CVE-2023-1255

Medium

Advisory

Published 20 Apr 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.010; 59th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 222; of 17,781 indexed, latest versions
Container images: 218; deployed by those charts
Fix available: 2 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 222 of 17,781 indexed charts deploy, on 218 images.

Affected package	Affected versions	Fixed in	Images
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+1 more	3.0.8-r4	136
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+4 more	3.0.2-0ubuntu1.10, 3.0.2-0ubuntu1.10+Fips1	80
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5

OSV records: ALPINE-CVE-2023-1255 UBUNTU-CVE-2023-1255
Also known as: USN-6119-1

Charts affected

222 by stars

Chart

Latest

Affected images

Radar Score

trinostatcan

1.23.4

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10

Open the chart page →

13,767

elasticsearchsvtech-public-helm-charts

1.0.0

1 of 1 See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	openssl@3.0.2-0ubuntu1.5	3.0.2-0ubuntu1.10

Open the chart page →

12,048

preparationsvtech-public-helm-charts

1.0.0

1 of 1 See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	openssl@3.0.2-0ubuntu1.5	3.0.2-0ubuntu1.10

Open the chart page →

12,048

tensor_apptensor-app

0.2.2

2 of 3 See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	openssl@3.0.2-0ubuntu1	3.0.2-0ubuntu1.10
xeladock/nginx2 :latest	c259a67b1dff	openssl@3.0.2-0ubuntu1	3.0.2-0ubuntu1.10

Open the chart page →

17,461

vehicle-dashboardtest-vehi-dash

0.1.0

1 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
dblaci/ubuntu-ssh-rsync :20231020	eea697611af4	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.10+Fips1

Open the chart page →

20,270

thanhvt27-lab-k8sthanh-vt

0.1.4

1 of 5 See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
pysga1996/python-redis-web :latest	fdeec30ad482	openssl@3.0.8-r3	3.0.8-r4

Open the chart page →

4,661

nfs-servertranhailong

0.1.2

1 of 1 See more

nfs-server tranhailong 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	openssl@3.0.8-r0	3.0.8-r4

Open the chart page →

2,323

synapsetranhailong

0.1.0

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
library/postgres :15.2-alpine	d9c304353c03	openssl@3.0.8-r3	3.0.8-r4

Open the chart page →

3,164

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	nodejs@20.11.1-1nodesource1 openssl@3.0.2-0ubuntu1.10	no fix listed 3.0.2-0ubuntu1.10+Fips1

Open the chart page →

9,347

websitewaldo-vision

0.33.0

2 of 2 See more

website waldo-vision 0.33.0

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
ghcr.io/waldo-vision/migrate :v0.3.6	ae31923312ed	openssl@3.0.8-r3	3.0.8-r4
ghcr.io/waldo-vision/web :v0.3.6	5bbc7647df07	openssl@3.0.8-r3	3.0.8-r4

Open the chart page →

3,474

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
wallarm/ingress-tarantool :4.6.0-1	ba00516618ea	openssl@3.0.8-r0	3.0.8-r4

Open the chart page →

11,405

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.10

Open the chart page →

6,232

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	openssl@3.0.8-r0	3.0.8-r4

Open the chart page →

2,030

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10

Open the chart page →

10,489

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1	no fix listed

Open the chart page →

14,100

oauth2xd

1.0.0

1 of 1 See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
lishimeng/hufu :v1.2.1	3d5752dac834	openssl@3.0.8-r0	3.0.8-r4

Open the chart page →

2,007

owlxd

0.5.1

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	openssl@3.0.8-r0	3.0.8-r4
lishimeng/owl-messager :v0.11.2	3d00485e64dc	openssl@3.0.8-r0	3.0.8-r4

Open the chart page →

3,880

passportxd

0.2.16

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	openssl@3.0.8-r0	3.0.8-r4
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	openssl@3.0.8-r0	3.0.8-r4

Open the chart page →

3,974

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
lishimeng/tabby :v1.0.4	8145c3dc83c8	openssl@3.0.8-r0	3.0.8-r4

Open the chart page →

7,673

treexd

0.1.10

1 of 1 See more

1,997

zooxd

0.4.0

1 of 1 See more

1,955

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-1255.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.8-r4
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.8-r4

