StackRadar

CVE-2024-58382

High

Advisory

Published 9 Dec 2024In the index since 10 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
20th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
31
of 17,781 indexed, latest versions
Container images
26
deployed by those charts
Fix available
1 of 1
affected package

league/commonmark's quadratic complexity bugs may lead to a denial of service

Carried by container images the latest versions of 31 of 17,781 indexed charts deploy, on 26 images.

Affected packageAffected versionsFixed inImages
league/commonmarkcomposer0.13.4, 1.5.8, 1.6.6, 1.6.7+7 more2.6.026
OSV records
GHSA-c2pc-g5qf-rfrf

Charts affected

31 by stars
ChartLatestAffected imagesRadar Score
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
league/commonmark@2.3.4
2.6.0

Open the chart page →

18,509
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
league/commonmark@2.4.0
2.6.0

Open the chart page →

2,709
cachetdeliveryheroVerified publisher1.3.51 of 2See more

cachet deliveryhero 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
league/commonmark@0.13.4
2.6.0

Open the chart page →

1,896
laravelrenoki-co1.0.01 of 2See more

laravel renoki-co 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
league/commonmark@1.5.8
2.6.0

Open the chart page →

6,931
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
league/commonmark@1.6.6
2.6.0

Open the chart page →

7,052
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
league/commonmark@2.2.1
2.6.0

Open the chart page →

2,076
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
league/commonmark@2.2.1
2.6.0

Open the chart page →

2,096
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
league/commonmark@1.6.6
2.6.0

Open the chart page →

3,646
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
league/commonmark@2.5.3
2.6.0

Open the chart page →

6,416
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
league/commonmark@2.5.3
2.6.0

Open the chart page →

10,072
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
league/commonmark@1.6.7
2.6.0

Open the chart page →

8,967
laravel-octanerenoki-co1.0.01 of 1See more

laravel-octane renoki-co 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
league/commonmark@1.5.8
2.6.0

Open the chart page →

3,634
repmanrepman-helmchartVerified publisher1.0.121 of 3See more

repman repman-helmchart 1.0.12

1 of the 3 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
league/commonmark@1.6.6
2.6.0

Open the chart page →

3,596
cachetadnoctemVerified publisher0.3.31 of 2See more

cachet adnoctem 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
league/commonmark@0.13.4
2.6.0

Open the chart page →

1,896
chart-appchart-app0.3.01 of 2See more

chart-app chart-app 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
n22107670/sample-app:0.4.08f3072db7aeb
league/commonmark@1.6.7
2.6.0

Open the chart page →

1,775
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
league/commonmark@2.4.2
2.6.0

Open the chart page →

1,664
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
league/commonmark@2.3.0
2.6.0

Open the chart page →

20,933
monicagabe565Verified publisher0.10.01 of 2See more

monica gabe565 0.10.0

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
league/commonmark@2.4.2
2.6.0

Open the chart page →

1,173
anonaddygeek-cookbookVerified publisher6.0.01 of 1See more

anonaddy geek-cookbook 6.0.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
anonaddy/anonaddy:0.12.3957a95565166
league/commonmark@2.3.3
2.6.0

Open the chart page →

4,788
bookstackgeek-cookbookVerified publisher5.2.01 of 1See more

bookstack geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
league/commonmark@1.6.6
2.6.0

Open the chart page →

1,269
lycheegeek-cookbookVerified publisher6.4.21 of 1See more

lychee geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
lycheeorg/lychee-laravel:v4.3.0308c0e6231da
league/commonmark@1.5.8
2.6.0

Open the chart page →

601
cachethelm-charts-nr1.3.51 of 2See more

cachet helm-charts-nr 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
league/commonmark@0.13.4
2.6.0

Open the chart page →

1,896
sample-appkubeuest0.1.31 of 1See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
michaelepitech/sample-app:latestaf51d61c19f5
league/commonmark@1.6.7
2.6.0

Open the chart page →

1,427
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
league/commonmark@2.4.0
2.6.0

