CVE-2023-2727
MediumAdvisory
Published 3 Jul 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.011
- 65th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 162
- of 17,781 indexed, latest versions
- Container images
- 137
- deployed by those charts
- Fix available
- 1 of 1
- affected package
kube-apiserver vulnerable to policy bypass
Carried by container images the latest versions of 162 of 17,781 indexed charts deploy, on 137 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+74 more | 1.24.15, 1.25.11, 1.26.6, 1.27.3 | 137 |
- OSV records
- GHSA-qc2g-gmh6-95p4
- Also known as
- GO-2023-1891
Charts affected
162 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| cost-analyzerstatcan | 1.82.2 | 1 of 9See more | 16,506 |
| nfs-provisionersupporttools | 0.11.0 | 1 of 1See more | 2,671 |
| tfy-inferentia-operatortruefoundryVerified publisher | 0.2.8 | 1 of 3See more | 2,902 |
| jupyterhubuninettsigma2 | 1.6.0 | 1 of 5See more | 8,607 |
| vineyard-operatorvineyardVerified publisher | 0.24.2 | 1 of 2See more | 4,525 |
| azure-scheduledevents-managerwebdevopsVerified publisher | 1.0.17 | 1 of 1See more | 1,122 |
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nfs-subdir-external-provisionerwenerme | 4.0.18 | 1 of 1See more | 2,743 |
| ceph-csi-cephfswikimedia | 0.1.8 | 1 of 5See more | 10,285 |
| ceph-csi-rbdwikimedia | 0.1.13 | 1 of 6See more | 11,784 |
| csi-driver-host-pathwiremindVerified publisher | 0.1.1 | 1 of 8See more | 12,606 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,677 |
Container images carrying it
137 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| clastix/ | 22918a06c253 | k8s.io/ | 1.24.15 | 6 |
| quay.io/ | 2ad610626658 | k8s.io/ | 1.25.11 | 6 |
| quay.io/ | e6df72478956 | k8s.io/ | 1.24.15 | 5 |
| argoproj/ | 830e86cacefd | k8s.io/ | 1.24.15 | 3 |
| groundnuty/ | c14d7271e401 | k8s.io/ | 1.25.11 | 3 |
| quay.io/ | 6545dac92173 | k8s.io/ | 1.24.15 | 3 |
| quay.io/ | 2b6db27eaf3d | k8s.io/ | 1.25.11 | 3 |
| quay.io/ | bc4aa22272ef | k8s.io/ | 1.24.15 | 3 |
| quay.io/ | 4c3b91bebd3d | k8s.io/ | 1.24.15 | 3 |
| quay.io/ | f296c2ec5db7 | k8s.io/ | 1.27.3 | 3 |
| quay.io/ | eec0305b594c | k8s.io/ | 1.24.15 | 3 |
| quay.io/ | 1b33357b3595 | k8s.io/ | 1.26.6 | 3 |
| registry.k8s.io/ | 99b37df34bc4 | k8s.io/ | 1.24.15 | 3 |
| bitnamilegacy/ | a0a972324d93 | k8s.io/ | 1.26.6 | 2 |
| csiplugin/ | 0766163dc046 | k8s.io/ | 1.24.15 | 2 |
| iomesh/ | f13deacac3f4 | k8s.io/ | 1.24.15 | 2 |
| k0sproject/ | f04635825d51 | k8s.io/ | 1.26.6 | 2 |
| lachlanevenson/ | af5cea3f2e40 | k8s.io/ | 1.25.11 | 2 |
| ghcr.io/ | 82d0b161161d | k8s.io/ | 1.24.15 | 2 |
| ghcr.io/ | c137478627cc | k8s.io/ | 1.24.15 | 2 |
| public.ecr.aws/ | 1564359e1e0e | k8s.io/ | 1.26.6 | 2 |
| quay.io/ | f7f8228f17cc | k8s.io/ | 1.24.15 | 2 |
| quay.io/ | 00406ccb1fa0 | k8s.io/ | 1.26.6 | 2 |
| quay.io/ | 382fca2054c9 | k8s.io/ | 1.24.15 | 2 |
| registry.k8s.io/ | 99e1ed9fbc8a | k8s.io/ | 1.26.6 | 2 |
| registry.k8s.io/ | 40adecbe3a40 | k8s.io/ | 1.26.6 | 2 |
| registry.k8s.io/ | 74a5cf9cfa9f | k8s.io/ | 1.24.15 | 2 |
| registry.k8s.io/ | 63d5e04551ec | k8s.io/ | 1.24.15 | 2 |
| airbyte/ | 98d2c39d512e | k8s.io/ | 1.24.15 | 1 |
| alpine/ | 6dbe6f391eda | k8s.io/ | 1.24.15 | 1 |
| alpine/ | 7a319b15cfc9 | k8s.io/ | 1.24.15 | 1 |
| alpine/ | 7e1e7d5b7a96 | k8s.io/ | 1.24.15 | 1 |
| alpine/ | 9c4976d47656 | k8s.io/ | 1.24.15 | 1 |
| alpine/ | bd01dae02676 | k8s.io/ | 1.24.15 | 1 |
| alpine/ | cd560fce90f7 | k8s.io/ | 1.24.15 | 1 |
| alpine/ | e5c0b053fed7 | k8s.io/ | 1.24.15 | 1 |
| alpine/ | eec354133193 | k8s.io/ | 1.24.15 | 1 |
| amazon/ | b55277652ea8 | k8s.io/ | 1.24.15 | 1 |
| apecloud/ | c93655ccb2d7 | k8s.io/ | 1.24.15 | 1 |
| bitnamilegacy/ | 1249fc292e84 | k8s.io/ | 1.24.15 | 1 |
| bitnamilegacy/ | 64614ef8290f | k8s.io/ | 1.24.15 | 1 |
| bitnamilegacy/ | 744f84cf7493 | k8s.io/ | 1.24.15 | 1 |
| burganbank/ | 9259c34e4037 | k8s.io/ | 1.24.15 | 1 |
| crowdfox/ | 6fa7e8063d27 | k8s.io/ | 1.24.15 | 1 |
| csiplugin/ | 1fa83d45417f | k8s.io/ | 1.24.15 | 1 |
| datadog/ | 8f20e56b5311 | k8s.io/ | 1.24.15 | 1 |
| dongjiang1989/ | f0055c05dbee | k8s.io/ | 1.25.11 | 1 |
| dserio83/ | 6b3d9115fee2 | k8s.io/ | 1.24.15 | 1 |
| dtzar/ | a1041bb0f1d1 | k8s.io/ | 1.26.6 | 1 |
| flomesh/ | cc39c96711c4 | k8s.io/ | 1.26.6 | 1 |