StackRadar

CVE-2023-27561

High

Advisory

Published 3 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
190
of 17,781 indexed, latest versions
Container images
126
deployed by those charts
Fix available
1 of 1
affected package

Opencontainers runc Incorrect Authorization vulnerability

Carried by container images the latest versions of 190 of 17,781 indexed charts deploy, on 126 images.

Affected packageAffected versionsFixed inImages
github.com/opencontainers/runcgolangv1.0.0-rc95, v1.0.1, v1.0.2, v1.0.3+5 more1.1.5126
OSV records
GHSA-vpvm-3wq2-2wvm
Also known as
GO-2023-1627

Charts affected

190 by stars
ChartLatestAffected imagesRadar Score
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,547
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

27,465
apicurioone-acre-fundVerified publisher2.3.01 of 5See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

18,667
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,751
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

8,599
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

4,237
open-webconceptopen-webconcept0.1.01 of 3See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/opencontainers/runc@v1.1.4
1.1.5

Open the chart page →

26,840
tenant-namespacepnnl-miscscripts0.6.231 of 1See more

tenant-namespace pnnl-miscscripts 0.6.23

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

2,578
postgrespostgresVerified publisher0.1.11 of 1See more

postgres postgres 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:13.12ced3ba927f4c
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,916
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

27,558
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

28,484
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,203
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

6,668
redisredis-arm17.8.01 of 1See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,906
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/opencontainers/runc@v1.0.2
1.1.5

Open the chart page →

5,422
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

32,902
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

6,890
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

12,668
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

2,637
backendsignalen4.24.02 of 4See more

backend signalen 4.24.0

2 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
github.com/opencontainers/runc@v1.0.1
1.1.5
bitnamilegacy/rabbitmq:3.10.7-debian-11-r4cf93e2772250
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

11,636
trilliansigstoreVerified publisher0.3.171 of 5See more

trillian sigstore 0.3.17

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

2,808
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

3,462
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

7,574
redissoftonic0.3.01 of 2See more

redis softonic 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

1,731
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.8-debian-11-r0bf01d031ba8c
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,148
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

66,266
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

13,646
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

12,655
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,841
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

8,518
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

17,461
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
pysga1996/redis:latest3af6d0c7db19
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,661
steamcmdthetredevVerified publisher1.0.91 of 1See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,075
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,176
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

9,248

Container images carrying it

126 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/opencontainers/runc@v1.1.2
1.1.5
1
redislabs/redisearch:2.4.1433561794c5c8
github.com/opencontainers/runc@v1.0.1
1.1.5
1
rezachalak/bzen-mongo:1.0.034f694325191
github.com/opencontainers/runc@v1.1.0
1.1.5
1
robjuz/postgresql-nominatim:latest805c7bab76df
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/opencontainers/runc@v1.1.3
1.1.5
1
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ygqygq2/mysql-exec-sql:latest54f30def1558
github.com/opencontainers/runc@v1.1.0
1.1.5
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/opencontainers/runc@v1.0.0-rc95
1.1.5
1
gcr.io/ml-pipeline/mysql:5.7-debiandf28187b5455
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/opencontainers/runc@v1.1.2
1.1.5
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/opencontainers/runc@v1.1.2
1.1.5
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/opencontainers/runc@v1.1.2
1.1.5
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
github.com/opencontainers/runc@v1.0.1
1.1.5
1
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.1.5
1
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
github.com/opencontainers/runc@v1.1.0
1.1.5
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/opencontainers/runc@v1.0.1
1.1.5
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/opencontainers/runc@v1.0.1
1.1.5
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/opencontainers/runc@v1.0.1
1.1.5
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/opencontainers/runc@v1.0.2
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/opencontainers/runc@v1.1.4
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/opencontainers/runc@v1.1.4
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/opencontainers/runc@v1.1.2
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
github.com/opencontainers/runc@v1.1.4
1.1.5
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/opencontainers/runc@v1.1.3
1.1.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.