StackRadarChart IndexLive demo

CVE-2024-3727

High

Advisory

Published 14 May 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.3; base score, highest
EPSS: 0.013; 68th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 18; of 17,781 indexed, latest versions
Container images: 16; deployed by those charts
Fix available: 1 of 2; affected packages

github.com/containers/image allows unexpected authenticated registry accesses

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 16 images.

Affected package	Affected versions	Fixed in	Images
github.com/containers/image/v5golang	v5.9.0, v5.10.2, v5.15.0, v5.19.0+6 more	5.29.3	15
golang-github-containers-imagedeb	5.23.1-4	no fix listed	1

OSV records: DEBIAN-CVE-2024-3727 GHSA-6wvf-f2vw-3425
Also known as: GO-2024-2842

Charts affected

18 by stars

Chart

Latest

Affected images

Radar Score

k8s-image-swapperestahn

1 of 2 See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	github.com/containers/image/v5@v5.29.1	5.29.3

Open the chart page →

1,981

agentareaagentarea

1 of 16 See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
agentarea/agentarea-mcp-runner :latest	d3c209a5d531	golang-github-containers-image@5.23.1-4	no fix listed

Open the chart page →

14,914

dregsydeliveryhero

1 of 1 See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	github.com/containers/image/v5@v5.21.1	5.29.3

Open the chart page →

2,969

kubernetes-stateless-chartkubernetes-stateless-chart

1 of 1 See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	github.com/containers/image/v5@v5.25.0	5.29.3

Open the chart page →

3,274

artifact-hubsoftonic

1 of 8 See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
artifacthub/tracker :v1.19.0	6596c8c4d955	github.com/containers/image/v5@v5.29.0	5.29.3

Open the chart page →

14,491

cp4d-deployercloud-native-toolkit

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	github.com/containers/image/v5@v5.15.0	5.29.3

Open the chart page →

25,151

iteration-zerocloud-native-toolkit

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	github.com/containers/image/v5@v5.15.0	5.29.3

Open the chart page →

6,921

skopeo-syncfairwinds-incubator

1 of 1 See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/skopeo/stable :v1.13	4853591bd1d2	github.com/containers/image/v5@v5.26.2	5.29.3

Open the chart page →

1,736

dregsyhelm-charts-nr

1 of 1 See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	github.com/containers/image/v5@v5.21.1	5.29.3

Open the chart page →

2,969

kubeclaritykubeclarity

1 of 5 See more

kubeclarity kubeclarity 2.23.3

1 of the 5 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	github.com/containers/image/v5@v5.19.0	5.29.3

Open the chart page →

5,496

anchore-engineopencloudcx

1 of 2 See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.10.0	bde9eedf639d	github.com/containers/image/v5@v5.9.0	5.29.3

Open the chart page →

18,023

redhat-trusted-application-pipelineopenshift

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	github.com/containers/image/v5@v5.15.0	5.29.3

Open the chart page →

8,599

pet-battle-infrapetbattle

1 of 2 See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	github.com/containers/image/v5@v5.10.2	5.29.3

Open the chart page →

15,466

pet-battle-tournamentpetbattle

1 of 3 See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-cli :4.8	bb5e052770e5	github.com/containers/image/v5@v5.10.2	5.29.3

Open the chart page →

15,466

pixie-operator-chartpixie

1 of 3 See more

pixie-operator-chart pixie 0.1.7

1 of the 3 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/operator-framework/olmdigest-pinned	1b6002156f56	github.com/containers/image/v5@v5.28.0	5.29.3

Open the chart page →

1,899

sonatype-nexusredhat-cop

1 of 2 See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	github.com/containers/image/v5@v5.29.0	5.29.3

Open the chart page →

16,047

stackrox-chartredhat-cop

1 of 1 See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	github.com/containers/image/v5@v5.10.2	5.29.3

Open the chart page →

29,227

allurestakater

1 of 1 See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-3727.

Container image	Digest	Package	Fixed in
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	github.com/containers/image/v5@v5.10.2	5.29.3

Open the chart page →

28,165

Container images carrying it

16 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
xelalex/dregsy :0.4.3	574054e1c417	github.com/containers/image/v5@v5.21.1	5.29.3	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	github.com/containers/image/v5@v5.10.2	5.29.3	2
agentarea/agentarea-mcp-runner :latest	d3c209a5d531	golang-github-containers-image@5.23.1-4	no fix listed	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	github.com/containers/image/v5@v5.9.0	5.29.3	1
artifacthub/tracker :v1.19.0	6596c8c4d955	github.com/containers/image/v5@v5.29.0	5.29.3	1
portainer/portainer-ce :2.18.4-alpine	3e61aaee1341	github.com/containers/image/v5@v5.25.0	5.29.3	1
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	github.com/containers/image/v5@v5.29.1	5.29.3	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	github.com/containers/image/v5@v5.19.0	5.29.3	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	github.com/containers/image/v5@v5.15.0	5.29.3	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	github.com/containers/image/v5@v5.15.0	5.29.3	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	github.com/containers/image/v5@v5.10.2	5.29.3	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	github.com/containers/image/v5@v5.29.0	5.29.3	1
quay.io/operator-framework/olm	1b6002156f56	github.com/containers/image/v5@v5.28.0	5.29.3	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	github.com/containers/image/v5@v5.15.0	5.29.3	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	github.com/containers/image/v5@v5.10.2	5.29.3	1
quay.io/skopeo/stable :v1.13	4853591bd1d2	github.com/containers/image/v5@v5.26.2	5.29.3	1