CVE-2024-7592

High

Advisory

Published 19 Aug 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.023; 82nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 403; of 17,787 indexed, latest versions
Container images: 375; deployed by those charts
Fix available: 11 of 13; affected packages

Red Hat Security Advisory: python3.12 security update

Carried by container images the latest versions of 403 of 17,787 indexed charts deploy, on 375 images.

Affected package	Affected versions	Fixed in	Images
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+9 more	3.8.10-0ubuntu1~20.04.12	93
python3.11deb	3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+2 more	3.11.2-6+deb12u5	87
python3apk	3.10.8-r3, 3.10.9-r1, 3.10.10-r0, 3.10.12-r0+10 more	3.10.15-r0, 3.11.10-r0, 3.12.6-r0	55
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+11 more	2.7.6-8ubuntu0.6+esm20, 2.7.12-1ubuntu0~16.04.18+esm10, 2.7.17-1~18.04ubuntu1.13+esm5, 2.7.18-1~20.04.4+esm2+1 more	53
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+7 more	3.10.12-1~22.04.6	36
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	3.5.2-2ubuntu0~16.04.13+esm14	25
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7
python3.12deb	3.12.3-1	3.12.3-1ubuntu0.2	2
nodejs-20apk	20.18.3-r0	20.19.5-r0	1
python-3.12apk	3.12.0-r1	3.12.5-r2	1
python3.11rpm	3.11.7-1.el9, 3.11.7-1.el9_4.5	0:3.11.9-7.el9_5.3	2
python3.12rpm	3.12.5-2.el9_5.2	0:3.12.5-2.el9_5.3	1

OSV records: ALPINE-CVE-2024-7592 CGA-3xrq-9xcg-jm4q CGA-gwv8-8hxg-2f6r DEBIAN-CVE-2024-7592 UBUNTU-CVE-2024-7592 RHSA-2025:3631 RHSA-2025:3634
Also known as: CGA-q637-x447-73vh, CGA-vg94-939g-9wq8, USN-7015-1, USN-7015-2

Charts affected

403 by stars

Chart

Latest

Affected images

Radar Score

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2024-7592.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.6

Open the chart page →

9,248

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-7592.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	python3.10@3.10.12-1~22.04.3	3.10.12-1~22.04.6

Open the chart page →

14,100

zahori-serverzahori

1.0.1

1 of 2 See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-7592.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	python3@3.10.9-r1	3.10.15-r0

Open the chart page →

5,846

Container images carrying it

375 by charts deploying them

A fixed version is listed for 11 of the 13 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/onedr0p/qbittorrent :4.6.3	a4ad890e8c4a	python3@3.11.6-r1	3.11.10-r0	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.4	2.7.18-1~20.04.4+esm2 3.8.10-0ubuntu1~20.04.12	1
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	python3@3.11.6-r0	3.11.10-r0	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.12	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.12	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	python3.8@3.8.10-0ubuntu1~20.04.5	3.8.10-0ubuntu1~20.04.12	1
ghcr.io/thoroslives/zilean :v3.10.1	bce6aca0f6ca	python3@3.11.12-r1	3.12.6-r0	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u5	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	python3.11@3.11.2-6+deb12u4	3.11.2-6+deb12u5	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	2.7.17-1~18.04ubuntu1.13+esm5 no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	python3.8@3.8.10-0ubuntu1~20.04.4	3.8.10-0ubuntu1~20.04.12	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	2.7.17-1~18.04ubuntu1.13+esm5 no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	python3.11@3.11.2-6+deb12u3	3.11.2-6+deb12u5	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.12	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	python3.11@3.11.7-1.el9_4.5	0:3.11.9-7.el9_5.3	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	python3.6@3.6.9-1~18.04ubuntu1.8	no fix listed	1
quay.io/frrouting/frr :9.0.2	086acb1278fe	python3@3.11.6-r0	3.11.10-r0	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	python3.11@3.11.7-1.el9	0:3.11.9-7.el9_5.3	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	python3.11@3.11.2-6	3.11.2-6+deb12u5	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	python3.8@3.8.5-1~20.04.2	3.8.10-0ubuntu1~20.04.12	1