StackRadar

CVE-2023-26966

Medium

Advisory

Published 29 Jun 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
172
of 17,781 indexed, latest versions
Container images
178
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 172 of 17,781 indexed charts deploy, on 178 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+20 more4.0.3-7ubuntu0.11+esm8, 4.0.6-1ubuntu0.8+esm11, 4.0.9-5ubuntu0.10+esm1, 4.1.0+git191117-2ubuntu0.20.04.9+2 more178
OSV records
DEBIAN-CVE-2023-26966UBUNTU-CVE-2023-26966
Also known as
USN-6229-1, USN-6290-1

Charts affected

172 by stars
ChartLatestAffected imagesRadar Score
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.9

Open the chart page →

30,687
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

11,888
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

16,400
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

16,400
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

15,635
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
tiff@4.5.0-6
4.5.0-6+deb12u2

Open the chart page →

20,223
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

13,390
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

9,102
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

11,199
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
tiff@4.5.0-6
4.5.0-6+deb12u2

Open the chart page →

6,297
tensor_apptensor-app0.2.22 of 3See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
tiff@4.3.0-6
4.3.0-6ubuntu0.5
xeladock/nginx2:latestc259a67b1dff
tiff@4.3.0-6
4.3.0-6ubuntu0.5

Open the chart page →

17,461
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

11,648
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
opea/codegen-ui:1.02bee4eb66f3e
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
opea/codetrans-ui:1.03ef121f34610
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
opea/docsum-ui:1.07f854e9bffaf
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

28,858
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

9,616
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

17,323
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
tiff@4.5.0-6
4.5.0-6+deb12u2

Open the chart page →

14,358
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-26966.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2

Open the chart page →

7,673

Container images carrying it

178 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.9
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.9
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.9
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.9
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
tiff@4.0.9-5ubuntu0.4
4.0.9-5ubuntu0.10+esm1
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.9
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
tiff@4.1.0+git191117-2ubuntu0.20.04.5
4.1.0+git191117-2ubuntu0.20.04.9
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
tiff@4.1.0+git191117-2ubuntu0.20.04.5
4.1.0+git191117-2ubuntu0.20.04.9
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
tiff@4.5.0-6
4.5.0-6+deb12u2
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
tiff@4.5.0-6
4.5.0-6+deb12u2
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
tiff@4.5.0-6
4.5.0-6+deb12u2
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.9
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
tiff@4.5.0-6+deb12u1
4.5.0-6+deb12u2
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
tiff@4.0.6-1ubuntu0.6
4.0.6-1ubuntu0.8+esm11
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
tiff@4.5.0-6
4.5.0-6+deb12u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.