CVE-2023-27538

Medium

Advisory

Published 20 Mar 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.013; 68th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 511; of 17,787 indexed, latest versions
Container images: 409; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 511 of 17,787 indexed charts deploy, on 409 images.

Affected package	Affected versions	Fixed in	Images
curldeb	7.58.0-2ubuntu3.3, 7.58.0-2ubuntu3.5, 7.58.0-2ubuntu3.6, 7.58.0-2ubuntu3.8+29 more	7.58.0-2ubuntu3.24, 7.68.0-1ubuntu2.18, 7.81.0-1ubuntu1.10	246
curlapk	7.77.0-r1, 7.78.0-r0, 7.79.1-r0, 7.79.1-r1+19 more	7.88.1-r1, 8.0.1-r0	163

OSV records: ALPINE-CVE-2023-27538 UBUNTU-CVE-2023-27538
Also known as: USN-5964-1

Charts affected

511 by stars

Chart

Latest

Affected images

Radar Score

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.10

Open the chart page →

6,272

queryservice-uiwbstack

0.2.0

1 of 1 See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	8.0.1-r0

Open the chart page →

1,996

uiwbstack

0.4.0

1 of 1 See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	8.0.1-r0

Open the chart page →

1,523

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.24

Open the chart page →

9,748

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	curl@7.87.0-r2	7.88.1-r1

Open the chart page →

2,031

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	curl@7.80.0-r0	8.0.1-r0

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24

Open the chart page →

10,857

frpcwenerme

1.0.1

1 of 1 See more

3,359

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.18

Open the chart page →

15,287

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	curl@7.80.0-r1	8.0.1-r0
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	curl@7.80.0-r5	8.0.1-r0

Open the chart page →

16,083

default-backendwyrihaximusnet

1.1.0

1 of 1 See more

default-backend wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-27538.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/default-backend :random	b24e63efd841	curl@7.79.1-r0	8.0.1-r0

Open the chart page →

2,535

Container images carrying it

409 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	curl@7.79.1-r1	8.0.1-r0	1
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	curl@7.83.1-r3	8.0.1-r0	1
quay.io/renokico/laravel-helm-demo :0.6.0	3207f957e80c	curl@7.78.0-r0	8.0.1-r0	1
quay.io/renokico/laravel-helm-demo :worker-0.6.0	4b188259267e	curl@7.78.0-r0	8.0.1-r0	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.18	1
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	curl@7.87.0-r1	7.88.1-r1	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	curl@7.83.1-r3	8.0.1-r0	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	curl@7.79.1-r1	8.0.1-r0	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	curl@7.83.1-r2	8.0.1-r0	1