CVE-2023-26125
MediumAdvisory
Published 4 May 2023In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.6
- base score, highest
- EPSS
- 0.009
- 58th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 65
- of 17,781 indexed, latest versions
- Container images
- 73
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper input validation in github.com/gin-gonic/gin
Carried by container images the latest versions of 65 of 17,781 indexed charts deploy, on 73 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.4.0, v1.4.1-0.20190910091637-9aa870f108a1, v1.5.0, v1.6.3+8 more | 1.9.0 | 73 |
- OSV records
- GHSA-3vp4-m3rf-835h
Charts affected
65 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| karmamesosphere | 1.3.0 | 1 of 1See more | 2,111 |
| karmamesosphere-stable | 2.0.3 | 1 of 1See more | 1,966 |
| kommandermesosphere-stable | 0.39.2 | 1 of 29See more | 68,284 |
| replacermosquitto-helm-chart | 0.2.0 | 1 of 3See more | 3,929 |
| fsmopenshift | 0.1.8-ubi.6 | 2 of 6See more | 16,556 |
| hammondpascaliskeVerified publisher | 2.0.0 | 1 of 2See more | 1,806 |
| mindavphntom | 0.1.6 | 1 of 2See more | 4,158 |
| npre-essentialsphntom | 0.1.60 | 1 of 22See more | 26,840 |
| zincromholdings | 0.1.2 | 1 of 1See more | 1,507 |
| unifi-protectschichtelVerified publisher | 0.10.1 | 1 of 1See more | 5,582 |
| agentssynapse | 0.1.30 | 2 of 9See more | 7,244 |
| cctpsynapse | 0.3.0 | 1 of 4See more | 1,815 |
| trafficlight-apithecampagnards | 0.1.1 | 1 of 1See more | 4,357 |
| twitter-apptwitter-helm | 0.1.12 | 2 of 8See more | 6,132 |
| scrutinyvhdirkVerified publisher | 0.1.3 | 1 of 1See more | 4,382 |
Container images carrying it
73 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| alfhou/ | c85dc0293aa1 | github.com/ | 1.9.0 | 3 |
| ciscolabs/ | b59fc10bb821 | github.com/ | 1.9.0 | 3 |
| public.ecr.aws/ | fefa9ee7256a | github.com/ | 1.9.0 | 3 |
| quay.io/ | b736b345437d | github.com/ | 1.9.0 | 2 |
| quay.io/ | e98d13459cdc | github.com/ | 1.9.0 | 2 |
| quay.io/ | 2fe7e4dcffdf | github.com/ | 1.9.0 | 2 |
| quay.io/ | 77a22cb45c2a | github.com/ | 1.9.0 | 2 |
| quay.io/ | d7079e0890da | github.com/ | 1.9.0 | 2 |
| apache/ | c010ea7d1694 | github.com/ | 1.9.0 | 1 |
| apache/ | 412f92cde0b3 | github.com/ | 1.9.0 | 1 |
| bbernhard/ | 549ad08d7e14 | github.com/ | 1.9.0 | 1 |
| bicarus/ | b1dab0721e1c | github.com/ | 1.9.0 | 1 |
| bicarus/ | bed688d16762 | github.com/ | 1.9.0 | 1 |
| chaosnative/ | 72ee352bc333 | github.com/ | 1.9.0 | 1 |
| chaosnative/ | 62cf6adc355e | github.com/ | 1.9.0 | 1 |
| cloudentity/ | 9402ec4b5016 | github.com/ | 1.9.0 | 1 |
| cloudentity/ | ee83cdd45b7b | github.com/ | 1.9.0 | 1 |
| cloudentity/ | 5728654cecb7 | github.com/ | 1.9.0 | 1 |
| cloudentity/ | 8ca94ae6acf4 | github.com/ | 1.9.0 | 1 |
| cloudentity/ | c04eb10c77b7 | github.com/ | 1.9.0 | 1 |
| deepflowce/ | 34fcc526dd59 | github.com/ | 1.9.0 | 1 |
| douz/ | f2bc7fc068c1 | github.com/ | 1.9.0 | 1 |
| everpcpc/ | b378d137ae8b | github.com/ | 1.9.0 | 1 |
| gocrane/ | a1400909118c | github.com/ | 1.9.0 | 1 |
| goharbor/ | 6ab3ca28e9e5 | github.com/ | 1.9.0 | 1 |
| gotify/ | 09c79bc1e403 | github.com/ | 1.9.0 | 1 |
| iomesh/ | 60081c9b2f52 | github.com/ | 1.9.0 | 1 |
| iomesh/ | ba4dd6be7e59 | github.com/ | 1.9.0 | 1 |
| iotaledger/ | b02a8f77474f | github.com/ | 1.9.0 | 1 |
| kubebb/ | 0ba03fcee3a7 | github.com/ | 1.9.0 | 1 |
| kubemod/ | 1f8154f7e80c | github.com/ | 1.9.0 | 1 |
| kubemod/ | cadca39288ad | github.com/ | 1.9.0 | 1 |
| lmierzwa/ | 3751e5eed656 | github.com/ | 1.9.0 | 1 |
| lmierzwa/ | d417abe7ddb5 | github.com/ | 1.9.0 | 1 |
| markdegroot/ | d8445f2a0de6 | github.com/ | 1.9.0 | 1 |
| mesosphere/ | 4693bb4e0814 | github.com/ | 1.9.0 | 1 |
| oxynozeta/ | 31f11669d597 | github.com/ | 1.9.0 | 1 |
| phntom/ | 9242b4df9e65 | github.com/ | 1.9.0 | 1 |
| phntom/ | 5695f546abbb | github.com/ | 1.9.0 | 1 |
| photoprism/ | 2954334adbda | github.com/ | 1.9.0 | 1 |
| samcm/ | a66b24a87766 | github.com/ | 1.9.0 | 1 |
| smailkoz/ | 7b52d15de8f0 | github.com/ | 1.9.0 | 1 |
| stakkato95/ | 5d48906d66b3 | github.com/ | 1.9.0 | 1 |
| stakkato95/ | 8412d8a8cac3 | github.com/ | 1.9.0 | 1 |
| tdengine/ | 4140a4021ddb | github.com/ | 1.9.0 | 1 |
| thecampagnards/ | 7dca9d973837 | github.com/ | 1.9.0 | 1 |
| voidxmh/ | 93e42a569ca8 | github.com/ | 1.9.0 | 1 |
| voidxmh/ | 1b7397412320 | github.com/ | 1.9.0 | 1 |
| voidxmh/ | 2ff3f2146547 | github.com/ | 1.9.0 | 1 |
| ghcr.io/ | bce133f3f511 | github.com/ | 1.9.0 | 1 |