Open the chart page →

12,813
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
league/commonmark@2.5.3
2.6.0

Open the chart page →

2,293
firefly-iiiphntom0.2.101 of 2See more

firefly-iii phntom 0.2.10

1 of the 2 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
league/commonmark@2.3.0
2.6.0

Open the chart page →

1,813
laravel-workerrenoki-co1.1.01 of 1See more

laravel-worker renoki-co 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
league/commonmark@1.5.8
2.6.0

Open the chart page →

5,687
bookstackschmitzis0.1.11 of 1See more

bookstack schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
solidnerd/bookstack:21.12762ffd5c51d3
league/commonmark@1.6.6
2.6.0

Open the chart page →

2,751
cachetsergiotocaliniVerified publisher1.0.01 of 1See more

cachet sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
cachethq/docker:2.3.15a61ff0f67ea7
league/commonmark@0.13.4
2.6.0

Open the chart page →

1,896
repmanteam-blueVerified publisher0.3.01 of 5See more

repman team-blue 0.3.0

1 of the 5 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
buddy/repman:1.4.0097c897f8b54
league/commonmark@1.6.6
2.6.0

Open the chart page →

3,993
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2024-58382.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
league/commonmark@2.3.3
2.6.0

Open the chart page →

2,019

Container images carrying it

26 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cachethq/docker:2.3.15a61ff0f67ea7
league/commonmark@0.13.4
2.6.0
4
buddy/repman:1.4.0097c897f8b54
league/commonmark@1.6.6
2.6.0
3
akaunting/akaunting:3.0.1552811b36ec3a
league/commonmark@2.4.0
2.6.0
1
anonaddy/anonaddy:0.12.3957a95565166
league/commonmark@2.3.3
2.6.0
1
castopod/castopod:1.12.101fd37280cbb2
league/commonmark@2.5.3
2.6.0
1
fireflyiii/core:version-5.6.142f4283bd0cf7
league/commonmark@2.2.1
2.6.0
1
invoiceninja/invoiceninja:5.6.241437916dee01
league/commonmark@2.4.0
2.6.0
1
leantime/leantime:3.3.3ad4bfb0699d3
league/commonmark@2.5.3
2.6.0
1
library/monica:4.1.2-fpm-alpine6d1b2bd0947e
league/commonmark@2.4.2
2.6.0
1
library/monica:3.7.0-apacheceb1ba4196ab
league/commonmark@2.2.1
2.6.0
1
librenms/librenms:24.11.00920bc9117a8
league/commonmark@2.5.3
2.6.0
1
librenms/librenms:22.4.14f1f3d667cc7
league/commonmark@1.6.7
2.6.0
1
linuxserver/heimdall:2.6.371597f4461e4
league/commonmark@2.4.2
2.6.0
1
lycheeorg/lychee-laravel:v4.3.0308c0e6231da
league/commonmark@1.5.8
2.6.0
1
michaelepitech/sample-app:latestaf51d61c19f5
league/commonmark@1.6.7
2.6.0
1
n22107670/sample-app:0.4.08f3072db7aeb
league/commonmark@1.6.7
2.6.0
1
phntom/fireflyiii:version-5.7.5f881ea5fbbf1
league/commonmark@2.3.0
2.6.0
1
snipe/snipe-it:v6.0.1455fb7636a98c
league/commonmark@2.3.4
2.6.0
1
solidnerd/bookstack:21.12762ffd5c51d3
league/commonmark@1.6.6
2.6.0
1
ghcr.io/linuxserver/bookstack:version-v21.12f05447347ff1
league/commonmark@1.6.6
2.6.0
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
league/commonmark@1.6.6
2.6.0
1
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
league/commonmark@2.3.3
2.6.0
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
league/commonmark@2.3.0
2.6.0
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
league/commonmark@1.5.8
2.6.0
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
league/commonmark@1.5.8
2.6.0
1
quay.io/renokico/laravel-helm-demo:octane-0.6.0cad83090c58f
league/commonmark@1.5.8
2.6.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.