StackRadar

CVE-2024-40647

Low

Advisory

Published 18 Jul 2024In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
38
of 17,781 indexed, latest versions
Container images
39
deployed by those charts
Fix available
1 of 1
affected package

Sentry's Python SDK unintentionally exposes environment variables to subprocesses

Carried by container images the latest versions of 38 of 17,781 indexed charts deploy, on 39 images.

Affected packageAffected versionsFixed inImages
sentry-sdkpypi0.6.9, 0.9.5, 0.13.2, 0.13.5+28 more1.45.1, 2.8.039
OSV records
GHSA-g92j-qhmh-64v2
Also known as
PYSEC-2026-1917

Charts affected

38 by stars
ChartLatestAffected imagesRadar Score
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
sentry-sdk@1.9.2
1.45.1

Open the chart page →

9,145
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
sentry-sdk@1.5.10
1.45.1

Open the chart page →

7,705
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
sentry-sdk@2.6.0
2.8.0

Open the chart page →

6,543
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
sentry-sdk@1.37.1
1.45.1

Open the chart page →

6,041
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
sentry-sdk@2.0.1
2.8.0

Open the chart page →

17,404
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
flagsmith/flagsmith-api:v2.6.0fd58556339a4
sentry-sdk@0.19.4
1.45.1

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
sentry-sdk@1.5.10
1.45.1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
sentry-sdk@1.5.8
1.45.1

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
sentry-sdk@1.5.8
1.45.1

Open the chart page →

4,045
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
sentry-sdk@1.43.0
1.45.1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
sentry-sdk@1.44.0
1.45.1

Open the chart page →

22,202
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
sentry-sdk@0.16.5
1.45.1

Open the chart page →

7,984
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
sentry-sdk@0.20.3
1.45.1

Open the chart page →

3,153
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
sentry-sdk@0.13.2
1.45.1

Open the chart page →

3,608
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
sentry-sdk@1.39.2
1.45.1

Open the chart page →

20,403
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
sentry-sdk@1.5.8
1.45.1

Open the chart page →

2,850
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
sentry-sdk@0.19.4
1.45.1

Open the chart page →

3,162
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
sentry-sdk@1.5.5
1.45.1

Open the chart page →

3,332
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
sentry-sdk@1.41.0
1.45.1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
sentry-sdk@1.19.1
1.45.1

Open the chart page →

25,669
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
sentry-sdk@2.0.1
2.8.0

Open the chart page →

10,145
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
sentry-sdk@0.6.9
1.45.1

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
sentry-sdk@0.6.9
1.45.1

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
sentry-sdk@0.6.9
1.45.1

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
sentry-sdk@0.6.9
1.45.1

Open the chart page →

16,069
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
sentry-sdk@1.31.0
1.45.1

Open the chart page →

6,179
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
sentry-sdk@0.13.5
1.45.1

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
sentry-sdk@0.15.1
1.45.1

Open the chart page →

18,863
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
sentry-sdk@1.44.1
1.45.1

Open the chart page →

19,224
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
sentry-sdk@1.32.0
1.45.1

Open the chart page →

14,627
codecovdoubanVerified publisher0.2.42 of 8See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
sentry-sdk@1.40.4
1.45.1
codecov/self-hosted-worker:24.4.1837f546b479b
sentry-sdk@1.40.0
1.45.1

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
sentry-sdk@1.9.0
1.45.1

Open the chart page →

4,550
kodiakfikaworks1.1.41 of 2See more

kodiak fikaworks 1.1.4

1 of the 2 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
cdignam/kodiak:v0.54.05a6a55b39cee
sentry-sdk@1.5.12
1.45.1

Open the chart page →

3,892
resurrectbothalkeye0.1.51 of 1See more

resurrectbot halkeye 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
halkeye/slack-resurrect:v0.1.477b05e95fdb5
sentry-sdk@0.9.5
1.45.1

Open the chart page →

3,809
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
sentry-sdk@0.16.5
1.45.1

Open the chart page →

7,984
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
sentry-sdk@0.14.4
1.45.1

