StackRadar

CVE-2023-27534

High

Advisory

Published 20 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.022
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
710
of 17,787 indexed, latest versions
Container images
607
deployed by those charts
Fix available
2 of 2
affected packages

curl - security update

Carried by container images the latest versions of 710 of 17,787 indexed charts deploy, on 607 images.

Affected packageAffected versionsFixed inImages
curldeb7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.8+37 more7.58.0-2ubuntu3.24, 7.64.0-4+deb10u9, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10444
curlapk7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+19 more7.88.1-r1, 8.0.1-r0163
OSV records
ALPINE-CVE-2023-27534UBUNTU-CVE-2023-27534DLA-3763-1
Also known as
USN-5964-1

Charts affected

710 by stars
ChartLatestAffected imagesRadar Score
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u9

Open the chart page →

7,987
pageshelm-repo1.0.02 of 3See more

pages helm-repo 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.18
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24

Open the chart page →

20,233
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.18

Open the chart page →

8,732
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.10
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18

Open the chart page →

32,336
http-headershttp-headers1.2.11 of 1See more

http-headers http-headers 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
quay.io/k8start/http-headers:1.2.0c7a9987f2ac5
curl@7.83.1-r4
8.0.1-r0

Open the chart page →

2,009
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.10
apache/skywalking-ui:9.2.0295f1dc87d98
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.10

Open the chart page →

16,482
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
apache/skywalking-ui:8.9.180530f0308a5
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18

Open the chart page →

20,727
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.10

Open the chart page →

7,184
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.10

Open the chart page →

7,902
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
curl@7.58.0-2ubuntu3.6
7.58.0-2ubuntu3.24

Open the chart page →

12,632
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18

Open the chart page →

27,812
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18

Open the chart page →

37,844
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

6,502
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
curl@7.58.0-2ubuntu3.21
7.58.0-2ubuntu3.24

Open the chart page →

16,226
l2gethinfradao0.0.11 of 1See more

l2geth infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ethereumoptimism/l2geth:0.5.315577036dc36d
curl@7.80.0-r5
8.0.1-r0

Open the chart page →

2,659
ingress-dashboardingress-dashboard0.1.12 of 3See more

ingress-dashboard ingress-dashboard 0.1.1

2 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
taemon1337/image-api:0.0.1247bc1dc4f07
curl@7.80.0-r0
8.0.1-r0
taemon1337/ingress-dashboard:0.0.10e8f5096c66bb
curl@7.80.0-r0
8.0.1-r0

Open the chart page →

4,542
delta-sharing-serverinseefrlab1.2.11 of 1See more

delta-sharing-server inseefrlab 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
deltaio/delta-sharing-server:0.2.08b75118187c5
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

6,174
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

3,314
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-nginx:latesteeeb4e9f0485
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

7,510
consulintelVerified publisher0.8.11 of 2See more

consul intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
curl@7.80.0-r4
8.0.1-r0

Open the chart page →

5,389
evi-consulintelVerified publisher3.0.31 of 2See more

evi-consul intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
curl@7.80.0-r4
8.0.1-r0

Open the chart page →

5,389
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
curl@7.68.0-1ubuntu2.11
7.68.0-1ubuntu2.18

Open the chart page →

18,137
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.18

Open the chart page →

5,996
interbtc-hydrainterlay0.1.151 of 4See more

interbtc-hydra interlay 0.1.15

1 of the 4 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
curl@7.80.0-r1
8.0.1-r0

Open the chart page →

6,831
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

7,233
satisfactoryjess-v-helm-charts0.1.21 of 1See more

satisfactory jess-v-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.2.4db00d63f4791
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

876
ingress-nginxjfrog4.5.21 of 2See more

ingress-nginx jfrog 4.5.2

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
curl@7.87.0-r1
7.88.1-r1

Open the chart page →

3,798
http-url-playlistjulb-meVerified publisher1.0.01 of 1See more

http-url-playlist julb-me 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
julb/http-url-playlist:1.0.2782ef45279d5
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

1,244
php-web-hostjuppi880.0.11 of 2See more

php-web-host juppi88 0.0.1

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
trafex/php-nginx:2.2.0ee0b7c6cce07
curl@7.79.1-r0
8.0.1-r0

Open the chart page →

2,264
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
vitorbari/jwks-merge:v0.1.0fd3ccb820ada
curl@7.79.1-r0
8.0.1-r0

Open the chart page →

3,045
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/k10app/businit:latest94c9a3e799c2
curl@7.86.0-r1
7.88.1-r1

Open the chart page →

10,560
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u9

Open the chart page →

4,667
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
curl@7.80.0-r0
8.0.1-r0

Open the chart page →

14,833
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.18

Open the chart page →

7,292
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
curl@7.68.0-1ubuntu2.15
7.68.0-1ubuntu2.18

Open the chart page →

16,464
external-scaler-azure-cosmos-dbkedacore0.1.01 of 1See more

external-scaler-azure-cosmos-db kedacore 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/kedacore/external-scaler-azure-cosmos-db:0.1.04985d164ead9
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

1,186
allurekfirfer0.1.82 of 2See more

allure kfirfer 0.1.8

2 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24
frankescobar/allure-docker-service-ui:7.0.34ebd8b4ef340
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u9

Open the chart page →

12,541
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

1,598
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.18

Open the chart page →

10,303
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
curl@7.80.0-r5
8.0.1-r0

Open the chart page →

2,320
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
curl@7.81.0-1ubuntu1.4
7.81.0-1ubuntu1.10

Open the chart page →

19,208
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.18

Open the chart page →

8,922
kron-aapm-sidecarkron-aapm-sidecar1.1.01 of 1See more

kron-aapm-sidecar kron-aapm-sidecar 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
krontechnology/aapm-sidecar-injector:1.1.0e078d54c1711
curl@7.80.0-r6
8.0.1-r0

Open the chart page →

2,111
nbxplorerkronkltdVerified publisher0.1.51 of 2See more

nbxplorer kronkltd 0.1.5

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
nicolasdorier/nbxplorer:2.1.52ee70dba03ec2
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u9

Open the chart page →

1,669
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
curl@7.87.0-r1
7.88.1-r1

Open the chart page →

3,649
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

5,411
cluster-componentkubebb0.2.21 of 4See more

cluster-component kubebb 0.2.2

1 of the 4 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
curl@7.83.1-r2
8.0.1-r0

Open the chart page →

8,160
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.18

Open the chart page →

7,196
kusk-gateway-dashboardkubeshop0.1.191 of 1See more

kusk-gateway-dashboard kubeshop 0.1.19

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-dashboard:v1.2.6ff9b5aa1258d
curl@7.83.1-r3
8.0.1-r0

Open the chart page →

1,216
chaos-meshkubesphere-stable2.5.11 of 3See more

chaos-mesh kubesphere-stable 2.5.1

1 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
curl@7.64.0-4+deb10u3
7.64.0-4+deb10u9

Open the chart page →

8,555

Container images carrying it

607 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/renokico/laravel-helm-demo:worker-0.6.04b188259267e
curl@7.78.0-r0
8.0.1-r0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.18
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u9
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
curl@7.87.0-r1
7.88.1-r1
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
curl@7.83.1-r3
8.0.1-r0
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
curl@7.79.1-r1
8.0.1-r0
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
curl@7.83.1-r2
8.0.1-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.