StackRadar

CVE-2024-40897

Medium

Advisory

Published 26 Jul 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.7
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
40
of 17,781 indexed, latest versions
Container images
35
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: orc security update

Carried by container images the latest versions of 40 of 17,781 indexed charts deploy, on 35 images.

Affected packageAffected versionsFixed inImages
orcdeb1:0.4.25-1, 1:0.4.28-1, 1:0.4.31-1, 1:0.4.32-2+1 more1:0.4.25-1ubuntu0.1~esm1, 1:0.4.28-1ubuntu0.1~esm1, 1:0.4.31-1ubuntu0.1, 1:0.4.32-2ubuntu0.119
orcapk0.4.33-r0, 0.4.33-r1, 0.4.34-r00.4.39-r015
orcrpm0.4.31-6.el90:0.4.31-7.el9_41
OSV records
ALPINE-CVE-2024-40897DEBIAN-CVE-2024-40897RHSA-2024:6184UBUNTU-CVE-2024-40897
Also known as
USN-6964-1, USN-6964-2

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

6,041
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

2,709
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
orc@0.4.31-6.el9
0:0.4.31-7.el9_4

Open the chart page →

7,450
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
orc@1:0.4.28-1
1:0.4.28-1ubuntu0.1~esm1

Open the chart page →

22,773
navidromeemmas-chartsVerified publisher0.0.61 of 1See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
deluan/navidrome:0.50.02cf4442b0099
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

2,129
games-on-whalesgeek-cookbookVerified publisher1.8.22 of 7See more

games-on-whales geek-cookbook 1.8.2

2 of the 7 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1

Open the chart page →

35,305
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

5,940
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1

Open the chart page →

45,832
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

2,233
games-on-whalesangelnu2.0.02 of 7See more

games-on-whales angelnu 2.0.0

2 of the 7 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1

Open the chart page →

42,126
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
orc@1:0.4.33-2
no fix listed

Open the chart page →

14,130
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
orc@1:0.4.25-1
1:0.4.25-1ubuntu0.1~esm1

Open the chart page →

77,758
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

5,141
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

6,179
Navidromeemmas-chartsVerified publisher0.0.41 of 1See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
deluan/navidrome:0.49.311a24da08977
orc@0.4.33-r0
0.4.39-r0

Open the chart page →

2,837
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
orc@1:0.4.33-2
no fix listed

Open the chart page →

12,958
neolinkgeek-cookbookVerified publisher5.4.21 of 1See more

neolink geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
thirtythreeforty/neolink:latestf564c4f538de
orc@0.4.33-r1
0.4.39-r0

Open the chart page →

1,293
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1

Open the chart page →

27,949
rtorrent-rutorrentgeek-cookbookVerified publisher1.1.21 of 1See more

rtorrent-rutorrent geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
orc@0.4.33-r0
0.4.39-r0

Open the chart page →

4,232
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
orc@1:0.4.33-2
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
orc@1:0.4.33-2
no fix listed

Open the chart page →

7,733
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1

Open the chart page →

18,066
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

6,447
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
orc@1:0.4.32-2
1:0.4.32-2ubuntu0.1

Open the chart page →

10,716
xteveluiscajl0.1.61 of 1See more

xteve luiscajl 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
dnsforge/xteve:latest4d9a685c8c28
orc@0.4.33-r0
0.4.39-r0

Open the chart page →

4,314
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

5,940
my-music-appmusic-serverVerified publisher0.1.11 of 1See more

my-music-app music-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
abdullahkhabir/radio:latest56526d0cc929
orc@0.4.33-r0
0.4.39-r0

Open the chart page →

1,561
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
orc@1:0.4.32-2
1:0.4.32-2ubuntu0.1

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
orc@1:0.4.32-2
1:0.4.32-2ubuntu0.1

Open the chart page →

12,791
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
orc@1:0.4.28-1
1:0.4.28-1ubuntu0.1~esm1

Open the chart page →

27,633
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
orc@1:0.4.25-1
1:0.4.25-1ubuntu0.1~esm1

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
orc@1:0.4.25-1
1:0.4.25-1ubuntu0.1~esm1

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
orc@1:0.4.25-1
1:0.4.25-1ubuntu0.1~esm1

Open the chart page →

29,124
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1

Open the chart page →

15,520
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
guacamole/guacd:1.5.538232cae2713
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

5,456
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
orc@1:0.4.33-2
no fix listed

Open the chart page →

10,795
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
orc@1:0.4.32-2
1:0.4.32-2ubuntu0.1

Open the chart page →

14,100
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-40897.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
orc@0.4.34-r0
0.4.39-r0

Open the chart page →

1,589

Container images carrying it

35 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
orc@1:0.4.25-1
1:0.4.25-1ubuntu0.1~esm1
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
orc@0.4.34-r0
0.4.39-r0
3
chatwoot/chatwoot:v3.1.0d530ab8c1753
orc@0.4.34-r0
0.4.39-r0
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
orc@1:0.4.32-2
1:0.4.32-2ubuntu0.1
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
orc@1:0.4.33-2
no fix listed
2
abdullahkhabir/radio:latest56526d0cc929
orc@0.4.33-r0
0.4.39-r0
1
codetogether/codetogether:latest4348c8a38752
orc@0.4.31-6.el9
0:0.4.31-7.el9_4
1
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
orc@0.4.33-r0
0.4.39-r0
1
deluan/navidrome:0.49.311a24da08977
orc@0.4.33-r0
0.4.39-r0
1
deluan/navidrome:0.50.02cf4442b0099
orc@0.4.34-r0
0.4.39-r0
1
dgtlmoon/sockpuppetbrowser:latestf166a963b550
orc@0.4.34-r0
0.4.39-r0
1
dnsforge/xteve:latest4d9a685c8c28
orc@0.4.33-r0
0.4.39-r0
1
guacamole/guacd:1.5.538232cae2713
orc@0.4.34-r0
0.4.39-r0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
orc@0.4.34-r0
0.4.39-r0
1
homeassistant/home-assistant:2023.12.48d000332b09b
orc@0.4.34-r0
0.4.39-r0
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
1
invoiceninja/invoiceninja:5.6.241437916dee01
orc@0.4.34-r0
0.4.39-r0
1
jaedb/iris:latest048cfbf58d57
orc@1:0.4.33-2
no fix listed
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
orc@1:0.4.28-1
1:0.4.28-1ubuntu0.1~esm1
1
livekit/ingress:v1.2.21ab01641b366
orc@1:0.4.32-2
1:0.4.32-2ubuntu0.1
1
openkm/openkm-ce:6.3.113bc465a7461b
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
1
project2team4/react:latest3ff031a08887
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
1
scrapinghub/splash:3.4.1a5f89bc84606
orc@1:0.4.28-1
1:0.4.28-1ubuntu0.1~esm1
1
thirtythreeforty/neolink:latestf564c4f538de
orc@0.4.33-r1
0.4.39-r0
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
orc@1:0.4.25-1
1:0.4.25-1ubuntu0.1~esm1
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
orc@1:0.4.32-2
1:0.4.32-2ubuntu0.1
1
ghcr.io/caninehq/canine:latesta058034ca006
orc@1:0.4.33-2
no fix listed
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
orc@0.4.34-r0
0.4.39-r0
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
orc@1:0.4.33-2
no fix listed
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
orc@0.4.34-r0
0.4.39-r0
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
orc@1:0.4.31-1
1:0.4.31-1ubuntu0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.