CVE-2024-49769

High

Advisory

Published 29 Oct 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.014; 70th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 23; of 17,781 indexed, latest versions
Container images: 31; deployed by those charts
Fix available: 1 of 1; affected package

Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 31 images.

Affected package	Affected versions	Fixed in	Images
waitresspypi	1.2.1, 1.4.3, 1.4.4, 2.0.0+3 more	3.0.1	31

OSV records: GHSA-3f84-rpwh-47g6
Also known as: PYSEC-2024-211

Charts affected

23 by stars

Chart

Latest

Affected images

Radar Score

servarrkubitodev

1.5.2

1 of 10 See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.3.21	f104ee51e512	waitress@2.1.2	3.0.1

Open the chart page →

3,004

stackstorm-hastackstorm

1.1.0

11 of 17 See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
stackstorm/st2actionrunner :3.8	88235ba70cad	waitress@2.1.2	3.0.1
stackstorm/st2api :3.8	6f56d239d280	waitress@2.1.2	3.0.1
stackstorm/st2auth :3.8	33ecfda16608	waitress@2.1.2	3.0.1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	waitress@2.1.2	3.0.1
stackstorm/st2notifier :3.8	f190a6212195	waitress@2.1.2	3.0.1
stackstorm/st2rulesengine :3.8	259503496ff9	waitress@2.1.2	3.0.1
stackstorm/st2scheduler :3.8	b1de2055c362	waitress@2.1.2	3.0.1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	waitress@2.1.2	3.0.1
stackstorm/st2stream :3.8	1c8904a3bf67	waitress@2.1.2	3.0.1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	waitress@2.1.2	3.0.1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	waitress@2.1.2	3.0.1

Open the chart page →

96,419

servarrservarr

1.0.2

1 of 10 See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.3.16	088412db1051	waitress@2.1.2	3.0.1

Open the chart page →

14,238

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
redislabs/redisinsight :1.14.0	b03ab1426d0d	waitress@2.1.2	3.0.1

Open the chart page →

13,874

iopsciencemesh

0.4.0

1 of 2 See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
cs3org/wopiserver :v9.4.2	02a9e78757b4	waitress@2.1.2	3.0.1

Open the chart page →

4,052

speedtest-exporteralekc

0.2.0

1 of 1 See more

speedtest-exporter alekc 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
ghcr.io/miguelndecarvalho/speedtest-exporter :v3.5.4	f1064d49124c	waitress@2.1.2	3.0.1

Open the chart page →

741

keystonearzu

0.2.29

1 of 4 See more

keystone arzu 0.2.29

1 of the 4 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	waitress@2.0.0	3.0.1

Open the chart page →

22,568

syncserverchristianhuth

1.3.0

1 of 1 See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
mozilla/syncserver :latest	016162bf39d8	waitress@1.4.4	3.0.1

Open the chart page →

1,382

wopiservercs3org

0.9.2

1 of 1 See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
cs3org/wopiserver :v9.4.2	02a9e78757b4	waitress@2.1.2	3.0.1

Open the chart page →

2,348

speedtest-exportergeek-cookbook

5.4.2

1 of 1 See more

speedtest-exporter geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
ghcr.io/miguelndecarvalho/speedtest-exporter :v3.2.2	9e36964bce26	waitress@2.0.0	3.0.1

Open the chart page →

1,772

whooglegeek-cookbook

3.4.2

1 of 1 See more

whoogle geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
benbusby/whoogle-search :0.5.4	f77f7e6e4ad2	waitress@1.4.3	3.0.1

Open the chart page →

2,061

bazarrk8s-home-lab-repo

11.3.2

1 of 1 See more

bazarr k8s-home-lab-repo 11.3.2

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/bazarr :1.5.6	80cb090162b4	waitress@3.0.0	3.0.1

Open the chart page →

1,794

allurekfirfer

0.1.8

1 of 2 See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	waitress@1.4.4	3.0.1

Open the chart page →

12,527

slackgptkfirfer

0.0.6

1 of 1 See more

slackgpt kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
kfirfer/slackgpt :0.0.15	461331bd838e	waitress@2.1.2	3.0.1

Open the chart page →

1,126

alluremidokura-community

0.1.3

1 of 2 See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	waitress@1.4.4	3.0.1

Open the chart page →

12,847

errbotmidokura-community

0.0.5

1 of 1 See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
errbotio/errbot :6.1.9	00ee4e0953ab	waitress@2.1.2	3.0.1

