StackRadar

CVE-2023-1255

Medium

Advisory

Published 20 Apr 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.010
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
222
of 17,781 indexed, latest versions
Container images
218
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 222 of 17,781 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+1 more3.0.8-r4136
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+4 more3.0.2-0ubuntu1.10, 3.0.2-0ubuntu1.10+Fips180
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
ALPINE-CVE-2023-1255UBUNTU-CVE-2023-1255
Also known as
USN-6119-1

Charts affected

222 by stars
ChartLatestAffected imagesRadar Score
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10

Open the chart page →

13,767
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.10

Open the chart page →

12,048
preparationsvtech-public-helm-charts1.0.01 of 1See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.10

Open the chart page →

12,048
tensor_apptensor-app0.2.22 of 3See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.10
xeladock/nginx2:latestc259a67b1dff
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.10

Open the chart page →

17,461
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.10+Fips1

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
openssl@3.0.8-r3
3.0.8-r4

Open the chart page →

4,661
nfs-servertranhailongVerified publisher0.1.21 of 1See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

2,323
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
library/postgres:15.2-alpined9c304353c03
openssl@3.0.8-r3
3.0.8-r4

Open the chart page →

3,164
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
openssl@3.0.2-0ubuntu1.10
no fix listed
3.0.2-0ubuntu1.10+Fips1

Open the chart page →

9,347
websitewaldo-visionVerified publisher0.33.02 of 2See more

website waldo-vision 0.33.0

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
openssl@3.0.8-r3
3.0.8-r4
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
openssl@3.0.8-r3
3.0.8-r4

Open the chart page →

3,474
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
wallarm/ingress-tarantool:4.6.0-1ba00516618ea
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

11,405
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.10

Open the chart page →

6,232
generic-webhookwebhooks0.1.11 of 1See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

2,030
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10

Open the chart page →

10,489
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,100
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
openssl@3.0.8-r0
3.0.8-r4
lishimeng/owl-messager:v0.11.23d00485e64dc
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
openssl@3.0.8-r0
3.0.8-r4
lishimeng/passport-profile:v0.2.160970dfe5dc8f
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

7,673
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.8-r4

Open the chart page →

1,955
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.8-r4
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.8-r4

Open the chart page →

5,846

Container images carrying it

218 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
openssl@3.0.8-r0
3.0.8-r4
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
openssl@3.0.8-r0
3.0.8-r4
1
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
openssl@3.0.7-r2
3.0.8-r4
1
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
openssl@3.0.7-r0
3.0.8-r4
1
ghcr.io/rivals-space/rivals-nginx:1.6.1f376b96b82cc
openssl@3.0.7-r2
3.0.8-r4
1
ghcr.io/schildichat/schildichat-web:latesta87f57287805
openssl@3.0.8-r3
3.0.8-r4
1
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
openssl@3.0.8-r3
3.0.8-r4
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
openssl@3.0.8-r3
3.0.8-r4
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
openssl@3.0.7-r2
3.0.8-r4
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
1
quay.io/groundcover/caretta:v0.0.16ed8f5118e3a4
openssl@3.0.8-r0
3.0.8-r4
1
quay.io/groundcover/victoria-metrics:v1.85.380ddeb90d18d
openssl@3.0.7-r0
3.0.8-r4
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
openssl@3.0.8-r3
3.0.8-r4
1
quay.io/wi_stefan/dsba-db-migrations:0.0.125b986cd14a08
openssl@3.0.7-r0
3.0.8-r4
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.8-r4
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.8-r4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.