StackRadar

CVE-2024-39338

High

Advisory

Published 12 Aug 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
63
of 17,781 indexed, latest versions
Container images
63
deployed by those charts
Fix available
1 of 1
affected package

Server-Side Request Forgery in axios

Carried by container images the latest versions of 63 of 17,781 indexed charts deploy, on 63 images.

Affected packageAffected versionsFixed inImages
axiosnpm1.3.2, 1.3.4, 1.3.5, 1.3.6+12 more1.7.463
OSV records
GHSA-8hc4-vh64-cxmj

Charts affected

63 by stars
ChartLatestAffected imagesRadar Score
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
axios@1.6.7
1.7.4

Open the chart page →

5,639
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:1.7.06dcdb5ba5091
axios@1.3.4
1.7.4

Open the chart page →

14,238
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
axios@1.4.0
1.7.4

Open the chart page →

3,795
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
axios@1.5.1
1.7.4

Open the chart page →

2,521
kubeviouskubevious1.2.23 of 7See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
axios@1.4.0
1.7.4
kubevious/collector:1.2.1f58226f9d84e
axios@1.4.0
1.7.4
kubevious/parser:1.2.299ae7a5168c2
axios@1.4.0
1.7.4

Open the chart page →

14,204
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
axios@1.6.7
1.7.4

Open the chart page →

2,635
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
axios@1.3.4
1.7.4

Open the chart page →

2,702
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
axios@1.6.5
1.7.4

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
axios@1.6.5
1.7.4

Open the chart page →

77,687
actualbeluga-cloudVerified publisher2.0.01 of 1See more

actual beluga-cloud 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/actual/actualserver:23.12.1c8a0d5ec5a12
axios@1.6.1
1.7.4

Open the chart page →

1,262
data-fairdata354-helmVerified publisher1.1.23 of 12See more

data-fair data354-helm 1.1.2

3 of the 12 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
axios@1.6.5
1.7.4
ghcr.io/data-fair/metrics:0a8d40779eeae
axios@1.4.0
1.7.4
ghcr.io/data-fair/processings:15a9216989707
axios@1.6.0
1.7.4

Open the chart page →

38,346
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
axios@1.3.2
1.7.4

Open the chart page →

5,056
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
axios@1.7.3
1.7.4

Open the chart page →

11,458
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
axios@1.6.0
1.7.4

Open the chart page →

3,143
agenthttpmqttassist-iot-composite-services1.0.01 of 1See more

agenthttpmqtt assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
axios@1.6.8
1.7.4

Open the chart page →

1,158
agentmqtthttpassist-iot-composite-services1.0.01 of 1See more

agentmqtthttp assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
axios@1.6.8
1.7.4

Open the chart page →

1,158
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
axios@1.6.5
1.7.4

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
axios@1.6.5
1.7.4

Open the chart page →

77,706
monitoring-notifyingassist-iot-monitoring-notifying0.1.01 of 1See more

monitoring-notifying assist-iot-monitoring-notifying 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
assistiot/monitoring_notifying:2.0.068324d0fa5bb
axios@1.6.5
1.7.4

Open the chart page →

1,677
multilink-clientassist-iot-multi-link-client-app1.0.01 of 2See more

multilink-client assist-iot-multi-link-client-app 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
assistiot/multi-link_client:latestcf048365d042
axios@1.3.6
1.7.4

Open the chart page →

1,446
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
axios@1.3.4
1.7.4

Open the chart page →

3,071
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
axios@1.6.5
1.7.4
countly/frontend:25.05.42acbc11499b6
axios@1.6.5
1.7.4

Open the chart page →

7,295
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
axios@1.4.0
1.7.4

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
axios@1.4.0
1.7.4

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
axios@1.4.0
1.7.4

Open the chart page →

5,141
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
axios@1.3.2
1.7.4

Open the chart page →

9,146
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
axios@1.4.0
1.7.4

Open the chart page →

1,924
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
axios@1.7.3
1.7.4

Open the chart page →

4,551
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
axios@1.6.2
1.7.4

Open the chart page →

2,862
bee-localchainethersphereVerified publisher0.2.01 of 1See more

bee-localchain ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
axios@1.6.8
1.7.4

Open the chart page →

2,266
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ethersphere/bee-localchain:latest0558799ca992
axios@1.6.8
1.7.4

Open the chart page →

4,756
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
axios@1.5.1
1.7.4

Open the chart page →

64,489
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
axios@1.3.4
1.7.4

Open the chart page →

3,159
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
axios@1.6.2
1.7.4

Open the chart page →

4,650
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
axios@1.6.0
1.7.4

Open the chart page →

34,754
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
axios@1.6.5
1.7.4

Open the chart page →

9,019
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
automatischio/automatisch:0.15.03bace7a12d5f
axios@1.6.0
1.7.4

Open the chart page →

5,769
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
axios@1.6.5
1.7.4

Open the chart page →

18,813
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
axios@1.6.1
1.7.4

Open the chart page →

63,461
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
axios@1.7.2
1.7.4

Open the chart page →

9,098
workload-operatorkubevious0.0.31 of 1See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
kubevious/workload-operator:1.0.20b0f4c507eb6
axios@1.3.4
1.7.4

Open the chart page →

2,008
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
axios@1.6.5
1.7.4

Open the chart page →

9,774
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
ghcr.io/rodg/nodecg-base:latest31be4bf87070
axios@1.6.8
1.7.4

Open the chart page →

7,315
finance-portalmojaloop5.1.41 of 11See more

finance-portal mojaloop 5.1.4

1 of the 11 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
axios@1.6.7
1.7.4

Open the chart page →

14,809
role-assignment-servicemojaloop3.1.01 of 1See more

role-assignment-service mojaloop 3.1.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
mojaloop/role-assignment-service:v2.1.0def4bf273721
axios@1.6.7
1.7.4

Open the chart page →

2,316
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
axios@1.5.0
1.7.4

Open the chart page →

4,560
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
axios@1.5.1
1.7.4

Open the chart page →

6,608
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
neoskop/papergirl:3.2.67f52b5949f03
axios@1.6.6
1.7.4

Open the chart page →

6,982
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
mishtinetwork/operator:latestbb3fe67a5f7c
axios@1.7.2
1.7.4

Open the chart page →

3,999
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-39338.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
axios@1.7.2
1.7.4
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
axios@1.6.7
1.7.4

Open the chart page →

27,373

Container images carrying it

63 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
axios@1.6.7
1.7.4
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
axios@1.4.0
1.7.4
1
ghcr.io/beluga-cloud/actual/actualserver:23.12.1c8a0d5ec5a12
axios@1.6.1
1.7.4
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
axios@1.7.3
1.7.4
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
axios@1.6.5
1.7.4
1
ghcr.io/data-fair/metrics:0a8d40779eeae
axios@1.4.0
1.7.4
1
ghcr.io/data-fair/processings:15a9216989707
axios@1.6.0
1.7.4
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
axios@1.6.5
1.7.4
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
axios@1.3.2
1.7.4
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
axios@1.3.2
1.7.4
1
ghcr.io/rodg/nodecg-base:latest31be4bf87070
axios@1.6.8
1.7.4
1
ghcr.io/sct/overseerr:1.35.06197516c9d7b
axios@1.3.4
1.7.4
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
axios@1.6.1
1.7.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.