StackRadar

CVE-2024-35195

Medium

Advisory

Published 20 May 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
605
of 17,787 indexed, latest versions
Container images
658
deployed by those charts
Fix available
3 of 4
affected packages

Requests `Session` object does not verify requests after making first request with verify=False

Carried by container images the latest versions of 605 of 17,787 indexed charts deploy, on 658 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+22 more2.32.0612
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 more22.0.2+dfsg-1ubuntu0.7+esm1, 24.0+dfsg-1ubuntu1.3+esm1108
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 moreno fix listed72
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+1 more0:2.20.0-5.el8_10, 0:2.25.1-9.el942
OSV records
DEBIAN-CVE-2024-35195GHSA-9wx4-h78v-vm56RHSA-2025:0012RHSA-2025:7049UBUNTU-CVE-2024-35195
Also known as
PYSEC-2026-1873, USN-8344-1

Charts affected

605 by stars
ChartLatestAffected imagesRadar Score
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
requests@2.23.0
2.32.0

Open the chart page →

13,170
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
requests@2.24.0
2.32.0

Open the chart page →

16,860
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
jupyterhub/jupyterhub:5.4.63974ba945e65
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1

Open the chart page →

13,286
sumoconsensys0.4.1451 of 4See more

sumo consensys 0.4.145

1 of the 4 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
requests@2.27.1
2.32.0

Open the chart page →

5,958
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kfserving/models-web-app:v0.6.1f322d6ffdfa3
requests@2.26.0
2.32.0

Open the chart page →

3,830
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
requests@2.25.0
2.32.0
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
requests@2.25.0
2.32.0
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
requests@2.25.0
2.32.0
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
requests@2.25.0
2.32.0
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
requests@2.25.0
2.32.0
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
requests@2.25.0
2.32.0
confluentinc/cp-zookeeper:6.1.078c190f4472c
requests@2.25.0
2.32.0

Open the chart page →

58,856
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
requests@2.21.0
2.32.0

Open the chart page →

3,871
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
requests@2.28.2
2.32.0

Open the chart page →

2,348
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
requests@2.25.1
2.32.0

Open the chart page →

13,937
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
requests@2.25.1
2.32.0

Open the chart page →

1,931
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
aristidetm/k8s-hub:3.3.7ccb516cb8474
requests@2.31.0
2.32.0

Open the chart page →

16,632
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
requests@2.31.0
2.32.0

Open the chart page →

6,178
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-pip@9.0.1-2.3~ubuntu1
requests@2.18.4-2ubuntu0.1
requests@2.20.1
no fix listed
no fix listed
2.32.0

Open the chart page →

27,749
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python-pip@9.0.1-2.3~ubuntu1.18.04.2
requests@2.24.0
no fix listed
2.32.0

Open the chart page →

18,884
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
requests@2.20.1
no fix listed
2.32.0

Open the chart page →

22,425
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-pip@9.0.1-2.3~ubuntu1
requests@2.18.4-2ubuntu0.1
requests@2.18.4
no fix listed
no fix listed
2.32.0

Open the chart page →

24,356
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
requests@2.24.0
2.32.0

Open the chart page →

2,264
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
python-pip@22.0.2+dfsg-1ubuntu0.3
22.0.2+dfsg-1ubuntu0.7+esm1

Open the chart page →

4,846
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
requests@2.24.0
2.32.0

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-pip@20.0.2-5ubuntu1.9
requests@2.22.0-2ubuntu1.1
requests@2.22.0
no fix listed
no fix listed
2.32.0

Open the chart page →

14,910
kube-openid-connectdevopstalesVerified publisher1.1.01 of 1See more

kube-openid-connect devopstales 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
devopstales/kube-openid-connector:1.042c40a0e9f1b
requests@2.27.1
2.32.0

Open the chart page →

1,333
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
requests@2.25.1
2.32.0

