StackRadar

CVE-2023-27561

High

Advisory

Published 3 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
190
of 17,781 indexed, latest versions
Container images
126
deployed by those charts
Fix available
1 of 1
affected package

Opencontainers runc Incorrect Authorization vulnerability

Carried by container images the latest versions of 190 of 17,781 indexed charts deploy, on 126 images.

Affected packageAffected versionsFixed inImages
github.com/opencontainers/runcgolangv1.0.0-rc95, v1.0.1, v1.0.2, v1.0.3+5 more1.1.5126
OSV records
GHSA-vpvm-3wq2-2wvm
Also known as
GO-2023-1627

Charts affected

190 by stars
ChartLatestAffected imagesRadar Score
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,547
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

27,465
apicurioone-acre-fundVerified publisher2.3.01 of 5See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

18,667
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,751
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

8,599
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

4,237
open-webconceptopen-webconcept0.1.01 of 3See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/opencontainers/runc@v1.1.4
1.1.5

Open the chart page →

26,840
tenant-namespacepnnl-miscscripts0.6.231 of 1See more

tenant-namespace pnnl-miscscripts 0.6.23

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

2,578
postgrespostgresVerified publisher0.1.11 of 1See more

postgres postgres 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:13.12ced3ba927f4c
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,916
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

27,558
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

28,484
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,203
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

6,668
redisredis-arm17.8.01 of 1See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,906
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/opencontainers/runc@v1.0.2
1.1.5

Open the chart page →

5,422
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

32,902
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

6,890
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

12,668
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

2,637
backendsignalen4.24.02 of 4See more

backend signalen 4.24.0

2 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
github.com/opencontainers/runc@v1.0.1
1.1.5
bitnamilegacy/rabbitmq:3.10.7-debian-11-r4cf93e2772250
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

11,636
trilliansigstoreVerified publisher0.3.171 of 5See more

trillian sigstore 0.3.17

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

2,808
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

3,462
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

7,574
redissoftonic0.3.01 of 2See more

redis softonic 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

1,731
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.8-debian-11-r0bf01d031ba8c
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,148
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

66,266
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

13,646
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

12,655
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,841
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

8,518
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

17,461
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
pysga1996/redis:latest3af6d0c7db19
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,661
steamcmdthetredevVerified publisher1.0.91 of 1See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,075
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,176
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

9,248

Container images carrying it

126 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/redis:6.2.7-debian-11-r37788b908dd0d
github.com/opencontainers/runc@v1.0.1
1.1.5
1
bitnamilegacy/redis:7.0.8-debian-11-r0bf01d031ba8c
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
github.com/opencontainers/runc@v1.1.0
1.1.5
1
btcpayserver/tor:0.4.8.10e9585b68dc6b
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5
1
deepflowce/mysql:8.0.313d7ae561cf60
github.com/opencontainers/runc@v1.0.1
1.1.5
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/opencontainers/runc@v1.1.3
1.1.5
1
eclipseaerios/openldap:2.6.30208743f315e
github.com/opencontainers/runc@v1.1.0
1.1.5
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
github.com/opencontainers/runc@v1.1.0
1.1.5
1
gocrane/craned:v0.5.1a1400909118c
github.com/opencontainers/runc@v1.0.2
1.1.5
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
github.com/opencontainers/runc@v1.0.2
1.1.5
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/opencontainers/runc@v1.1.2
1.1.5
1
helga09/my_sql_shoes:v1.1.1a03657d97897
github.com/opencontainers/runc@v1.1.0
1.1.5
1
istio/operator:1.12.06cfce8a071b9
github.com/opencontainers/runc@v1.0.2
1.1.5
1
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
github.com/opencontainers/runc@v1.1.3
1.1.5
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/opencontainers/runc@v1.0.3
1.1.5
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
github.com/opencontainers/runc@v1.0.2
1.1.5
1
kusionstack/operating:v0.5.0c28bd96b986b
github.com/opencontainers/runc@v1.0.2
1.1.5
1
library/docker:20.10.21-dind3153fa63f546
github.com/opencontainers/runc@v1.1.3
1.1.5
1
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/opencontainers/runc@v1.1.3
1.1.5
1
library/ghost:5.79.083f7bf209844
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mariadb:10.7.307e06f2e7ae9
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.11.21c33370a599c
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.8.2-focal490f01279be1
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.79a48ac9f196f
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.10.2bfc25a68e113
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.6.15e22328f4d714
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mariadb:10.9.4fbb8456ebdb1
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/mongo:5.0.14-focal50cae5081ab4
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mongo:6.0.12646902910d6a
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mongo:4.2699d652ed674
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mongo:5.0.217c81758cb295
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mongo:4.4.18d23ec07162ca
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/mysql:8.0.303c1aab708f6e
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/postgres:13.703652c675ae1
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/postgres:14.32d1e636f0778
github.com/opencontainers/runc@v1.0.1
1.1.5
1
library/postgres:13.11-bullseye5c265bf1fd30
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/postgres:15.38775adb39f0d
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/postgres:13.12ced3ba927f4c
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/postgres:14.6f565573d74ae
github.com/opencontainers/runc@v1.1.0
1.1.5
1
library/redis:7.0.4091a7b5de688
github.com/opencontainers/runc@v1.0.1
1.1.5
1
librenms/librenms:22.4.14f1f3d667cc7
github.com/opencontainers/runc@v1.0.3
1.1.5
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/opencontainers/runc@v1.1.2
1.1.5
1
milvusdb/etcd:3.5.5-r2102aac62827b
github.com/opencontainers/runc@v1.1.0
1.1.5
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/opencontainers/runc@v1.1.0
1.1.5
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/opencontainers/runc@v1.1.0
1.1.5
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/opencontainers/runc@v1.1.3
1.1.5
1
photoprism/photoprism:220629-jammy2954334adbda
github.com/opencontainers/runc@v1.1.2
1.1.5
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/opencontainers/runc@v1.1.3
1.1.5
1
postgis/postgis:11-2.5f479f6c3435e
github.com/opencontainers/runc@v1.0.1
1.1.5
1
pysga1996/redis:latest3af6d0c7db19
github.com/opencontainers/runc@v1.1.0
1.1.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.