StackRadar

CVE-2023-2650

Medium

Advisory

Published 30 May 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.751
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,109
of 17,790 indexed, latest versions
Container images
1,095
deployed by those charts
Fix available
4 of 4
affected packages

libopenssl-1_1-devel-1.1.1u-1.1 on GA media

Carried by container images the latest versions of 1,109 of 17,790 indexed charts deploy, on 1,095 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+16 more1.1.1u-r0, 3.0.9-r0, 3.1.1-r0557
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+58 more1.0.1f-1ubuntu2.27+esm9, 1.0.2g-1ubuntu4.20+esm9, 1.1.1-1ubuntu2.1~18.04.23, 1.1.1-1ubuntu2.fips.2.1~18.04.23+4 more528
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+1 more1.0.2n-1ubuntu5.1312
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.11.1.0i-150100.14.51.1, 1.1.1d-150200.11.65.1, 1.1.1u-1.110
OSV records
ALPINE-CVE-2023-2650UBUNTU-CVE-2023-2650openSUSE-SU-2024:12972-1SUSE-SU-2023:2327-1SUSE-SU-2023:2343-1
Also known as
USN-6119-1, USN-6188-1

Charts affected

1,109 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.9-r0

Open the chart page →

7,697
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.9-r0

Open the chart page →

1,998
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.9-r0

Open the chart page →

1,955
pgbounceryasn77-pgbouncer0.0.81 of 1See more

pgbouncer yasn77-pgbouncer 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
openssl@1.1.1q-r0
1.1.1u-r0

Open the chart page →

1,152
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
openssl@1.1.1n-r0
1.1.1u-r0

Open the chart page →

7,998
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.fips.2.1~18.04.23

Open the chart page →

2,467
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.9-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.9-r0

Open the chart page →

5,852
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r0

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.19

Open the chart page →

9,256

Container images carrying it

1,095 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23
1
ghcr.io/liubin/toml-cli:v0.0.734a1da9f0f83
openssl@3.0.7-r0
3.0.9-r0
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
openssl@3.0.8-r0
3.0.9-r0
1
ghcr.io/matrix-org/dendrite-monolith:v0.9.43267d27d392f
openssl@1.1.1q-r0
1.1.1u-r0
1
ghcr.io/middleware-labs/odigos-ui:middleware-test-0.0.787120a4561a9
openssl@3.0.8-r0
3.0.9-r0
1
ghcr.io/middleware-labs/vision-ui:middleware-test-0.0.853772b7b42c7
openssl@3.0.8-r0
3.0.9-r0
1
ghcr.io/mjohnson9/docker-pleroma:v0.1.44f08e2823756
openssl@1.1.1s-r0
1.1.1u-r0
1
ghcr.io/mmontes11/echoperator:v0.0.4a544a71c6e3b
openssl@1.1.1o-r0
1.1.1u-r0
1
ghcr.io/mmontes11/iot-mosquitto:v3.11.0d5cc1a76966c
openssl@1.1.1t-r0
1.1.1u-r0
1
ghcr.io/nabokihms/events_exporter:latest68d44646e8b2
openssl@3.0.7-r2
3.0.9-r0
1
ghcr.io/nimbolus/k8s-openstack-node-upgrade-agent:0.1.0e0c7cf2415f0
openssl@1.1.1l-r7
1.1.1u-r0
1
ghcr.io/nousefreak/clusterfan:v0.1.04ea05e2a7b57
openssl@1.1.1l-r7
1.1.1u-r0
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
openssl@3.1.0-r4
3.1.1-r0
1
ghcr.io/openfaas/nats-connector:0.3.0315e57c0a8d8
openssl@1.1.1q-r0
1.1.1u-r0
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.19
1
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
openssl@3.0.7-r0
3.0.9-r0
1
ghcr.io/perceptolab/devops-demo-app:0.0.2cdc0658c40fb
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23
1
ghcr.io/reitermarkus/strongswan:v1.0.0e7a8afe6e6eb
openssl@1.1.1l-r8
1.1.1u-r0
1
ghcr.io/rivals-space/rivals-nginx:1.6.1f376b96b82cc
openssl@3.0.7-r2
3.0.9-r0
1
ghcr.io/salaboy/fmtok8s-email-service:v0.2.0-nativeb52d5dbac2ca
openssl@1.1.1-1ubuntu2.1~18.04.19
1.1.1-1ubuntu2.1~18.04.23
1
ghcr.io/salaboy/fmtok8s-email-service:v0.1.0-nativecf28472bc460
openssl@1.1.1-1ubuntu2.1~18.04.19
1.1.1-1ubuntu2.1~18.04.23
1
ghcr.io/schildichat/schildichat-web:latesta87f57287805
openssl@3.0.8-r3
3.0.9-r0
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.19
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.19
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.19
1
ghcr.io/smarter-project/pulseaudio:v0.0.4becfd364355b
openssl@1.1.1q-r0
1.1.1u-r0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.19
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.fips.19
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.19
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
openssl@1.1.1n-r0
1.1.1u-r0
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.fips.19
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.fips.19
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
openssl@1.1.1t-r0
1.1.1u-r0
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
openssl@1.1.1s-r0
1.1.1u-r0
1
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
openssl@1.1.1s-r0
1.1.1u-r0
1
ghcr.io/umami-software/umami:postgresql-v1.39.560fa8875aff8
openssl@1.1.1q-r0
1.1.1u-r0
1
ghcr.io/volosoft/eshoponabp/app-web:1.0.0056bb4271626
openssl@1.1.1q-r0
1.1.1u-r0
1
ghcr.io/waldo-vision/migrate:v0.3.6ae31923312ed
openssl@3.0.8-r3
3.0.9-r0
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
openssl@3.0.8-r3
3.0.9-r0
1
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
openssl@1.1.1l-r7
1.1.1u-r0
1
ghcr.io/wbstack/ui:3.94b01f67faadf1
openssl@1.1.1n-r0
1.1.1u-r0
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.1~18.04.23
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
openssl@1.1.1q-r0
1.1.1u-r0
1
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
openssl@1.1.1q-r0
1.1.1u-r0
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.19
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.fips.2.1~18.04.23
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.19
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.fips.2.1~18.04.23
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
openssl@1.1.1t-r0
1.1.1u-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.