CVE-2024-34397

Medium

Advisory

Published 7 May 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.2; base score, highest
EPSS: 0.008; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 364; of 17,787 indexed, latest versions
Container images: 409; deployed by those charts
Fix available: 2 of 2; affected packages

glib2.0 - security update

Carried by container images the latest versions of 364 of 17,787 indexed charts deploy, on 409 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+25 more	2.58.3-2+deb10u6, 2.64.6-1~ubuntu20.04.7, 2.66.8-1+deb11u2, 2.72.4-0ubuntu2.3+1 more	379
glib2rpm	2.68.4-5.el9, 2.68.4-6.el9, 2.68.4-11.el9, 2.68.4-14.el9	0:2.68.4-14.el9_4.1	30

OSV records: DEBIAN-CVE-2024-34397 UBUNTU-CVE-2024-34397 RHSA-2024:6464 DLA-3814-1 DSA-5682-1 RLSA-2024:6464
Also known as: RHSA-2025:10780, USN-6768-1

Charts affected

364 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

11,405

apiwbstack

0.36.0

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,019

mediawikiwbstack

0.14.0

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,132

tool-cradlewbstack

0.2.0

1 of 1 See more

tool-cradle wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/cradle :2.0.1	1c7a78c54f77	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,316

tool-quickstatementswbstack

0.4.0

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,698

tool-widarwbstack

0.4.0

1 of 1 See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/widar :1.3	1702fc9df79f	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,480

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed

Open the chart page →

9,743

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6

Open the chart page →

2,670

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

28,605

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,021

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

1,838

Container images carrying it

409 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
dysnix/pritunl :v1.29-r8	19951e3e7a32	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
eclipseaerios/openldap :2.6.3	0208743f315e	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
elyra/kernel-image-puller :3.2.2	c922f1f1646a	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
erlangsolutions/wombatoam :4.1.28	4680c990147a	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
factly/hunting :0.2.0-stagv1.2	ca5bc71d1d5c	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
fanzynoodle/smeejas :0.0.1	5f9916c1a287	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
firefart/requesttracker :5.0.4	0d6249906d8c	glib2.0@2.74.6-2	2.74.6-2+deb12u1	1
fireflyiii/core :version-5.6.14	2f4283bd0cf7	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
fossology/fossology :4.2.1	8bd1f22ba7bb	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
gethue/hue :4.10.0	5702b2c37ff9	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
gollumorg/gollum :latest	7cd5305a3cf7	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
guacamole/guacd :1.1.0	2288530a4d1c	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
guacamole/guacd :1.3.0	49d43948140f	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
ha33ona/python :test	6affdfc644d0	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
halkeye/self-service-password :latest	3c734dde4052	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
haveagitgat/tdarr :2.00.18	1256348872ce	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	glib2.0@2.64.3-1~ubuntu20.04.1	2.64.6-1~ubuntu20.04.7	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7	1
helga09/php_shoes_ukr :v1.1.1	e283539bcb8c	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
helga09/shoes_ukr :v1.1.1	7999bc8b77c0	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	glib2.0@2.74.6-2	2.74.6-2+deb12u1	1
heywood8/redisinsight :2.28.0	0bc9ab313d37	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	glib2.0@2.48.2-0ubuntu1	no fix listed	1
iamdorsah/bastillion :v0.1	db83a0254d81	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
inseefrlab/shelly :cloudshell	31f04ca7436b	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.3	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	glib2.0@2.74.6-2	2.74.6-2+deb12u1	1
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
j0113/haven-compliancy-dashboard :1.3	696cb8ca9f4e	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
jacobalberty/unifi :v7.4.162	b3edc809a3ff	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
jakowenko/double-take :1.6.0	b858bac9e32a	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
jellyfin/jellyfin :10.8.13	05a9734d7e83	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
jellyfin/jellyfin :10.8.1	ee24f4459a40	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
josh5/unmanic :0.2.6	4d49c4816260	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.3	1
juicedata/juicefs-csi-driver :v0.20.0	43978fc60798	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
kennethreitz/httpbin :latest	599fe5e50731	glib2.0@2.56.2-0ubuntu0.18.04.2	no fix listed	1
kobotoolbox/kobocat :2.022.24a	b15679454415	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
kporwit/vinyl_lib_app :v0.1.1	217de0302218	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
ldapaccountmanager/lam :7.2	95533a96a4c1	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
library/drupal :8-apache	8a1a3ee83899	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
library/monica :3.7.0-apache	ceb1ba4196ab	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
library/nextcloud :17.0.0-apache	96104cb965fc	glib2.0@2.58.3-2+deb10u1	2.58.3-2+deb10u6	1
library/node :16.20	f77a1aef2da8	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
library/php :7.3-apache	b9872cd287ef	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1