StackRadar

CVE-2023-23916

Medium

Advisory

Published 15 Feb 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
912
of 17,790 indexed, latest versions
Container images
865
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 912 of 17,790 indexed charts deploy, on 865 images.

Affected packageAffected versionsFixed inImages
curldeb7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.8+37 more7.58.0-2ubuntu3.23, 7.64.0-4+deb10u5, 7.68.0-1ubuntu2.16, 7.74.0-1.3+deb11u7+1 more581
curlapk7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+15 more7.79.1-r5, 7.80.0-r6, 7.83.1-r6, 7.87.0-r2152
curlrpm7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+14 more0:7.61.1-25.el8_7.3, 0:7.76.1-19.el9_1.2132
OSV records
ALPINE-CVE-2023-23916RHSA-2023:1140RHSA-2023:1701UBUNTU-CVE-2023-23916DLA-3341-1DSA-5365-1
Also known as
RHSA-2023:1842, USN-5891-1

Charts affected

912 by stars
ChartLatestAffected imagesRadar Score
webresourcecataloguswebresourcecatalogus1.1.02 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

2 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
curl@7.80.0-r0
7.80.0-r6

Open the chart page →

7,552
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.23

Open the chart page →

10,857
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.16

Open the chart page →

15,287
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
curl@7.61.1-14.el8_3.1
0:7.61.1-25.el8_7.3

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3

Open the chart page →

6,138
vaultwardenwitcom-gmbh0.2.01 of 2See more

vaultwarden witcom-gmbh 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
vaultwarden/server:1.25.239f34c5159a2
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

1,585
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

2,021
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
curl@7.80.0-r1
7.80.0-r6
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
curl@7.80.0-r5
7.80.0-r6
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
curl@7.64.0-4+deb10u3
7.64.0-4+deb10u5

Open the chart page →

16,083
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3

Open the chart page →

11,592
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

2,535
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
curl@7.61.1-25.el8_7.1
0:7.61.1-25.el8_7.3

Open the chart page →

6,016

Container images carrying it

865 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
curl@7.80.0-r0
7.80.0-r6
1
ghcr.io/conductionnl/eherkenning-ui-nginx:latestfcd2100d863f
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/grafregistratiecomponent-nginx:latestd0daf48dec68
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/instemmingservice-nginx:latesteeeb4e9f0485
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/landelijketabellencatalogus-nginx:lateste7076242888a
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/loggingcomponent-nginx:latestcee37e9cef09
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/logicservice-nginx:latest7c8ee08c591c
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/medewerkercatalogus-nginx:latest06c3b27462e6
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
curl@7.80.0-r0
7.80.0-r6
1
ghcr.io/conductionnl/memo-component-nginx:latestfd28182f7ecf
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/notification-component-nginx:latestd53bda41ee3b
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/ocatiecatalogus-nginx:latestc46374fc8f32
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/orderregistratiecomponent-nginx:latest42acee4ab31c
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/procestypecatalogus-nginx:latestca6fc575a3ba
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/productenendienstencatalogus-nginx:latest4095e7207822
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/proto-component-commonground-nginx:latest5b1384e29b7d
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/review-component-nginx:latest5df5f92870a5
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7
1
ghcr.io/conductionnl/taalhuizen-service-nginx:latest0bbaa7487c63
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/trouw-service-nginx:latest86fe293b99a2
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
curl@7.80.0-r0
7.80.0-r6
1
ghcr.io/conductionnl/verhuis-service-nginx:latest4473ce50435e
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/verzoekconversieservice-nginx:latestf449b82ce9d6
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx:lateste0c5f8a95098
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/verzoektypecatalogus-nginx:latest42c75ea8082c
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/waardepapieren-balie-nginx:latest2eb073ab8b83
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
curl@7.74.0-1.3+b1
7.74.0-1.3+deb11u7
1
ghcr.io/conductionnl/waardepapieren-register-nginx:latest3fba727a3cc1
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
1
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
curl@7.80.0-r0
7.80.0-r6
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
curl@7.61.1-18.el8
0:7.61.1-25.el8_7.3
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
curl@7.61.1-18.el8
0:7.61.1-25.el8_7.3
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
curl@7.61.1-18.el8
0:7.61.1-25.el8_7.3
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
curl@7.61.1-18.el8
0:7.61.1-25.el8_7.3
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
curl@7.61.1-18.el8
0:7.61.1-25.el8_7.3
1
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
curl@7.87.0-r1
7.87.0-r2
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.16
1
ghcr.io/devplayer0/lxd8s:0.3.1e159ba41aede
curl@7.78.0-r0
7.79.1-r5
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
curl@7.83.1-r2
7.83.1-r6
1
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
curl@7.80.0-r1
7.80.0-r6
1
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
curl@7.76.1-19.el9
0:7.76.1-19.el9_1.2
1
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
curl@7.76.1-19.el9
0:7.76.1-19.el9_1.2
1
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
curl@7.76.1-19.el9
0:7.76.1-19.el9_1.2
1
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
curl@7.76.1-19.el9
0:7.76.1-19.el9_1.2
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
curl@7.76.1-19.el9
0:7.76.1-19.el9_1.2
1
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
curl@7.76.1-19.el9
0:7.76.1-19.el9_1.2
1
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
curl@7.76.1-19.el9
0:7.76.1-19.el9_1.2
1
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
curl@7.76.1-19.el9
0:7.76.1-19.el9_1.2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.