StackRadar

CVE-2023-23916

Medium

Advisory

Published 15 Feb 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
912
of 17,787 indexed, latest versions
Container images
865
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 912 of 17,787 indexed charts deploy, on 865 images.

Affected packageAffected versionsFixed inImages
curldeb7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.8+37 more7.58.0-2ubuntu3.23, 7.64.0-4+deb10u5, 7.68.0-1ubuntu2.16, 7.74.0-1.3+deb11u7+1 more581
curlapk7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+15 more7.79.1-r5, 7.80.0-r6, 7.83.1-r6, 7.87.0-r2152
curlrpm7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+14 more0:7.61.1-25.el8_7.3, 0:7.76.1-19.el9_1.2132
OSV records
ALPINE-CVE-2023-23916RHSA-2023:1140RHSA-2023:1701UBUNTU-CVE-2023-23916DLA-3341-1DSA-5365-1
Also known as
RHSA-2023:1842, USN-5891-1

Charts affected

912 by stars
ChartLatestAffected imagesRadar Score
php-web-hostjuppi880.0.11 of 2See more

php-web-host juppi88 0.0.1

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
trafex/php-nginx:2.2.0ee0b7c6cce07
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

2,264
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
vitorbari/jwks-merge:v0.1.0fd3ccb820ada
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

3,045
k10appk10app0.2.13 of 11See more

k10app k10app 0.2.1

3 of the 11 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k10app/businit:latest94c9a3e799c2
curl@7.86.0-r1
7.87.0-r2
ghcr.io/k10app/frontend:latest066b5ac6b119
curl@7.74.0-1.3+deb11u3
7.74.0-1.3+deb11u7
ghcr.io/k10app/staticcache:lateste77805689a8e
curl@7.74.0-1.3+deb11u3
7.74.0-1.3+deb11u7

Open the chart page →

10,560
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

4,667
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
curl@7.80.0-r0
7.80.0-r6

Open the chart page →

14,833
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
curl@7.68.0-1ubuntu2.15
7.68.0-1ubuntu2.16

Open the chart page →

16,464
external-scaler-azure-cosmos-dbkedacore0.1.01 of 1See more

external-scaler-azure-cosmos-db kedacore 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/kedacore/external-scaler-azure-cosmos-db:0.1.04985d164ead9
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

1,186
keycloak-operator-legacykeycloak-operator-legacy1.0.01 of 1See more

keycloak-operator-legacy keycloak-operator-legacy 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
curl@7.61.1-22.el8_6.4
0:7.61.1-25.el8_7.3

Open the chart page →

5,066
allurekfirfer0.1.82 of 2See more

allure kfirfer 0.1.8

2 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.23
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

12,541
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

1,598
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.16

Open the chart page →

10,303
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
curl@7.80.0-r5
7.80.0-r6

Open the chart page →

2,320
kiaekiae0.1.62 of 9See more

kiae kiae 0.1.6

2 of the 9 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
curl@7.81.0-1ubuntu1.4
7.81.0-1ubuntu1.8
ghcr.io/kiaedev/kiae:latestebd03028ff6a
curl@7.74.0-1.3+deb11u3
7.74.0-1.3+deb11u7

Open the chart page →

19,208
astralkronkltdVerified publisher0.1.01 of 1See more

astral kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
duck1123/astral:latestf4d5b6526c2a
curl@7.74.0-1.3+deb11u5
7.74.0-1.3+deb11u7

Open the chart page →

891
nbxplorerkronkltdVerified publisher0.1.51 of 2See more

nbxplorer kronkltd 0.1.5

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

1,669
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
curl@7.87.0-r1
7.87.0-r2

Open the chart page →

3,649
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

5,411
cluster-componentkubebb0.2.21 of 4See more

cluster-component kubebb 0.2.2

1 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
curl@7.83.1-r2
7.83.1-r6

Open the chart page →

8,160
hello-worldkubebb0.1.11 of 1See more

hello-world kubebb 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
kubebb/hello-world:0.1.0b746824819f3
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

1,225
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
curl@7.61.1-25.el8_7.1
0:7.61.1-25.el8_7.3
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
curl@7.61.1-25.el8_7.1
0:7.61.1-25.el8_7.3

Open the chart page →

7,457
gptchat-api-feishubotkubegemsapp0.1.11 of 3See more

gptchat-api-feishubot kubegemsapp 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
kubegems/chatgpt-api:latestf3c492a938ad
curl@7.74.0-1.3+deb11u3
7.74.0-1.3+deb11u7

