StackRadar

CVE-2023-26112

Medium

Advisory

Published 3 Apr 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
84
of 17,781 indexed, latest versions
Container images
77
deployed by those charts
Fix available
2 of 2
affected packages

configobj ReDoS exploitable by developer using values in a server-side configuration file

Carried by container images the latest versions of 84 of 17,781 indexed charts deploy, on 77 images.

Affected packageAffected versionsFixed inImages
configobjdeb5.0.6-45.0.6-4ubuntu0.11
configobjpypi5.0.6, 5.0.85.0.977
OSV records
UBUNTU-CVE-2023-26112GHSA-c33w-24p9-8m24
Also known as
PYSEC-2026-1270, USN-7040-1

Charts affected

84 by stars
ChartLatestAffected imagesRadar Score
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
configobj@5.0.8
5.0.9

Open the chart page →

4,556
netbird-dashboardjaconiVerified publisher1.2.11 of 1See more

netbird-dashboard jaconi 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.2332cc31f5f35
configobj@5.0.6
5.0.9

Open the chart page →

585
openspeedtestspeedtestVerified publisher0.1.21 of 1See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
openspeedtest/latest:v2.0.0d4d62f4b7d85
configobj@5.0.6
5.0.9

Open the chart page →

2,040
rocketmqgin1.1.01 of 2See more

rocketmq gin 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:1.0.024799aff6cf8
configobj@5.0.6
5.0.9

Open the chart page →

9,154
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.101b59e1c905c9
configobj@5.0.6
5.0.9

Open the chart page →

2,962
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
enketo/enketo-express:3.0.4dcad9c2273f6
configobj@5.0.6
5.0.9

Open the chart page →

18,517
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
configobj@5.0.6
5.0.9

Open the chart page →

10,231
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
configobj@5.0.6
5.0.9

Open the chart page →

3,345
pdc-portali4trustVerified publisher2.3.21 of 1See more

pdc-portal i4trust 2.3.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
i4trust/pdc-portal:2.0.03e77858e1219
configobj@5.0.6
5.0.9

Open the chart page →

2,723
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.12 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

2 of the 6 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
fjvela/urjc-fjvela-external-service:1.0.1a8ebe5ca13fc
configobj@5.0.6
5.0.9
fjvela/urjc-fjvela-server:1.0.53c840aebce22
configobj@5.0.6
5.0.9

Open the chart page →

19,187
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
configobj@5.0.6
5.0.9

Open the chart page →

5,104
sentinel-dashboardsentinel-dashboardVerified publisher0.1.01 of 1See more

sentinel-dashboard sentinel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
royalwang/sentinel-dashboard:1.8.4df99e2499f91
configobj@5.0.6
5.0.9

Open the chart page →

4,287
statsdstatsd-airflow-smd0.1.191 of 1See more

statsd statsd-airflow-smd 0.1.19

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
statsd/statsd:v0.8.6dab129e74c25
configobj@5.0.6
5.0.9

Open the chart page →

4,185
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
configobj@5.0.6
5.0.9

Open the chart page →

2,616
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-external-service:1.0.02a68e9ac7f09
configobj@5.0.6
5.0.9
davidvmar/urjc-davidvmar-server:1.0.05663f5b24615
configobj@5.0.6
5.0.9

Open the chart page →

19,745
mongo-uiappscodeVerified publisher2026.3.301 of 1See more

mongo-ui appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
ghcr.io/kubedb/mongo-gui:latestee0354b7a57a
configobj@5.0.6
5.0.9

Open the chart page →

912
aks-helloworldazure-sample0.1.11 of 1See more

aks-helloworld azure-sample 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/aks-helloworld:v1fb47732ef36b
configobj@5.0.6
5.0.9

Open the chart page →

4,269
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
configobj@5.0.6
5.0.9

