StackRadar

CVE-2024-37891

Medium

Advisory

Published 17 Jun 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
600
of 17,787 indexed, latest versions
Container images
643
deployed by those charts
Fix available
4 of 4
affected packages

urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects

Carried by container images the latest versions of 600 of 17,787 indexed charts deploy, on 643 images.

Affected packageAffected versionsFixed inImages
python-urllib3deb1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2+8 more1.13.1-2ubuntu0.16.04.4+esm2, 1.22-1ubuntu0.18.04.2+esm2, 1.25.8-2ubuntu0.4, 1.26.5-1~exp1ubuntu0.2+1 more46
urllib3pypi1.7.1, 1.10.2, 1.13.1, 1.19.1+42 more1.26.19, 2.2.2623
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+15 more8.1.1-2ubuntu0.6+esm10, 9.0.1-2.3~ubuntu1.18.04.8+esm6, 20.0.2-5ubuntu1.11, 22.0.2+dfsg-1ubuntu0.569
python-urllib3rpm1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+3 more0:1.24.2-5.el8_6.3, 0:1.24.2-8.el8_10, 0:1.26.5-5.el9_4.134
OSV records
DEBIAN-CVE-2024-37891GHSA-34jh-p97f-mpxfRHSA-2024:5041RHSA-2024:5309RHSA-2024:6162UBUNTU-CVE-2024-37891
Also known as
PYSEC-2026-1995, RHSA-2024:5526, RHSA-2024:6240, USN-7084-1, USN-7084-2

Charts affected

600 by stars
ChartLatestAffected imagesRadar Score
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
kfserving/models-web-app:v0.6.1f322d6ffdfa3
urllib3@1.26.6
1.26.19

Open the chart page →

3,830
cp-helm-chartscp-helm-charts0.6.17 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
urllib3@1.26.3
1.26.19
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
urllib3@1.26.3
1.26.19
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
urllib3@1.26.3
1.26.19
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
urllib3@1.26.3
1.26.19
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
urllib3@1.26.3
1.26.19
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
urllib3@1.26.3
1.26.19
confluentinc/cp-zookeeper:6.1.078c190f4472c
urllib3@1.26.3
1.26.19

Open the chart page →

58,857
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
urllib3@1.24.1
1.26.19

Open the chart page →

3,871
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
urllib3@1.26.14
1.26.19

Open the chart page →

2,348
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
urllib3@1.26.5
1.26.19

Open the chart page →

13,852
custom-rhcl-consolecustom-rhcl-consoleVerified publisher0.1.21 of 3See more

custom-rhcl-console custom-rhcl-console 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
urllib3@1.26.5
1.26.19

Open the chart page →

1,885
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
aristidetm/k8s-hub:3.3.7ccb516cb8474
urllib3@2.2.1
2.2.2

Open the chart page →

16,604
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
urllib3@1.26.18
1.26.19

Open the chart page →

6,179
proxmox-exporterdamounVerified publisher1.10.01 of 1See more

proxmox-exporter damoun 1.10.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
urllib3@2.1.0
2.2.2

Open the chart page →

1,141
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-pip@9.0.1-2.3~ubuntu1
python-urllib3@1.22-1ubuntu0.18.04.1
urllib3@1.24.2
9.0.1-2.3~ubuntu1.18.04.8+esm6
1.22-1ubuntu0.18.04.2+esm2
1.26.19

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python-pip@9.0.1-2.3~ubuntu1.18.04.2
urllib3@1.25.10
9.0.1-2.3~ubuntu1.18.04.8+esm6
1.26.19

Open the chart page →

18,863
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
urllib3@1.24.2
9.0.1-2.3~ubuntu1.18.04.8+esm6
1.26.19

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-pip@9.0.1-2.3~ubuntu1
python-urllib3@1.22-1ubuntu0.18.04.1
urllib3@1.24.2
9.0.1-2.3~ubuntu1.18.04.8+esm6
1.22-1ubuntu0.18.04.2+esm2
1.26.19

Open the chart page →

24,335
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
urllib3@1.25.10
1.26.19

Open the chart page →

2,264
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
python-pip@22.0.2+dfsg-1ubuntu0.3
22.0.2+dfsg-1ubuntu0.5

Open the chart page →

4,798
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
urllib3@1.25.9
1.26.19

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-pip@20.0.2-5ubuntu1.9
python-urllib3@1.25.8-2ubuntu0.2
urllib3@1.25.8
20.0.2-5ubuntu1.11
1.25.8-2ubuntu0.4
1.26.19

