CVE-2023-26125
MediumAdvisory
Published 4 May 2023In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.009
- 58th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 65
- of 17,781 indexed, latest versions
- Container images
- 73
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper input validation in github.com/gin-gonic/gin
Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 73 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.4.0, v1.4.1-0.20190910091637-9aa870f108a1, v1.5.0, v1.6.3+8 more | 1.9.0 | 73 |
- OSV records
- GHSA-3vp4-m3rf-835h
Charts affected
65 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| karmamesosphere | 1.3.0 | 1 of 1See more | 2,111 |
| karmamesosphere-stable | 2.0.3 | 1 of 1See more | 1,966 |
| kommandermesosphere-stable | 0.39.2 | 1 of 29See more | 68,284 |
| replacermosquitto-helm-chart | 0.2.0 | 1 of 3See more | 3,929 |
| fsmopenshift | 0.1.8-ubi.6 | 2 of 6See more | 16,556 |
| hammondpascaliskeVerified publisher | 2.0.0 | 1 of 2See more | 1,806 |
| mindavphntom | 0.1.6 | 1 of 2See more | 4,158 |
| npre-essentialsphntom | 0.1.60 | 1 of 22See more | 26,840 |
| zincromholdings | 0.1.2 | 1 of 1See more | 1,507 |
| unifi-protectschichtelVerified publisher | 0.10.1 | 1 of 1See more | 5,582 |
| agentssynapse | 0.1.30 | 2 of 9See more | 7,244 |
| cctpsynapse | 0.3.0 | 1 of 4See more | 1,815 |
| trafficlight-apithecampagnards | 0.1.1 | 1 of 1See more | 4,357 |
| twitter-apptwitter-helm | 0.1.12 | 2 of 8See more | 6,132 |
| scrutinyvhdirkVerified publisher | 0.1.3 | 1 of 1See more | 4,382 |
Container images carrying it
73 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 18689773150d | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | cf78fdf7403a | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 448cb346b12c | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 700bb42ac21d | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | f9de3a1a5deb | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 923a3f704b21 | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 03c1ddbda33b | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | edd095d3c0ee | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | c298183a5208 | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 455f6e7a26fd | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 05aa441b20aa | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 0b2a41c2a43e | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | ab41ffa78f69 | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 81a9ebc899a4 | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 2f1408c94168 | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | 5e0a3dfa9f96 | github.com/ | 1.9.0 | 1 |
| public.ecr.aws/ | 783d550ad813 | github.com/ | 1.9.0 | 1 |
| quay.io/ | 14b482c1f1b8 | github.com/ | 1.9.0 | 1 |
| quay.io/ | a5dc9d91de0d | github.com/ | 1.9.0 | 1 |
| quay.io/ | 0cca71497e9e | github.com/ | 1.9.0 | 1 |
| quay.io/ | 158108f70f95 | github.com/ | 1.9.0 | 1 |
| quay.io/ | e6d7afb1a4bf | github.com/ | 1.9.0 | 1 |
| quay.io/ | fce990dece01 | github.com/ | 1.9.0 | 1 |