StackRadar

CVE-2024-3772

Medium

Advisory

Published 15 Apr 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.010
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
40
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
1 of 1
affected package

Pydantic regular expression denial of service

Carried by container images the latest versions of 40 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
pydanticpypi1.1.1, 1.6.2, 1.7, 1.7.3+13 more1.10.13, 2.4.040
OSV records
GHSA-mr82-8j83-vxmv
Also known as
PYSEC-2026-1812

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pydantic@1.9.0
1.10.13

Open the chart page →

7,705
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
pydantic@1.10.12
1.10.13

Open the chart page →

6,041
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
pydantic@2.3.0
2.4.0

Open the chart page →

3,033
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
pydantic@1.9.0
1.10.13

Open the chart page →

10,598
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
pydantic@1.9.1
1.10.13

Open the chart page →

7,579
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
pydantic@1.10.7
1.10.13

Open the chart page →

17,877
qbittorrentvpnluiscajl2.0.251 of 2See more

qbittorrentvpn luiscajl 2.0.25

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
binhex/arch-qbittorrentvpn:4.5.2-1-03842d321bb8f2
pydantic@1.10.7
1.10.13

Open the chart page →

68
fllocaloperationsassist-iot-fl-local-operations1.1.01 of 3See more

fllocaloperations assist-iot-fl-local-operations 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
assistiot/fl_local_operations_inference:latest0518b63a2e69
pydantic@1.10.7
1.10.13

Open the chart page →

3,786
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
assistiot/fl_repository:latest0fce3ea719a5
pydantic@1.10.2
1.10.13

Open the chart page →

4,367
trainingcollectorassist-iot-fl-training-collector1.1.01 of 1See more

trainingcollector assist-iot-fl-training-collector 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
assistiot/fl_training_collector:latest792715dd3084
pydantic@1.8.2
1.10.13

Open the chart page →

1,719
frigatebryopsida0.2.11 of 2See more

frigate bryopsida 0.2.1

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
pydantic@1.9.2
1.10.13

Open the chart page →

2,573
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pydantic@1.10.12
1.10.13

Open the chart page →

6,179
design-cataloguedesign-catalogue0.1.01 of 2See more

design-catalogue design-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
pydantic@1.8.2
1.10.13

Open the chart page →

2,770
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
pydantic@1.9.1
1.10.13

Open the chart page →

4,550
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
pydantic@1.10.2
1.10.13

Open the chart page →

4,085
kodiakfikaworks1.1.41 of 2See more

kodiak fikaworks 1.1.4

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
cdignam/kodiak:v0.54.05a6a55b39cee
pydantic@1.9.1
1.10.13

Open the chart page →

3,892
forms-catalogueforms-catalogue0.1.01 of 2See more

forms-catalogue forms-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
pydantic@1.8.2
1.10.13

Open the chart page →

2,188
twitch-channel-points-minerjacobcolvinVerified publisher0.1.01 of 1See more

twitch-channel-points-miner jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
pydantic@2.2.1
2.4.0

Open the chart page →

1,088
frigatek8s-home-lab-repo9.1.11 of 1See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
pydantic@1.9.2
1.10.13

Open the chart page →

2,370
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
pydantic@1.10.12
1.10.13

Open the chart page →

6,447
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
pydantic@1.10.9
1.10.13

Open the chart page →

1,444
pavkrzwiatrzyk0.0.31 of 1See more

pav krzwiatrzyk 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
witcherek7/pav:0.0.342a744f29ac0
pydantic@1.10.2
1.10.13

Open the chart page →

1,132
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
pydantic@1.10.4
1.10.13

Open the chart page →

1,949
exposureloglsst-sqre0.2.11 of 1See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
lsstsqre/exposurelog:0.8.079b00fb67a65
pydantic@1.9.0
1.10.13

Open the chart page →

2,078
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
pydantic@1.10.10
1.10.13

Open the chart page →

7,315
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
pydantic@1.10.2
1.10.13

Open the chart page →

3,294
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
pydantic@1.10.2
1.10.13

Open the chart page →

43,341
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
pydantic@1.7
1.10.13