Open the chart page →

14,856
kube-openid-connectdevopstalesVerified publisher1.1.01 of 1See more

kube-openid-connect devopstales 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
devopstales/kube-openid-connector:1.042c40a0e9f1b
urllib3@1.26.9
1.26.19

Open the chart page →

1,333
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
urllib3@1.25.11
1.26.19

Open the chart page →

10,466
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
urllib3@1.26.7
1.26.19

Open the chart page →

8,645
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
urllib3@1.25.11
1.26.19

Open the chart page →

10,466
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
urllib3@1.26.7
1.26.19

Open the chart page →

8,645
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.009b7e8705673
urllib3@2.2.1
2.2.2

Open the chart page →

19,224
autonodelabeldjjudas21Verified publisher0.0.101 of 1See more

autonodelabel djjudas21 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
djjudas21/autonodelabel:0.0.6f17233350c4f
urllib3@1.26.16
1.26.19

Open the chart page →

1,304
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
urllib3@1.24.1
1.26.19

Open the chart page →

4,217
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
urllib3@2.0.7
2.2.2

Open the chart page →

14,627
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
urllib3@1.25.11
1.26.19

Open the chart page →

3,822
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
urllib3@1.25.11
1.26.19

Open the chart page →

3,822
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
urllib3@1.25.11
1.26.19

Open the chart page →

21,641
vmware-exporterdniel0.0.11 of 1See more

vmware-exporter dniel 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
urllib3@1.26.9
1.26.19

Open the chart page →

1,351
codecovdoubanVerified publisher0.2.43 of 8See more

codecov douban 0.2.4

3 of the 8 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
urllib3@1.26.18
1.26.19
codecov/self-hosted-worker:24.4.1837f546b479b
urllib3@1.26.18
1.26.19
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
python-urllib3@1.26.5-1~exp1
urllib3@1.26.5
1.26.5-1~exp1ubuntu0.2
1.26.19

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
urllib3@1.25.11
1.26.19

Open the chart page →

4,550
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
urllib3@2.0.6
2.2.2

Open the chart page →

3,659
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
python-urllib3@1.26.5-1~exp1
urllib3@1.26.5
1.26.5-1~exp1ubuntu0.2
1.26.19

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
urllib3@1.26.9
1.26.19

Open the chart page →

13,558
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
urllib3@1.26.5
1.26.19

Open the chart page →

1,990
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
urllib3@1.24.3
1.26.19
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
urllib3@1.25.10
1.26.19
amundsendev/amundsen-search:2.4.099dda9502c3e
urllib3@1.22
1.26.19

Open the chart page →

11,174
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
urllib3@1.25.11
1.26.19

Open the chart page →

5,161
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
urllib3@1.25.8
1.26.19

Open the chart page →

5,055
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
urllib3@2.2.0
2.2.2

Open the chart page →

1,500
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
urllib3@2.2.0
2.2.2

Open the chart page →

1,643
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
urllib3@2.1.0
2.2.2

Open the chart page →

1,653
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
urllib3@2.2.0
2.2.2

Open the chart page →

1,643
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
fiware/orion-ld:1.10.03c490a746f65
urllib3@1.24.2
1.26.19

Open the chart page →

9,764
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
urllib3@1.26.12
1.26.19

Open the chart page →

30,159
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
python-pip@20.0.2-5ubuntu1.6
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
20.0.2-5ubuntu1.11
1.25.8-2ubuntu0.4
1.26.19

Open the chart page →

25,122
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
python-pip@20.0.2-5ubuntu1.8
20.0.2-5ubuntu1.11

Open the chart page →

9,334
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
urllib3@2.0.6
2.2.2

Open the chart page →

7,329
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
urllib3@1.26.13
1.26.19

Open the chart page →

4,678
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-37891.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19

