StackRadarChart IndexLive demo

CVE-2024-50342

Low

Advisory

Published 6 Nov 2024In the index since 6 Sept 2026

Severity: Low; worst across findings
CVSS: 3.1; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 61; of 17,781 indexed, latest versions
Container images: 55; deployed by those charts
Fix available: 1 of 1; affected package

Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient

Carried by container images the latest versions of 61 of 17,781 indexed charts deploy, on 55 images.

Affected package	Affected versions	Fixed in	Images
symfony/http-clientcomposer	v4.4.8, v4.4.41, v5.1.7, v5.1.8+18 more	5.4.47, 6.4.15	55

OSV records: GHSA-9c3x-r3wp-mgxm

Charts affected

61 by stars

Chart

Latest

Affected images

Radar Score

proto-component-commongroundproto-component-commonground

1 of 3 See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/proto-component-commonground-php :latest	eb36ead1954e	symfony/http-client@v5.3.2	5.4.47

Open the chart page →

7,510

review-componentreview-component

1 of 3 See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/review-component-php :latest	afe623824b82	symfony/http-client@v5.3.4	5.4.47

Open the chart page →

7,491

commonground-gatewayskeleton-pip

1 of 5 See more

commonground-gateway skeleton-pip 0.1.7

1 of the 5 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	symfony/http-client@v5.3.14	5.4.47

Open the chart page →

2,825

taalhuizen-servicetaalhuizen-service

1 of 3 See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/taalhuizen-service-php :latest	04f1b7f0d573	symfony/http-client@v5.3.4	5.4.47

Open the chart page →

7,480

repmanteam-blue

1 of 5 See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
buddy/repman :1.4.0	097c897f8b54	symfony/http-client@v5.4.2	5.4.47

Open the chart page →

3,993

trouw-servicetrouw-service

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	symfony/http-client@v5.3.2	5.4.47

Open the chart page →

7,510

verhuis-serviceverhuis-service

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	symfony/http-client@v5.3.3	5.4.47

Open the chart page →

7,510

verzoekconversieserviceverzoekconversieservice

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	symfony/http-client@v5.3.3	5.4.47

Open the chart page →

7,528

verzoekregistratiecomponentverzoekregistratiecomponent

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	symfony/http-client@v5.3.2	5.4.47

Open the chart page →

7,429

verzoektypecatalogusverzoektypecatalogus

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	symfony/http-client@v5.3.2	5.4.47

Open the chart page →

7,429

webresourcecataloguswebresourcecatalogus

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-50342.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	symfony/http-client@v5.4.8	5.4.47

Open the chart page →

7,552

Container images carrying it

55 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/conductionnl/waardepapieren-balie-php :latest	f36c423cd259	symfony/http-client@v5.3.3	5.4.47	1
ghcr.io/conductionnl/waardepapieren-php :latest	b2666ffcbad8	symfony/http-client@v5.3.3	5.4.47	1
ghcr.io/conductionnl/waardepapieren-register-php :latest	9affab218351	symfony/http-client@v5.3.3	5.4.47	1
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	symfony/http-client@v5.4.8	5.4.47	1
ghcr.io/tasmoadmin/tasmoadmin :v3.3.2	05aeefbdac2b	symfony/http-client@v6.4.2	6.4.15	1