StackRadar

CVE-2024-35195

Medium

Advisory

Published 20 May 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
605
of 17,787 indexed, latest versions
Container images
658
deployed by those charts
Fix available
3 of 4
affected packages

Requests `Session` object does not verify requests after making first request with verify=False

Carried by container images the latest versions of 605 of 17,787 indexed charts deploy, on 658 images.

Affected packageAffected versionsFixed inImages
requestspypi2.2.1, 2.6.0, 2.9.1, 2.10.0+22 more2.32.0612
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 more22.0.2+dfsg-1ubuntu0.7+esm1, 24.0+dfsg-1ubuntu1.3+esm1108
requestsdeb2.2.1-1, 2.2.1-1ubuntu0.3, 2.9.1-3, 2.9.1-3ubuntu0.1+8 moreno fix listed72
python-requestsrpm2.20.0-2.1.el8_1, 2.20.0-3.el8_6, 2.20.0-3.el8_8, 2.25.1-7.el9_2+1 more0:2.20.0-5.el8_10, 0:2.25.1-9.el942
OSV records
DEBIAN-CVE-2024-35195GHSA-9wx4-h78v-vm56RHSA-2025:0012RHSA-2025:7049UBUNTU-CVE-2024-35195
Also known as
PYSEC-2026-1873, USN-8344-1

Charts affected

605 by stars
ChartLatestAffected imagesRadar Score
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
requests@2.20.0
2.32.0

Open the chart page →

9,384
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
python-pip@22.0.2+dfsg-1ubuntu0.5
22.0.2+dfsg-1ubuntu0.7+esm1

Open the chart page →

6,879
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
requests@2.28.1
2.32.0

Open the chart page →

2,765
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1

Open the chart page →

2,203
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
requests@2.28.1
requests@2.28.1+dfsg-1
2.32.0
no fix listed

Open the chart page →

32,893
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
requests@2.22.0
2.32.0

Open the chart page →

4,434
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
requests@2.22.0
2.32.0

Open the chart page →

4,067
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
requests@2.31.0
2.32.0

Open the chart page →

3,448
neuvectorlifen-chartsVerified publisher1.5.21 of 3See more

neuvector lifen-charts 1.5.2

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
neuvector/manager:3.2.1f1b7d666eae0
requests@2.22.0
2.32.0

Open the chart page →

2,747
llm-dllm-dVerified publisher1.0.231 of 2See more

llm-d llm-d 1.0.23

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
requests@2.25.1
2.32.0

Open the chart page →

2,524
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
requests@2.27.1
2.32.0

Open the chart page →

1,949
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-weather-flask:latest96bce8b8b5a7
requests@2.26.0
2.32.0

Open the chart page →

5,905
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
requests@2.31.0
2.32.0

Open the chart page →

7,516
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
requests@2.28.1
requests@2.28.1+dfsg-1
2.32.0
no fix listed

Open the chart page →

32,893
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
logiqai/toolbox:2.0.155a574ec5b64
requests@2.23.0
2.32.0

Open the chart page →

23,255
alert-stream-schema-registrylsst-sqre2.1.01 of 1See more

alert-stream-schema-registry lsst-sqre 2.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
lsstdm/lsst_alert_packet:tickets-DM-3274374c97a490940
requests@2.26.0
2.32.0

Open the chart page →

2,293
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
requests@2.25.1
2.32.0
lsstsqre/sciplat-hub:latest5e0ade6bed1c
requests@2.25.1
2.32.0
lsstsqre/wfdispatcher:lateste9feb99f524d
requests@2.25.1
2.32.0

Open the chart page →

5,787
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python-pip@20.0.2-5ubuntu1.6
requests@2.27.1
no fix listed
2.32.0

Open the chart page →

17,836
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
lsstsqre/kafkaconnect:0.9.34143c7cd705e
requests@2.26.0
2.32.0
lsstsqre/strimzi-registry-operator:0.4.1e139fde946d7
requests@2.27.1
2.32.0

Open the chart page →

9,332
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
requests@2.25.0
2.32.0

Open the chart page →

6,623
kube-hunterm9sweeperVerified publisher1.6.01 of 1See more

kube-hunter m9sweeper 1.6.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
requests@2.27.1
2.32.0

Open the chart page →

997
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
requests@2.31.0
2.32.0

Open the chart page →

6,722
marge-botmarge-bot1.1.01 of 1See more

marge-bot marge-bot 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
smarketshq/marge-bot:0.9.2cfc765b27e64
requests@2.21.0
2.32.0

Open the chart page →

337
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
requests@2.31.0
2.32.0

Open the chart page →

3,541
cleanuparrmedia-servarrVerified publisher0.18.01 of 1See more

cleanuparr media-servarr 0.18.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.5c7cd53ad559a
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1

