StackRadar

CVE-2024-37568

High

Advisory

Published 9 Jun 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
23
deployed by those charts
Fix available
1 of 1
affected package

Authlib has algorithm confusion with asymmetric public keys

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 23 images.

Affected packageAffected versionsFixed inImages
authlibpypi0.12.1, 0.15, 0.15.2, 0.15.4+4 more1.3.123
OSV records
GHSA-5357-c2jx-v7qh
Also known as
PYSEC-2024-52

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
authlib@1.3.0
1.3.1

Open the chart page →

11,367
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
authlib@0.15.5
1.3.1

Open the chart page →

7,705
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
authlib@0.15.5
1.3.1

Open the chart page →

5,987
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
authlib@1.3.0
1.3.1

Open the chart page →

6,041
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
authlib@1.2.1
1.3.1

Open the chart page →

14,546
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
authlib@0.15
1.3.1

Open the chart page →

3,345
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
authlib@0.15.5
1.3.1

Open the chart page →

3,332
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
authlib@0.15.5
1.3.1

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
authlib@0.15.5
1.3.1

Open the chart page →

2,418
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
authlib@0.15.5
1.3.1

Open the chart page →

10,061
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
authlib@1.2.1
1.3.1

Open the chart page →

6,179
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
authlib@0.15.5
1.3.1

Open the chart page →

5,062
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
authlib@0.15.5
1.3.1

Open the chart page →

4,550
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.418cd5711fc9a
authlib@1.2.1
1.3.1

Open the chart page →

12,454
powerdnsfsdrw080.1.31 of 4See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
authlib@0.15
1.3.1

Open the chart page →

1,958
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
authlib@0.15
1.3.1

Open the chart page →

2,643
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
authlib@0.12.1
1.3.1

Open the chart page →

9,854
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
authlib@1.2.1
1.3.1

Open the chart page →

6,447
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
authlib@0.15.2
1.3.1

Open the chart page →

18,023
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
authlib@1.2.0
1.3.1

Open the chart page →

4,616
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
authlib@1.3.0
1.3.1

Open the chart page →

10,209
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
authlib@0.15.4
1.3.1

Open the chart page →

21,997
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
authlib@1.3.0
1.3.1

Open the chart page →

5,565
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
authlib@1.3.0
1.3.1

Open the chart page →

13,390
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
authlib@1.2.0
1.3.1

Open the chart page →

3,164
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2024-37568.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
authlib@0.15
1.3.1

Open the chart page →

2,643

Container images carrying it

23 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:6.12781369df9994
authlib@0.15.5
1.3.1
3
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
authlib@0.15
1.3.1
2
anchore/anchore-engine:v0.10.0bde9eedf639d
authlib@0.15.2
1.3.1
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
authlib@0.12.1
1.3.1
1
apache/airflow:2.8.4-python3.964e58748b6b9
authlib@1.3.0
1.3.1
1
apache/airflow:2.8.1e5560ad0b86e
authlib@1.3.0
1.3.1
1
douz/helpdesk:latest4384103d0219
authlib@0.15.5
1.3.1
1
dpage/pgadmin4:8.418cd5711fc9a
authlib@1.2.1
1.3.1
1
dpage/pgadmin4:7.537946e4f3e7b
authlib@1.2.1
1.3.1
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
authlib@1.2.1
1.3.1
1
homeassistant/home-assistant:2023.12.48d000332b09b
authlib@1.3.0
1.3.1
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
authlib@0.15.5
1.3.1
1
matrixdotorg/synapse:v1.78.0def97fd537d8
authlib@1.2.0
1.3.1
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
authlib@0.15
1.3.1
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
authlib@0.15
1.3.1
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
authlib@1.2.0
1.3.1
1
redash/redash:25.8.000d813437db5
authlib@0.15.5
1.3.1
1
redash/redash:26.3.0c5c9148f5c38
authlib@0.15.5
1.3.1
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
authlib@0.15.4
1.3.1
1
substratusai/verba:v0.4.0-baseURL261695be635eb
authlib@1.3.0
1.3.1
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
authlib@0.15.5
1.3.1
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
authlib@1.2.1
1.3.1
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
authlib@1.3.0
1.3.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.