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
pydantic@1.9.1
1.10.13

Open the chart page →

8,556
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
pydantic@1.10.6
1.10.13

Open the chart page →

967
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
pydantic@1.10.6
1.10.13

Open the chart page →

5,456
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
pydantic@1.6.2
1.10.13

Open the chart page →

2,376
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
pydantic@1.9.2
1.10.13

Open the chart page →

2,983
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
pydantic@1.6.2
1.10.13
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
pydantic@1.1.1
1.10.13

Open the chart page →

25,737
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
pydantic@1.8.2
1.10.13

Open the chart page →

2,201
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
pydantic@1.8.2
1.10.13

Open the chart page →

2,770
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
pydantic@1.10.7
1.10.13

Open the chart page →

2,243
horcruxstakewise1.0.11 of 1See more

horcrux stakewise 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
pydantic@1.7.3
1.10.13

Open the chart page →

1,421
take-the-helmtake-the-helm0.1.01 of 1See more

take-the-helm take-the-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
pydantic@1.9.1
1.10.13

Open the chart page →

805
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-3772.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
pydantic@1.10.4
1.10.13

Open the chart page →

3,164

Container images carrying it

40 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
blakeblackshear/frigate:0.11.18330b0a265b8
pydantic@1.9.2
1.10.13
2
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
pydantic@1.10.7
1.10.13
1
archish27/python-fastapi-postgres:latest6610071a2101
pydantic@1.9.2
1.10.13
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
pydantic@1.8.2
1.10.13
1
assistiot/fl_local_operations_inference:latest0518b63a2e69
pydantic@1.10.7
1.10.13
1
assistiot/fl_repository:latest0fce3ea719a5
pydantic@1.10.2
1.10.13
1
assistiot/fl_training_collector:latest792715dd3084
pydantic@1.8.2
1.10.13
1
binhex/arch-qbittorrentvpn:4.5.2-1-03842d321bb8f2
pydantic@1.10.7
1.10.13
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
pydantic@1.9.0
1.10.13
1
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
pydantic@1.9.1
1.10.13
1
cdignam/kodiak:v0.54.05a6a55b39cee
pydantic@1.9.1
1.10.13
1
douz/helpdesk:latest4384103d0219
pydantic@1.9.1
1.10.13
1
evk02/mlflow:2.2.1ef6ff257ef35
pydantic@1.10.6
1.10.13
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
pydantic@1.10.2
1.10.13
1
fossology/fossology:4.2.18bd1f22ba7bb
pydantic@1.10.2
1.10.13
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
pydantic@1.9.1
1.10.13
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
pydantic@1.10.12
1.10.13
1
homeassistant/home-assistant:2023.12.48d000332b09b
pydantic@1.10.12
1.10.13
1
john19968010/fastapi-template:latest31a90f6bd69c
pydantic@1.10.6
1.10.13
1
lnbitsdocker/lnbits-legend:latest26fae6327477
pydantic@1.10.9
1.10.13
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
pydantic@1.10.4
1.10.13
1
lsstsqre/exposurelog:0.8.079b00fb67a65
pydantic@1.9.0
1.10.13
1
matrixdotorg/synapse:v1.78.0def97fd537d8
pydantic@1.10.4
1.10.13
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
pydantic@1.10.2
1.10.13
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
pydantic@1.9.1
1.10.13
1
rdavidoff/twitch-channel-points-miner-v2:1.8.67ae4c5135771
pydantic@2.2.1
2.4.0
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
pydantic@1.6.2
1.10.13
1
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
pydantic@1.1.1
1.10.13
1
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
pydantic@1.7.3
1.10.13
1
witcherek7/pav:0.0.342a744f29ac0
pydantic@1.10.2
1.10.13
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
pydantic@1.10.7
1.10.13
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
pydantic@1.6.2
1.10.13
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pydantic@1.9.0
1.10.13
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pydantic@1.10.12
1.10.13
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
pydantic@1.10.10
1.10.13
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
pydantic@2.3.0
2.4.0
1
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
pydantic@1.7
1.10.13
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
pydantic@1.8.2
1.10.13
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
pydantic@1.8.2
1.10.13
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
pydantic@1.8.2
1.10.13
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.