StackRadar

CVE-2024-48957

High

Advisory

Published 10 Oct 2024In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
7
of 17,781 indexed, latest versions
Container images
6
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 6 images.

Affected packageAffected versionsFixed inImages
libarchivedeb3.6.0-1ubuntu1, 3.6.2-1, 3.7.2-2, 3.7.2-2ubuntu0.13.6.0-1ubuntu1.2, 3.6.2-1+deb12u1, 3.7.2-2ubuntu0.26
OSV records
DEBIAN-CVE-2024-48957UBUNTU-CVE-2024-48957
Also known as
USN-7070-1

Charts affected

7 by stars
ChartLatestAffected imagesRadar Score
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-48957.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
libarchive@3.6.2-1
3.6.2-1+deb12u1

Open the chart page →

9,412
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2024-48957.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libarchive@3.7.2-2ubuntu0.1
3.7.2-2ubuntu0.2

Open the chart page →

16,954
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-48957.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libarchive@3.6.2-1
3.6.2-1+deb12u1

Open the chart page →

13,241
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2024-48957.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
libarchive@3.6.0-1ubuntu1
3.6.0-1ubuntu1.2

Open the chart page →

14,290
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2024-48957.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libarchive@3.6.2-1
3.6.2-1+deb12u1

Open the chart page →

16,384
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-48957.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libarchive@3.7.2-2
3.7.2-2ubuntu0.2

Open the chart page →

45,239
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2024-48957.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libarchive@3.7.2-2
3.7.2-2ubuntu0.2

Open the chart page →

45,239

Container images carrying it

6 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
libarchive@3.7.2-2
3.7.2-2ubuntu0.2
2
localstack/localstack:3.19d278167f2b7
libarchive@3.6.2-1
3.6.2-1+deb12u1
1
mediagis/nominatim:4.2d0eae7b51374
libarchive@3.6.0-1ubuntu1
3.6.0-1ubuntu1.2
1
photoprism/photoprism:240711-cefc6fd632ca74
libarchive@3.7.2-2ubuntu0.1
3.7.2-2ubuntu0.2
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libarchive@3.6.2-1
3.6.2-1+deb12u1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libarchive@3.6.2-1
3.6.2-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.