CVE-2023-21538

High

Advisory

Published 10 Jan 2023In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.027; 85th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 5; of 17,781 indexed, latest versions
Container images: 17; deployed by those charts
Fix available: 1 of 1; affected package

.NET Denial of Service Vulnerability

Carried by container images the latest versions of 5 of 17,781 indexed charts deploy, on 17 images.

Affected package	Affected versions	Fixed in	Images
Microsoft.NETCore.App.Runtime.linux-x64nuget	6.0.4, 6.0.7, 6.0.8, 6.0.11	6.0.13	17

OSV records: GHSA-8f7f-vqg5-jrv9
Also known as: BIT-dotnet-2023-21538, BIT-dotnet-sdk-2023-21538, BIT-powershell-2023-21538

Charts affected

5 by stars

Chart

Latest

Affected images

Radar Score

eshoponabpabp-charts

1.0.0

10 of 15 See more

eshoponabp abp-charts 1.0.0

10 of the 15 container images this version deploys carry CVE-2023-21538.

Container image	Digest	Package	Fixed in
ghcr.io/volosoft/eshoponabp/app-authserver :1.0.0	22ce496c67d7	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/app-publicweb :1.0.0	7e53010dda55	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/gateway-web :1.0.0	26465a2bf671	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/gateway-web-public :1.0.0	50cab15c80d9	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/service-administration :1.0.0	206a9bee17a8	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/service-basket :1.0.0	dd5ce454072e	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/service-catalog :1.0.0	7ecb00f53d99	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/service-identity :1.0.0	e53bf47b62d0	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/service-ordering :1.0.1	5e836b17337f	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13
ghcr.io/volosoft/eshoponabp/service-payment :1.0.0	2ca91145099c	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13

Open the chart page →

19,799

ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build

0.1.1

4 of 7 See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

4 of the 7 container images this version deploys carry CVE-2023-21538.

Container image	Digest	Package	Fixed in
aidasi/swpapi :v1-1-net6-k8s-test-beta	838b5e2080bc	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.13
aidasi/swpbom :v1-1-net6-k8s-test-beta	fee6857b9bc9	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.13
aidasi/swpgateway :v1-1-net6-k8s-test-beta	5ce8dbff7fdc	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.13
aidasi/swpidentity :v1-1-net6-k8s-test-beta	d433285c7d5a	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.13

Open the chart page →

10,091

nethermindethersphere

0.2.1

1 of 1 See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-21538.

Container image	Digest	Package	Fixed in
nethermind/nethermind :1.14.6	15517708c3b6	Microsoft.NETCore.App.Runtime.linux-x64@6.0.11	6.0.13

Open the chart page →

4,920

archisteamfarmg0dscookie

0.3.0

1 of 2 See more

archisteamfarm g0dscookie 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-21538.

Container image	Digest	Package	Fixed in
ghcr.io/justarchinet/archisteamfarm :5.2.5.4	c7c0a52303cb	Microsoft.NETCore.App.Runtime.linux-x64@6.0.4	6.0.13

Open the chart page →

966

cyclonedxopenshift-bootstraps

1.0.12

1 of 1 See more

cyclonedx openshift-bootstraps 1.0.12

1 of the 1 container images this version deploys carry CVE-2023-21538.

Container image	Digest	Package	Fixed in
cyclonedx/cyclonedx-bom-repo-server :latest	9e0c4db6e688	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13

Open the chart page →

726

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
aidasi/swpapi :v1-1-net6-k8s-test-beta	838b5e2080bc	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.13	1
aidasi/swpbom :v1-1-net6-k8s-test-beta	fee6857b9bc9	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.13	1
aidasi/swpgateway :v1-1-net6-k8s-test-beta	5ce8dbff7fdc	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.13	1
aidasi/swpidentity :v1-1-net6-k8s-test-beta	d433285c7d5a	Microsoft.NETCore.App.Runtime.linux-x64@6.0.7	6.0.13	1
cyclonedx/cyclonedx-bom-repo-server :latest	9e0c4db6e688	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
nethermind/nethermind :1.14.6	15517708c3b6	Microsoft.NETCore.App.Runtime.linux-x64@6.0.11	6.0.13	1
ghcr.io/justarchinet/archisteamfarm :5.2.5.4	c7c0a52303cb	Microsoft.NETCore.App.Runtime.linux-x64@6.0.4	6.0.13	1
ghcr.io/volosoft/eshoponabp/app-authserver :1.0.0	22ce496c67d7	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/app-publicweb :1.0.0	7e53010dda55	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/gateway-web :1.0.0	26465a2bf671	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/gateway-web-public :1.0.0	50cab15c80d9	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/service-administration :1.0.0	206a9bee17a8	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/service-basket :1.0.0	dd5ce454072e	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/service-catalog :1.0.0	7ecb00f53d99	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/service-identity :1.0.0	e53bf47b62d0	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/service-ordering :1.0.1	5e836b17337f	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1
ghcr.io/volosoft/eshoponabp/service-payment :1.0.0	2ca91145099c	Microsoft.NETCore.App.Runtime.linux-x64@6.0.8	6.0.13	1