StackRadar

CVE-2022-23491

High

Advisory

Published 5 Dec 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
684
of 17,787 indexed, latest versions
Container images
636
deployed by those charts
Fix available
2 of 3
affected packages

Certifi removing TrustCor root certificate

Carried by container images the latest versions of 684 of 17,787 indexed charts deploy, on 636 images.

Affected packageAffected versionsFixed inImages
ca-certificatesdeb20130906ubuntu2, 20141019ubuntu0.14.04.1, 20160104ubuntu1, 20170717~14.04.1+18 more20211016~14.04.1~esm1, 20211016~16.04.1~esm2, 20211016ubuntu0.18.04.1, 20211016ubuntu0.20.04.1+1 more345
python-certifideb2022.9.24-1no fix listed15
certifipypi2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+19 more2022.12.07355
OSV records
DEBIAN-CVE-2022-23491UBUNTU-CVE-2022-23491GHSA-43fp-rhv2-5gv8
Also known as
PYSEC-2022-42986, USN-5761-1, USN-5761-2

Charts affected

684 by stars
ChartLatestAffected imagesRadar Score
gtmetrix-bqt3n1.0.01 of 1See more

gtmetrix-bq t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
certifi@2020.4.5.1
2022.12.07

Open the chart page →

1,287
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
ca-certificates@20210119~18.04.1
20211016ubuntu0.18.04.1

Open the chart page →

10,583
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
ca-certificates@20210119~18.04.1
20211016ubuntu0.18.04.1

Open the chart page →

10,529
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
ca-certificates@20211016
20211016ubuntu0.22.04.1

Open the chart page →

17,561
pagestest43221.0.02 of 3See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,233
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
certifi@2021.10.8
2022.12.07

Open the chart page →

5,321
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
certifi@2020.6.20
2022.12.07

Open the chart page →

2,408
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
ca-certificates@20160104ubuntu1
20211016~16.04.1~esm2

Open the chart page →

11,012
pagesthiru-pages1.0.02 of 3See more

pages thiru-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,233
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.15.61f025ae37b7b
certifi@2021.10.8
2022.12.07

Open the chart page →

18,908
pagesthuy-pages1.0.02 of 3See more

pages thuy-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,233
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
certifi@2020.6.20
2022.12.07

Open the chart page →

4,434
netbirdtotmicro1.8.21 of 4See more

netbird totmicro 1.8.2

1 of the 4 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.22.215a3aab9a345
certifi@2020.12.5
2022.12.07

Open the chart page →

5,966
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
certifi@2022.6.15.1
2022.12.07

Open the chart page →

8,370
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
ca-certificates@20170717~16.04.2
20211016~16.04.1~esm2

Open the chart page →

15,345
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
certifi@2020.6.20
2022.12.07

Open the chart page →

13,563
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,233
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
ca-certificates@20210119~18.04.1
20211016ubuntu0.18.04.1

Open the chart page →

7,892
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
wallarm/ingress-python:4.6.0-15cb2ae08b40f
certifi@2018.8.24
2022.12.07

Open the chart page →

11,444
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,233
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
ca-certificates@20210119~20.04.2
certifi@2020.4.5.1
20211016ubuntu0.20.04.1
2022.12.07

Open the chart page →

11,167
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
ca-certificates@20210119~18.04.2
20211016ubuntu0.18.04.1

Open the chart page →

9,748
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
certifi@2021.10.8
2022.12.07

Open the chart page →

2,671
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1

Open the chart page →

14,420
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1

Open the chart page →

28,699
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
certifi@2020.6.20
2022.12.07

Open the chart page →

4,086
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
ca-certificates@20190110~18.04.1
20211016ubuntu0.18.04.1

Open the chart page →

10,857
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2022.12.07

Open the chart page →

8,824
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1

Open the chart page →

15,287
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
certifi@2018.10.15
2022.12.07

Open the chart page →

10,286
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
certifi@2018.10.15
2022.12.07

Open the chart page →

11,785
docker-hub-rate-limit-exporterwiremindVerified publisher0.3.01 of 1See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
certifi@2020.12.5
2022.12.07

Open the chart page →

1,843
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
certifi@2021.10.8
2022.12.07

Open the chart page →

2,643
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ca-certificates@20210119~18.04.2
20211016ubuntu0.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1

Open the chart page →

9,250

Container images carrying it

636 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
certifi@2020.12.5
2022.12.07
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
ca-certificates@20170717~16.04.2
20211016~16.04.1~esm2
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
ca-certificates@20170717~16.04.2
20211016~16.04.1~esm2
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
ca-certificates@20170717~16.04.2
20211016~16.04.1~esm2
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
certifi@2021.10.8
2022.12.07
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2022.12.07
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
certifi@2020.12.5
2022.12.07
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
certifi@2020.12.5
2022.12.07
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
certifi@2019.11.28
2022.12.07
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
certifi@2022.9.24
2022.12.07
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
certifi@2021.10.8
2022.12.07
1
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
ca-certificates@20210119~18.04.2
20211016ubuntu0.18.04.1
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
certifi@2021.10.8
2022.12.07
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
ca-certificates@20210119~18.04.1
20211016ubuntu0.18.04.1
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
certifi@2020.6.20
2022.12.07
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
ca-certificates@20210119~20.04.2
certifi@2019.11.28
20211016ubuntu0.20.04.1
2022.12.07
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
certifi@2021.10.8
2022.12.07
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
ca-certificates@20211016~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
ca-certificates@20211016~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
ca-certificates@20211016
certifi@2022.6.15
20211016ubuntu0.22.04.1
2022.12.07
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
ca-certificates@20211016~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
ca-certificates@20211016
20211016ubuntu0.22.04.1
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
ca-certificates@20210119~20.04.1
certifi@2021.5.30
20211016ubuntu0.20.04.1
2022.12.07
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
ca-certificates@20211016
20211016ubuntu0.22.04.1
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
ca-certificates@20210119~20.04.2
certifi@2021.10.8
20211016ubuntu0.20.04.1
2022.12.07
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
ca-certificates@20211016~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
ghcr.io/kubeshop/k8s-sidecar:ignore-initial-events7f583a36a764
certifi@2022.9.24
2022.12.07
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
ca-certificates@20210119~18.04.2
20211016ubuntu0.18.04.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.