Open the chart page →

3,314
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
sentry-sdk@1.31.0
1.45.1

Open the chart page →

6,447
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
sentry-sdk@0.17.6
1.45.1

Open the chart page →

4,067
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
sentry-sdk@0.14.2
1.45.1

Open the chart page →

8,694
studygovernorstudy-governorVerified publisher0.1.381 of 3See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
sentry-sdk@1.5.7
1.45.1

Open the chart page →

1,447
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-40647.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
sentry-sdk@1.15.0
1.45.1

Open the chart page →

3,164

Container images carrying it

39 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cloudve/cloudlaunch-server:latest4a3d7fae90bb
sentry-sdk@0.6.9
1.45.1
3
weblate/weblate:4.2.2-169c160d37a3c
sentry-sdk@0.16.5
1.45.1
2
alerta/alerta-web:8.5.04786b9eaa606
sentry-sdk@0.19.4
1.45.1
1
baserow/backend:1.31.1e0b3c8130b91
sentry-sdk@2.0.1
2.8.0
1
baserow/baserow:1.30.1df0c42eb67e8
sentry-sdk@2.0.1
2.8.0
1
cdignam/kodiak:v0.54.05a6a55b39cee
sentry-sdk@1.5.12
1.45.1
1
codecov/self-hosted-api:24.4.10475cb1c3136
sentry-sdk@1.40.4
1.45.1
1
codecov/self-hosted-worker:24.4.1837f546b479b
sentry-sdk@1.40.0
1.45.1
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
sentry-sdk@1.41.0
1.45.1
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
sentry-sdk@1.43.0
1.45.1
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
sentry-sdk@1.19.1
1.45.1
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
sentry-sdk@1.44.0
1.45.1
1
douz/helpdesk:latest4384103d0219
sentry-sdk@1.9.0
1.45.1
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
sentry-sdk@0.19.4
1.45.1
1
galaxy/cloudman-server:lateste5c265fe9fcd
sentry-sdk@0.6.9
1.45.1
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
sentry-sdk@0.15.1
1.45.1
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
sentry-sdk@0.9.5
1.45.1
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
sentry-sdk@1.31.0
1.45.1
1
homeassistant/home-assistant:2023.12.48d000332b09b
sentry-sdk@1.37.1
1.45.1
1
kobotoolbox/kobocat:2.022.24ab15679454415
sentry-sdk@1.5.10
1.45.1
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
sentry-sdk@1.5.8
1.45.1
1
langgenius/dify-api:1.0.0066035f93856
sentry-sdk@1.44.1
1.45.1
1
langgenius/dify-api:0.6.11fca918260dd6
sentry-sdk@1.39.2
1.45.1
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
sentry-sdk@1.5.5
1.45.1
1
matrixdotorg/synapse:v1.78.0def97fd537d8
sentry-sdk@1.15.0
1.45.1
1
netboxcommunity/netbox:v3.2.83d652dca5351
sentry-sdk@1.9.2
1.45.1
1
octoprint/octoprint:1.4.0106c26efcd8a
sentry-sdk@0.13.2
1.45.1
1
octoprint/octoprint:1.6.1ea3bffae2470
sentry-sdk@0.20.3
1.45.1
1
opendatacube/wms:latest1b90cdf68831
sentry-sdk@0.13.5
1.45.1
1
openzaak/open-notificaties:1.3.02e65313b9b10
sentry-sdk@1.5.8
1.45.1
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
sentry-sdk@1.5.8
1.45.1
1
redash/redash:10.0.0.b503639392753c0376
sentry-sdk@0.14.4
1.45.1
1
weblate/weblate:3.11.3-182848df56ecd
sentry-sdk@0.14.2
1.45.1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
sentry-sdk@2.6.0
2.8.0
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
sentry-sdk@0.17.6
1.45.1
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
sentry-sdk@1.5.10
1.45.1
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
sentry-sdk@1.31.0
1.45.1
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
sentry-sdk@1.32.0
1.45.1
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
sentry-sdk@1.5.7
1.45.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.