StackRadar

CVE-2024-38428

Critical

Advisory

Published 16 Jun 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
415
of 17,781 indexed, latest versions
Container images
398
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: wget security update

Carried by container images the latest versions of 415 of 17,781 indexed charts deploy, on 398 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+12 more1.15-1ubuntu1.14.04.5+esm2, 1.17.1-1ubuntu1.5+esm1, 1.19.4-1ubuntu2.2+esm1, 1.20.3-1ubuntu2.1+4 more370
wgetrpm1.19.5-8.el8_1.1, 1.19.5-10.el8, 1.19.5-11.el8, 1.21.1-7.el90:1.19.5-10.el8_6.2, 0:1.19.5-12.el8_10, 0:1.21.1-8.el9_428
OSV records
DEBIAN-CVE-2024-38428UBUNTU-CVE-2024-38428RHSA-2024:4998RHSA-2024:5299RHSA-2024:6192RLSA-2024:5299DLA-4133-1
Also known as
RHSA-2024:6208, USN-6852-1, USN-6852-2, USN-8543-1

Charts affected

415 by stars
ChartLatestAffected imagesRadar Score
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
wget@1.21.4-1ubuntu4
1.21.4-1ubuntu4.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1

Open the chart page →

9,347
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

3,392
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

11,119
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

9,397
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,130
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1

Open the chart page →

28,605
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1

Open the chart page →

9,248
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

13,677
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

1,838
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,207

Container images carrying it

398 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ildarmukhametzyanov/priceapp:0.115d23720a3ee
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
inseefrlab/shelly:cloudshell31f04ca7436b
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
wget@1.21-1+b1
1.21-1+deb11u2
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
knspar/phronetis-operator:0.1.60c4f0543ee58
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
kporwit/vinyl_lib_app:v0.1.1217de0302218
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm1
1
langgenius/dify-api:0.6.11fca918260dd6
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
library/flink:1.14.6-scala_2.122461f02672b3
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
library/neo4j:4.2.4348e3f56faa2
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
library/neo4j:5.18.18f01f7bb053e
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
library/python:3.8d41127070014
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
library/python:3.12.9-bullseyeed4450bab88f
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
library/solr:8.7.0d124efd81fbb
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
library/sonarqube:10.0.0-communityef9723cf4fe4
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
library/storm:2.4.0bd5d420506d6
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
library/telegraf:1.20.428e98eece020
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
library/telegraf:1.27507a3eecf809
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
library/zookeeper:3.8-temurin55d1e5b2e601
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm1
1
linuxserver/plex:1.25.24a13ced2326c
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
livekit/ingress:v1.2.21ab01641b366
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
lmscommunity/logitechmediaserver:8.5.27434f3a6c9cb
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
lnbitsdocker/lnbits-legend:latest26fae6327477
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
macropower/twitch_predictions_recorder:v0.21e9c4fb89787
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
maissacrement/pock8snodejs:0.0.16da0db1159da
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
mariadb/maxscale:23.02.256c5e0908148
wget@1.19.5-11.el8
0:1.19.5-12.el8_10
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
matrixconduit/matrix-conduit:v0.6.06b395e80cc02
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
merlos/zookeeper:3.9.3a38fc7e09ed7
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
mezmohq/vector:1.17.3ad5794b112af
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
mide/minecraft-overviewer:latest4eee0dcb715f
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
mnaggar3396/python-app:latest371d8ed84b15
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
wget@1.21-1+b1
1.21-1+deb11u2
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
mozilla/syncstorage-rs:0.15.893752877dced
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
muhammedgamal/fp23:latest74b4cd69b6fa
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.