StackRadar

CVE-2024-37891

Medium

Advisory

Published 17 Jun 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
600
of 17,787 indexed, latest versions
Container images
643
deployed by those charts
Fix available
4 of 4
affected packages

urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects

Carried by container images the latest versions of 600 of 17,787 indexed charts deploy, on 643 images.

Affected packageAffected versionsFixed inImages
python-urllib3deb1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2+8 more1.13.1-2ubuntu0.16.04.4+esm2, 1.22-1ubuntu0.18.04.2+esm2, 1.25.8-2ubuntu0.4, 1.26.5-1~exp1ubuntu0.2+1 more46
urllib3pypi1.7.1, 1.10.2, 1.13.1, 1.19.1+42 more1.26.19, 2.2.2623
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+15 more8.1.1-2ubuntu0.6+esm10, 9.0.1-2.3~ubuntu1.18.04.8+esm6, 20.0.2-5ubuntu1.11, 22.0.2+dfsg-1ubuntu0.569
python-urllib3rpm1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+3 more0:1.24.2-5.el8_6.3, 0:1.24.2-8.el8_10, 0:1.26.5-5.el9_4.134
OSV records
DEBIAN-CVE-2024-37891GHSA-34jh-p97f-mpxfRHSA-2024:5041RHSA-2024:5309RHSA-2024:6162UBUNTU-CVE-2024-37891
Also known as
PYSEC-2026-1995, RHSA-2024:5526, RHSA-2024:6240, USN-7084-1, USN-7084-2

Charts affected

600 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

643 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
assistiot/traffic-classification_api:2.0.0e32b87786142
urllib3@1.26.18
1.26.19
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python-pip@20.0.2-5ubuntu1.8
python-urllib3@1.25.8-2ubuntu0.2
urllib3@1.25.8
20.0.2-5ubuntu1.11
1.25.8-2ubuntu0.4
1.26.19
1
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
urllib3@1.26.8
1.26.19
1
baserow/backend:1.31.1e0b3c8130b91
urllib3@1.26.18
1.26.19
1
baserow/baserow:1.30.1df0c42eb67e8
urllib3@1.26.18
1.26.19
1
bbvalabs/sensitive-data:1.0.13ea299ae63c0
urllib3@1.26.4
1.26.19
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
urllib3@1.26.5
1.26.19
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.11
1
billimek/comcastusage-for-influxdb:latest801bba1228ac
urllib3@1.24
1.26.19
1
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
urllib3@1.25.9
1.26.19
1
billimek/sb6183-for-influxdb:latestbf8158556035
urllib3@1.22
1.26.19
1
blacktop/httpie:latestfc5e68e2f5ab
urllib3@1.22
1.26.19
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
python-pip@20.0.2-5ubuntu1.6
20.0.2-5ubuntu1.11
1
bootc/puppetboard:1.1.0f1383295e7be
urllib3@1.25.8
1.26.19
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
buildkite/agent:3.25.0aec38cfaae0e
urllib3@1.24.3
1.26.19
1
buntha/mlflow:2.1.1154542cc3083
urllib3@1.26.13
1.26.19
1
camerahub/camerahub:0.36.23a5af37dd6e1b
urllib3@1.26.15
1.26.19
1
camptocamp/bucket-cloner:latestacfafc308d88
urllib3@1.26.6
1.26.19
1
camptocamp/ekorre:0.1.035c91d5fda04
urllib3@1.25.8
1.26.19
1
camptocamp/pghoard:10bff736b15623
urllib3@1.24.1
1.26.19
1
camptocamp/snow-webhook:latest2924b43dbf40
urllib3@1.24.1
1.26.19
1
cdignam/kodiak:v0.54.05a6a55b39cee
urllib3@1.26.9
1.26.19
1
ceph/daemon:latest-nautilus90f30824a96e
urllib3@1.10.2
1.26.19
1
chetangautamm/repo:sipp.v3e7f7049e1544
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
chubaofs/cfs-client:3.2.015ff74209ce7
urllib3@1.26.8
1.26.19
1
chubaofs/cfs-server:3.2.0205030e045f2
urllib3@1.26.8
1.26.19
1
citizenstig/httpbin:latestb81c818ccb86
python-pip@8.1.1-2ubuntu0.4
8.1.1-2ubuntu0.6+esm10
1
ckan/ckan-base-datapusher:0.0.2184d11924549f
urllib3@1.26.5
1.26.19
1
cleveritcz/opencve:1.5.0c75c1636e0b7
urllib3@1.25.11
1.26.19
1
cloudve/janis-terminal:latestaf56e77ca587
python-pip@9.0.1-2.3~ubuntu1.18.04.1
urllib3@1.25.9
9.0.1-2.3~ubuntu1.18.04.8+esm6
1.26.19
1
cloudve/ttyd:latestd79c1c5881c0
urllib3@1.25.8
1.26.19
1
codaprotocol/buildkite-exporter:0.2.137c68e67a401
urllib3@1.26.3
1.26.19
1
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
urllib3@1.25.9
1.26.19
1
codecov/self-hosted-api:24.4.10475cb1c3136
urllib3@1.26.18
1.26.19
1
codecov/self-hosted-worker:24.4.1837f546b479b
urllib3@1.26.18
1.26.19
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
urllib3@1.26.3
1.26.19
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
urllib3@1.26.3
1.26.19
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
urllib3@1.26.9
1.26.19
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
urllib3@2.1.0
2.2.2
1
confluentinc/cp-kafka:7.5.1dc9b972db002
urllib3@2.0.5
2.2.2
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
urllib3@1.26.3
1.26.19
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
urllib3@1.26.3
1.26.19
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
urllib3@2.2.0
2.2.2
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
urllib3@1.26.3
1.26.19
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
urllib3@1.26.3
1.26.19
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
urllib3@2.0.5
2.2.2
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
urllib3@1.26.3
1.26.19
1
countly/countly-server:25.05.4e3c238248f99
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.4
1.26.19
1
craigwillis/c2metadata-bd:latestae317d7e4724
urllib3@1.26.1
1.26.19
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.