StackRadar

CVE-2024-43485

High

Advisory

Published 8 Oct 2024In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.031
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
1 of 1
affected package

Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
System.Text.Jsonnuget6.0.2, 6.0.5, 6.0.7, 6.0.8+2 more6.0.10, 8.0.517
OSV records
GHSA-8g4q-xg66-9fp4
Also known as
BIT-dotnet-2024-43485, BIT-dotnet-sdk-2024-43485

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
sonarrpree-helm-chartsVerified publisher1.24.01 of 1See more

sonarr pree-helm-charts 1.24.0

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.20.30121f19eb5e0f42
System.Text.Json@6.0.9
6.0.10

Open the chart page →

214
sonarralekcVerified publisher1.9.01 of 1See more

sonarr alekc 1.9.0

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/hotio/sonarr:release-4.0.19.2979b948300560bb
System.Text.Json@6.0.9
6.0.10

Open the chart page →

65
servarrservarr1.0.23 of 10See more

servarr servarr 1.0.2

3 of the 10 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
System.Text.Json@6.0.9
6.0.10
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
System.Text.Json@6.0.9
6.0.10
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
System.Text.Json@6.0.8
6.0.10

Open the chart page →

14,238
sonarrm0nsterrr-sonarrVerified publisher2.2.31 of 1See more

sonarr m0nsterrr-sonarr 2.2.3

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.201f19eb5e0f42
System.Text.Json@6.0.9
6.0.10

Open the chart page →

214
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
System.Text.Json@6.0.2
6.0.10

Open the chart page →

11,558
sonarrk8s-home-lab-repo17.3.11 of 1See more

sonarr k8s-home-lab-repo 17.3.1

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
System.Text.Json@6.0.9
6.0.10

Open the chart page →

765
sonarrpanzer1119Verified publisher0.2.21 of 1See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
System.Text.Json@6.0.9
6.0.10

Open the chart page →

947
preparrpreparr0.19.71 of 6See more

preparr preparr 0.19.7

1 of the 6 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
linuxserver/sonarr:latest82172b363f9e
System.Text.Json@6.0.9
6.0.10

Open the chart page →

1,125
sonarrbdclark-helm-chartsVerified publisher0.4.31 of 1See more

sonarr bdclark-helm-charts 0.4.3

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
linuxserver/sonarr:4.0.194d9df314875e
System.Text.Json@6.0.9
6.0.10

Open the chart page →

320
prowlarrbeluga-cloudVerified publisher1.0.11 of 1See more

prowlarr beluga-cloud 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/prowlarr/prowlarr:1.4.1.3258aa774b3c3425
System.Text.Json@6.0.7
6.0.10

Open the chart page →

169
sonarrbrandan-schmitz-helm-chartsVerified publisher2.0.101 of 1See more

sonarr brandan-schmitz-helm-charts 2.0.10

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
linuxserver/sonarr:version-4.0.17.295202bc962946fe
System.Text.Json@6.0.9
6.0.10

Open the chart page →

866
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
System.Text.Json@6.0.2
6.0.10

Open the chart page →

10,379
servarrjacobcolvinVerified publisher0.1.21 of 2See more

servarr jacobcolvin 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
linuxserver/radarr:4.2.42f7a7b7a0ca6
System.Text.Json@6.0.5
6.0.10

Open the chart page →

206
sonarrloeken-at-homeVerified publisher4.0.171 of 1See more

sonarr loeken-at-home 4.0.17

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
loeken/sonarr:4.0.17b940520a2236
System.Text.Json@6.0.9
6.0.10

Open the chart page →

866
arrluiscajl1.0.91 of 2See more

arr luiscajl 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
linuxserver/sonarr:latest4d9df314875e
System.Text.Json@6.0.9
6.0.10

Open the chart page →

396
sonarrluiscajl0.1.171 of 1See more

sonarr luiscajl 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
linuxserver/sonarr:latest4d9df314875e
System.Text.Json@6.0.9
6.0.10

Open the chart page →

320
cyclonedxopenshift-bootstrapsVerified publisher1.0.121 of 1See more

cyclonedx openshift-bootstraps 1.0.12

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
System.Text.Json@6.0.5
6.0.10

Open the chart page →

726
sonarrrubxkubeVerified publisher1.4.21 of 1See more

sonarr rubxkube 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
linuxserver/sonarr:4.0.194d9df314875e
System.Text.Json@6.0.9
6.0.10

Open the chart page →

320
vote-appvote-appVerified publisher1.0.71 of 6See more

vote-app vote-app 1.0.7

1 of the 6 container images this version deploys carry CVE-2024-43485.

Container imageDigestPackageFixed in
thecloudspark/app-worker:1.0dbfcfe02bf36
System.Text.Json@8.0.0
8.0.5

Open the chart page →

3,031

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
linuxserver/sonarr:4.0.19:latest4d9df314875e
System.Text.Json@6.0.9
6.0.10
4
ghcr.io/home-operations/sonarr:4.0.20:4.0.20.30121f19eb5e0f42
System.Text.Json@6.0.9
6.0.10
2
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
System.Text.Json@6.0.5
6.0.10
1
linuxserver/radarr:4.2.42f7a7b7a0ca6
System.Text.Json@6.0.5
6.0.10
1
linuxserver/sonarr:version-4.0.17.295202bc962946fe
System.Text.Json@6.0.9
6.0.10
1
linuxserver/sonarr:latest82172b363f9e
System.Text.Json@6.0.9
6.0.10
1
loeken/sonarr:4.0.17b940520a2236
System.Text.Json@6.0.9
6.0.10
1
thecloudspark/app-worker:1.0dbfcfe02bf36
System.Text.Json@8.0.0
8.0.5
1
ghcr.io/beluga-cloud/prowlarr/prowlarr:1.4.1.3258aa774b3c3425
System.Text.Json@6.0.7
6.0.10
1
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
System.Text.Json@6.0.9
6.0.10
1
ghcr.io/hotio/sonarr:release-4.0.19.2979b948300560bb
System.Text.Json@6.0.9
6.0.10
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
System.Text.Json@6.0.2
6.0.10
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
System.Text.Json@6.0.2
6.0.10
1
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
System.Text.Json@6.0.9
6.0.10
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
System.Text.Json@6.0.9
6.0.10
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
System.Text.Json@6.0.9
6.0.10
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
System.Text.Json@6.0.8
6.0.10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.