StackRadar

CVE-2024-52338

Unscored

Advisory

Published 28 Nov 2024In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.023
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
25
of 17,781 indexed, latest versions
Container images
24
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 24 images.

Affected packageAffected versionsFixed inImages
pyarrowpypi5.0.0, 10.0.0, 10.0.1, 11.0.0+5 more17.0.024
OSV records
PYSEC-2024-161

Charts affected

25 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
pyarrow@14.0.2
17.0.0

Open the chart page →

11,367
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
pyarrow@14.0.1
17.0.0

Open the chart page →

11,384
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
pyarrow@14.0.2
17.0.0
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
pyarrow@14.0.2
17.0.0

Open the chart page →

12,746
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
pyarrow@14.0.1
17.0.0

Open the chart page →

6,168
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
pyarrow@14.0.2
17.0.0

Open the chart page →

14,094
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
pyarrow@15.0.2
17.0.0

Open the chart page →

2,452
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
pyarrow@15.0.2
17.0.0

Open the chart page →

11,205
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
pyarrow@5.0.0
17.0.0

Open the chart page →

5,305
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
pyarrow@5.0.0
17.0.0

Open the chart page →

7,129
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
pyarrow@16.1.0
17.0.0

Open the chart page →

20,403
mlflow-controllermlflow-deployment-controller0.1.81 of 2See more

mlflow-controller mlflow-deployment-controller 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
pyarrow@10.0.1
17.0.0

Open the chart page →

8,957
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
pyarrow@10.0.1
17.0.0

Open the chart page →

5,804
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
pyarrow@15.0.0
17.0.0

Open the chart page →

11,335
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
pyarrow@16.1.0
17.0.0

Open the chart page →

2,305
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
pyarrow@10.0.0
17.0.0

Open the chart page →

4,085
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
pyarrow@16.1.0
17.0.0

Open the chart page →

2,305
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
pyarrow@16.1.0
17.0.0

Open the chart page →

5,714
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
pyarrow@11.0.0
17.0.0

Open the chart page →

3,811
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
pyarrow@11.0.0
17.0.0

Open the chart page →

5,456
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
pyarrow@14.0.1
17.0.0

Open the chart page →

10,978
chatbot-ai-sampleopenshift0.1.61 of 4See more

chatbot-ai-sample openshift 0.1.6

1 of the 4 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
pyarrow@16.1.0
17.0.0

Open the chart page →

18,922
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
pyarrow@16.1.0
17.0.0

Open the chart page →

21,211
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
pyarrow@14.0.2
17.0.0

Open the chart page →

10,209
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
pyarrow@14.0.1
17.0.0

Open the chart page →

5,484
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-52338.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
pyarrow@14.0.1
17.0.0

Open the chart page →

7,085

Container images carrying it

24 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/superset:6.1.0:latest16b50bbef664
pyarrow@16.1.0
17.0.0
3
apache/airflow:2.8.4-python3.964e58748b6b9
pyarrow@14.0.2
17.0.0
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
pyarrow@16.1.0
17.0.0
1
apache/airflow:2.8.1e5560ad0b86e
pyarrow@14.0.2
17.0.0
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
pyarrow@5.0.0
17.0.0
1
apache/superset:4.0.1ab9467fd712c
pyarrow@14.0.1
17.0.0
1
buntha/mlflow:2.1.1154542cc3083
pyarrow@10.0.1
17.0.0
1
evk02/mlflow:2.2.1ef6ff257ef35
pyarrow@11.0.0
17.0.0
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
pyarrow@10.0.0
17.0.0
1
langgenius/dify-api:0.6.11fca918260dd6
pyarrow@16.1.0
17.0.0
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
pyarrow@11.0.0
17.0.0
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
pyarrow@15.0.0
17.0.0
1
pangeo/base-notebook:2024.01.155fbe688a4f80
pyarrow@14.0.2
17.0.0
1
robmarkcole/deepstack-ui:latest410275726459
pyarrow@5.0.0
17.0.0
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
pyarrow@10.0.1
17.0.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
pyarrow@14.0.1
17.0.0
1
wazuh/wazuh-manager:4.14.45a065930682d
pyarrow@14.0.1
17.0.0
1
wazuh/wazuh-manager:4.14.3f09282d281f6
pyarrow@14.0.1
17.0.0
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
pyarrow@15.0.2
17.0.0
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
pyarrow@15.0.2
17.0.0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
pyarrow@14.0.2
17.0.0
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
pyarrow@14.0.2
17.0.0
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
pyarrow@14.0.1
17.0.0
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
pyarrow@16.1.0
17.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.