StackRadar

CVE-2023-23916

Medium

Advisory

Published 15 Feb 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
912
of 17,787 indexed, latest versions
Container images
865
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 912 of 17,787 indexed charts deploy, on 865 images.

Affected packageAffected versionsFixed inImages
curldeb7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.8+37 more7.58.0-2ubuntu3.23, 7.64.0-4+deb10u5, 7.68.0-1ubuntu2.16, 7.74.0-1.3+deb11u7+1 more581
curlapk7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+15 more7.79.1-r5, 7.80.0-r6, 7.83.1-r6, 7.87.0-r2152
curlrpm7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+14 more0:7.61.1-25.el8_7.3, 0:7.76.1-19.el9_1.2132
OSV records
ALPINE-CVE-2023-23916RHSA-2023:1140RHSA-2023:1701UBUNTU-CVE-2023-23916DLA-3341-1DSA-5365-1
Also known as
RHSA-2023:1842, USN-5891-1

Charts affected

912 by stars
ChartLatestAffected imagesRadar Score
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
curl@7.68.0-1ubuntu2.11
7.68.0-1ubuntu2.16

Open the chart page →

9,736
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

1,380
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.23

Open the chart page →

12,586
leaf2mqttgeek-cookbookVerified publisher3.4.21 of 1See more

leaf2mqtt geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/leaf2mqtt:v0.1fc9f5aca6cf4
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

1,222
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.16

Open the chart page →

14,328
nginx-phpgeek-cookbookVerified publisher1.2.21 of 1See more

nginx-php geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
trafex/php-nginx:2.4.07282edfca2bf
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

1,804
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.8

Open the chart page →

12,124
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.16

Open the chart page →

17,758
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
curl@7.80.0-r0
7.80.0-r6

Open the chart page →

8,392
openhabgeek-cookbookVerified publisher1.5.21 of 1See more

openhab geek-cookbook 1.5.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
openhab/openhab:3.2.0d0aa4af452c1
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

2,887
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
curl@7.68.0-1ubuntu2.13
7.68.0-1ubuntu2.16

Open the chart page →

28,039
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.8

Open the chart page →

19,560
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.16

Open the chart page →

15,792
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
curl@7.68.0-1ubuntu2.10
7.68.0-1ubuntu2.16

Open the chart page →

11,855
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.8

Open the chart page →

10,418
radicalegeek-cookbookVerified publisher1.2.21 of 1See more

radicale geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
tomsquest/docker-radicale:3.1.1.04759cc353a1d
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

2,116
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.16

Open the chart page →

7,806
resilio-syncgeek-cookbookVerified publisher5.4.21 of 1See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
curl@7.58.0-2ubuntu3.14
7.58.0-2ubuntu3.23

Open the chart page →

5,900
rtorrent-rutorrentgeek-cookbookVerified publisher1.1.21 of 1See more

rtorrent-rutorrent geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
curl@7.87.0-r0
7.87.0-r2

Open the chart page →

4,232
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.16

Open the chart page →

24,355
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

4,591
sinusbotgeek-cookbookVerified publisher0.5.21 of 1See more

sinusbot geek-cookbook 0.5.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
sinusbot/docker:1.0.0-beta.14-dc94a7cc7a4f3cc4393
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

1,439
strongswangeek-cookbookVerified publisher0.3.21 of 1See more

strongswan geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/strongswan:v1.0.0e7a8afe6e6eb
curl@7.80.0-r0
7.80.0-r6

Open the chart page →

1,604
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
curl@7.58.0-2ubuntu3.3
7.58.0-2ubuntu3.23

Open the chart page →

26,996
theme-parkgeek-cookbookVerified publisher1.2.21 of 1See more

theme-park geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

1,286
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.16

Open the chart page →

11,909
vikunjageek-cookbookVerified publisher6.2.01 of 4See more

vikunja geek-cookbook 6.2.0

1 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
vikunja/frontend:0.17.0863a426a8e49
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

