StackRadar

CVE-2024-35195

Medium

Advisory

Published 20 May 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
605
of 17,787 indexed, latest versions
Container images
658
deployed by those charts
Fix available
3 of 4
affected packages

Requests `Session` object does not verify requests after making first request with verify=False

Carried by container images the latest versions of 605 of 17,787 indexed charts deploy, on 658 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+22 more2.32.0612
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 more22.0.2+dfsg-1ubuntu0.7+esm1, 24.0+dfsg-1ubuntu1.3+esm1108
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 moreno fix listed72
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+1 more0:2.20.0-5.el8_10, 0:2.25.1-9.el942
OSV records
DEBIAN-CVE-2024-35195GHSA-9wx4-h78v-vm56RHSA-2025:0012RHSA-2025:7049UBUNTU-CVE-2024-35195
Also known as
PYSEC-2026-1873, USN-8344-1

Charts affected

605 by stars
ChartLatestAffected imagesRadar Score
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1

Open the chart page →

2,002
iframelyiframelyVerified publisher2.3.51 of 1See more

iframely iframely 2.3.5

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
requests@2.25.1
2.32.0

Open the chart page →

3,181
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
python-pip@24.0+dfsg-1ubuntu1.2
requests@2.31.0+dfsg-1ubuntu1.1
requests@2.31.0
24.0+dfsg-1ubuntu1.3+esm1
no fix listed
2.32.0

Open the chart page →

9,032
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
python-pip@20.0.2-5ubuntu1.6
requests@2.25.1
no fix listed
2.32.0

Open the chart page →

37,844
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
requests@2.25.1
2.32.0

Open the chart page →

6,502
freeipaimprowisedVerified publisher0.4.11 of 1See more

freeipa improwised 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
requests@2.28.1
2.32.0

Open the chart page →

1,218
frigateimprowisedVerified publisher1.1.01 of 1See more

frigate improwised 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
requests@2.31.0
2.32.0

Open the chart page →

2,159
healthchecksimprowisedVerified publisher1.1.11 of 2See more

healthchecks improwised 1.1.1

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
linuxserver/healthchecks:2.7.2023033194696dab3c50
requests@2.28.2
2.32.0

Open the chart page →

2,628
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
requests@2.21.0
2.32.0

Open the chart page →

3,314
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

7,697
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
python-pip@20.0.2-5ubuntu1.6
requests@2.22.0-2ubuntu1
requests@2.22.0
no fix listed
no fix listed
2.32.0

Open the chart page →

18,137
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

7,697
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
requests@2.26.0
2.32.0

Open the chart page →

7,233
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
requests@2.21.0
2.32.0

Open the chart page →

18,998
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
python-requests@2.25.1-7.el9_2
requests@2.25.1
0:2.25.1-9.el9
2.32.0

Open the chart page →

3,487
twitch-channel-points-minerjacobcolvinVerified publisher0.1.01 of 1See more

twitch-channel-points-miner jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
requests@2.31.0
2.32.0

Open the chart page →

1,088
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
requests@2.28.1+dfsg-1
requests@2.28.1
no fix listed
2.32.0

Open the chart page →

10,816
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
requests@2.23.0
2.32.0

Open the chart page →

9,853
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
requests@2.27.1
2.32.0

Open the chart page →

4,038
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1

Open the chart page →

2,203
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
requests@2.31.0
2.32.0

Open the chart page →

2,581
frigatek8s-home-lab-repo9.1.11 of 1See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
requests@2.27.1
2.32.0

Open the chart page →

2,370
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
python-pip@22.0.2+dfsg-1ubuntu0.2
22.0.2+dfsg-1ubuntu0.7+esm1

Open the chart page →

9,832
netio-exporterk8sonlabVerified publisher0.1.101 of 1See more

netio-exporter k8sonlab 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
tomsajan/netio-exporter:0.0.5fb61907707b8
requests@2.31.0
2.32.0

Open the chart page →

728
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
python-pip@20.0.2-5ubuntu1.6
requests@2.27.1
no fix listed
2.32.0

Open the chart page →

16,464
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
requests@2.27.1
2.32.0

Open the chart page →

4,156
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
python-pip@9.0.1-2.3~ubuntu1.18.04.6
requests@2.23.0
no fix listed
2.32.0

Open the chart page →

12,541
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
requests@2.26.0
2.32.0

Open the chart page →

1,598
elasticsearch-cacherkfirfer0.0.21 of 1See more

elasticsearch-cacher kfirfer 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
requests@2.31.0
2.32.0

Open the chart page →

678
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
requests@2.31.0
2.32.0

Open the chart page →

6,446
kibana-index-pattern-updaterkfirfer0.0.31 of 1See more

kibana-index-pattern-updater kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kfirfer/kibana-index-pattern-updater:1.0.12e88cfcec5c93
requests@2.25.1
2.32.0

Open the chart page →

3,357
kube-hunterkfirfer1.0.51 of 1See more

kube-hunter kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
requests@2.27.1
2.32.0

Open the chart page →

997
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
requests@2.26.0
2.32.0

Open the chart page →

2,320
slackgptkfirfer0.0.61 of 1See more

slackgpt kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kfirfer/slackgpt:0.0.15461331bd838e
requests@2.31.0
2.32.0

Open the chart page →

1,125
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
python-pip@9.0.1-2.3~ubuntu1
no fix listed

Open the chart page →

14,827
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
requests@2.31.0
2.32.0

Open the chart page →

68,994
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
requests@2.31.0
2.32.0

Open the chart page →

1,444
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
requests@2.25.0
2.32.0

Open the chart page →

1,850
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
requests@2.31.0
2.32.0
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
requests@2.31.0
2.32.0

Open the chart page →

7,356
lokikubeblocksVerified publisher5.39.01 of 5See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
requests@2.29.0
2.32.0

Open the chart page →

5,841
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
python-requests@2.20.0-3.el8_8
requests@2.20.0
0:2.20.0-5.el8_10
2.32.0

Open the chart page →

9,249
cephfs-csikubegems1.0.81 of 6See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
requests@2.20.0
2.32.0

Open the chart page →

4,445
juicefs-csi-driverkubegems0.19.21 of 6See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
requests@2.25.1
2.32.0

Open the chart page →

4,825
juicefs-tenantkubegems1.0.11 of 3See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kubegems/juicefs-mount:ce-v1.1.010abb76892b8
requests@2.21.0
2.32.0

Open the chart page →

4,120
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
requests@2.31.0
2.32.0

Open the chart page →

3,700
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
requests@2.28.1+dfsg-1
requests@2.28.1
no fix listed
2.32.0

Open the chart page →

6,363
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
requests@2.22.0
2.32.0

Open the chart page →

18,394
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python-pip@20.0.2-5ubuntu1.5
no fix listed

Open the chart page →

14,368
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
requests@2.24.0
2.32.0
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
requests@2.24.0
2.32.0

Open the chart page →

26,019
rbd-provisionerkubesphere-testVerified publisher0.1.11 of 1See more

rbd-provisioner kubesphere-test 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kubesphere/rbd-provisioner:v2.1.1-k8s1.11b8ad79759bcd
requests@2.6.0
2.32.0

Open the chart page →

242

Container images carrying it

658 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/stackgres/operator:1.19.1f241b0b20326
requests@2.31.0
2.32.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-5.el8_10
2.32.0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
requests@2.26.0
2.32.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
requests@2.26.0
2.32.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
requests@2.31.0
2.32.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
requests@2.25.1
2.32.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.