StackRadar

CVE-2023-27534

High

Advisory

Published 20 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.022
81st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
710
of 17,787 indexed, latest versions
Container images
607
deployed by those charts
Fix available
2 of 2
affected packages

curl - security update

Carried by container images the latest versions of 710 of 17,787 indexed charts deploy, on 607 images.

Affected packageAffected versionsFixed inImages
curldeb7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.8+37 more7.58.0-2ubuntu3.24, 7.64.0-4+deb10u9, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10444
curlapk7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+19 more7.88.1-r1, 8.0.1-r0163
OSV records
ALPINE-CVE-2023-27534UBUNTU-CVE-2023-27534DLA-3763-1
Also known as
USN-5964-1

Charts affected

710 by stars
ChartLatestAffected imagesRadar Score
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
curl@7.58.0-2ubuntu3.18
7.58.0-2ubuntu3.24

Open the chart page →

9,748
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9

Open the chart page →

2,671
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u9

Open the chart page →

5,462
generic-webhookwebhooks0.1.11 of 1See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
curl@7.87.0-r2
7.88.1-r1

Open the chart page →

2,031
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
curl@7.80.0-r0
8.0.1-r0

Open the chart page →

7,552
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.24

Open the chart page →

10,857
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
curl@7.79.1-r0
8.0.1-r0

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18

Open the chart page →

15,287
workadventureworkadventure1.1.06 of 9See more

workadventure workadventure 1.1.0

6 of the 9 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
curl@7.64.0-4+deb10u6
7.64.0-4+deb10u9
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
curl@7.80.0-r1
8.0.1-r0
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
curl@7.80.0-r5
8.0.1-r0
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
curl@7.64.0-4+deb10u6
7.64.0-4+deb10u9
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
curl@7.64.0-4+deb10u6
7.64.0-4+deb10u9
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
curl@7.64.0-4+deb10u3
7.64.0-4+deb10u9

Open the chart page →

16,083
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-27534.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
curl@7.79.1-r0
8.0.1-r0

Open the chart page →

2,535

Container images carrying it

607 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
gethue/hue:4.11.011b649636e68
curl@7.68.0-1ubuntu2.15
7.68.0-1ubuntu2.18
1
gethue/hue:4.10.05702b2c37ff9
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
gethue/nginx:latest07f00f7c7903
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9
1
getmeili/meilisearch:v0.29.00cc7637bb41b
curl@7.79.1-r3
8.0.1-r0
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.18
1
gluufederation/opendj:4.3.0_011a1128b28b95
curl@7.79.1-r0
8.0.1-r0
1
gollumorg/gollum:latest7cd5305a3cf7
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u9
1
gotson/komga:0.99.49b15ea6bfc30
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24
1
gresearchdev/siembol-config-editor-ui:latest071e7109a981
curl@7.83.1-r4
8.0.1-r0
1
groundnuty/k8s-wait-for:v1.684edcf796267
curl@7.80.0-r1
8.0.1-r0
1
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
curl@7.83.1-r4
8.0.1-r0
1
guacamole/guacamole:1.3.0739cb6820ae8
curl@7.64.0-4+deb10u1
7.64.0-4+deb10u9
1
halkeye/self-service-password:latest3c734dde4052
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9
1
haugene/transmission-openvpn:4.0059216cfae4b
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.18
1
haveagitgat/tdarr:2.00.181256348872ce
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.18
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.10
1
honoki/bbrf-server:latest07c4ea597019
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9
1
housewrecker/gaps:latestf417dd0a7547
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
curl@7.58.0-2ubuntu3.12
7.58.0-2ubuntu3.24
1
hugohg34/toposervice:0.0.2812a03b3f274
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
ianw/quickchart:v1.7.1dc49dd460c37
curl@7.80.0-r3
8.0.1-r0
1
ibarreche/cloud-back-ci:lateste16a469c5791
curl@7.80.0-r0
8.0.1-r0
1
ibmcom/skydive:0.22.0395e60cc6e3d
curl@7.58.0-2ubuntu3.6
7.58.0-2ubuntu3.24
1
improwised/erpnext-worker:v13.4.197280b55cbd4
curl@7.64.0-4+deb10u2
7.64.0-4+deb10u9
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
curl@7.68.0-1ubuntu2.11
7.68.0-1ubuntu2.18
1
intel/trusted-certificate-issuer:0.5.0591a9db4a427
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.18
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
curl@7.68.0-1ubuntu2.13
7.68.0-1ubuntu2.18
1
istio/examples-bookinfo-reviews-v1:1.17.0b8f16a765eea
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.18
1
istio/examples-bookinfo-reviews-v2:1.17.072f25a55f078
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.18
1
istio/examples-bookinfo-reviews-v3:1.17.08f92fc1b6592
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.18
1
istio/install-cni:1.10.32232f365aed6
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
istio/operator:1.10.3655eefa11c84
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
istio/operator:1.12.06cfce8a071b9
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
istio/pilot:1.10.0294ca55bd1cc
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
istio/pilot:1.16.0ac0284d75ec9
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.10
1
istio/pilot:1.17.1ce9d87606701
curl@7.81.0-1ubuntu1.7
7.81.0-1ubuntu1.10
1
istio/pilot:1.15.2db08d6963975
curl@7.81.0-1ubuntu1.4
7.81.0-1ubuntu1.10
1
istio/pilot:1.10.3e7e110a421c2
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
istio/proxyv2:1.9.687a9db561d2e
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
istio/proxyv2:1.10.088c6c693e67a
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
istio/proxyv2:1.14.1df69c1a7af7c
curl@7.68.0-1ubuntu2.11
7.68.0-1ubuntu2.18
1
jacobalberty/unifi:v7.1.664a3616625dda
curl@7.58.0-2ubuntu3.18
7.58.0-2ubuntu3.24
1
jakowenko/double-take:1.6.0b858bac9e32a
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
jedi132000/nextapp:latestdc2a81e92f23
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.18
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.