Open the chart page →

8,645
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
requests@2.25.1
2.32.0

Open the chart page →

8,645
difydify1.0.03 of 4See more

dify dify 1.0.0

3 of the 4 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
requests@2.31.0
2.32.0
langgenius/dify-plugin-daemon:main-localda995c129e2f
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1
langgenius/dify-sandbox:0.2.009b7e8705673
requests@2.31.0
2.32.0

Open the chart page →

19,063
autonodelabeldjjudas21Verified publisher0.0.101 of 1See more

autonodelabel djjudas21 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
djjudas21/autonodelabel:0.0.6f17233350c4f
requests@2.31.0
2.32.0

Open the chart page →

1,303
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
requests@2.21.0
2.32.0

Open the chart page →

4,217
vmware-exporterdniel0.0.11 of 1See more

vmware-exporter dniel 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
requests@2.27.1
2.32.0

Open the chart page →

1,351
codecovdoubanVerified publisher0.2.43 of 8See more

codecov douban 0.2.4

3 of the 8 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
requests@2.31.0
2.32.0
codecov/self-hosted-worker:24.4.1837f546b479b
requests@2.31.0
2.32.0
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
requests@2.25.1+dfsg-2
requests@2.25.1
no fix listed
2.32.0

Open the chart page →

24,975
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
requests@2.23.0
2.32.0

Open the chart page →

4,550
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
requests@2.25.1+dfsg-2
requests@2.25.1
no fix listed
2.32.0

Open the chart page →

30,759
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
requests@2.28.0
2.32.0

Open the chart page →

13,558
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
requests@2.25.1
2.32.0

Open the chart page →

1,990
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
requests@2.20.0
2.32.0
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
requests@2.24.0
2.32.0
amundsendev/amundsen-search:2.4.099dda9502c3e
requests@2.24.0
2.32.0

Open the chart page →

11,174
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
requests@2.24.0
2.32.0

Open the chart page →

5,161
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
requests@2.23.0
2.32.0

Open the chart page →

5,055
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
requests@2.31.0
2.32.0

Open the chart page →

1,512
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
requests@2.31.0
2.32.0

Open the chart page →

1,655
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
requests@2.31.0
2.32.0

Open the chart page →

1,665
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
requests@2.31.0
2.32.0

Open the chart page →

1,655
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
fiware/orion-ld:1.10.03c490a746f65
requests@2.20.0
2.32.0

Open the chart page →

9,805
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
requests@2.28.1+dfsg-1
requests@2.28.1
no fix listed
2.32.0

Open the chart page →

30,167
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
python-pip@20.0.2-5ubuntu1.6
requests@2.22.0-2ubuntu1
requests@2.22.0
no fix listed
no fix listed
2.32.0

Open the chart page →

25,239
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
python-pip@20.0.2-5ubuntu1.8
no fix listed

Open the chart page →

9,383
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
requests@2.31.0
2.32.0

Open the chart page →

7,366
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
requests@2.28.1
2.32.0

Open the chart page →

4,678
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
requests@2.22.0-2ubuntu1
requests@2.22.0
no fix listed
2.32.0

Open the chart page →

20,987
argocd-version-exporterevilmartians0.0.11 of 1See more

argocd-version-exporter evilmartians 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
requests@2.26.0
2.32.0

Open the chart page →

2,401
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
requests@2.28.1
2.32.0

Open the chart page →

4,085
fediblockholefedihost0.1.01 of 1See more

fediblockhole fedihost 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
requests@2.28.2
2.32.0

Open the chart page →

815
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
requests@2.22.0
2.32.0

Open the chart page →

14,688

Container images carrying it

658 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/stackgres/operator:1.19.1f241b0b20326
requests@2.31.0
2.32.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-5.el8_10
2.32.0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
requests@2.26.0
2.32.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
requests@2.26.0
2.32.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
requests@2.31.0
2.32.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
requests@2.25.1
2.32.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.