CVE-2023-23920
MediumAdvisory
Published 23 Feb 2023In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.2
- base score, highest
- EPSS
- 0.005
- 39th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 18
- of 17,781 indexed, latest versions
- Container images
- 17
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
nodejs - security update
Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 17 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| nodejsapk | 14.17.4-r0, 14.17.6-r0, 14.18.1-r0, 16.13.1-r0+4 more | 14.21.3-r0, 16.19.1-r0 | 13 |
| nodejsdeb | 10.19.0~dfsg-3ubuntu1, 10.19.0~dfsg-3ubuntu1.3, 12.22.5~dfsg-2~11u1, 18.13.0+dfsg1-1 | 10.19.0~dfsg-3ubuntu1.5, 12.22.12~dfsg-1~deb11u4, 18.19.0+dfsg-6~deb12u1 | 4 |
- OSV records
- ALPINE-CVE-2023-23920DEBIAN-CVE-2023-23920UBUNTU-CVE-2023-23920DSA-5395-1
- Also known as
- USN-6672-1
Charts affected
18 by stars
Container images carrying it
17 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| pecan/ | f825d480cd62 | nodejs | 12.22.12~dfsg-1~deb11u4 | 2 |
| blockscout/ | c365a8f2dc12 | nodejs | 16.19.1-r0 | 1 |
| klausmeyer/ | bdc4c6b8595b | nodejs | 14.21.3-r0 | 1 |
| lsstsqre/ | b75bf8aaafa4 | nodejs | 10.19.0~dfsg-3ubuntu1.5 | 1 |
| milesmcc/ | e821e31140f7 | nodejs | 14.21.3-r0 | 1 |
| nocodb/ | b0b91ec2a2dd | nodejs | 16.19.1-r0 | 1 |
| openemr/ | 89eaa6d9a4e3 | nodejs | 16.19.1-r0 | 1 |
| sbs20/ | dad1fd6e9a98 | nodejs | 18.19.0+dfsg-6~deb12u1 | 1 |
| springhack/ | 4aceb821da88 | nodejs | 16.19.1-r0 | 1 |
| svtechnmaa/ | 1d71314424aa | nodejs | 10.19.0~dfsg-3ubuntu1.5 | 1 |
| swaggerapi/ | 0d7088d47928 | nodejs | 16.19.1-r0 | 1 |
| swaggerapi/ | 11b20aebb92c | nodejs | 16.19.1-r0 | 1 |
| swaggerapi/ | 7ff9a86f35ff | nodejs | 16.19.1-r0 | 1 |
| ghcr.io/ | a5802962de0f | nodejs | 16.19.1-r0 | 1 |
| quay.io/ | becd3e39360a | nodejs | 16.19.1-r0 | 1 |
| quay.io/ | 3207f957e80c | nodejs | 14.21.3-r0 | 1 |
| quay.io/ | 4b188259267e | nodejs | 14.21.3-r0 | 1 |