StackRadar

CVE-2024-6485

Medium

Advisory

Published 11 Jul 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.4
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
32
deployed by those charts
Fix available
None
affected package

Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 32 images.

Affected packageAffected versionsFixed inImages
bootstrapnpm3.1.1, 3.2.0, 3.3.4, 3.3.5+2 moreno fix listed32
OSV records
GHSA-vxmc-5x29-h64v

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
jupyterhubjupyterhubOfficialVerified publisher4.4.21 of 7See more

jupyterhub jupyterhub 4.4.2

1 of the 7 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
bootstrap@3.4.1
no fix listed

Open the chart page →

7,894
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bootstrap@3.4.1
no fix listed
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bootstrap@3.4.1
no fix listed

Open the chart page →

52,919
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
bootstrap@3.4.1
no fix listed
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
bootstrap@3.4.1
no fix listed

Open the chart page →

14,094
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
bootstrap@3.3.7
no fix listed

Open the chart page →

5,209
distributed-jmetercloudnativeapp1.0.11 of 1See more

distributed-jmeter cloudnativeapp 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
pedrocesarti/jmeter-docker:3.314851f144f57
bootstrap@3.3.4
no fix listed

Open the chart page →

4,532
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
bootstrap@3.4.1
no fix listed

Open the chart page →

2,519
copshalkeye1.0.11 of 1See more

cops halkeye 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
linuxserver/cops:1.1.3-ls86e299a5a4f1f2
bootstrap@3.4.1
no fix listed

Open the chart page →

122
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
bootstrap@3.3.7
no fix listed

Open the chart page →

18,277
registry-uibryanalves0.2.01 of 1See more

registry-ui bryanalves 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
konradkleine/docker-registry-frontend:v2181aad54ee64
bootstrap@3.3.4
no fix listed

Open the chart page →

4,069
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
bootstrap@3.4.1
no fix listed
countly/frontend:25.05.42acbc11499b6
bootstrap@3.4.1
no fix listed

Open the chart page →

7,295
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
bootstrap@3.3.7
no fix listed

Open the chart page →

29,901
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
bootstrap@3.3.7
no fix listed

Open the chart page →

5,209
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
bootstrap@3.4.1
no fix listed
aristidetm/k8s-hub:3.3.7ccb516cb8474
bootstrap@3.4.1
no fix listed

Open the chart page →

16,604
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
bootstrap@3.4.1
no fix listed

Open the chart page →

18,813
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
bootstrap@3.3.4
no fix listed

Open the chart page →

57,669
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bootstrap@3.4.1
no fix listed

Open the chart page →

37,671
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
bootstrap@3.4.1
no fix listed
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
bootstrap@3.4.1
no fix listed

Open the chart page →

7,356
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
bootstrap@3.4.1
no fix listed
lsstsqre/sciplat-hub:latest5e0ade6bed1c
bootstrap@3.4.1
no fix listed
lsstsqre/wfdispatcher:lateste9feb99f524d
bootstrap@3.4.1
no fix listed

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
bootstrap@3.4.1
no fix listed

Open the chart page →

17,779
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
bootstrap@3.4.1
no fix listed

Open the chart page →

8,303
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
bootstrap@3.1.1
no fix listed

Open the chart page →

27,465
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
bootstrap@3.1.1
no fix listed

Open the chart page →

6,524
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
bootstrap@3.1.1
no fix listed

Open the chart page →

4,616
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
bootstrap@3.3.5
no fix listed

Open the chart page →

5,215
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
bootstrap@3.3.7
no fix listed

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
bootstrap@3.3.7
no fix listed

Open the chart page →

12,460
dashkioskt3n2.0.01 of 1See more

dashkiosk t3n 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
bootstrap@3.2.0
no fix listed

Open the chart page →

3,827
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-6485.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
bootstrap@3.4.1
no fix listed

Open the chart page →

8,607

Container images carrying it

32 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pantsel/konga:latestc8172b75607d
bootstrap@3.3.7
no fix listed
3
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
bootstrap@3.3.7
no fix listed
2
aristidetm/basic-notebook:3.6.5469dbc951224
bootstrap@3.4.1
no fix listed
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
bootstrap@3.4.1
no fix listed
1
countly/api:25.05.4f4cc7447c4f5
bootstrap@3.4.1
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
bootstrap@3.4.1
no fix listed
1
countly/frontend:25.05.42acbc11499b6
bootstrap@3.4.1
no fix listed
1
daskdev/dask-notebook:1.1.0052630f5ca04
bootstrap@3.3.7
no fix listed
1
gristlabs/grist:0.7.96e71b1914a7e
bootstrap@3.3.5
no fix listed
1
ibmcom/microclimate-portal:latested5505e5c7ec
bootstrap@3.3.4
no fix listed
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
bootstrap@3.4.1
no fix listed
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bootstrap@3.4.1
no fix listed
1
konradkleine/docker-registry-frontend:v2181aad54ee64
bootstrap@3.3.4
no fix listed
1
linuxserver/codimd:latestb801bbcf6386
bootstrap@3.1.1
no fix listed
1
linuxserver/cops:1.1.3-ls86e299a5a4f1f2
bootstrap@3.4.1
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
bootstrap@3.4.1
no fix listed
1
lsstsqre/prepuller:latest19c2dfc4e4ff
bootstrap@3.4.1
no fix listed
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
bootstrap@3.4.1
no fix listed
1
lsstsqre/wfdispatcher:lateste9feb99f524d
bootstrap@3.4.1
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
bootstrap@3.4.1
no fix listed
1
pangeo/base-notebook:2024.01.155fbe688a4f80
bootstrap@3.4.1
no fix listed
1
pedrocesarti/jmeter-docker:3.314851f144f57
bootstrap@3.3.4
no fix listed
1
phntom/codimd:2.4.31b9aafbb62e6
bootstrap@3.1.1
no fix listed
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
bootstrap@3.1.1
no fix listed
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
bootstrap@3.4.1
no fix listed
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
bootstrap@3.4.1
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
bootstrap@3.4.1
no fix listed
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
bootstrap@3.4.1
no fix listed
1
quay.io/t3n/dashkiosk:v2.7.8c973e166a5dc
bootstrap@3.2.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.