Open the chart page →

5,224
azure-vote-osbaazure-sample0.1.01 of 1See more

azure-vote-osba azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/azure-vote-front:v384062718347c
configobj@5.0.6
5.0.9

Open the chart page →

4,269
burst-schedulerazure-sample0.1.01 of 1See more

burst-scheduler azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/burst-scheduler:v1.23a8877032972
configobj@5.0.6
5.0.9

Open the chart page →

2,408
osba-container-instances-demoazure-sample0.1.01 of 1See more

osba-container-instances-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/osba-container-instances-demo:latest6527b05d5d03
configobj@5.0.6
5.0.9

Open the chart page →

3,212
osba-cosmos-mongodb-demoazure-sample0.1.01 of 1See more

osba-cosmos-mongodb-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/osba-cosmos-mongodb-demo:latestf4940e84ed05
configobj@5.0.6
5.0.9

Open the chart page →

2,904
osba-mysql-demoazure-sample0.1.01 of 1See more

osba-mysql-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/osba-mysql-demo:latest5859d68a6c9f
configobj@5.0.6
5.0.9

Open the chart page →

2,895
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
configobj@5.0.6
5.0.9

Open the chart page →

3,425
osba-text-analytics-demoazure-sample0.1.01 of 1See more

osba-text-analytics-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/osba-text-analytics-demo:latest969af3cb8466
configobj@5.0.6
5.0.9

Open the chart page →

3,089
twitter-sentimentazure-sample0.1.03 of 3See more

twitter-sentiment azure-sample 0.1.0

3 of the 3 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
neilpeterson/chart-tweet:latest64fd8dab075f
configobj@5.0.6
5.0.9
neilpeterson/get-tweet:v28b645ac1a23e
configobj@5.0.6
5.0.9
neilpeterson/process-tweet:latest39ce9f92e899
configobj@5.0.6
5.0.9

Open the chart page →

11,833
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
configobj@5.0.6
5.0.9

Open the chart page →

22,891
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
configobj@5.0.6
5.0.9

Open the chart page →

5,437
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
configobj@5.0.6
5.0.9

Open the chart page →

2,504
smart-exporterbryanalves0.2.21 of 1See more

smart-exporter bryanalves 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
bryanalves/smart_exporter:0.2af47dfbb9413
configobj@5.0.6
5.0.9

Open the chart page →

4,131
imap-mailbox-exportercamptocamp32.0.01 of 1See more

imap-mailbox-exporter camptocamp3 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
camptocamp/imap-mailbox-exporter:latest9dec019e4c62
configobj@5.0.6
5.0.9

Open the chart page →

2,234
ldap-search-exportercamptocamp31.0.01 of 1See more

ldap-search-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
camptocamp/ldap-search-exporter:latest5e55370dd292
configobj@5.0.6
5.0.9

Open the chart page →

2,234
node-redcloudnativeapp1.2.21 of 1See more

node-red cloudnativeapp 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
nodered/node-red-docker:0.19.6-v8070643219ea2
configobj@5.0.6
5.0.9

Open the chart page →

4,790
puppet-forgecloudnativeapp0.1.81 of 2See more

puppet-forge cloudnativeapp 0.1.8

1 of the 2 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
hickey/puppet_forge:1.10.0c1148a09ef20
configobj@5.0.6
5.0.9

Open the chart page →

4,086
riemanncloudnativeapp0.1.21 of 1See more

riemann cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
raykrueger/riemann:0.2.14c8baf3de57bb
configobj@5.0.6
5.0.9

Open the chart page →

6,497
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
configobj@5.0.6
5.0.9

Open the chart page →

5,060
robot-shopcloud-native-toolkit1.1.13 of 12See more

robot-shop cloud-native-toolkit 1.1.1

3 of the 12 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
robotshop/rs-cart:latest388349d5cb3c
configobj@5.0.6
5.0.9
robotshop/rs-catalogue:latestd545747c1b97
configobj@5.0.6
5.0.9
robotshop/rs-user:latestea509182c180
configobj@5.0.6
5.0.9

