StackRadar

CVE-2023-23931

Medium

Advisory

Published 7 Feb 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
242
of 17,781 indexed, latest versions
Container images
210
deployed by those charts
Fix available
2 of 2
affected packages

Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf

Carried by container images the latest versions of 242 of 17,781 indexed charts deploy, on 210 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.9, 2.1.4, 2.2.2, 2.3+31 more39.0.1210
python-cryptographydeb2.1.4-1ubuntu1.2, 2.1.4-1ubuntu1.3, 2.1.4-1ubuntu1.4, 2.6.1-3+3 more2.6.1-3+deb10u3, 2.8-3ubuntu0.2, 3.4.8-1ubuntu2.123
OSV records
GHSA-w7pp-m8wf-vj6rUBUNTU-CVE-2023-23931DLA-3331-1
Also known as
DLA-3331-2, PYSEC-2023-11, USN-6539-1

Charts affected

242 by stars
ChartLatestAffected imagesRadar Score
phonebook-chartphonebook-chart0.1.01 of 3See more

phonebook-chart phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,034
kube-resource-reportrlex0.10.11 of 2See more

kube-resource-report rlex 0.10.1

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:22.11.0c173cd02f5af
cryptography@38.0.4
39.0.1

Open the chart page →

1,266
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
cryptography@3.4.8
39.0.1

Open the chart page →

12,930
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.4
39.0.1
no fix listed

Open the chart page →

13,541
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
cryptography@38.0.4
39.0.1

Open the chart page →

38,107
kube-resource-reportslamdev0.1.31 of 2See more

kube-resource-report slamdev 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
hjacobs/kube-resource-report:21.2.145f93491c434
cryptography@3.4.1
39.0.1

Open the chart page →

1,534
alertasomeblackmagic0.2.31 of 2See more

alerta someblackmagic 0.2.3

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
alerta/alerta-web:8.5.04786b9eaa606
cryptography@3.4.6
39.0.1

Open the chart page →

3,162
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
cryptography@2.9.2
39.0.1

Open the chart page →

2,469
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
cryptography@36.0.1
39.0.1

Open the chart page →

3,332
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
supabase/realtime:v2.102.3aa1c92c0cf32
cryptography@38.0.4
39.0.1

Open the chart page →

18,075
phonebook-chartusuladamsVerified publisher0.1.51 of 3See more

phonebook-chart usuladams 0.1.5

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,176
pghoardwiremindVerified publisher0.8.11 of 1See more

pghoard wiremind 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
39.0.1

Open the chart page →

2,952
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
39.0.1
no fix listed

Open the chart page →

12,007
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
cryptography@38.0.4
39.0.1

Open the chart page →

30,028
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
cryptography@3.3.2
39.0.1

Open the chart page →

42,126
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
cryptography@2.8
39.0.1

Open the chart page →

1,488
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
cryptography@3.3.2
39.0.1

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
cryptography@3.3.2
39.0.1

Open the chart page →

2,418
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
cryptography@3.4.6
39.0.1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
cryptography@3.4.6
39.0.1

Open the chart page →

22,568
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
cryptography@3.3.2
39.0.1

Open the chart page →

10,061
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
cryptography@3.4.8
python-cryptography@3.4.8-1ubuntu2
39.0.1
3.4.8-1ubuntu2.1

Open the chart page →

32,501
phonebook-chartasumankamberoglu0.1.51 of 3See more

phonebook-chart asumankamberoglu 0.1.5

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,176
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
cryptography@36.0.1
39.0.1

Open the chart page →

5,507
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
cryptography@3.3.2
39.0.1

Open the chart page →

4,568
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
cryptography@2.1.4
39.0.1

Open the chart page →

3,425
twitter-sentimentazure-sample0.1.02 of 3See more

twitter-sentiment azure-sample 0.1.0

2 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
neilpeterson/get-tweet:v28b645ac1a23e
cryptography@2.2.2
39.0.1
neilpeterson/process-tweet:latest39ce9f92e899
cryptography@2.2.2
39.0.1

Open the chart page →

11,833
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
cryptography@3.3.2
python-cryptography@2.1.4-1ubuntu1.4
39.0.1
no fix listed

Open the chart page →

22,891
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
39.0.1

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
39.0.1

Open the chart page →

2,504
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
39.0.1

Open the chart page →

2,974
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
39.0.1

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
cryptography@2.3.1
39.0.1

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
39.0.1

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
39.0.1

Open the chart page →

1,310
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
39.0.1

Open the chart page →

1,382
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
cryptography@3.4.8
39.0.1

Open the chart page →

20,900
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
cryptography@2.3.1
39.0.1

Open the chart page →

2,408
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
cryptography@2.3.1
39.0.1
daskdev/dask-notebook:1.1.0052630f5ca04
cryptography@2.3.1
39.0.1

Open the chart page →

29,901
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
39.0.1

Open the chart page →

2,954
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
39.0.1

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
39.0.1

Open the chart page →

5,060
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
cryptography@36.0.2
39.0.1

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
cryptography@37.0.2
39.0.1

Open the chart page →

6,921
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
39.0.1

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
39.0.1

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
39.0.1

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
cryptography@38.0.1
39.0.1

Open the chart page →

16,069
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
cryptography@2.2.2
39.0.1

Open the chart page →

70,895

Container images carrying it

210 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
cryptography@36.0.2
39.0.1
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
cryptography@3.4.7
39.0.1
1
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
cryptography@3.3.2
39.0.1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
cryptography@37.0.4
39.0.1
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cryptography@38.0.4
39.0.1
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
cryptography@37.0.2
39.0.1
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
cryptography@36.0.2
39.0.1
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
39.0.1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
cryptography@3.4.8
39.0.1
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
cryptography@3.4.8
39.0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.