StackRadar

CVE-2023-2650

Medium

Advisory

Published 30 May 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.751
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,109
of 17,790 indexed, latest versions
Container images
1,095
deployed by those charts
Fix available
4 of 4
affected packages

libopenssl-1_1-devel-1.1.1u-1.1 on GA media

Carried by container images the latest versions of 1,109 of 17,790 indexed charts deploy, on 1,095 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+16 more1.1.1u-r0, 3.0.9-r0, 3.1.1-r0557
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+58 more1.0.1f-1ubuntu2.27+esm9, 1.0.2g-1ubuntu4.20+esm9, 1.1.1-1ubuntu2.1~18.04.23, 1.1.1-1ubuntu2.fips.2.1~18.04.23+4 more528
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+1 more1.0.2n-1ubuntu5.1312
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.11.1.0i-150100.14.51.1, 1.1.1d-150200.11.65.1, 1.1.1u-1.110
OSV records
ALPINE-CVE-2023-2650UBUNTU-CVE-2023-2650openSUSE-SU-2024:12972-1SUSE-SU-2023:2327-1SUSE-SU-2023:2343-1
Also known as
USN-6119-1, USN-6188-1

Charts affected

1,109 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.9-r0

Open the chart page →

7,697
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.9-r0

Open the chart page →

1,998
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.9-r0

Open the chart page →

1,955
pgbounceryasn77-pgbouncer0.0.81 of 1See more

pgbouncer yasn77-pgbouncer 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
openssl@1.1.1q-r0
1.1.1u-r0

Open the chart page →

1,152
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
openssl@1.1.1n-r0
1.1.1u-r0

Open the chart page →

7,998
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.fips.2.1~18.04.23

Open the chart page →

2,467
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.9-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.9-r0

Open the chart page →

5,852
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r0

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-2650.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.19

Open the chart page →

9,256

Container images carrying it

1,095 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
openssl@1.1.1q-r0
1.1.1u-r0
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.19
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.10
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
openssl@1.1.1o-r0
1.1.1u-r0
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
1
quay.io/fairwinds/docker-demo:1.4.0d53cb940196c
openssl@3.1.0-r4
3.1.1-r0
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
openssl@3.0.7-r2
3.0.9-r0
1
quay.io/fiware/envoy-configmap-updater:0.4.39eabc3f3e1e2
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/fiware/ishare-auth-provider:0.4.3158108f70f95
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/fiware/vcverifier:2.0.1cd36290dc849
openssl@3.1.0-r4
3.1.1-r0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.10
1
quay.io/groundcover/caretta:v0.0.16ed8f5118e3a4
openssl@3.0.8-r0
3.0.9-r0
1
quay.io/groundcover/victoria-metrics:v1.85.380ddeb90d18d
openssl@3.0.7-r0
3.0.9-r0
1
quay.io/k8start/http-headers:1.2.0c7a9987f2ac5
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/kiwigrid/k8s-sidecar:1.15.61f025ae37b7b
openssl@1.1.1l-r8
1.1.1u-r0
1
quay.io/kiwigrid/k8s-sidecar:1.21.0710e23b489c5
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/kiwigrid/k8s-sidecar:1.15.1a25886092fa4
openssl@1.1.1l-r8
1.1.1u-r0
1
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
openssl@1.0.2g-1ubuntu4.17
1.0.2g-1ubuntu4.20+esm9
1
quay.io/netwarps/blockscoutbecd3e39360a
openssl@1.1.1l-r8
1.1.1u-r0
1
quay.io/netwarps/walletconnect-relay:v2.1.3-rc.15d90b9c193e0
openssl@1.1.1s-r0
1.1.1u-r0
1
quay.io/oauth2-proxy/oauth2-proxy:v7.2.1febeebebe762
openssl@1.1.1l-r7
1.1.1u-r0
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
openssl@1.1.1l-r8
1.1.1u-r0
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
openssl@3.0.8-r4
3.0.9-r0
1
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm9
1
quay.io/solo-io/certgen:0.0.0-forkb17a8c7d1f32
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/solo-io/gloo-envoy-wrapper:0.0.0-fork26ae185e835a
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/solo-io/kubectl:0.0.0-fork2d5404e61625
openssl@1.1.1q-r0
1.1.1u-r0
1
quay.io/wi_stefan/dsba-db-migrations:0.0.125b986cd14a08
openssl@3.0.7-r0
3.0.9-r0
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.1~18.04.23
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
openssl@1.1.1f-1ubuntu2.2
1.1.1f-1ubuntu2.19
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
openssl@1.1.1q-r0
1.1.1u-r0
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.9-r0
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
openssl@1.1.1q-r0
1.1.1u-r0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
openssl@3.1.0-r4
3.1.1-r0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.9-r0
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
openssl@1.1.1q-r0
1.1.1u-r0
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
openssl@1.1.1q-r0
1.1.1u-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.