StackRadar

CVE-2023-0286

High

Advisory

Published 7 Feb 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.595
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,270
of 17,787 indexed, latest versions
Container images
1,288
deployed by those charts
Fix available
5 of 5
affected packages

Vulnerable OpenSSL included in cryptography wheels

Carried by container images the latest versions of 1,270 of 17,787 indexed charts deploy, on 1,288 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1k-r0, 1.1.1l-r0, 1.1.1l-r7, 1.1.1l-r8+9 more1.1.1t-r0, 3.0.8-r0566
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+55 more1.0.1f-1ubuntu2.27+esm6, 1.0.2g-1ubuntu4.20+esm6, 1.1.1-1ubuntu2.1~18.04.21, 1.1.1-1ubuntu2.fips.2.1~18.04.21+3 more490
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+32 more39.0.1216
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+7 more1:1.0.2k-26.el7_9, 1:1.1.1c-6.el8_1, 1:1.1.1c-21.el8_2, 1:1.1.1g-18.el8_4+1 more79
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.101.0.2n-1ubuntu5.1111
OSV records
ALPINE-CVE-2023-0286GHSA-x4qr-2fvf-3mr5RHSA-2023:1335RHSA-2023:1437RHSA-2023:1439RHSA-2023:1440RHSA-2023:1441UBUNTU-CVE-2023-0286
Also known as
PYSEC-2026-800, RHSA-2024:5136, RUSTSEC-2023-0006, USN-5844-1, USN-5845-1, USN-5845-2

Charts affected

1,270 by stars
ChartLatestAffected imagesRadar Score
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.17

Open the chart page →

15,287
nats-account-serverwenerme0.8.11 of 1See more

nats-account-server wenerme 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
natsio/nats-account-server:1.0.0a3381560aab6
openssl@1.1.1k-r0
1.1.1t-r0

Open the chart page →

2,634
openebswenerme3.10.03 of 3See more

openebs wenerme 3.10.0

3 of the 3 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.8
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.8
openebs/provisioner-localpv:3.5.0aea39e49bb97
openssl@1.1.1q-r0
1.1.1t-r0

Open the chart page →

10,568
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
cryptography@3.2.1
39.0.1

Open the chart page →

10,286
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
cryptography@3.2.1
39.0.1

Open the chart page →

11,785
csi-driver-host-pathwiremindVerified publisher0.1.11 of 8See more

csi-driver-host-path wiremind 0.1.1

1 of the 8 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
openssl@1.1.1q-r0
1.1.1t-r0

Open the chart page →

12,607
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.17

Open the chart page →

6,323
kafka-connect-uiwitcom-gmbh0.5.01 of 2See more

kafka-connect-ui witcom-gmbh 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
openssl@1.1.1n-r0
1.1.1t-r0

Open the chart page →

2,506
mrtg-backendwitcom-gmbh0.7.01 of 2See more

mrtg-backend witcom-gmbh 0.7.0

1 of the 2 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
openssl@1.1.1l-r7
1.1.1t-r0

Open the chart page →

2,616
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
cryptography@35.0.0
39.0.1

Open the chart page →

2,643
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
openssl@1.1.1n-r0
1.1.1t-r0
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
openssl@1.1.1n-r0
1.1.1t-r0

Open the chart page →

16,083
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
openssl@1.1.1l-r0
1.1.1t-r0

Open the chart page →

2,535
skoonerxdVerified publisher1.1.01 of 1See more

skooner xd 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
ymuski/skooner:latest67819ca511b5
openssl@1.1.1n-r0
1.1.1t-r0

Open the chart page →

1,752
pgbounceryasn77-pgbouncer0.0.81 of 1See more

pgbouncer yasn77-pgbouncer 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
openssl@1.1.1q-r0
1.1.1t-r0

Open the chart page →

1,152
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
openssl@1.1.1n-r0
1.1.1t-r0

Open the chart page →

7,972
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.fips.2.1~18.04.21

Open the chart page →

2,464
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.8-r0

Open the chart page →

5,847
alertmanager-matrix-forwarderzloi-space1.0.12 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
cryptography@36.0.1
39.0.1
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1t-r0

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.21
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.17

Open the chart page →

9,250
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-0286.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
cryptography@36.0.1
39.0.1

