	glib2@2.68.4-11.el9	0:2.68.4-14.el9_4.1	1
cloudve/janis-terminal :latest	af56e77ca587	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
coderaiser/cloudcmd :16.6.1	b34a9775c7ce	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
codetogether/codetogether :latest	4348c8a38752	glib2@2.68.4-14.el9	0:2.68.4-14.el9_4.1	1
countly/countly-server :25.05.4	e3c238248f99	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
dacinfomotion/h2p :latest	68fa393b472c	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
danuk/telegram-sender :0.0.1	026560388070	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
darkobas/ethexporter :latest	62e6464491ba	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
darkobas/tokenexporter :latest	a0349a0eedf0	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
daskdev/dask-notebook :1.1.0	052630f5ca04	glib2.0@2.56.3-0ubuntu0.18.04.1	no fix listed	1
deconzcommunity/deconz :2.12.06	6541bbb78952	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
dnationcloud/kubernetes-linter :0.2.1	dee6376560f5	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
douz/helpdesk :latest	4384103d0219	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1