Open the chart page →

2,233

polyglotncsa

0.1.1

1 of 18 See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
craigwillis/c2metadata-bd :latest	ae317d7e4724	waitress@1.4.4	3.0.1

Open the chart page →

55,726

libretranslateobeone

1.0.7

1 of 1 See more

libretranslate obeone 1.0.7

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
libretranslate/libretranslate :v1.9.6	1de2d7056bb8	waitress@2.1.2	3.0.1

Open the chart page →

1,990

reportportalreportportal

5.7.2

2 of 8 See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
reportportal/service-auto-analyzer :5.7.2	95ada4a216ce	waitress@2.1.1	3.0.1
reportportal/service-metrics-gatherer :1.1.20	2a0e6dc11161	waitress@1.4.3	3.0.1

Open the chart page →

25,737

syncstorageschichtel

0.1.1

1 of 1 See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
mozilla/syncstorage-rs :0.15.8	93752877dced	waitress@3.0.0	3.0.1

Open the chart page →

1,318

speedtest-exporterspeedtest-exporter

0.2.2

1 of 1 See more

speedtest-exporter speedtest-exporter 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
ghcr.io/miguelndecarvalho/speedtest-exporter :v3.5.4	f1064d49124c	waitress@2.1.2	3.0.1

Open the chart page →

741

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	waitress@1.2.1	3.0.1

Open the chart page →

10,285

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2024-49769.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	waitress@1.2.1	3.0.1

Open the chart page →

11,784

Container images carrying it

31 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
cs3org/wopiserver :v9.4.2	02a9e78757b4	waitress@2.1.2	3.0.1	2
ghcr.io/miguelndecarvalho/speedtest-exporter :v3.5.4	f1064d49124c	waitress@2.1.2	3.0.1	2
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	waitress@1.2.1	3.0.1	2
benbusby/whoogle-search :0.5.4	f77f7e6e4ad2	waitress@1.4.3	3.0.1	1
craigwillis/c2metadata-bd :latest	ae317d7e4724	waitress@1.4.4	3.0.1	1
errbotio/errbot :6.1.9	00ee4e0953ab	waitress@2.1.2	3.0.1	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	waitress@1.4.4	3.0.1	1
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	waitress@1.4.4	3.0.1	1
kfirfer/slackgpt :0.0.15	461331bd838e	waitress@2.1.2	3.0.1	1
libretranslate/libretranslate :v1.9.6	1de2d7056bb8	waitress@2.1.2	3.0.1	1
mozilla/syncserver :latest	016162bf39d8	waitress@1.4.4	3.0.1	1
mozilla/syncstorage-rs :0.15.8	93752877dced	waitress@3.0.0	3.0.1	1
openstackhelm/heat :wallaby-ubuntu_focal	f728510bab3c	waitress@2.0.0	3.0.1	1
redislabs/redisinsight :1.14.0	b03ab1426d0d	waitress@2.1.2	3.0.1	1
reportportal/service-auto-analyzer :5.7.2	95ada4a216ce	waitress@2.1.1	3.0.1	1
reportportal/service-metrics-gatherer :1.1.20	2a0e6dc11161	waitress@1.4.3	3.0.1	1
stackstorm/st2actionrunner :3.8	88235ba70cad	waitress@2.1.2	3.0.1	1
stackstorm/st2api :3.8	6f56d239d280	waitress@2.1.2	3.0.1	1
stackstorm/st2auth :3.8	33ecfda16608	waitress@2.1.2	3.0.1	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	waitress@2.1.2	3.0.1	1
stackstorm/st2notifier :3.8	f190a6212195	waitress@2.1.2	3.0.1	1
stackstorm/st2rulesengine :3.8	259503496ff9	waitress@2.1.2	3.0.1	1
stackstorm/st2scheduler :3.8	b1de2055c362	waitress@2.1.2	3.0.1	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	waitress@2.1.2	3.0.1	1
stackstorm/st2stream :3.8	1c8904a3bf67	waitress@2.1.2	3.0.1	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	waitress@2.1.2	3.0.1	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	waitress@2.1.2	3.0.1	1
ghcr.io/flaresolverr/flaresolverr :v3.3.16	088412db1051	waitress@2.1.2	3.0.1	1
ghcr.io/flaresolverr/flaresolverr :v3.3.21	f104ee51e512	waitress@2.1.2	3.0.1	1
ghcr.io/home-operations/bazarr :1.5.6	80cb090162b4	waitress@3.0.0	3.0.1	1
ghcr.io/miguelndecarvalho/speedtest-exporter :v3.2.2	9e36964bce26	waitress@2.0.0	3.0.1	1