CVE-2024-41264

Unscored

Advisory

Published 6 Aug 2024In the index since 8 Sept 2026

casdoor's use of`ssh.InsecureIgnoreHostKey()` disables host key verification in github.com/casdoor/casdoor

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
github.com/casdoor/casdoorgolang	v1.1000.1-0.20260524134933-0585ecff0b9d+dirty, v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed	2

2 by stars

Chart

Latest

Affected images

Radar Score

1 of the 34 container images this version deploys carry CVE-2024-41264.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.0	e08231f16c00	github.com/casdoor/casdoor@v1.1000.1-0.20260524134933-0585ecff0b9d+dirty	no fix listed

58,897

1 of the 10 container images this version deploys carry CVE-2024-41264.

Container image	Digest	Package	Fixed in
casbin/casdoor :3.62.1	7729da148c61	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed

11,335

2 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
casbin/casdoor :3.62.1	7729da148c61	github.com/casdoor/casdoor@v1.1000.1-0.20260526150414-a465c0844014+dirty	no fix listed	1
casbin/casdoor :3.62.0	e08231f16c00	github.com/casdoor/casdoor@v1.1000.1-0.20260524134933-0585ecff0b9d+dirty	no fix listed	1