Open the chart page →

29,555
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
configobj@5.0.6
5.0.9

Open the chart page →

8,245
prometheus-aws-costs-exporterdeliveryheroVerified publisher0.1.51 of 1See more

prometheus-aws-costs-exporter deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
configobj@5.0.6
5.0.9

Open the chart page →

3,553
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
configobj@5.0.6
5.0.9

Open the chart page →

27,550
mergeabledoubanVerified publisher0.2.21 of 1See more

mergeable douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
ghcr.io/leoquote/mergeable:latest451706815103
configobj@5.0.6
5.0.9

Open the chart page →

4,223
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
configobj@5.0.6
5.0.9

Open the chart page →

24,656
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
configobj@5.0.6
5.0.9

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
configobj@5.0.6
5.0.9

Open the chart page →

27,256
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
configobj@5.0.6
5.0.9

Open the chart page →

3,260
bae-activation-servicefiware0.1.21 of 1See more

bae-activation-service fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
fiware/bae-activation-service:v0.0.33e3ec88d59ed
configobj@5.0.6
5.0.9

Open the chart page →

3,186
powerdnsfsdrw080.1.31 of 4See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
configobj@5.0.6
5.0.9

Open the chart page →

1,958
comcastgeek-cookbookVerified publisher6.4.21 of 1See more

comcast geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
billimek/comcastusage-for-influxdb:latest801bba1228ac
configobj@5.0.6
5.0.9

Open the chart page →

3,245
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
configobj@5.0.6
5.0.9

Open the chart page →

8,392
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-26112.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
configobj@5.0.6
5.0.9

Open the chart page →

2,643

Container images carrying it

77 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
netbirdio/dashboard:v2.90.2332cc31f5f35
configobj@5.0.6
5.0.9
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
configobj@5.0.6
5.0.9
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
configobj@5.0.6
5.0.9
1
nodered/node-red-docker:0.19.6-v8070643219ea2
configobj@5.0.6
5.0.9
1
ondrejsika/parking:latestb1fd497416c8
configobj@5.0.6
5.0.9
1
openemr/openemr:6.1.089eaa6d9a4e3
configobj@5.0.6
5.0.9
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
configobj@5.0.6
5.0.9
1
openwhisk/alarmprovider:2.2.0b695a6ceb406
configobj@5.0.6
5.0.9
1
pachyderm/grpc-proxy:0.4.92b27f41d4d02
configobj@5.0.6
5.0.9
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
configobj@5.0.8
5.0.9
1
rakii8585/angular-node-webapp:latest026082a515ac
configobj@5.0.6
5.0.9
1
raykrueger/riemann:0.2.14c8baf3de57bb
configobj@5.0.6
5.0.9
1
robotshop/rs-cart:latest388349d5cb3c
configobj@5.0.6
5.0.9
1
robotshop/rs-catalogue:latestd545747c1b97
configobj@5.0.6
5.0.9
1
robotshop/rs-user:latestea509182c180
configobj@5.0.6
5.0.9
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
configobj@5.0.6
5.0.9
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
configobj@5.0.6
5.0.9
1
slagattollas/server-practica:latest6dd8ead8e2b1
configobj@5.0.6
5.0.9
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
configobj@5.0.6-4
configobj@5.0.6
5.0.6-4ubuntu0.1
5.0.9
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
configobj@5.0.6
5.0.9
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
configobj@5.0.6
5.0.9
1
ghcr.io/kubedb/mongo-gui:latestee0354b7a57a
configobj@5.0.6
5.0.9
1
ghcr.io/leoquote/mergeable:latest451706815103
configobj@5.0.6
5.0.9
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
configobj@5.0.6
5.0.9
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
configobj@5.0.8
5.0.9
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
configobj@5.0.8
5.0.9
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
configobj@5.0.6
5.0.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.