StackRadarChart IndexLive demo

CVE-2024-39338

High

Advisory

Published 12 Aug 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.012; 67th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 63; of 17,781 indexed, latest versions
Container images: 63; deployed by those charts
Fix available: 1 of 1; affected package

Server-Side Request Forgery in axios

Carried by container images the latest versions of 63 of 17,781 indexed charts deploy, on 63 images.

Affected package	Affected versions	Fixed in	Images
axiosnpm	1.3.2, 1.3.4, 1.3.5, 1.3.6+12 more	1.7.4	63

OSV records: GHSA-8hc4-vh64-cxmj

Charts affected

63 by stars

Chart

Latest

Affected images

Radar Score

redisinsightredisinsight-helm

1 of 1 See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
redis/redisinsight :2.46	699d341bd329	axios@1.6.7	1.7.4

Open the chart page →

1,884

mastodonrivals-space

1 of 3 See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	axios@1.3.2	1.7.4

Open the chart page →

6,026

safe-stacksafe-global

1 of 9 See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
gjeanmart/safe-ganache-node :latest	926264c8f2d1	axios@1.7.2	1.7.4

Open the chart page →

19,560

safe-transaction-servicesafe-global

1 of 6 See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
gjeanmart/safe-ganache-node :latest	926264c8f2d1	axios@1.7.2	1.7.4

Open the chart page →

16,620

unifi-protectschichtel

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	axios@1.3.2	1.7.4

Open the chart page →

5,582

dashysergiotocalini

1 of 1 See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
ghcr.io/lissy93/dashy :2.1.1	acb40032ad4b	axios@1.6.0	1.7.4

Open the chart page →

3,143

sneakerssneakers

1 of 4 See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
helga09/shoes_ukr :v1.1.1	7999bc8b77c0	axios@1.4.0	1.7.4

Open the chart page →

7,574

speckle-server-branch-hotfix-2.20.2speckle

2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of 5 See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend-2 :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	fdc008effc7a	axios@1.7.2	1.7.4

Open the chart page →

16,400

speckle-server-branch-testing1speckle

2.20.6-branch.testing1.154030-9b09114

1 of 5 See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
speckle/speckle-frontend-2 :2.20.6-branch.testing1.154030-9b09114	32fc940d9b4c	axios@1.7.2	1.7.4

Open the chart page →

16,400

chatqnatest-opea

1 of 11 See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	axios@1.6.7	1.7.4

Open the chart page →

39,090

redis-vector-dbtest-opea

1 of 1 See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	axios@1.6.7	1.7.4

Open the chart page →

5,604

node-redthl-charts

1 of 1 See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
nodered/node-red :3.0.2-18	e2632a7a35dd	axios@1.6.5	1.7.4

Open the chart page →

2,806

workadventureworkadventure

4 of 9 See more

workadventure workadventure 1.1.0

4 of the 9 container images this version deploys carry CVE-2024-39338.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	axios@1.3.5	1.7.4
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	axios@1.3.5	1.7.4
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	axios@1.3.5	1.7.4
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	axios@1.3.5	1.7.4

Open the chart page →

16,083

Container images carrying it

63 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	axios@1.6.7	1.7.4	1
ghcr.io/ajnart/homarr :0.13.4	985456bdfb46	axios@1.4.0	1.7.4	1
ghcr.io/beluga-cloud/actual/actualserver :23.12.1	c8a0d5ec5a12	axios@1.6.1	1.7.4	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	axios@1.7.3	1.7.4	1
ghcr.io/data-fair/data-fair :3	cc9498b64b5b	axios@1.6.5	1.7.4	1
ghcr.io/data-fair/metrics :0	a8d40779eeae	axios@1.4.0	1.7.4	1
ghcr.io/data-fair/processings :1	5a9216989707	axios@1.6.0	1.7.4	1
ghcr.io/m9sweeper/dash :1.6.0	2e27cdff8344	axios@1.6.5	1.7.4	1
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	axios@1.3.2	1.7.4	1
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	axios@1.3.2	1.7.4	1
ghcr.io/rodg/nodecg-base :latest	31be4bf87070	axios@1.6.8	1.7.4	1
ghcr.io/sct/overseerr :1.35.0	6197516c9d7b	axios@1.3.4	1.7.4	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	axios@1.6.1	1.7.4	1