StackRadarChart IndexLive demo

CVE-2024-35861

High

Advisory

Published 19 May 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 60; of 18,219 indexed, latest versions
Container images: 57; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 60 of 18,219 indexed charts deploy, on 57 images.

Affected package	Affected versions	Fixed in	Images
linuxdeb	6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+4 more	6.1.85-1	57

OSV records: DEBIAN-CVE-2024-35861

Charts affected

60 by stars

Chart

Latest

Affected images

Radar Score

wordpresssb-helm-charts

1 of 2 See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
library/wordpress :6.4.3-apache	8ae66efb09a2	linux@6.1.76-1	6.1.85-1

Open the chart page →

89,165

stakefishstakefish

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	linux@6.1.52-1	6.1.85-1

Open the chart page →

103,596

icinga2svtech-public-helm-charts

1 of 4 See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
library/redis :7.2.3	a7cee7c8178f	linux@6.1.67-1	6.1.85-1

Open the chart page →

82,319

nagvissvtech-public-helm-charts

1 of 1 See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	linux@6.1.76-1	6.1.85-1

Open the chart page →

83,567

codegentest-opea

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	linux@6.1.76-1	6.1.85-1

Open the chart page →

106,449

codetranstest-opea

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	linux@6.1.76-1	6.1.85-1

Open the chart page →

105,973

docsumtest-opea

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	linux@6.1.76-1	6.1.85-1

Open the chart page →

106,476

tfy-distributortruefoundry

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	linux@6.1.69-1	6.1.85-1

Open the chart page →

95,252

demo-backendv2fly

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	linux@6.1.38-4	6.1.85-1

Open the chart page →

96,285

web-dvwaweb-dvwa

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2024-35861.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	linux@6.1.27-1	6.1.85-1

Open the chart page →

94,339

Container images carrying it

57 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/krateoplatformops/finops-webservice-api-mock :0.1.0	0877e9452d14	linux@6.1.76-1	6.1.85-1	1
ghcr.io/open-telemetry/demo :1.12.0-emailservice	a1f5cebb5240	linux@6.1.69-1	6.1.85-1	1
ghcr.io/rodg/rtmp-controller :latest	67f99a5beab7	linux@6.1.27-1	6.1.85-1	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	linux@6.1.55-1	6.1.85-1	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	linux@6.1.55-1	6.1.85-1	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	linux@6.1.69-1	6.1.85-1	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	linux@6.1.38-4	6.1.85-1	1