CVE-2024-6874
MediumAdvisory
Published 24 Jul 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.3
- base score, highest
- EPSS
- 0.008
- 54th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 206
- of 17,781 indexed, latest versions
- Container images
- 193
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 193 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| curlapk | 7.86.0-r1, 7.87.0-r0, 7.87.0-r1, 7.87.0-r2+14 more | 8.9.0-r0 | 193 |
- OSV records
- ALPINE-CVE-2024-6874
Charts affected
206 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| wallarm-ingress-rcwallarmVerified publisher | 4.8.4 | 1 of 2See more | 2,635 |
| consulwarjiang | 1.3.0 | 1 of 2See more | 4,060 |
| generic-webhookwebhooks | 0.1.1 | 1 of 1See more | 2,030 |
| prometheusalertygqygq2Verified publisher | 1.0.0 | 1 of 1See more | 1,611 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,033 |
| sockpuppetbrowserzekker6Verified publisher | 0.1.0 | 1 of 1See more | 1,589 |
Container images carrying it
193 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| natsio/ | a67913df95f1 | curl | 8.9.0-r0 | 5 |
| ghcr.io/ | b72cf734d85f | curl | 8.9.0-r0 | 5 |
| grafana/ | 0dc5a246ab16 | curl | 8.9.0-r0 | 3 |
| library/ | 516475cc129d | curl | 8.9.0-r0 | 3 |
| nginxinc/ | be76a26e238d | curl | 8.9.0-r0 | 3 |
| pnnlmiscscripts/ | 9a2fe06a1472 | curl | 8.9.0-r0 | 3 |
| rcdelacruz/ | 38007f358355 | curl | 8.9.0-r0 | 3 |
| rss3/ | d1d2ae6efd05 | curl | 8.9.0-r0 | 3 |
| quay.io/ | fd916f75415f | curl | 8.9.0-r0 | 3 |
| registry.k8s.io/ | e5c4824e7375 | curl | 8.9.0-r0 | 3 |
| agoldis/ | e061e5714238 | curl | 8.9.0-r0 | 2 |
| alpine/ | f0c1b7ca12f6 | curl | 8.9.0-r0 | 2 |
| chatwoot/ | d530ab8c1753 | curl | 8.9.0-r0 | 2 |
| cs3org/ | 02a9e78757b4 | curl | 8.9.0-r0 | 2 |
| daniacobext/ | 9eae4d39fc33 | curl | 8.9.0-r0 | 2 |
| dtzar/ | 55429449408e | curl | 8.9.0-r0 | 2 |
| ethersphere/ | 0558799ca992 | curl | 8.9.0-r0 | 2 |
| grafana/ | 079600c9517b | curl | 8.9.0-r0 | 2 |
| krtk6160/ | cc82a694f818 | curl | 8.9.0-r0 | 2 |
| lachlanevenson/ | af5cea3f2e40 | curl | 8.9.0-r0 | 2 |
| library/ | 44a366dd7724 | curl | 8.9.0-r0 | 2 |
| library/ | 77e5d4a6ad90 | curl | 8.9.0-r0 | 2 |
| metabase/ | 1fb334ce4820 | curl | 8.9.0-r0 | 2 |
| organizr/ | 1ce319d73cdf | curl | 8.9.0-r0 | 2 |
| taigaio/ | 570c8792ce80 | curl | 8.9.0-r0 | 2 |
| temporalio/ | c0a44c26397b | curl | 8.9.0-r0 | 2 |
| temporalio/ | af9c9349708f | curl | 8.9.0-r0 | 2 |
| ghcr.io/ | b940cab56435 | curl | 8.9.0-r0 | 2 |
| ghcr.io/ | f04718704dab | curl | 8.9.0-r0 | 2 |
| registry.k8s.io/ | 5b161f051d01 | curl | 8.9.0-r0 | 2 |
| registry.k8s.io/ | b3aba22b1da8 | curl | 8.9.0-r0 | 2 |
| abdullahkhabir/ | 56526d0cc929 | curl | 8.9.0-r0 | 1 |
| alpine/ | 513c4f0d7123 | curl | 8.9.0-r0 | 1 |
| alpine/ | 21b24e6bf801 | curl | 8.9.0-r0 | 1 |
| alpine/ | bd01dae02676 | curl | 8.9.0-r0 | 1 |
| alpine/ | cd560fce90f7 | curl | 8.9.0-r0 | 1 |
| alpine/ | fc059f056ad0 | curl | 8.9.0-r0 | 1 |
| andrcuns/ | b4a8eb20581a | curl | 8.9.0-r0 | 1 |
| aquasec/ | 6e790e233872 | curl | 8.9.0-r0 | 1 |
| aquasec/ | 0795cba777e7 | curl | 8.9.0-r0 | 1 |
| aquasec/ | 944a04445179 | curl | 8.9.0-r0 | 1 |
| casbin/ | 66f836ef778b | curl | 8.9.0-r0 | 1 |
| cloudnativelabs/ | 0ec7cd73f43f | curl | 8.9.0-r0 | 1 |
| codecov/ | 0475cb1c3136 | curl | 8.9.0-r0 | 1 |
| codecov/ | 534bc4778073 | curl | 8.9.0-r0 | 1 |
| codecov/ | 837f546b479b | curl | 8.9.0-r0 | 1 |
| crazymax/ | fb307f5b87bf | curl | 8.9.0-r0 | 1 |
| daledavies/ | 0a0c8ad93902 | curl | 8.9.0-r0 | 1 |
| datawire/ | 95ec30b3c732 | curl | 8.9.0-r0 | 1 |
| ddosify/ | 56dbd7cf0776 | curl | 8.9.0-r0 | 1 |