StackRadar

CVE-2022-23491

High

Advisory

Published 5 Dec 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
681
of 17,787 indexed, latest versions
Container images
633
deployed by those charts
Fix available
2 of 3
affected packages

Certifi removing TrustCor root certificate

Carried by container images the latest versions of 681 of 17,787 indexed charts deploy, on 633 images.

Affected packageAffected versionsFixed inImages
ca-certificatesdeb20130906ubuntu2, 20141019ubuntu0.14.04.1, 20160104ubuntu1, 20170717~14.04.1+18 more20211016~14.04.1~esm1, 20211016~16.04.1~esm2, 20211016ubuntu0.18.04.1, 20211016ubuntu0.20.04.1+1 more345
python-certifideb2022.9.24-1no fix listed15
certifipypi2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+19 more2022.12.07352
OSV records
DEBIAN-CVE-2022-23491UBUNTU-CVE-2022-23491GHSA-43fp-rhv2-5gv8
Also known as
PYSEC-2022-42986, USN-5761-1, USN-5761-2

Charts affected

681 by stars
ChartLatestAffected imagesRadar Score
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
ca-certificates@20211016
20211016ubuntu0.22.04.1

Open the chart page →

17,461
pagestest43221.0.02 of 3See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,190
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
certifi@2021.10.8
2022.12.07

Open the chart page →

5,321
node-redth0ths-helm-charts0.2.11 of 2See more

node-red th0ths-helm-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
th0th/node-red:4.0.3-debiand06fa39f7406
certifi@2020.6.20
2022.12.07

Open the chart page →

2,408
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
ca-certificates@20160104ubuntu1
20211016~16.04.1~esm2

Open the chart page →

11,007
pagesthiru-pages1.0.02 of 3See more

pages thiru-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,190
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.15.61f025ae37b7b
certifi@2021.10.8
2022.12.07

Open the chart page →

18,908
pagesthuy-pages1.0.02 of 3See more

pages thuy-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,190
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
certifi@2020.6.20
2022.12.07

Open the chart page →

4,423
netbirdtotmicro1.8.21 of 4See more

netbird totmicro 1.8.2

1 of the 4 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.22.215a3aab9a345
certifi@2020.12.5
2022.12.07

Open the chart page →

—
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
certifi@2022.6.15.1
2022.12.07

Open the chart page →

8,607
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
ca-certificates@20170717~16.04.2
20211016~16.04.1~esm2

Open the chart page →

15,330
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
certifi@2020.6.20
2022.12.07

Open the chart page →

13,459
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,190
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
ca-certificates@20210119~18.04.1
20211016ubuntu0.18.04.1

Open the chart page →

7,885
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
wallarm/ingress-python:4.6.0-15cb2ae08b40f
certifi@2018.8.24
2022.12.07

Open the chart page →

11,405
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ca-certificates@20201027ubuntu0.20.04.1
20211016ubuntu0.20.04.1
flyway/flyway:6.4.422d97ceb0c47
ca-certificates@20180409
20211016ubuntu0.18.04.1

Open the chart page →

20,190
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
ca-certificates@20210119~20.04.2
certifi@2020.4.5.1
20211016ubuntu0.20.04.1
2022.12.07

Open the chart page →

11,119
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
ca-certificates@20210119~18.04.2
20211016ubuntu0.18.04.1

Open the chart page →

9,743
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
certifi@2021.10.8
2022.12.07

Open the chart page →

2,670
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1

Open the chart page →

28,605
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
certifi@2020.6.20
2022.12.07

Open the chart page →

4,086
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
ca-certificates@20190110~18.04.1
20211016ubuntu0.18.04.1

Open the chart page →

10,843
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2022.12.07

Open the chart page →

9,117
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1

Open the chart page →

15,230
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
certifi@2018.10.15
2022.12.07

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
certifi@2018.10.15
2022.12.07

Open the chart page →

11,784
docker-hub-rate-limit-exporterwiremindVerified publisher0.3.01 of 1See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
viadee/docker-hub-rate-limit-exporter:version-1.52e27e3b3ee56
certifi@2020.12.5
2022.12.07

Open the chart page →

1,843
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
certifi@2021.10.8
2022.12.07

Open the chart page →

2,643
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2022-23491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ca-certificates@20210119~18.04.2
20211016ubuntu0.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1