Open the chart page →

8,486
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.16

Open the chart page →

7,196
kusk-gateway-dashboardkubeshop0.1.191 of 1See more

kusk-gateway-dashboard kubeshop 0.1.19

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-dashboard:v1.2.6ff9b5aa1258d
curl@7.83.1-r3
7.83.1-r6

Open the chart page →

1,216
chaos-meshkubesphere-stable2.5.11 of 3See more

chaos-mesh kubesphere-stable 2.5.1

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
curl@7.64.0-4+deb10u3
7.64.0-4+deb10u5

Open the chart page →

8,555
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.23.2e4d83478963b
curl@7.80.0-r0
7.80.0-r6

Open the chart page →

48,833
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.23.2e4d83478963b
curl@7.80.0-r0
7.80.0-r6

Open the chart page →

46,507
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.16

Open the chart page →

14,368
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.23

Open the chart page →

9,628
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.16

Open the chart page →

7,381
online-boutiquekubesphere-testVerified publisher0.1.01 of 11See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

26,019
postgresqlkubesphere-testVerified publisher1.0.32 of 2See more

postgresql kubesphere-test 1.0.3

2 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
radondb/pgpool:4.2.2-debian-10-r1801ef77b5b87
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5
radondb/postgresql-repmgr:11.11.0-debian-r1bcfb7f67c6f5
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

2,062
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.16

Open the chart page →

7,381
sample-appkubeuest0.1.31 of 1See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
michaelepitech/sample-app:latestaf51d61c19f5
curl@7.74.0-1.3+deb11u3
7.74.0-1.3+deb11u7

Open the chart page →

1,427
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.23

Open the chart page →

16,537
freescoutl4gVerified publisher0.1.01 of 3See more

freescout l4g 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
zzorica/k8s-mgmt-pod:0.5.2640ca4de2922
curl@7.74.0-1.3+deb11u2
7.74.0-1.3+deb11u7

Open the chart page →

5,331
ladeitladeit0.4.02 of 2See more

ladeit ladeit 0.4.0

2 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.23
ladeit/ladeit:latest962b665ffe82
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

26,371
laravel-chartlaravel-application0.2.01 of 1See more

laravel-chart laravel-application 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ibarreche/cloud-back-ci:lateste16a469c5791
curl@7.80.0-r0
7.80.0-r6

Open the chart page →

1,835
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

3,891
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.16
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.23

Open the chart page →

20,233
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.16
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.23

Open the chart page →

20,233
wiremocklebenitzaVerified publisher0.3.11 of 1See more

wiremock lebenitza 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.27.22328a9fce2bf
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

2,427
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

4,067
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
curl@7.83.1-r3
7.83.1-r6

Open the chart page →

4,271
owntracks-reporterleprechaun-charts0.2.131 of 1See more

owntracks-reporter leprechaun-charts 0.2.13

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
owntracks/recorder:0.9.370105145f719
curl@7.83.1-r4
7.83.1-r6

Open the chart page →

875
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.16
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.23

Open the chart page →

20,233
patch-operatorloafoe0.11.31 of 2See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3

Open the chart page →

4,904
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-ui-react:latestba6853e35c60
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

5,905
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-nginx:latestc46374fc8f32
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

7,510
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
curl@7.83.1-r5
7.83.1-r6

Open the chart page →

5,770
loggingcomponentloggingcomponent1.0.01 of 3See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/loggingcomponent-nginx:latestcee37e9cef09
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

7,492

Container images carrying it

865 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
curl@7.83.1-r3
7.83.1-r6
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
curl@7.61.1-18.el8_4.1
0:7.61.1-25.el8_7.3
1
quay.io/renokico/laravel-helm-demo:0.6.03207f957e80c
curl@7.78.0-r0
7.79.1-r5
1
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
curl@7.78.0-r0
7.79.1-r5
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
curl@7.61.1-21.el8
0:7.61.1-25.el8_7.3
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
curl@7.61.1-18.el8
0:7.61.1-25.el8_7.3
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.16
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
curl@7.87.0-r1
7.87.0-r2
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
curl@7.83.1-r3
7.83.1-r6
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
curl@7.79.1-r1
7.79.1-r5
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
curl@7.83.1-r2
7.83.1-r6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.