StackRadar

CVE-2023-23916

Medium

Advisory

Published 15 Feb 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
903
of 17,787 indexed, latest versions
Container images
858
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 903 of 17,787 indexed charts deploy, on 858 images.

Affected packageAffected versionsFixed inImages
curldeb7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.8+37 more7.58.0-2ubuntu3.23, 7.64.0-4+deb10u5, 7.68.0-1ubuntu2.16, 7.74.0-1.3+deb11u7+1 more575
curlapk7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+15 more7.79.1-r5, 7.80.0-r6, 7.83.1-r6, 7.87.0-r2151
curlrpm7.61.1-8.el8, 7.61.1-11.el8, 7.61.1-12.el8, 7.61.1-12.el8_2.4+14 more0:7.61.1-25.el8_7.3, 0:7.76.1-19.el9_1.2132
OSV records
ALPINE-CVE-2023-23916RHSA-2023:1140RHSA-2023:1701UBUNTU-CVE-2023-23916DLA-3341-1DSA-5365-1
Also known as
RHSA-2023:1842, USN-5891-1

Charts affected

903 by stars
ChartLatestAffected imagesRadar Score
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.16

Open the chart page →

38,346
extendeddaemonsetdatadogVerified publisher0.3.31 of 1See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
datadog/extendeddaemonset:v0.8.0513a4377aed5
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3

Open the chart page →

4,759
prometheus-sentry-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-sentry-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ujamii/prometheus-sentry-exporter:0.5.06243197349e1
curl@7.64.0-4
7.64.0-4+deb10u5

Open the chart page →

2,474
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

7,984
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

3,558
mailtrapdev-goodies0.1.01 of 1See more

mailtrap dev-goodies 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
eaudeweb/mailtrap:2.3b8ad9b7e19bb
curl@7.64.0-4
7.64.0-4+deb10u5

Open the chart page →

2,508
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
curl@7.87.0-r1
7.87.0-r2

Open the chart page →

5,598
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

6,110
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3

Open the chart page →

6,237
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

7,779
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
curl@7.68.0-1ubuntu2.13
7.68.0-1ubuntu2.16

Open the chart page →

6,940
hbasedmwm-bigdataVerified publisher0.1.61 of 5See more

hbase dmwm-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

13,392
opentsdbdmwm-bigdataVerified publisher0.1.71 of 6See more

opentsdb dmwm-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

17,511
spa-demodniel0.7.31 of 1See more

spa-demo dniel 0.7.3

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
dniel/forwardauth-spademo:masterd3e38df449a2
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

1,322
nifi-registrydysnixVerified publisher1.1.51 of 2See more

nifi-registry dysnix 1.1.5

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
apache/nifi-registry:0.8.0974efa2f21da
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

6,531
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
curl@7.61.1-18.el8
0:7.61.1-25.el8_7.3

Open the chart page →

31,510
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
curl@7.86.0-r1
7.87.0-r2

Open the chart page →

4,614
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
curl@7.58.0-2ubuntu3.20
7.58.0-2ubuntu3.23

Open the chart page →

6,500
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
curl@7.80.0-r3
7.80.0-r6

Open the chart page →

4,333
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.22.1638b7962cd016
curl@7.86.0-r1
7.87.0-r2

Open the chart page →

5,291
mainfancywhale-stable0.15.121 of 1See more

main fancywhale-stable 0.15.12

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gcarrarom/landing:0.0.0769d19e441d9
curl@7.83.1-r3
7.83.1-r6

Open the chart page →

1,032
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.23

Open the chart page →

12,908
baikalgeek-cookbookVerified publisher5.2.01 of 1See more

baikal geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ckulka/baikal:0.8.0aedb1f4f3fa0
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

1,683
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.16

Open the chart page →

17,377
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
curl@7.74.0-1.3+b1
7.74.0-1.3+deb11u7

Open the chart page →

5,305
filebrowsergeek-cookbookVerified publisher1.4.21 of 1See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.18.04fcd47af573c
curl@7.79.1-r0
7.79.1-r5

Open the chart page →

3,474
firefly-iiigeek-cookbookVerified publisher0.3.01 of 1See more

firefly-iii geek-cookbook 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
fireflyiii/core:version-5.6.142f4283bd0cf7
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

2,076
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.16

Open the chart page →

35,305
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gollumorg/gollum:latest7cd5305a3cf7
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

4,629
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.16

Open the chart page →

15,653
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.23

Open the chart page →

11,662
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

4,405
monicageek-cookbookVerified publisher8.2.01 of 1See more

monica geek-cookbook 8.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
library/monica:3.7.0-apacheceb1ba4196ab
curl@7.74.0-1.3+deb11u3
7.74.0-1.3+deb11u7

Open the chart page →

2,096
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

3,153
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.8

Open the chart page →

5,136
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

3,924
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.16

Open the chart page →

11,558
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
library/nginx:1.21.62bcabc23b454
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

7,801
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.16

Open the chart page →

10,231
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.8

Open the chart page →

13,025
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.16
haveagitgat/tdarr_node:2.00.101e3f9328327d
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.16

Open the chart page →

31,000
vaultwardengeek-cookbookVerified publisher5.4.01 of 1See more

vaultwarden geek-cookbook 5.4.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
vaultwarden/server:1.25.239f34c5159a2
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

1,585
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
curl@7.74.0-1.3+b1
7.74.0-1.3+deb11u7

Open the chart page →

3,646
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.16

Open the chart page →

7,660
hbasegradiant-bigdataVerified publisher0.1.61 of 5See more

hbase gradiant-bigdata 0.1.6

1 of the 5 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
gradiant/hdfs:2.7.73b28784ba41f
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

13,392
ldap-self-servicehalkeye0.1.01 of 1See more

ldap-self-service halkeye 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
halkeye/self-service-password:latest3c734dde4052
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

1,461
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5

Open the chart page →

3,608
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
ghcr.io/privacyengineering/hawk-monitor:master13309f068a56
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u7

Open the chart page →

13,610
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
curl@7.61.1-14.el8_3.1
0:7.61.1-25.el8_7.3

Open the chart page →

6,977
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-23916.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u5

Open the chart page →

6,810

Container images carrying it

858 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.16
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u5
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
curl@7.61.1-22.el8
0:7.61.1-25.el8_7.3
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
curl@7.87.0-r1
7.87.0-r2
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
curl@7.83.1-r3
7.83.1-r6
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
curl@7.79.1-r1
7.79.1-r5
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
curl@7.83.1-r2
7.83.1-r6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.