Open the chart page →

1,837
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.3.065095a82d4a1
requests@2.24.0
2.32.0

Open the chart page →

68,330
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
requests@2.26.0
2.32.0

Open the chart page →

1,902
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
requests@2.28.2
2.32.0

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
requests@2.28.2
2.32.0

Open the chart page →

8,361
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
python-pip@9.0.1-2.3~ubuntu1.18.04.5
requests@2.23.0
no fix listed
2.32.0

Open the chart page →

12,862
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
requests@2.27.1
2.32.0

Open the chart page →

2,233
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
requests@2.21.0
2.32.0

Open the chart page →

3,294
saltmidokura-communityVerified publisher0.0.31 of 1See more

salt midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
saltstack/salt:3006.3e9c7906b7a5c
requests@2.31.0
2.32.0

Open the chart page →

896
buildkite-exporterminaVerified publisher0.1.41 of 1See more

buildkite-exporter mina 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
codaprotocol/buildkite-exporter:0.2.137c68e67a401
requests@2.25.1
2.32.0

Open the chart page →

2,599
o1-botminaVerified publisher0.0.31 of 1See more

o1-bot mina 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
requests@2.23.0
2.32.0

Open the chart page →

2,656
MINTmint8.0.22 of 15See more

MINT mint 8.0.2

2 of the 15 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
requests@2.25.1
2.32.0
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
requests@2.28.1
2.32.0

Open the chart page →

42,983
mlflow-servermlflow-server0.3.01 of 1See more

mlflow-server mlflow-server 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
requests@2.31.0
2.32.0

Open the chart page →

3,158
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
requests@2.28.2
2.32.0

Open the chart page →

2,470
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
requests@2.28.2
2.32.0

Open the chart page →

3,811
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
requests@2.28.1
2.32.0

Open the chart page →

8,556
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
requests@2.26.0
2.32.0

Open the chart page →

25,989
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
python-pip@20.0.2-5ubuntu1.6
requests@2.27.1
no fix listed
2.32.0

Open the chart page →

15,731
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
requests@2.24.0
2.32.0

Open the chart page →

2,969
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
requests@2.22.0
2.32.0

Open the chart page →

4,913
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
requests@2.28.2
2.32.0

Open the chart page →

5,456
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
pecan/monitor:1.7.273b2074f3fec
requests@2.21.0
2.32.0

Open the chart page →

14,154
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
requests@2.25.0
2.32.0

Open the chart page →

55,715
smilencsaVerified publisher1.1.016 of 23See more

smile ncsa 1.1.0

16 of the 23 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
python-pip@20.0.2-5ubuntu1.9
requests@2.31.0
no fix listed
2.32.0
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
requests@2.29.0
2.32.0
socialmediamacroscope/classification_split:0.1.24bfda60829fe
requests@2.29.0
2.32.0
socialmediamacroscope/classification_train:0.1.207477060bba8
requests@2.29.0
2.32.0
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
requests@2.29.0
2.32.0
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
requests@2.29.0
2.32.0
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
requests@2.29.0
2.32.0
socialmediamacroscope/clowder_list:0.1.051cb17626519
requests@2.30.0
2.32.0
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
requests@2.31.0
2.32.0
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
python-pip@9.0.1-2.3~ubuntu1.18.04.8
requests@2.21.0
no fix listed
2.32.0
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
requests@2.31.0
2.32.0
socialmediamacroscope/image_crawler:0.1.2f508216be63c
python-pip@9.0.1-2.3~ubuntu1.18.04.8
requests@2.21.0
no fix listed
2.32.0
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
requests@2.31.0
2.32.0
socialmediamacroscope/preprocessing:0.1.3ca863306314b
requests@2.31.0
2.32.0
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
requests@2.29.0
2.32.0
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
requests@2.31.0
2.32.0

Open the chart page →

109,485
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
requests@2.28.1
requests@2.28.1+dfsg-1
2.32.0
no fix listed

Open the chart page →

29,687
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2024-35195.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.13.188b5fb704a8c
requests@2.25.1
2.32.0

Open the chart page →

6,367

Container images carrying it

658 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/stackgres/operator:1.19.1f241b0b20326
requests@2.31.0
2.32.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
python-pip@24.0+dfsg-1ubuntu1.3
24.0+dfsg-1ubuntu1.3+esm1
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
python-requests@2.20.0-2.1.el8_1
requests@2.20.0
0:2.20.0-5.el8_10
2.32.0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
requests@2.26.0
2.32.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
requests@2.26.0
2.32.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
requests@2.31.0
2.32.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
requests@2.25.1
2.32.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.