StackRadar

CVE-2023-23931

Medium

Advisory

Published 7 Feb 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
242
of 17,781 indexed, latest versions
Container images
210
deployed by those charts
Fix available
2 of 2
affected packages

Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf

Carried by container images the latest versions of 242 of 17,781 indexed charts deploy, on 210 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.9, 2.1.4, 2.2.2, 2.3+31 more39.0.1210
python-cryptographydeb2.1.4-1ubuntu1.2, 2.1.4-1ubuntu1.3, 2.1.4-1ubuntu1.4, 2.6.1-3+3 more2.6.1-3+deb10u3, 2.8-3ubuntu0.2, 3.4.8-1ubuntu2.123
OSV records
GHSA-w7pp-m8wf-vj6rUBUNTU-CVE-2023-23931DLA-3331-1
Also known as
DLA-3331-2, PYSEC-2023-11, USN-6539-1

Charts affected

242 by stars
ChartLatestAffected imagesRadar Score
dbapphelmcourseVerified publisher0.3.31 of 2See more

dbapp helmcourse 0.3.3

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,971
mysqlhelmcourseVerified publisher0.2.41 of 1See more

mysql helmcourse 0.2.4

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

1,518
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
cryptography@38.0.4
39.0.1

Open the chart page →

30,099
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
cryptography@3.4.7
39.0.1

Open the chart page →

37,671
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
cryptography@3.4.7
39.0.1

Open the chart page →

6,501
freeipaimprowisedVerified publisher0.4.11 of 1See more

freeipa improwised 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
cryptography@37.0.2
39.0.1

Open the chart page →

1,218
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
39.0.1

Open the chart page →

3,314
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
cryptography@38.0.4
39.0.1

Open the chart page →

10,780
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
cryptography@2.9.2
39.0.1

Open the chart page →

9,854
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
cryptography@3.3.2
39.0.1

Open the chart page →

3,999
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
cryptography@36.0.1
39.0.1

Open the chart page →

16,417
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
cryptography@35.0.0
39.0.1

Open the chart page →

1,598
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

1,518
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.2
39.0.1
no fix listed

Open the chart page →

14,813
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
cryptography@3.2
39.0.1

Open the chart page →

1,850
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
cryptography@38.0.4
39.0.1

Open the chart page →

6,356
gitlabkubesphereVerified publisher4.2.31 of 17See more

gitlab kubesphere 4.2.3

1 of the 17 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
cryptography@3.0
39.0.1

Open the chart page →

38,133
deepflowkubesphere-stable6.2.6062 of 8See more

deepflow kubesphere-stable 6.2.606

2 of the 8 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
cryptography@3.4.6
39.0.1
deepflowce/mysql:8.0.313d7ae561cf60
cryptography@3.4.7
39.0.1

Open the chart page →

18,316
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

8,698
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
cryptography@38.0.4
39.0.1

Open the chart page →

33,242
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
cryptography@36.0.2
39.0.1

Open the chart page →

1,949
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
cryptography@38.0.4
39.0.1

Open the chart page →

33,242
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

8,938
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
cryptography@3.4.7
39.0.1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
cryptography@3.4.7
39.0.1
lsstsqre/wfdispatcher:lateste9feb99f524d
cryptography@3.4.7
39.0.1

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
cryptography@36.0.1
39.0.1

Open the chart page →

17,779
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,706
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
cryptography@3.4.7
39.0.1

Open the chart page →

1,902
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
cryptography@37.0.2
39.0.1

Open the chart page →

2,233
fossologymidokura-communityVerified publisher0.2.21 of 2See more

fossology midokura-community 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
fossology/fossology:4.2.18bd1f22ba7bb
cryptography@38.0.3
39.0.1

Open the chart page →

3,294
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
39.0.1

Open the chart page →

15,855
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
cryptography@38.0.4
39.0.1

Open the chart page →

2,470
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
cryptography@2.4.2
39.0.1

Open the chart page →

1,458
phonebook-chartmy-phonebook-chart0.1.01 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,034
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
39.0.1

Open the chart page →

4,911
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
cryptography@2.3
39.0.1

Open the chart page →

55,726
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.4
39.0.1
no fix listed
socialmediamacroscope/image_crawler:0.1.2f508216be63c
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.4
39.0.1
no fix listed

Open the chart page →

109,294
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
cryptography@38.0.4
39.0.1

Open the chart page →

30,028
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
cryptography@3.3.2
39.0.1

Open the chart page →

18,023
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
cryptography@2.3.1
39.0.1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
cryptography@2.3.1
39.0.1

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
cryptography@2.3.1
39.0.1

Open the chart page →

26,211
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
39.0.1
no fix listed

Open the chart page →

40,715
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
39.0.1

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
39.0.1
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
39.0.1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
39.0.1
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
39.0.1

Open the chart page →

93,855
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,423
open-webconceptopen-webconcept0.1.01 of 3See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

3,423
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
cryptography@2.5
python-cryptography@2.1.4-1ubuntu1.4
39.0.1
no fix listed

Open the chart page →

36,215
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
39.0.1

Open the chart page →

22,084
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
39.0.1

Open the chart page →

11,151
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-23931.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
39.0.1

Open the chart page →

28,484

Container images carrying it

210 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
cryptography@36.0.2
39.0.1
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
cryptography@3.4.7
39.0.1
1
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
cryptography@3.3.2
39.0.1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
cryptography@37.0.4
39.0.1
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cryptography@38.0.4
39.0.1
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
cryptography@37.0.2
39.0.1
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
cryptography@36.0.2
39.0.1
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
39.0.1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
cryptography@3.4.8
39.0.1
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
cryptography@3.4.8
39.0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.