StackRadar

CVE-2024-38428

Critical

Advisory

Published 16 Jun 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
415
of 17,781 indexed, latest versions
Container images
398
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: wget security update

Carried by container images the latest versions of 415 of 17,781 indexed charts deploy, on 398 images.

Affected packageAffected versionsFixed inImages
wgetdeb1.15-1ubuntu1, 1.15-1ubuntu1.14.04.1, 1.15-1ubuntu1.14.04.4, 1.17.1-1ubuntu1.3+12 more1.15-1ubuntu1.14.04.5+esm2, 1.17.1-1ubuntu1.5+esm1, 1.19.4-1ubuntu2.2+esm1, 1.20.3-1ubuntu2.1+4 more370
wgetrpm1.19.5-8.el8_1.1, 1.19.5-10.el8, 1.19.5-11.el8, 1.21.1-7.el90:1.19.5-10.el8_6.2, 0:1.19.5-12.el8_10, 0:1.21.1-8.el9_428
OSV records
DEBIAN-CVE-2024-38428UBUNTU-CVE-2024-38428RHSA-2024:4998RHSA-2024:5299RHSA-2024:6192RLSA-2024:5299DLA-4133-1
Also known as
RHSA-2024:6208, USN-6852-1, USN-6852-2, USN-8543-1

Charts affected

415 by stars
ChartLatestAffected imagesRadar Score
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
wget@1.21.4-1ubuntu4
1.21.4-1ubuntu4.1

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1

Open the chart page →

9,347
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

3,392
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

11,119
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

9,397
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,130
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1

Open the chart page →

28,605
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1

Open the chart page →

9,248
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
wget@1.21.3-1+b2
1.21.3-1+deb12u1

Open the chart page →

13,677
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
wget@1.21-1+deb11u1
1.21-1+deb11u2

Open the chart page →

1,838
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2024-38428.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1

Open the chart page →

9,207

Container images carrying it

398 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
vlebediantsev/file-system-ms-final:latest10393a89b4a8
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
vlebediantsev/logic-ms:latestdf8bf38c535b
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
vlebediantsev/notes-admin-front:latest007c6670ff48
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
vlebediantsev/notes-project-front:latest945675fd2636
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
vlebediantsev/registration-ms-final:latest427af418b75e
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
voltha/voltha-cli:1.6.0c4e41e92f046
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm1
1
voltha/voltha-netconf:1.6.037f80524c207
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm1
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
wget@1.17.1-1ubuntu1.4
1.17.1-1ubuntu1.5+esm1
1
voltha/voltha-tester:1.7.0655c3048a602
wget@1.17.1-1ubuntu1.5
1.17.1-1ubuntu1.5+esm1
1
wistefan/mvf:lateste0887302b2d8
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
xeotek/kadeck:4.2.94c6b04d9ce55
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
yandex/clickhouse-server:latest1cbf75aabe1e
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
yandex/clickhouse-server:21.3.204eccfffb01d7
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
yandex/clickhouse-server:19.17ab1738a64b70
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm1
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm1
1
yandex/clickhouse-server:19.16d210dc69321e
wget@1.19.4-1ubuntu2.2
1.19.4-1ubuntu2.2+esm1
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
wget@1.20.3-1ubuntu1
1.20.3-1ubuntu2.1
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
ghcr.io/0xemma/reddark:main2a115e991894
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
wget@1.19.5-10.el8
0:1.19.5-12.el8_10
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
wget@1.21.3-1+b1
1.21.3-1+deb12u1
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
ghcr.io/dask/dask:2024.1.0080150de7d86
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
wget@1.21.2-2ubuntu1
1.21.2-2ubuntu1.1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
wget@1.21.3-1+b2
1.21.3-1+deb12u1
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
wget@1.20.3-1ubuntu2
1.20.3-1ubuntu2.1
1
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
wget@1.21-1+deb11u1
1.21-1+deb11u2
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
wget@1.21-1+deb11u1
1.21-1+deb11u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.