CVE-2024-34397

Medium

Advisory

Published 7 May 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.2; base score, highest
EPSS: 0.008; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 364; of 17,781 indexed, latest versions
Container images: 409; deployed by those charts
Fix available: 2 of 2; affected packages

glib2.0 - security update

Carried by container images the latest versions of 364 of 17,781 indexed charts deploy, on 409 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+25 more	2.58.3-2+deb10u6, 2.64.6-1~ubuntu20.04.7, 2.66.8-1+deb11u2, 2.72.4-0ubuntu2.3+1 more	379
glib2rpm	2.68.4-5.el9, 2.68.4-6.el9, 2.68.4-11.el9, 2.68.4-14.el9	0:2.68.4-14.el9_4.1	30

OSV records: DEBIAN-CVE-2024-34397 UBUNTU-CVE-2024-34397 RHSA-2024:6464 DLA-3814-1 DSA-5682-1 RLSA-2024:6464
Also known as: RHSA-2025:10780, USN-6768-1

Charts affected

364 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

11,405

apiwbstack

0.36.0

1 of 1 See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,019

mediawikiwbstack

0.14.0

1 of 1 See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,132

tool-cradlewbstack

0.2.0

1 of 1 See more

tool-cradle wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/cradle :2.0.1	1c7a78c54f77	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,316

tool-quickstatementswbstack

0.4.0

1 of 1 See more

tool-quickstatements wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/quickstatements :1.3.5	88423e422ea8	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,698

tool-widarwbstack

0.4.0

1 of 1 See more

tool-widar wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/widar :1.3	1702fc9df79f	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6

Open the chart page →

1,480

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed

Open the chart page →

9,743

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6

Open the chart page →

2,670

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7

Open the chart page →

28,605

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

2,021

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-34397.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	glib2.0@2.66.8-1	2.66.8-1+deb11u2

Open the chart page →

1,838

Container images carrying it

409 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
openwhisk/kafkaprovider :2.1.0	63dc3d2a0904	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	glib2.0@2.40.2-0ubuntu1	no fix listed	1
otel/opentelemetry-ebpf-kernel-collector :v0.10.2	69e19991e328	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
patdada/bella-docker :v1.0.0	75127147a624	glib2.0@2.58.3-2+deb10u4	2.58.3-2+deb10u6	1
pecan/monitor :1.7.2	73b2074f3fec	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
pecan/web :1.7.2	814d678c5550	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
percona/percona-xtradb-cluster-operator :1.14.0	3232ae01d0ff	glib2@2.68.4-11.el9	0:2.68.4-14.el9_4.1	1
phntom/binaryvision-tlo-static :0.0.4	e8b9ac93a3dd	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
phntom/email-manager :0.1.22	d8e2a9f2f085	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
phntom/external-dns-host-network :0.0.12	3adadbac8443	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
phntom/fireflyiii :version-5.7.5	f881ea5fbbf1	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.3	1
photoprism/photoprism :220629-jammy	2954334adbda	glib2.0@2.72.1-1	2.72.4-0ubuntu2.3	1
phpmyadmin/phpmyadmin :5.1	38437e021deb	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
plumdog/db-operator :latest	0c2fa2db0357	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
project2team4/react :latest	3ff031a08887	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
ptthanh1511/daloradius :1.2-dev	afecc5143fcb	glib2.0@2.66.8-1+deb11u1	2.66.8-1+deb11u2	1
resouer/redis-slave :v2	e2f198b49ba7	glib2.0@2.40.2-0ubuntu1	no fix listed	1
rlex/jsonvisio :1.9.5	cd50ff65118e	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
rm3l/dev-feed-api :latest	9a7f732245a3	glib2@2.68.4-6.el9	0:2.68.4-14.el9_4.1	1
roadiehq/community-backstage-image :latest	ef355bf5b639	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
robmarkcole/deepstack-ui :latest	410275726459	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
robotshop/rs-dispatch :latest	de81f1d07b02	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
robotshop/rs-payment :latest	774b52c6180d	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
robotshop/rs-ratings :latest	4899c686c249	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
roundcube/roundcubemail :1.5.3-apache	a8ea6fd751dc	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
samajh/alprbackend :latest	ea742b4372ad	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
samajh/alprfrontend :latest	05ef4fddbb75	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	glib2.0@2.74.6-2	2.74.6-2+deb12u1	1
scrapinghub/splash :3.4.1	a5f89bc84606	glib2.0@2.56.4-0ubuntu0.18.04.4	no fix listed	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.7	1
seafileltd/seafile-mc :10.0.1	70628f29c663	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.7	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.7	1
shadow228/accountingcollege :0.0.2	8fcea5b71906	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
shinobisystems/shinobi :dev	3ca746937856	glib2.0@2.58.3-2+deb10u3	2.58.3-2+deb10u6	1
shinobisystems/shinobi :latest	c2f5ce2e1067	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	glib2.0@2.58.3-2+deb10u5	2.58.3-2+deb10u6	1
sinusbot/docker :1.0.0-beta.14-dc94a7c	c7a4f3cc4393	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
sirfragalot/hyperion.ng :2.0.0-alpha.9-x86_64	34577843cb7b	glib2.0@2.58.3-2+deb10u2	2.58.3-2+deb10u6	1
sismics/docs :v1.10	f4b0ef019cf1	glib2.0@2.56.2-0ubuntu0.18.04.2	no fix listed	1
snipe/snipe-it :v6.0.14	55fb7636a98c	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.7	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.7	1
socialmediamacroscope/classification_predict :0.1.2	4fb86885d64d	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
socialmediamacroscope/classification_split :0.1.2	4bfda60829fe	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
socialmediamacroscope/classification_train :0.1.2	07477060bba8	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
socialmediamacroscope/clowder_create_collection :0.1.0	c969f7677983	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1
socialmediamacroscope/clowder_create_dataset :0.1.0	9b4211832429	glib2.0@2.66.8-1	2.66.8-1+deb11u2	1