Open the chart page →

20,933

Container images carrying it

643 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
python-pip@20.0.2-5ubuntu1.6
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
20.0.2-5ubuntu1.11
1.25.8-2ubuntu0.4
1.26.19
1
splunk/splunk-operator:2.0.0c4e0d3146226
python-urllib3@1.24.2-5.el8
urllib3@1.24.2
0:1.24.2-5.el8_6.3
1.26.19
1
sslhep/servicex-did-finder:v1.8.5ab0090083567
urllib3@1.26.5
1.26.19
1
sslhep/x509-secrets:v1.8.5d9e9ecb12d59
urllib3@1.26.5
1.26.19
1
stackstorm/st2actionrunner:3.888235ba70cad
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.26.18
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2api:3.86f56d239d280
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2auth:3.833ecfda16608
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.26.18
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2notifier:3.8f190a6212195
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2rulesengine:3.8259503496ff9
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.26.18
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2scheduler:3.8b1de2055c362
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2stream:3.81c8904a3bf67
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.26.18
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2timersengine:3.81bf35bfaf00c
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
stackstorm/st2workflowengine:3.819fdfffdbba8
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
urllib3@1.26.2
1.26.19
1
stashapp/stash:latest24dbd7607174
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
statcan/ckan:2.93921305425b8
python-pip@20.0.2-5ubuntu1.5
urllib3@1.25.8
20.0.2-5ubuntu1.11
1.26.19
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python-pip@20.0.2-5ubuntu1.5
20.0.2-5ubuntu1.11
1
streamnative/private-cloud-console:v2.3.27-all91e54375e154
urllib3@1.26.18
1.26.19
1
substratusai/verba:v0.4.0-baseURL261695be635eb
urllib3@2.2.1
2.2.2
1
supabase/realtime:v2.102.3aa1c92c0cf32
urllib3@1.26.12
1.26.19
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
urllib3@1.26.18
1.26.19
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
python-urllib3@1.25.8-2ubuntu0.3
urllib3@1.26.9
1.25.8-2ubuntu0.4
1.26.19
1
svtechnmaa/svtech_rundeck_option_provider:v1.1.1674fad30a51f
urllib3@1.26.18
1.26.19
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
urllib3@1.26.13
1.26.19
1
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
urllib3@1.25.9
1.26.19
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
urllib3@1.26.14
1.26.19
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
urllib3@1.26.7
1.26.19
1
taigaio/taiga-back:6.4.29f97323cc150
urllib3@1.24.3
1.26.19
1
teknas09/bird-pod:latest12a1fa85c4aa
urllib3@2.2.1
2.2.2
1
tenableofficial/nessus:latestc88e43fe1a8c
urllib3@1.26.18
1.26.19
1
th0th/node-red:4.0.3-debiand06fa39f7406
urllib3@1.26.5
1.26.19
1
thongngo3301/stakefish:latesta341af5976e3
urllib3@2.2.1
2.2.2
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
python-urllib3@1.26.5-1~exp1
urllib3@1.26.5
1.26.5-1~exp1ubuntu0.2
1.26.19
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
python-urllib3@1.26.5-1~exp1
urllib3@1.26.5
1.26.5-1~exp1ubuntu0.2
1.26.19
1
timescale/timescaledb-ha:pg16d7db8f1085a3
urllib3@1.26.5
1.26.19
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
urllib3@1.26.5
1.26.19
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
python-urllib3@1.26.5-1~exp1
urllib3@1.26.5
1.26.5-1~exp1ubuntu0.2
1.26.19
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
python-pip@8.1.1-2ubuntu0.4
urllib3@1.22
8.1.1-2ubuntu0.6+esm10
1.26.19
1
tomsajan/netio-exporter:0.0.5fb61907707b8
urllib3@2.2.1
2.2.2
1
tomsquest/docker-radicale:3.1.1.04759cc353a1d
urllib3@1.26.5
1.26.19
1
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
urllib3@1.24.1
1.26.19
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python-urllib3@1.26.5-1~exp1ubuntu0.1
urllib3@1.26.5
1.26.5-1~exp1ubuntu0.2
1.26.19
1
ubcctlt/barman:v2.19cbbbbc8ae16b
urllib3@1.25.11
1.26.19
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
urllib3@1.26.8
1.26.19
1
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
urllib3@1.26.3
1.26.19
1
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
python-urllib3@1.24.2-5.el8
urllib3@1.24.2
0:1.24.2-8.el8_10
1.26.19
1
voltha/voltha-cli:1.6.0c4e41e92f046
python-pip@8.1.1-2ubuntu0.4
python-urllib3@1.13.1-2ubuntu0.16.04.2
urllib3@1.13.1
8.1.1-2ubuntu0.6+esm10
1.13.1-2ubuntu0.16.04.4+esm2
1.26.19
1
voltha/voltha-netconf:1.6.037f80524c207
python-pip@8.1.1-2ubuntu0.4
urllib3@1.22
8.1.1-2ubuntu0.6+esm10
1.26.19
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.