CVE-2024-50349
MediumAdvisory
Published 14 Jan 2025In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.7
- base score, highest
- EPSS
- 0.007
- 50th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 211
- of 17,781 indexed, latest versions
- Container images
- 194
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: git security update
Carried by container images the latest versions of 211 of 17,781 indexed charts deploy, on 194 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gitdeb | 1:2.7.4-0ubuntu1.3, 1:2.7.4-0ubuntu1.4, 1:2.7.4-0ubuntu1.6, 1:2.7.4-0ubuntu1.7+25 more | 1:2.7.4-0ubuntu1.10+esm13, 1:2.17.1-1ubuntu0.18+esm6, 1:2.25.1-1ubuntu3.14, 1:2.34.1-1ubuntu1.12+1 more | 173 |
| gitapk | 2.43.0-r0, 2.43.4-r0, 2.43.5-r0, 2.45.2-r0+1 more | 2.43.6-r0, 2.45.3-r0, 2.47.2-r0 | 19 |
| gitrpm | 2.43.0-1.el9, 2.43.5-1.el9_4 | 0:2.43.5-1.el9_4.3 | 2 |
- OSV records
- ALPINE-CVE-2024-50349DEBIAN-CVE-2024-50349UBUNTU-CVE-2024-50349RHSA-2025:19601
- Also known as
- USN-7207-1, USN-7207-2, USN-7964-1
Charts affected
211 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| codetranstest-opea | 1.0.0 | 2 of 5See more | 28,385 |
| docsumtest-opea | 1.0.0 | 2 of 5See more | 28,858 |
| vehicle-dashboardtest-vehi-dash | 0.1.0 | 1 of 7See more | 20,270 |
| node-redthl-chartsVerified publisher | 0.1.0 | 1 of 1See more | 2,806 |
| harbor-scanner-trivytrivy-operator | 0.31.2 | 1 of 1See more | 2,477 |
| tfy-distributortruefoundryVerified publisher | 0.0.1 | 1 of 4See more | 17,323 |
| jupyterhubuninettsigma2 | 1.6.0 | 1 of 5See more | 8,607 |
| demo-backendv2flyVerified publisher | 0.0.3 | 1 of 1See more | 14,358 |
| kongwallarmVerified publisher | 4.6.3 | 1 of 7See more | 11,405 |
| marge-botwiremindVerified publisher | 1.4.4 | 1 of 1See more | 5,542 |
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,100 |
Container images carrying it
194 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| daskdev/ | 052630f5ca04 | git | 1:2.17.1-1ubuntu0.18+esm6 | 1 |
| dblaci/ | eea697611af4 | git | 1:2.34.1-1ubuntu1.12 | 1 |
| esphome/ | 9ab8cc88b28c | git | 1:2.39.5-0+deb12u2 | 1 |
| esphome/ | b2c6322700ac | git | 1:2.39.5-0+deb12u2 | 1 |
| ethereumex/ | a7603aa8df4c | git | 1:2.7.4-0ubuntu1.10+esm13 | 1 |
| felipecs8/ | 29e06c9c6385 | git | 1:2.39.5-0+deb12u2 | 1 |
| galaxy/ | e5c265fe9fcd | git | 1:2.25.1-1ubuntu3.14 | 1 |
| gethue/ | 11b649636e68 | git | 1:2.25.1-1ubuntu3.14 | 1 |
| gethue/ | 5702b2c37ff9 | git | 1:2.17.1-1ubuntu0.18+esm6 | 1 |