Open the chart page →

9,207

Container images carrying it

633 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
kocolosk/couchdb-statefulset-assembler:1.2.06effb982154e
certifi@2017.11.5
2022.12.07
1
kserve/models-web-app:v0.8.063ea05e73842
certifi@2022.6.15
2022.12.07
1
kubeflownotebookswg/jupyter-web-app:v1.6.1d762690e21c1
certifi@2022.9.24
2022.12.07
1
kubeflownotebookswg/tensorboards-web-app:v1.6.10876fef1973b
certifi@2022.9.24
2022.12.07
1
kubeflownotebookswg/volumes-web-app:v1.6.17299fa94db15
certifi@2022.9.24
2022.12.07
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
ca-certificates@20180409
20211016ubuntu0.18.04.1
1
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
certifi@2017.11.5
2022.12.07
1
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
ca-certificates@20170717~16.04.2
20211016~16.04.1~esm2
1
kubitodev/traefik-ip-whitelist-sync:1.0.2aa24869319bf
certifi@2022.6.15
2022.12.07
1
library/cassandra:3.11.10b095ff3248c6
ca-certificates@20210119~20.04.1
20211016ubuntu0.20.04.1
1
library/elasticsearch:7.17.0332c6d416808
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
library/elasticsearch:7.17.8fdc73b3249c1
ca-certificates@20211016~20.04.1
20211016ubuntu0.20.04.1
1
library/flink:1.14.6-scala_2.122461f02672b3
ca-certificates@20211016
20211016ubuntu0.22.04.1
1
library/kibana:7.17.8c5781ba340ef
ca-certificates@20211016~20.04.1
20211016ubuntu0.20.04.1
1
library/kibana:7.17.3e2e2031c15be
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
library/logstash:7.17.817a4f64e9cf5
ca-certificates@20211016~20.04.1
20211016ubuntu0.20.04.1
1
library/mariadb:10.7.307e06f2e7ae9
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
library/mariadb:10.8.2-focal490f01279be1
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
library/mongo:4.4.1305678ae4e5e1
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
library/mongo:3.6146c1fd999a6
ca-certificates@20210119~16.04.1
20211016~16.04.1~esm2
1
library/mongo:4.4-bionic3d0e6df9fd5b
ca-certificates@20210119~18.04.1
20211016ubuntu0.18.04.1
1
library/mongo:4.2.16ca49afbcb2b
ca-certificates@20180409
20211016ubuntu0.18.04.1
1
library/mongo:6.0.271a63fc2438e
ca-certificates@20211016~20.04.1
20211016ubuntu0.20.04.1
1
library/mongo:4.2.21-bionic9cb28f7291d9
ca-certificates@20211016~18.04.1
20211016ubuntu0.18.04.1
1
library/mysql:8.0.303c1aab708f6e
certifi@2021.10.8
2022.12.07
1
librenms/librenms:22.4.14f1f3d667cc7
certifi@2020.12.5
2022.12.07
1
lightbend/curl:7.47.0b0c9894ac8dd
ca-certificates@20170717~16.04.1
20211016~16.04.1~esm2
1
linuxserver/babybuddy:1.10.2f7d7c7704249
certifi@2020.12.5
2022.12.07
1
linuxserver/beets:1.5.0e36d16f7341c
certifi@2021.10.8
2022.12.07
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
ca-certificates@20210119~18.04.1
20211016ubuntu0.18.04.1
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
ca-certificates@20210119~20.04.1
certifi@2021.5.30
20211016ubuntu0.20.04.1
2022.12.07
1
linuxserver/cloud9:latest45c5fe102ff3
ca-certificates@20211016~18.04.1
20211016ubuntu0.18.04.1
1
linuxserver/codimd:latestb801bbcf6386
ca-certificates@20201027ubuntu0.18.04.1
20211016ubuntu0.18.04.1
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
certifi@2018.11.29
2022.12.07
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
certifi@2019.11.28
2022.12.07
1
linuxserver/deluge:18.04.10ac871624394
ca-certificates@20210119~18.04.2
certifi@2018.1.18
20211016ubuntu0.18.04.1
2022.12.07
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
ca-certificates@20210119~18.04.2
certifi@2018.1.18
20211016ubuntu0.18.04.1
2022.12.07
1
linuxserver/healthchecks:version-v1.20.050792a72fc71
certifi@2021.5.30
2022.12.07
1
linuxserver/jellyfin:10.7.72427dde159a2
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
ca-certificates@20210119~18.04.1
certifi@2021.5.30
20211016ubuntu0.18.04.1
2022.12.07
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
ca-certificates@20180409
20211016ubuntu0.18.04.1
1
linuxserver/plex:1.25.24a13ced2326c
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
certifi@2020.6.20
2022.12.07
1
litmuschaos/mongo:4.2.899961210d467
ca-certificates@20190110~18.04.1
20211016ubuntu0.18.04.1
1
lncm/specter-desktop:v0.10.4bca14d04397d
certifi@2019.9.11
2022.12.07
1
logiqai/toolbox:2.0.155a574ec5b64
certifi@2019.11.28
2022.12.07
1
longhornio/longhorn-manager:v1.2.3dca34321452c
ca-certificates@20210119~20.04.2
20211016ubuntu0.20.04.1
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
ca-certificates@20210119~18.04.1
20211016ubuntu0.18.04.1
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2022.12.07
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
certifi@2018.8.24
2022.12.07
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.