StackRadar

CVE-2023-27561

High

Advisory

Published 3 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
190
of 17,781 indexed, latest versions
Container images
126
deployed by those charts
Fix available
1 of 1
affected package

Opencontainers runc Incorrect Authorization vulnerability

Carried by container images the latest versions of 190 of 17,781 indexed charts deploy, on 126 images.

Affected packageAffected versionsFixed inImages
github.com/opencontainers/runcgolangv1.0.0-rc95, v1.0.1, v1.0.2, v1.0.3+5 more1.1.5126
OSV records
GHSA-vpvm-3wq2-2wvm
Also known as
GO-2023-1627

Charts affected

190 by stars
ChartLatestAffected imagesRadar Score
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,547
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/opencontainers/runc@v1.1.1
1.1.5

Open the chart page →

2,969
dbapphelmcourseVerified publisher0.3.31 of 2See more

dbapp helmcourse 0.3.3

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,971
mysqlhelmcourseVerified publisher0.2.41 of 1See more

mysql helmcourse 0.2.4

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,518
honeydipperhoneydipperVerified publisher0.1.111 of 2See more

honeydipper honeydipper 0.1.11

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/redis:5fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

1,731
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

32,205
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:9.6caddd35b05cd
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

57,669
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

27,721
ingress-nginxjfrog4.5.21 of 2See more

ingress-nginx jfrog 4.5.2

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/opencontainers/runc@v1.1.4
1.1.5

Open the chart page →

3,798
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

16,600
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
github.com/opencontainers/runc@v1.0.2
1.1.5

Open the chart page →

14,801
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

19,168
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,518
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5

Open the chart page →

3,176
krakenkraken0.2.01 of 7See more

kraken kraken 0.2.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

1,731
postgresql-backup-to-miniokrzwiatrzyk0.0.11 of 2See more

postgresql-backup-to-minio krzwiatrzyk 0.0.1

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:14.13162a6ead070
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

2,199
cluster-componentkubebb0.2.21 of 4See more

cluster-component kubebb 0.2.2

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

8,160
harborkubesphereVerified publisher1.9.31 of 11See more

harbor kubesphere 1.9.3

1 of the 11 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

17,798
chaos-meshkubesphere-stable2.5.13 of 3See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/opencontainers/runc@v1.1.2
1.1.5
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/opencontainers/runc@v1.1.2
1.1.5
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

8,555
cranekubesphere-stable0.5.22 of 3See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
github.com/opencontainers/runc@v1.0.2
1.1.5
gocrane/craned:v0.5.1a1400909118c
github.com/opencontainers/runc@v1.0.2
1.1.5

Open the chart page →

8,883
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
deepflowce/mysql:8.0.313d7ae561cf60
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

18,316
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
github.com/opencontainers/runc@v1.0.3
1.1.5

Open the chart page →

4,096
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

8,698
kuperatorkusionstackVerified publisher0.7.41 of 1See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
github.com/opencontainers/runc@v1.0.2
1.1.5

Open the chart page →

978
operatingkusionstackVerified publisher0.5.11 of 1See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
kusionstack/operating:v0.5.0c28bd96b986b
github.com/opencontainers/runc@v1.0.2
1.1.5

Open the chart page →

1,879
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

4,271
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:115d2aa4a7b5f9
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

9,880
vcluster-proloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

5,085
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/opencontainers/runc@v1.1.4
1.1.5

Open the chart page →

5,768
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

8,938
fireflylsst-sqre0.3.71 of 2See more

firefly lsst-sqre 0.3.7

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/redis:5fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

1,731
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

24,400
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,706
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

29,588
ingressmedia-streaming-meshVerified publisher0.1.81 of 2See more

ingress media-streaming-mesh 0.1.8

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
github.com/opencontainers/runc@v1.1.4
1.1.5

Open the chart page →

3,301
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,866
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
github.com/opencontainers/runc@v1.0.2
1.1.5

Open the chart page →

8,902
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

10,603
mariadbmmontesVerified publisher0.3.01 of 1See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mariadb:10.7.307e06f2e7ae9
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

10,065
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

16,198
camera-viewermoreillonVerified publisher0.2.11 of 4See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

11,643
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

8,556
mqtt-loggermoreillonVerified publisher0.3.12 of 5See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/opencontainers/runc@v1.1.0
1.1.5
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

10,959
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

27,721
influxdbmy-personal-influxdb20.1.01 of 1See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,867
phonebook-chartmy-phonebook-chart0.1.01 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,034
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
robjuz/postgresql-nominatim:latest805c7bab76df
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5

Open the chart page →

22,658

Container images carrying it

126 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/opencontainers/runc@v1.1.2
1.1.5
1
redislabs/redisearch:2.4.1433561794c5c8
github.com/opencontainers/runc@v1.0.1
1.1.5
1
rezachalak/bzen-mongo:1.0.034f694325191
github.com/opencontainers/runc@v1.1.0
1.1.5
1
robjuz/postgresql-nominatim:latest805c7bab76df
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/opencontainers/runc@v1.1.3
1.1.5
1
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ygqygq2/mysql-exec-sql:latest54f30def1558
github.com/opencontainers/runc@v1.1.0
1.1.5
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5
1
gcr.io/ml-pipeline/mysql:5.7-debiandf28187b5455
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/opencontainers/runc@v1.1.2
1.1.5
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/opencontainers/runc@v1.1.2
1.1.5
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/opencontainers/runc@v1.1.2
1.1.5
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.1.5
1
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
github.com/opencontainers/runc@v1.1.0
1.1.5
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/opencontainers/runc@v1.0.1
1.1.5
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/opencontainers/runc@v1.0.1
1.1.5
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/opencontainers/runc@v1.0.1
1.1.5
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/opencontainers/runc@v1.0.2
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/opencontainers/runc@v1.1.4
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/opencontainers/runc@v1.1.4
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/opencontainers/runc@v1.1.2
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
github.com/opencontainers/runc@v1.1.4
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/opencontainers/runc@v1.1.3
1.1.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.