| gitea/ | 6120b1165f3a | git | 2.45.3-r0 | 1 |
| gitea/ | c57233403eff | git | 2.45.3-r0 | 1 |
| gitea/ | 76f516a1a8c2 | git | 2.45.3-r0 | 1 |
| gitlab/ | 860d4a3fec7a | git | 1:2.25.1-1ubuntu3.14 | 1 |
| hashicorp/ | b77efab1a448 | git | 2.45.3-r0 | 1 |
| haugene/ | 059216cfae4b | git | 1:2.25.1-1ubuntu3.14 | 1 |
| haveagitgat/ | 1256348872ce | git | 1:2.25.1-1ubuntu3.14 | 1 |
| helicone/ | 4c69b971a7e4 | git | 1:2.25.1-1ubuntu3.14 | 1 |
| helicone/ | 4a913936c97b | git | 1:2.39.5-0+deb12u2 | 1 |
| hiboxsystems/ | dcffb926e563 | git | 1:2.39.5-0+deb12u2 | 1 |
| hmediade/ | 7f005eb6c718 | git | 1:2.34.1-1ubuntu1.12 | 1 |
| huginn/ | c794eddc7b47 | git | 1:2.17.1-1ubuntu0.18+esm6 | 1 |
| hyperledger/ | c65891b6c237 | git | 1:2.7.4-0ubuntu1.10+esm13 | 1 |
| ibmcom/ | b5d8c6714dbc | git | 1:2.7.4-0ubuntu1.10+esm13 | 1 |
| ildarmukhametzyanov/ | 15d23720a3ee | git | 1:2.39.5-0+deb12u2 | 1 |
| inseefrlab/ | 31f04ca7436b | git | 1:2.34.1-1ubuntu1.12 | 1 |
| jedi132000/ | dc2a81e92f23 | git | 1:2.25.1-1ubuntu3.14 | 1 |
| jenkins/ | 95313257a8cd | git | 1:2.39.5-0+deb12u2 | 1 |
| jenkins/ | de4fea113221 | git | 1:2.39.5-0+deb12u2 | 1 |
| jmferrer/ | 030f68ec6998 | git | 1:2.7.4-0ubuntu1.10+esm13 | 1 |
| jupyterhub/ | b6b4a1a34bf0 | git | 1:2.25.1-1ubuntu3.14 | 1 |
| jupyterhub/ | e4770285aaf7 | git | 1:2.25.1-1ubuntu3.14 | 1 |
| jupyterhub/ | e3e6f3051df8 | git | 1:2.25.1-1ubuntu3.14 | 1 |
| knspar/ | 0c4f0543ee58 | git | 1:2.39.5-0+deb12u2 | 1 |
| kong/ | a6ac46531193 | git | 1:2.34.1-1ubuntu1.12 | 1 |
| lib42/ | a55596cda383 | git | 1:2.39.5-0+deb12u2 | 1 |
| library/ | dd43b430341a | git | 2.45.3-r0 | 1 |
| library/ | d41127070014 | git | 1:2.39.5-0+deb12u2 | 1 |
| librenms/ | 0920bc9117a8 | git | 2.43.6-r0 | 1 |
| linuxserver/ | 45c5fe102ff3 | git | 1:2.17.1-1ubuntu0.18+esm6 | 1 |
| linuxserver/ | a5e43a05ae79 | git | 1:2.34.1-1ubuntu1.12 | 1 |
| localstack/ | 9d278167f2b7 | git | 1:2.39.5-0+deb12u2 | 1 |
| lsstsqre/ | b75bf8aaafa4 | git | 1:2.25.1-1ubuntu3.14 | 1 |
| mediagis/ | c15e941485ef | git | 1:2.25.1-1ubuntu3.14 | 1 |
| mediagis/ | d0eae7b51374 | git | 1:2.34.1-1ubuntu1.12 | 1 |
| moreillon/ | d2ee0423b797 | git | 1:2.39.5-0+deb12u2 | 1 |
| mshanley80/ | 5b189a70c0fb | git | 1:2.25.1-1ubuntu3.14 | 1 |
| muhammedgamal/ | 74b4cd69b6fa | git | 1:2.39.5-0+deb12u2 | 1 |
| muluder/ | 43b597a93da7 | git | 1:2.7.4-0ubuntu1.10+esm13 | 1 |
| nodered/ | e2632a7a35dd | git | 2.43.6-r0 | 1 |
| odavid/ | e7ab3bbc948e | git | 2.45.3-r0 | 1 |