StackRadar

CVE-2023-25173

Medium

Advisory

Published 16 Feb 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
201
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
1 of 1
affected package

Supplementary groups are not set up properly in github.com/containerd/containerd

Carried by container images the latest versions of 201 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
github.com/containerd/containerdgolangv1.3.0, v1.3.2, v1.3.3, v1.3.4+31 more1.5.18, 1.6.18179
OSV records
GHSA-hmfx-3pcx-653p
Also known as
GO-2023-1574

Charts affected

201 by stars
ChartLatestAffected imagesRadar Score
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2023-25173.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/containerd/containerd@v1.6.15
1.6.18

Open the chart page →

13,677

Container images carrying it

179 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/containerd/containerd@v1.3.2
1.5.18
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/containerd/containerd@v1.3.2
1.5.18
1
ghcr.io/helm/chartmuseum:v0.15.0c298183a5208
github.com/containerd/containerd@v1.6.3
1.6.18
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/containerd/containerd@v1.6.6
1.6.18
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/containerd/containerd@v1.6.15
1.6.18
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/containerd/containerd@v1.6.15
1.6.18
1
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
github.com/containerd/containerd@v1.6.6
1.6.18
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/containerd/containerd@v1.4.1
1.5.18
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/containerd/containerd@v1.4.1
1.5.18
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/containerd/containerd@v1.5.9
1.5.18
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/containerd/containerd@v1.6.2
1.6.18
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/containerd/containerd@v1.6.1
1.6.18
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/containerd/containerd@v1.5.1
1.5.18
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/containerd/containerd@v1.4.3
1.5.18
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/containerd/containerd@v1.5.13
1.5.18
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/containerd/containerd@v1.3.2
1.5.18
1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/containerd/containerd@v1.5.10
1.5.18
1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/containerd/containerd@v1.5.10
1.5.18
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/containerd/containerd@v1.4.1
1.5.18
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/containerd/containerd@v1.4.11
1.5.18
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/containerd/containerd@v1.3.3
1.5.18
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/containerd/containerd@v1.5.7
1.5.18
1
quay.io/prometheus/prometheus:v2.33.591100b06e86d
github.com/containerd/containerd@v1.6.1
1.6.18
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
github.com/containerd/containerd@v1.6.1
1.6.18
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/containerd/containerd@v1.5.1
1.5.18
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/containerd/containerd@v1.4.3
1.5.18
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/containerd/containerd@v1.4.13
1.5.18
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/containerd/containerd@v1.4.13
1.5.18
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/containerd/containerd@v1.5.7
1.5.18
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.