6,893
whooglegeek-cookbookVerified publisher3.4.21 of 1See more

whoogle geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

2,061
wmbusmetersgeek-cookbookVerified publisher1.4.21 of 1See more

wmbusmeters geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
weetmuts/wmbusmeters:release-1.4.1-amd64a79967400c61
curl@7.78.0-r0
7.79.1-r5

Open the chart page →

1,457
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
curl@7.68.0-1ubuntu2.11
7.68.0-1ubuntu2.16

Open the chart page →

17,996
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

4,547
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.16
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.16

Open the chart page →

16,834
emqxgin4.4.41 of 1See more

emqx gin 4.4.4

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
emqx/emqx:4.4.41d36535ba9de
curl@7.80.0-r1
7.80.0-r6

Open the chart page →

1,429
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

3,478
ldap-backupgluuVerified publisher1.6.111 of 1See more

ldap-backup gluu 1.6.11

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gluufederation/opendj:4.3.0_011a1128b28b95
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

3,064
go-app-helmgo-app-helm0.1.01 of 1See more

go-app-helm go-app-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
manojchaulagain/go-k8s:0.1.0f237b5f637ae
curl@7.74.0-1.3+deb11u5
7.74.0-1.3+deb11u7

Open the chart page →

1,594
jaegergpg-dev3.3.31 of 5See more

jaeger gpg-dev 3.3.3

1 of the 5 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
library/cassandra:3.11.65aa8400b4b3b
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.23

Open the chart page →

19,291
hdfsgradiant-bigdataVerified publisher0.1.101 of 2See more

hdfs gradiant-bigdata 0.1.10

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

7,072
hivegradiant-bigdataVerified publisher0.1.61 of 5See more

hive gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

20,836
opentsdbgradiant-bigdataVerified publisher0.1.71 of 6See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

17,509
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
curl@7.61.1-14.el8_3.1
0:7.61.1-25.el8_7.3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
curl@7.61.1-14.el8_3.1
0:7.61.1-25.el8_7.3

Open the chart page →

17,759
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-nginx:latestd0daf48dec68
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

7,510
siembolgresearch0.1.62 of 4See more

siembol gresearch 0.1.6

2 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
curl@7.78.0-r0
7.79.1-r5
gresearchdev/siembol-config-editor-ui:latest071e7109a981
curl@7.83.1-r4
7.83.1-r6

Open the chart page →

14,312
tautullihalkeye1.1.41 of 2See more

tautulli halkeye 1.1.4

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
tautulli/tautulli:v2.7.7c4da15f058ea
curl@7.74.0-1.3+b1
7.74.0-1.3+deb11u7

Open the chart page →

1,473
hawk-envoy-pluginhawk0.1.02 of 4See more

hawk-envoy-plugin hawk 0.1.0

2 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/collector-go:main7217f1a4fa28
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5
ghcr.io/privacyengineering/consumer:main73f59c032812
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

9,151
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

10,539
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
curl@7.68.0-1ubuntu2.15
7.68.0-1ubuntu2.16

Open the chart page →

6,747
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
curl@7.58.0-2ubuntu3.22
7.58.0-2ubuntu3.23

Open the chart page →

10,655
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

4,547

Container images carrying it

865 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
curl@7.83.1-r3
7.83.1-r6
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
curl@7.61.1-18.el8_4.1
0:7.61.1-25.el8_7.3
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
curl@7.78.0-r0
7.79.1-r5
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
curl@7.78.0-r0
7.79.1-r5
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
curl@7.61.1-21.el8
0:7.61.1-25.el8_7.3
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
curl@7.61.1-18.el8
0:7.61.1-25.el8_7.3
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.16
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
curl@7.87.0-r1
7.87.0-r2
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
curl@7.83.1-r3
7.83.1-r6
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
curl@7.79.1-r1
7.79.1-r5
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
curl@7.83.1-r2
7.83.1-r6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.