StackRadarChart IndexLive demo

CVE-2023-28154

Critical

Advisory

Published 13 Mar 2023In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.014; 71st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 18; of 17,781 indexed, latest versions
Container images: 18; deployed by those charts
Fix available: 1 of 2; affected packages

Cross-realm object access in Webpack 5

Carried by container images the latest versions of 18 of 17,781 indexed charts deploy, on 18 images.

Affected package	Affected versions	Fixed in	Images
webpacknpm	5.20.1, 5.20.2, 5.33.2, 5.38.1+6 more	5.76.0	17
node-webpackdeb	5.76.1+dfsg1+~cs17.16.16-1	no fix listed	1

OSV records: GHSA-hc6q-2mpp-qw7j UBUNTU-CVE-2023-28154

Charts affected

18 by stars

Chart

Latest

Affected images

Radar Score

1 of 1 See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
misskey/misskey :12.110.1	e08b7c478093	webpack@5.33.2	5.76.0

Open the chart page →

5,251

nightscoutgabe565

1 of 2 See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
nightscout/cgm-remote-monitor :15.0.2	ad29ca7a4de6	webpack@5.75.0	5.76.0

Open the chart page →

2,521

kobotoolboxone-acre-fund

1 of 9 See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	webpack@5.72.0	5.76.0

Open the chart page →

18,517

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	webpack@5.75.0	5.76.0

Open the chart page →

2,309

apimap-developerapimap

1 of 1 See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
apimap/developer :v1.3.1	406d3858e20c	webpack@5.74.0	5.76.0

Open the chart page →

2,353

apimap-portalapimap

1 of 1 See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
apimap/portal :v2.4.0	041a4790c65c	webpack@5.73.0	5.76.0

Open the chart page →

2,396

openapiassist-iot-open-api-management

1 of 6 See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
assistiot/open_api_frontend :1.0.1	f11d82defc70	webpack@5.75.0	5.76.0

Open the chart page →

18,277

nas-appsawesome

1 of 8 See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
ltdstudio/terraforming-mars :latest	0e76c6f4eac0	webpack@5.39.0	5.76.0

Open the chart page →

7,152

mx-apibicarus-labs

1 of 4 See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	webpack@5.74.0	5.76.0

Open the chart page →

4,455

bluerange-mosquittobluerange

1 of 1 See more

bluerange-mosquitto bluerange 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
bluerange/bluerange-mosquitto :25	f1bfbba84832	webpack@5.20.1	5.76.0

Open the chart page →

1,168

codehubcodehub

1 of 5 See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
jupyterhub/jupyterhub :5.4.6	3974ba945e65	node-webpack@5.76.1+dfsg1+~cs17.16.16-1	no fix listed

Open the chart page →

13,220

containers-security-chartscontainers-security

2 of 7 See more

containers-security-charts containers-security 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
coldatom/containers-security-api :latest	eae9e82da080	webpack@5.75.0	5.76.0
coldatom/containers-security-front :latest	7c2fbbb41bcf	webpack@5.75.0	5.76.0

Open the chart page →

9,146

nightscoutgeek-cookbook

1 of 1 See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
nightscout/cgm-remote-monitor :14.2.5	00c3b4833f1b	webpack@5.20.2	5.76.0

Open the chart page →

4,043

keyoxide-webittrident-oss

1 of 1 See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
keyoxide/keyoxide :stable	96f27a71269d	webpack@5.70.0	5.76.0

Open the chart page →

2,363

nightscoutmt190502

1 of 3 See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
nightscout/cgm-remote-monitor :15.0.3	f604dc4c03ca	webpack@5.75.0	5.76.0

Open the chart page →

6,608

semaphoreschoenwald

1 of 1 See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
0hlov3/semaphore :v1.0.0	50f874ec096b	webpack@5.75.0	5.76.0

Open the chart page →

1,796

nordmart-reviewstakater

1 of 3 See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	webpack@5.38.1	5.76.0

Open the chart page →

11,554

nordmart-review-instancestakater

1 of 3 See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-28154.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	webpack@5.38.1	5.76.0

Open the chart page →

11,554

Container images carrying it

18 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	webpack@5.38.1	5.76.0	2
0hlov3/semaphore :v1.0.0	50f874ec096b	webpack@5.75.0	5.76.0	1
apimap/developer :v1.3.1	406d3858e20c	webpack@5.74.0	5.76.0	1
apimap/portal :v2.4.0	041a4790c65c	webpack@5.73.0	5.76.0	1
assistiot/open_api_frontend :1.0.1	f11d82defc70	webpack@5.75.0	5.76.0	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	webpack@5.74.0	5.76.0	1
bluerange/bluerange-mosquitto :25	f1bfbba84832	webpack@5.20.1	5.76.0	1
coldatom/containers-security-api :latest	eae9e82da080	webpack@5.75.0	5.76.0	1
coldatom/containers-security-front :latest	7c2fbbb41bcf	webpack@5.75.0	5.76.0	1
jupyterhub/jupyterhub :5.4.6	3974ba945e65	node-webpack@5.76.1+dfsg1+~cs17.16.16-1	no fix listed	1
keyoxide/keyoxide :stable	96f27a71269d	webpack@5.70.0	5.76.0	1
kobotoolbox/kpi :2.022.24d	bcacc01bccd4	webpack@5.72.0	5.76.0	1
loftsh/jspolicy :0.2.2	25deb9bd2683	webpack@5.75.0	5.76.0	1
ltdstudio/terraforming-mars :latest	0e76c6f4eac0	webpack@5.39.0	5.76.0	1
misskey/misskey :12.110.1	e08b7c478093	webpack@5.33.2	5.76.0	1
nightscout/cgm-remote-monitor :14.2.5	00c3b4833f1b	webpack@5.20.2	5.76.0	1
nightscout/cgm-remote-monitor :15.0.2	ad29ca7a4de6	webpack@5.75.0	5.76.0	1
nightscout/cgm-remote-monitor :15.0.3	f604dc4c03ca	webpack@5.75.0	5.76.0	1