Open the chart page →

5,846

Container images carrying it

218 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
mastercloudapps/planner :v1.23	40a950b311b2	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.10	4
codeurjc/planner :v1.0	800cf520c245	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.10	3
pnnlmiscscripts/anaconda9 :1683907016.7470503-nginx-1	9a2fe06a1472	openssl@3.0.8-r3	3.0.8-r4	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.10+Fips1	3
agoldis/sorry-cypress-dashboard :2.5.11	e061e5714238	openssl@3.0.8-r3	3.0.8-r4	2
cs3org/wopiserver :v9.4.2	02a9e78757b4	openssl@3.0.8-r0	3.0.8-r4	2
istio/proxyv2 :1.18.0	757d28c24100	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.10+Fips1	2
krtk6160/galoy-nostr	cc82a694f818	openssl@3.0.8-r0	3.0.8-r4	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	openssl@3.0.7-r0	3.0.8-r4	2
library/influxdb :2.6.1-alpine	44a366dd7724	openssl@3.0.8-r3	3.0.8-r4	2
library/mariadb :10.8.3	0abf60f81588	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.10	2
library/postgres :15.2-alpine	d9c304353c03	openssl@3.0.8-r3	3.0.8-r4	2
library/rabbitmq :3.12.1-management	f020c06da226	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.10+Fips1	2
metabase/metabase :v0.45.2	1fb334ce4820	openssl@3.0.7-r2	3.0.8-r4	2
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	openssl@3.0.7-r2	3.0.8-r4	2
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	openssl@3.0.8-r3	3.0.8-r4	2
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10	2
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10	2
outlinewiki/outline :0.69.1	d060dcd8f9aa	openssl@3.0.8-r3	3.0.8-r4	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.10	2
shahanafarooqui/rtl :0.13.3	e2195188a451	openssl@3.0.7-r0	3.0.8-r4	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	openssl@3.0.2-0ubuntu1.5	3.0.2-0ubuntu1.10	2
taigaio/taiga-front :latest	570c8792ce80	openssl@3.0.8-r3	3.0.8-r4	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	nodejs@16.14.2-deb-1nodesource1 openssl@3.0.2-0ubuntu1.9	no fix listed 3.0.2-0ubuntu1.10	2
ghcr.io/appscode/kube-auth-manager :v0.0.1	789692ab9193	openssl@3.0.8-r3	3.0.8-r4	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	nodejs@16.18.0-deb-1nodesource1 openssl@3.0.2-0ubuntu1.6	no fix listed 3.0.2-0ubuntu1.10	2
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	openssl@3.0.7-r0	3.0.8-r4	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.10	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	openssl@3.0.2-0ubuntu1.2	3.0.2-0ubuntu1.10	2
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	openssl@3.0.8-r0	3.0.8-r4	2
0hlov3/semaphore :v1.0.0	50f874ec096b	openssl@3.0.8-r0	3.0.8-r4	1
abdullahkhabir/radio :latest	56526d0cc929	openssl@3.0.7-r2	3.0.8-r4	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.10+Fips1	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.10+Fips1	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.10	1
apache/skywalking-ui :9.2.0	295f1dc87d98	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.10	1
apache/tika :2.9.0.0	92d055a84e9e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.10+Fips1	1
assistiot/location_processing :latest	e9bae124095f	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10	1
assistiot/monitoring_notifying :2.0.0	68324d0fa5bb	openssl@3.0.8-r3	3.0.8-r4	1
assistiot/smart-orchestrator_cluster :latest	4f41e1defe99	openssl@3.0.8-r3	3.0.8-r4	1
assistiot/smart-orchestrator_enabler :latest	89f37e88c871	openssl@3.0.8-r3	3.0.8-r4	1
assistiot/smart-orchestrator_repository :latest	a8b8dbed04a4	openssl@3.0.8-r3	3.0.8-r4	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.10	1
bnwokoye/nodejswebapp :latest	74de7dc7ebfb	openssl@3.0.8-r3	3.0.8-r4	1
boxcutter/meshcmd :1.1.3	84e13f01bcab	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.10+Fips1	1
casbin/casdoor :v1.224.0	66f836ef778b	openssl@3.0.7-r2	3.0.8-r4	1
chirpstack/chirpstack-application-server :3	fb7667fe037f	openssl@3.0.7-r0	3.0.8-r4	1
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	openssl@3.0.7-r0	3.0.8-r4	1
circleci/container-agent :3	4d8d0ae5efc3	openssl@3.0.8-r3	3.0.8-r4	1