Open the chart page →

1,636

Container images carrying it

1,288 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quiq/docker-registry-ui:0.9.491281da47036
openssl@1.1.1n-r0
1.1.1t-r0
1
qumine/ingress-controller:v0.8.5f2c8a2148381
openssl@1.1.1q-r0
1.1.1t-r0
1
qumine/minecraft-server:v0.1.15c0b650d51132
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.8
1
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.21
1
ralexstokes/eth2-fork-mon:latestc0d4bbefd31f
openssl@1.1.1k-r0
1.1.1t-r0
1
rancher/hardened-calico:v3.13.36d2cd61a338b
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9
1
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
openssl@1:1.0.2k-21.el7_9
1:1.0.2k-26.el7_9
1
rancher/hardened-cni-plugins:v0.9.1-build20210414be3c1d469bf7
openssl@1:1.0.2k-21.el7_9
1:1.0.2k-26.el7_9
1
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9
1
rancher/hardened-flannel:v0.14.1-build20211022d6a47d394c03
openssl@1:1.0.2k-22.el7_9
1:1.0.2k-26.el7_9
1
rancher/hardened-kube-proxy:v1.20.2d0600143c23c
openssl@1:1.0.2k-21.el7_9
1:1.0.2k-26.el7_9
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
openssl@1:1.0.2k-21.el7_9
1:1.0.2k-26.el7_9
1
rancher/helm-controller:v0.11.9f18efbe9776e
openssl@1.1.1l-r0
1.1.1t-r0
1
rancher/local-path-provisioner:v0.0.20d5999b20a1b1
openssl@1.1.1k-r0
1.1.1t-r0
1
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
openssl@1.1.1n-r0
1.1.1t-r0
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm6
1
rclone/rclone:1.57.01e6eeabddc01
openssl@1.1.1l-r0
1.1.1t-r0
1
rclone/rclone:1.56.0f2fc45c8bc57
openssl@1.1.1k-r0
1.1.1t-r0
1
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
39.0.1
1
redestroyder/authorization-service:0.0.1740364a619fd
openssl@1.1.1l-r7
1.1.1t-r0
1
redestroyder/business-service:0.0.1db03499a0726
openssl@1.1.1l-r7
1.1.1t-r0
1
redis/redis-stack-server:6.2.6-v251a58f32d412
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.17
1
reportportal/migrations:5.7.0da5d8e1395fe
openssl@1.1.1n-r0
1.1.1t-r0
1
reportportal/service-api:5.7.29df41f8fb320
openssl@1.1.1q-r0
1.1.1t-r0
1
reportportal/service-authorization:5.7.09e73114dbd15
openssl@1.1.1n-r0
1.1.1t-r0
1
reportportal/service-jobs:5.7.2dc166c58485a
openssl@1.1.1q-r0
1.1.1t-r0
1
reportportal/service-ui:5.7.20a08784eb901
openssl@1.1.1o-r0
1.1.1t-r0
1
resouer/redis-slave:v2e2f198b49ba7
openssl@1.0.1f-1ubuntu2.8
1.0.1f-1ubuntu2.27+esm6
1
rezachalak/bzen-mongo:1.0.034f694325191
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.fips.17
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.17
1
robotshop/rs-mongodb:latest119b545823cd
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.17
1
rook/ceph:v1.20.72f970c425617
cryptography@36.0.1
39.0.1
1
rook/ceph:v1.19.2944a1dd70496
cryptography@36.0.1
39.0.1
1
rundeck/rundeck:3.2.74d64fe56f767
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm6
1
rundeck/rundeck:3.0.16b13e8059ad72
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm6
1
saiyato/snapserver:latest5d2dc80a84a1
openssl@1.1.1n-r0
1.1.1t-r0
1
samueldg/snappass:latest3987195edbe6
cryptography@2.8
39.0.1
1
sarwansharma/minio:v359d1da9385d1
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-8.el8_6
1
scottcrossen/kube-node-labels:1.1.02e9aaf85b961
openssl@1.1.1k-r0
1.1.1t-r0
1
scrapinghub/splash:3.4.1a5f89bc84606
openssl@1.1.1-1ubuntu2.1~18.04.5
openssl1.0@1.0.2n-1ubuntu5.3
1.1.1-1ubuntu2.1~18.04.21
1.0.2n-1ubuntu5.11
1
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
openssl@1.1.1f-1ubuntu2.3
39.0.1
1.1.1f-1ubuntu2.17
1
seafileltd/seafile-mc:10.0.170628f29c663
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.fips.17
1
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
openssl@1.1.1f-1ubuntu2.3
39.0.1
1.1.1f-1ubuntu2.17
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.17
1
seldonio/locust-core:0.81d0da98a2d76
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm6
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
cryptography@3.4
openssl@1:1.1.1g-15.el8_3
39.0.1
1:1.1.1g-18.el8_4
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.21
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-8.el8_6
1
sigp/lighthouse:v2.1.2ad501f02cfef
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.17
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
openssl@1.1.1n-r0
1.1.1t-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.