StackRadar

CVE-2023-27538

Medium

Advisory

Published 20 Mar 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
510
of 17,781 indexed, latest versions
Container images
408
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 510 of 17,781 indexed charts deploy, on 408 images.

Affected packageAffected versionsFixed inImages
curldeb7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.8+29 more7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10246
curlapk7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+19 more7.88.1-r1, 8.0.1-r0162
OSV records
ALPINE-CVE-2023-27538UBUNTU-CVE-2023-27538
Also known as
USN-5964-1

Charts affected

510 by stars
ChartLatestAffected imagesRadar Score
queryservice-uiwbstack0.2.01 of 1See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
curl@7.80.0-r0
8.0.1-r0

Open the chart page →

1,996
uiwbstack0.4.01 of 1See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
ghcr.io/wbstack/ui:3.94b01f67faadf1
curl@7.80.0-r1
8.0.1-r0

Open the chart page →

1,523
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
curl@7.58.0-2ubuntu3.18
7.58.0-2ubuntu3.24

Open the chart page →

9,743
generic-webhookwebhooks0.1.11 of 1See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
curl@7.87.0-r2
7.88.1-r1

Open the chart page →

2,030
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
curl@7.80.0-r0
8.0.1-r0

Open the chart page →

7,552
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.24

Open the chart page →

10,843
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
curl@7.79.1-r0
8.0.1-r0

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18

Open the chart page →

15,230
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
curl@7.80.0-r1
8.0.1-r0
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
curl@7.80.0-r5
8.0.1-r0

Open the chart page →

16,083
default-backendwyrihaximusnetVerified publisher1.1.01 of 1See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/default-backend:randomb24e63efd841
curl@7.79.1-r0
8.0.1-r0

Open the chart page →

2,534

Container images carrying it

408 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/mongo:5.0.14-focal50cae5081ab4
curl@7.68.0-1ubuntu2.15
7.68.0-1ubuntu2.18
1
library/mongo:4.2.16ca49afbcb2b
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24
1
library/mongo:6.0.271a63fc2438e
curl@7.68.0-1ubuntu2.13
7.68.0-1ubuntu2.18
1
library/mongo:4.2.21-bionic9cb28f7291d9
curl@7.58.0-2ubuntu3.19
7.58.0-2ubuntu3.24
1
library/mongo:4.4.18d23ec07162ca
curl@7.68.0-1ubuntu2.15
7.68.0-1ubuntu2.18
1
library/nginx:1.23.2-alpine455c39afebd4
curl@7.83.1-r4
8.0.1-r0
1
library/php:7-fpm-alpine0aeb129a60da
curl@7.83.1-r4
8.0.1-r0
1
librenms/librenms:22.4.14f1f3d667cc7
curl@7.80.0-r0
8.0.1-r0
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
linuxserver/cloud9:latest45c5fe102ff3
curl@7.58.0-2ubuntu3.19
7.58.0-2ubuntu3.24
1
linuxserver/code-server:4.10.1a5e43a05ae79
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.10
1
linuxserver/codimd:latestb801bbcf6386
curl@7.58.0-2ubuntu3.12
7.58.0-2ubuntu3.24
1
linuxserver/deluge:18.04.10ac871624394
curl@7.58.0-2ubuntu3.16
7.58.0-2ubuntu3.24
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
curl@7.58.0-2ubuntu3.16
7.58.0-2ubuntu3.24
1
linuxserver/jellyfin:10.7.72427dde159a2
curl@7.68.0-1ubuntu2.11
7.68.0-1ubuntu2.18
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
curl@7.58.0-2ubuntu3.6
7.58.0-2ubuntu3.24
1
linuxserver/plex:1.25.24a13ced2326c
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
litmuschaos/mongo:4.2.899961210d467
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24
1
liukunup/jmeter:5.59c079617a81b
curl@7.83.1-r3
8.0.1-r0
1
longhornio/longhorn-manager:v1.2.3dca34321452c
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.18
1
mediagis/nominatim:3.7c15e941485ef
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.18
1
milesmcc/shynet:v0.12.0e821e31140f7
curl@7.79.1-r0
8.0.1-r0
1
milvusdb/milvus:v2.2.13a3a55e1c1497
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.18
1
mintproject/data-catalog-db:9be70359feabe03ed55bfdbf92c20a7e43ab928b9bf26fedd848
curl@7.83.1-r4
8.0.1-r0
1
mintproject/mint-ui-lit:246a8771e8c043f8c1840d3c32262d3d6a9a553208c1a13c3397
curl@7.83.1-r4
8.0.1-r0
1
mintproject/model-catalog-explorer:0b2f9f0a9124076aeb492add2f123d0757066f6bdeb80c93b4a9
curl@7.83.1-r4
8.0.1-r0
1
moby/buildkit:v0.10.0c2aeafaed434
curl@7.80.0-r0
8.0.1-r0
1
mshanley80/httpbin2022:latest5b189a70c0fb
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.18
1
n8nio/n8n:0.212.0a9195bc499a3
curl@7.83.1-r4
8.0.1-r0
1
natsio/nats-box:0.13.559cf2e949181
curl@7.88.1-r0
7.88.1-r1
1
neilpang/acme.sh:3.0.2595809ad43a2
curl@7.80.0-r0
8.0.1-r0
1
netboxcommunity/netbox:v3.2.83d652dca5351
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.10
1
nginxinc/nginx-unprivileged:1.20-alpine38d9dc79cc1d
curl@7.79.1-r1
8.0.1-r0
1
ohif/viewer:latestb4bfecdc7cc6
curl@7.78.0-r0
8.0.1-r0
1
oled01/db-backup:0.1.06302fd2b5333
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.10
1
omecproject/c3po-hssdb:master-latest28a90cc26716
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.18
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
curl@7.58.0-2ubuntu3.6
7.58.0-2ubuntu3.24
1
onosproject/onos:2.2.144914a8d4b3f
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24
1
opendatacube/pipelines:wofs-1.225d810e8504b8
curl@7.58.0-2ubuntu3.6
7.58.0-2ubuntu3.24
1
opendatacube/restcube:latest91870111837c
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24
1
opendatacube/wms:latest1b90cdf68831
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24
1
openelevation/open-elevation:latest82fb21612e86
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.18
1
openemr/openemr:6.1.089eaa6d9a4e3
curl@7.80.0-r0
8.0.1-r0
1
openkm/openkm-ce:6.3.113bc465a7461b
curl@7.68.0-1ubuntu2.13
7.68.0-1ubuntu2.18
1
openverso/ueransim:3.2.6733f1232b7d3
curl@7.83.1-r3
8.0.1-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.