StackRadar

CVE-2023-1255

Medium

Advisory

Published 20 Apr 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.010
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
222
of 17,781 indexed, latest versions
Container images
218
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 222 of 17,781 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+1 more3.0.8-r4136
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+4 more3.0.2-0ubuntu1.10, 3.0.2-0ubuntu1.10+Fips180
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
ALPINE-CVE-2023-1255UBUNTU-CVE-2023-1255
Also known as
USN-6119-1

Charts affected

222 by stars
ChartLatestAffected imagesRadar Score
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10

Open the chart page →

13,767
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.10

Open the chart page →

12,048
preparationsvtech-public-helm-charts1.0.01 of 1See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.10

Open the chart page →

12,048
tensor_apptensor-app0.2.22 of 3See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.10
xeladock/nginx2:latestc259a67b1dff
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.10

Open the chart page →

17,461
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.10+Fips1

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
openssl@3.0.8-r3
3.0.8-r4

Open the chart page →

4,661
nfs-servertranhailongVerified publisher0.1.21 of 1See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

2,323
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
library/postgres:15.2-alpined9c304353c03
openssl@3.0.8-r3
3.0.8-r4

Open the chart page →

3,164
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
openssl@3.0.2-0ubuntu1.10
no fix listed
3.0.2-0ubuntu1.10+Fips1

Open the chart page →

9,347
websitewaldo-visionVerified publisher0.33.02 of 2See more

website waldo-vision 0.33.0

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
openssl@3.0.8-r3
3.0.8-r4
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
openssl@3.0.8-r3
3.0.8-r4

Open the chart page →

3,474
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
wallarm/ingress-tarantool:4.6.0-1ba00516618ea
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

11,405
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.10

Open the chart page →

6,232
generic-webhookwebhooks0.1.11 of 1See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

2,030
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10

Open the chart page →

10,489
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,100
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
openssl@3.0.8-r0
3.0.8-r4
lishimeng/owl-messager:v0.11.23d00485e64dc
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
openssl@3.0.8-r0
3.0.8-r4
lishimeng/passport-profile:v0.2.160970dfe5dc8f
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

7,673
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

1,955
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.8-r4
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.8-r4

Open the chart page →

5,846

Container images carrying it

218 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
skylenet/ethereum-testnet-homepage:latest8698903e379f
openssl@3.0.7-r0
3.0.8-r4
1
srini78/nodejswebappeks:latest5d1cbdc6833a
openssl@3.0.8-r3
3.0.8-r4
1
subsquid/substrate-explorer:firesquid0889a857f192
openssl@3.0.8-r0
3.0.8-r4
1
subsquid/substrate-ingest:firesquidfa549779e9b1
openssl@3.0.8-r0
3.0.8-r4
1
sysintelligent/hello-app:2.0.177fb30df847d
openssl@3.0.7-r0
3.0.8-r4
1
tawfiq58/express-server:latestc707555f6853
openssl@3.0.8-r3
3.0.8-r4
1
thesisrobot/bitcoind:v23.016b368e4d52c
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
thirtythreeforty/neolink:latestf564c4f538de
openssl@3.0.8-r3
3.0.8-r4
1
thmmniii/fbs-core:v1.27.15438517d9fc2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.10
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
openssl@3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.10
1
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
openssl@3.0.8-r0
3.0.8-r4
1
trinodb/trino:405ee80ab5eeab2
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
1
typesense/typesense:0.25.1035ccfbc3fd8
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.10+Fips1
1
udhos/prime:1.0.0e432012dd34a
openssl@3.0.8-r3
3.0.8-r4
1
vaultwarden/server:1.27.0-alpine7cd450642c54
openssl@3.0.7-r0
3.0.8-r4
1
volkerraschek/postfixadmin-fetchmail:0.3.0e4cf12c6249d
openssl@3.0.7-r2
3.0.8-r4
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
openssl@3.0.8-r0
3.0.8-r4
1
wallarm/ingress-tarantool:4.6.0-1ba00516618ea
openssl@3.0.8-r0
3.0.8-r4
1
wistefan/mvf:lateste0887302b2d8
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.10
1
xeladock/nginx2:latestc259a67b1dff
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.10
1
xvilo/php:8.2-composera138e57d3204
openssl@3.0.8-r0
3.0.8-r4
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.8-r4
1
zedeus/nitter:bc219aa792cc0e4117888b2036a969559f4f26893dd3d5ea33be
openssl@3.0.8-r0
3.0.8-r4
1
ghcr.io/bakito/sealed-secrets-web:v3.0.574aff24d4b97
openssl@3.0.7-r0
3.0.8-r4
1
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
openssl@3.0.8-r0
3.0.8-r4
1
ghcr.io/data-fair/portals:18b621866ceb2
openssl@3.0.8-r3
3.0.8-r4
1
ghcr.io/eugenmayer/nist-data-mirror:0.1.1a2162df94729
openssl@3.0.8-r0
3.0.8-r4
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.10
1
ghcr.io/k10app/businit:latest94c9a3e799c2
openssl@3.0.7-r0
3.0.8-r4
1
ghcr.io/k10app/order:lateste1017d0dbd78
openssl@3.0.7-r0
3.0.8-r4
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
openssl@3.0.7-r2
3.0.8-r4
1
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
openssl@3.0.7-r2
3.0.8-r4
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
openssl@3.0.7-r2
3.0.8-r4
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
openssl@3.0.7-r2
3.0.8-r4
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
openssl@3.0.7-r2
3.0.8-r4
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
openssl@3.0.7-r2
3.0.8-r4
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
ghcr.io/liubin/toml-cli:v0.0.734a1da9f0f83
openssl@3.0.7-r0
3.0.8-r4
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
openssl@3.0.8-r0
3.0.8-r4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.