StackRadar

CVE-2023-27561

High

Advisory

Published 3 Mar 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
190
of 17,781 indexed, latest versions
Container images
126
deployed by those charts
Fix available
1 of 1
affected package

Opencontainers runc Incorrect Authorization vulnerability

Carried by container images the latest versions of 190 of 17,781 indexed charts deploy, on 126 images.

Affected packageAffected versionsFixed inImages
github.com/opencontainers/runcgolangv1.0.0-rc95, v1.0.1, v1.0.2, v1.0.3+5 more1.1.5126
OSV records
GHSA-vpvm-3wq2-2wvm
Also known as
GO-2023-1627

Charts affected

190 by stars
ChartLatestAffected imagesRadar Score
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,547
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

27,465
apicurioone-acre-fundVerified publisher2.3.01 of 5See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

18,667
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,751
open-pdcopen-pdc0.1.01 of 3See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
open-pubopen-pub0.1.01 of 3See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

8,599
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

4,237
open-webconceptopen-webconcept0.1.01 of 3See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,423
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/opencontainers/runc@v1.1.4
1.1.5

Open the chart page →

26,840
tenant-namespacepnnl-miscscripts0.6.231 of 1See more

tenant-namespace pnnl-miscscripts 0.6.23

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/opencontainers/runc@v1.1.3
1.1.5

Open the chart page →

2,578
postgrespostgresVerified publisher0.1.11 of 1See more

postgres postgres 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:13.12ced3ba927f4c
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,916
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

27,558
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

28,484
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,203
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

6,668
redisredis-arm17.8.01 of 1See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,906
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/opencontainers/runc@v1.0.2
1.1.5

Open the chart page →

5,422
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

32,902
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

6,890
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

12,668
searchpesearchpe4.1.01 of 2See more

searchpe searchpe 4.1.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/postgres:13.703652c675ae1
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

2,637
backendsignalen4.24.02 of 4See more

backend signalen 4.24.0

2 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
github.com/opencontainers/runc@v1.0.1
1.1.5
bitnamilegacy/rabbitmq:3.10.7-debian-11-r4cf93e2772250
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

11,636
trilliansigstoreVerified publisher0.3.171 of 5See more

trillian sigstore 0.3.17

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

2,808
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/opencontainers/runc@v1.1.2
1.1.5

Open the chart page →

3,462
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

7,574
redissoftonic0.3.01 of 2See more

redis softonic 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

1,731
redis-high-availabilitysomeblackmagic1.3.101 of 3See more

redis-high-availability someblackmagic 1.3.10

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/redis:7.0.8-debian-11-r0bf01d031ba8c
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,148
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

66,266
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

13,646
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

12,655
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

5,841
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.1.5

Open the chart page →

8,518
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

17,461
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
pysga1996/redis:latest3af6d0c7db19
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

4,661
steamcmdthetredevVerified publisher1.0.91 of 1See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

1,075
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

3,176
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-27561.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.1.5

Open the chart page →

9,248

Container images carrying it

126 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.1.5
22
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.1.5
11
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.1.5
7
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.1.5
6
library/redis:5:5.0fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.1.5
5
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.1.5
4
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
github.com/opencontainers/runc@v1.1.0
1.1.5
3
library/docker:20.10-dind:20-dindaf96c680a7e1
github.com/opencontainers/runc@v1.1.3
1.1.5
3
library/postgres:14.13162a6ead070
github.com/opencontainers/runc@v1.0.1
1.1.5
3
library/postgres:115d2aa4a7b5f9
github.com/opencontainers/runc@v1.0.1
1.1.5
3
gcr.io/trillian-opensource-ci/db_server2a685a38dd01
github.com/opencontainers/runc@v1.1.0
1.1.5
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/opencontainers/runc@v1.1.4
1.1.5
3
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/opencontainers/runc@v1.1.0
1.1.5
2
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
github.com/opencontainers/runc@v1.0.1
1.1.5
2
eqalpha/keydb:latest6537505c4235
github.com/opencontainers/runc@v1.0.1
1.1.5
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
github.com/opencontainers/runc@v1.0.1
1.1.5
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/opencontainers/runc@v1.1.4
1.1.5
2
library/cassandra:4.1.37cbcec0086ac
github.com/opencontainers/runc@v1.1.0
1.1.5
2
library/influxdb:2.7b8d940ca9376
github.com/opencontainers/runc@v1.1.0
1.1.5
2
library/mariadb:10.8.30abf60f81588
github.com/opencontainers/runc@v1.0.1
1.1.5
2
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.1.5
2
library/postgres:16.109f23e02d766
github.com/opencontainers/runc@v1.1.0
1.1.5
2
library/postgres:9.6caddd35b05cd
github.com/opencontainers/runc@v1.0.1
1.1.5
2
postgis/postgis:15-3.3a2fc46b52819
github.com/opencontainers/runc@v1.1.0
1.1.5
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/opencontainers/runc@v1.1.2
1.1.5
2
xelalex/dregsy:0.4.3574054e1c417
github.com/opencontainers/runc@v1.1.1
1.1.5
2
yzhou442/equiz:latesta3f7ca69e28d
github.com/opencontainers/runc@v1.0.1
1.1.5
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/opencontainers/runc@v1.1.2
1.1.5
2
alpine/k8s:1.22.600ac10bcb759
github.com/opencontainers/runc@v1.0.2
1.1.5
1
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/opencontainers/runc@v1.1.4
1.1.5
1
amd64/mysql:5.7e20a653e0f51
github.com/opencontainers/runc@v1.1.0
1.1.5
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
github.com/opencontainers/runc@v1.1.0
1.1.5
1
anonaddy/anonaddy:0.12.3957a95565166
github.com/opencontainers/runc@v1.1.3
1.1.5
1
apache/camel-k:1.10.43bb13d14f64a
github.com/opencontainers/runc@v1.0.2
1.1.5
1
aquasec/trivy:0.32.0973d0df16189
github.com/opencontainers/runc@v1.1.3
1.1.5
1
assistiot/authorization_db:latestc3adbab6a3e7
github.com/opencontainers/runc@v1.1.0
1.1.5
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
github.com/opencontainers/runc@v1.1.0
1.1.5
1
assistiot/identity-manager_db:latest0d3e6d35f168
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
github.com/opencontainers/runc@v1.0.1
1.1.5
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/mariadb:10.6.12-debian-11-r1315edb5643b73
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/mariadb-galera:10.6.12-debian-11-r1643a70df0e7c6
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/mongodb:5.0.103bb1deeaf9d0
github.com/opencontainers/runc@v1.0.1
1.1.5
1
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
github.com/opencontainers/runc@v1.1.0
1.1.5
1
bitnamilegacy/rabbitmq:3.10.88f7161d8ce19
github.com/opencontainers/runc@v1.0.1
1.1.5
1
bitnamilegacy/rabbitmq:3.10.7-debian-11-r4cf93e2772250
github.com/opencontainers/runc@v1.0.1
1.1.5
1
bitnamilegacy/redis:7.0.10-debian-11-r059293f5206b7
github.com/opencontainers/runc@v1.1.0
1.1.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.