CVE-2023-27536

Medium

Advisory

Published 20 Mar 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 565; of 17,787 indexed, latest versions
Container images: 456; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 565 of 17,787 indexed charts deploy, on 456 images.

Affected package	Affected versions	Fixed in	Images
curldeb	7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+48 more	7.35.0-1ubuntu2.20+esm15, 7.47.0-1ubuntu2.19+esm8, 7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18+1 more	294
curlapk	7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+19 more	7.88.1-r1, 8.0.1-r0	162

OSV records: ALPINE-CVE-2023-27536 UBUNTU-CVE-2023-27536
Also known as: USN-5964-1, USN-5964-2

Charts affected

565 by stars

Chart

Latest

Affected images

Radar Score

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm8

Open the chart page →

15,330

pagesvictor-pages

1.0.0

2 of 3 See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.18
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24

Open the chart page →

20,190

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.18
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24

Open the chart page →

20,190

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18

Open the chart page →

11,119

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.10

Open the chart page →

6,232

queryservice-uiwbstack

0.2.0

1 of 1 See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	8.0.1-r0

Open the chart page →

1,996

uiwbstack

0.4.0

1 of 1 See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	8.0.1-r0

Open the chart page →

1,523

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.24

Open the chart page →

9,743

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	curl@7.87.0-r2	7.88.1-r1

Open the chart page →

2,030

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	curl@7.80.0-r0	8.0.1-r0

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24

Open the chart page →

10,843

frpcwenerme

1.0.1

1 of 1 See more

3,359

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18

Open the chart page →

15,230

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	curl@7.80.0-r1	8.0.1-r0
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	curl@7.80.0-r5	8.0.1-r0

Open the chart page →

16,083

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-27536.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	curl@7.79.1-r0	8.0.1-r0

Open the chart page →

2,534

Container images carrying it

456 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.18	79
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24	79
oomk8s/readiness-check :2.0.2	875814cc853d	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm8	11
library/mongo :5.0.6-focal	8e70544b6c76	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	10
pnnlmiscscripts/anaconda :20201029-1700-nginx-1	05827b9efa7b	curl@7.83.1-r5	8.0.1-r0	10
oomk8s/readiness-check :2.0.0	7daa08b81954	curl@7.47.0-1ubuntu2.7	7.47.0-1ubuntu2.19+esm8	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	curl@7.80.0-r6	8.0.1-r0	6
quay.io/devtron/kubectl :latest	2ad610626658	curl@7.83.1-r3	8.0.1-r0	6
ghcr.io/conductionnl/commonground-gateway-php :latest	947882bf2c37	curl@7.83.1-r4	8.0.1-r0	5
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	curl@7.47.0-1ubuntu2.8	7.47.0-1ubuntu2.19+esm8	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm8	4
hyperledger/fabric-tools :2.4	b1194f509085	curl@7.83.1-r6	8.0.1-r0	4
library/mongo :4.2.12-bionic	628741415fc9	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24	4
library/mongo :4.4.6	6efa05203990	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24	4
mastercloudapps/planner :v1.23	40a950b311b2	curl@7.81.0-1ubuntu1.8	7.81.0-1ubuntu1.10	4
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	curl@7.58.0-2ubuntu3.12	7.58.0-2ubuntu3.24	4
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	3
codeurjc/planner :v1.0	800cf520c245	curl@7.81.0-1ubuntu1.8	7.81.0-1ubuntu1.10	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.18	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	curl@7.83.1-r4	8.0.1-r0	3
lachlanevenson/k8s-kubectl :v1.23.2	e4d83478963b	curl@7.80.0-r0	8.0.1-r0	3
selenium/hub :3.141.59	02f251d48d5f	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	3
xenondb/percona :5.7.33	0e26872a2b67	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.18	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.10	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	curl@7.47.0-1ubuntu2.19	7.47.0-1ubuntu2.19+esm8	3
quay.io/devtron/svn-git-sync :v7	8e54bc2d261f	curl@7.83.1-r1	8.0.1-r0	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	curl@7.83.1-r4	8.0.1-r0	3
cs3org/wopiserver :v9.4.2	02a9e78757b4	curl@7.88.1-r0	7.88.1-r1	2
dependencytrack/frontend :4.6.1	24422d762e08	curl@7.83.1-r3	8.0.1-r0	2
devopsjourney1/mywebapp :latest	bd1ec6838570	curl@7.83.1-r2	8.0.1-r0	2
filebrowser/filebrowser :v2.23.0	86e8449ff8ff	curl@7.83.1-r4	8.0.1-r0	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	2
hashicorp/consul :1.14.2	e38576edcdfd	curl@7.80.0-r4	8.0.1-r0	2
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24	2
istio/proxyv2 :1.10.3	a78b7a165744	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24	2
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	curl@7.83.1-r5	8.0.1-r0	2
krtk6160/galoy-nostr	cc82a694f818	curl@7.87.0-r2	7.88.1-r1	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	curl@7.86.0-r1	7.88.1-r1	2
library/cassandra :3.11.6	5aa8400b4b3b	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18	2
library/mongo :4.2.3	58b25d51baa1	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm8	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	curl@7.68.0-1ubuntu2.2	7.68.0-1ubuntu2.18	2
metabase/metabase :v0.45.2	1fb334ce4820	curl@7.87.0-r1	7.88.1-r1	2