StackRadar

CVE-2023-25193

High

Advisory

Published 4 Feb 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.018
77th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
259
of 17,781 indexed, latest versions
Container images
252
deployed by those charts
Fix available
6 of 6
affected packages

Red Hat Security Advisory: harfbuzz security update

Carried by container images the latest versions of 259 of 17,781 indexed charts deploy, on 252 images.

Affected packageAffected versionsFixed inImages
harfbuzzdeb1.7.2-1ubuntu1, 2.6.4-1ubuntu4, 2.6.4-1ubuntu4.2, 2.7.4-1ubuntu3+2 more2.6.4-1ubuntu4.3, 2.7.4-1ubuntu3.2213
harfbuzzrpm1.7.5-3.el8, 2.7.4-8.el90:1.7.5-4.el8, 0:2.7.4-10.el930
openjdk-ltsdeb11.0.3+7-1ubuntu2~18.04.1, 11.0.8+10-0ubuntu1~18.04.1, 11.0.11+9-0ubuntu2~20.04, 11.0.13+8-0ubuntu1~20.04+5 more11.0.20+8-1ubuntu1~18.04, 11.0.20+8-1ubuntu1~20.0415
javabitnami11.0.15-150, 11.0.18-10-1, 11.0.18-10-2, 11.0.20-8-3+4 more11.0.208
Javabitnami11.0.20-8, 17.0.8-711.0.203
openjdk-17deb17.0.3+7-0ubuntu0.20.04.117.0.8+7-1~20.04.21
OSV records
BIT-java-2023-25193DEBIAN-CVE-2023-25193RHSA-2024:2410RHSA-2024:2980UBUNTU-CVE-2023-25193
Also known as
BIT-java-min-2023-25193, BIT-jre-2023-25193, USN-6263-1, USN-7251-1

Charts affected

259 by stars
ChartLatestAffected imagesRadar Score
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2

Open the chart page →

9,347
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
harfbuzz@6.0.0+dfsg-3
no fix listed

Open the chart page →

10,795
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
harfbuzz@2.6.4-1ubuntu4.2
2.6.4-1ubuntu4.3

Open the chart page →

11,405
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
java@11.0.20-8-3
Java@11.0.20-8
11.0.20
11.0.20

Open the chart page →

9,397
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
harfbuzz@2.6.4-1ubuntu4
openjdk-lts@11.0.11+9-0ubuntu2~20.04
2.6.4-1ubuntu4.3
11.0.20+8-1ubuntu1~20.04

Open the chart page →

14,364
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
harfbuzz@2.6.4-1ubuntu4
openjdk-lts@11.0.11+9-0ubuntu2~20.04
2.6.4-1ubuntu4.3
11.0.20+8-1ubuntu1~20.04
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8

Open the chart page →

28,605
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2

Open the chart page →

14,100
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8

Open the chart page →

11,577
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-25193.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8

Open the chart page →

6,016

Container images carrying it

252 by charts deploying them

A fixed version is listed for 6 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
java@11.0.18-10-1
11.0.20
1
bnjbvr/kresus:0.22.137e216b182c8
harfbuzz@6.0.0+dfsg-3
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
harfbuzz@2.6.4-1ubuntu4
openjdk-lts@11.0.11+9-0ubuntu2~20.04
2.6.4-1ubuntu4.3
11.0.20+8-1ubuntu1~20.04
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
harfbuzz@6.0.0+dfsg-3
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
harfbuzz@6.0.0+dfsg-3
no fix listed
1
codedesignplus/ms-emails-grpc:lateste336012bc781
harfbuzz@6.0.0+dfsg-3
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
harfbuzz@6.0.0+dfsg-3
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
harfbuzz@2.6.4-1ubuntu4.2
2.6.4-1ubuntu4.3
1
daskdev/dask-notebook:1.1.0052630f5ca04
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
harfbuzz@6.0.0+dfsg-3
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
harfbuzz@6.0.0+dfsg-3
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
harfbuzz@6.0.0+dfsg-3
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
harfbuzz@6.0.0+dfsg-3
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
harfbuzz@6.0.0+dfsg-3
no fix listed
1
fiware/mintaka:0.7.092a3c5cf43c0
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
fiware/mintaka:latestefc6793388cc
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
fluent/fluent-bit:4.0-debuge76397ef3983
harfbuzz@6.0.0+dfsg-3
no fix listed
1
gethue/hue:4.10.05702b2c37ff9
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
gurolakman/ussigw-core:1.0.48739565c3ea2
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
haveagitgat/tdarr:2.00.181256348872ce
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
harfbuzz@2.6.4-1ubuntu4.2
2.6.4-1ubuntu4.3
1
hazelcast/management-center:5.3.2f9d34300d330
harfbuzz@1.7.5-3.el8
0:1.7.5-4.el8
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
harfbuzz@6.0.0+dfsg-3
no fix listed
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
harfbuzz@1.7.2-1ubuntu1
openjdk-lts@11.0.19+7~us1-0ubuntu1~18.04.1
no fix listed
11.0.20+8-1ubuntu1~18.04
1
jaedb/iris:latest048cfbf58d57
harfbuzz@6.0.0+dfsg-3
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
josh5/unmanic:0.2.64d49c4816260
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2
1
kinseii/wazuh-agent:4.14.17160eb143728
harfbuzz@6.0.0+dfsg-3
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
harfbuzz@6.0.0+dfsg-3
no fix listed
1
laly9999/node-app:1dd0e503913e1
harfbuzz@6.0.0+dfsg-3
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
harfbuzz@6.0.0+dfsg-3
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
harfbuzz@6.0.0+dfsg-3
no fix listed
1
library/node:208f693eaa7e0a
harfbuzz@6.0.0+dfsg-3
no fix listed
1
library/python:3.8d41127070014
harfbuzz@6.0.0+dfsg-3
no fix listed
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
harfbuzz@1.7.2-1ubuntu1
no fix listed
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
linuxserver/jellyfin:10.7.72427dde159a2
harfbuzz@2.6.4-1ubuntu4
2.6.4-1ubuntu4.3
1
linuxserver/unifi-controller:8.0.240ae315a3a456
harfbuzz@2.6.4-1ubuntu4.2
2.6.4-1ubuntu4.3
1
linuxserver/unifi-controller:7.3.83ab105cc50322
harfbuzz@2.6.4-1ubuntu4.2
openjdk-lts@11.0.19+7~us1-0ubuntu1~20.04.1
2.6.4-1ubuntu4.3
11.0.20+8-1ubuntu1~20.04
1
livekit/ingress:v1.2.21ab01641b366
harfbuzz@2.7.4-1ubuntu3.1
2.7.4-1ubuntu3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.