CVE-2023-28321

Medium

Advisory

Published 17 May 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.018; 77th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 579; of 17,787 indexed, latest versions
Container images: 458; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 579 of 17,787 indexed charts deploy, on 458 images.

Affected package	Affected versions	Fixed in	Images
curldeb	7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+51 more	7.35.0-1ubuntu2.20+esm16, 7.47.0-1ubuntu2.19+esm9, 7.58.0-2ubuntu3.24+esm1, 7.68.0-1ubuntu2.19+1 more	317
curlapk	7.80.0-r0, 7.80.0-r1, 7.80.0-r2, 7.80.0-r3+17 more	8.1.0-r0	141

OSV records: ALPINE-CVE-2023-28321 UBUNTU-CVE-2023-28321
Also known as: USN-6237-1, USN-6237-3

Charts affected

579 by stars

Chart

Latest

Affected images

Radar Score

freeradiussvtech-public-helm-charts

0.1.5

1 of 4 See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
ptthanh1511/freeradius-server :3.0.26-netdebug	5741cbde85ab	curl@7.68.0-1ubuntu2.13	7.68.0-1ubuntu2.19

Open the chart page →

12,708

grafanasvtech-public-helm-charts

1.0.0

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.19

Open the chart page →

10,949

preparationsvtech-public-helm-charts

1.0.0

1 of 1 See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	curl@7.81.0-1ubuntu1.2	7.81.0-1ubuntu1.11

Open the chart page →

12,097

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.19

Open the chart page →

18,828

istio-discoverytemp-charts

0.3.3

1 of 1 See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
istio/pilot :1.10.0	294ca55bd1cc	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm1

Open the chart page →

10,583

istio-ingresstemp-charts

0.3.3

1 of 1 See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.10.0	88c6c693e67a	curl@7.58.0-2ubuntu3.13	7.58.0-2ubuntu3.24+esm1

Open the chart page →

10,529

pagestest4322

1.0.0

2 of 3 See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.19
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm1

Open the chart page →

20,233

webapp1test-helm-chart-1

0.1.0

1 of 1 See more

webapp1 test-helm-chart-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
devopsjourney1/mywebapp :latest	bd1ec6838570	curl@7.83.1-r2	8.1.0-r0

Open the chart page →

1,469

standard-applicationthebitgram

1.0.12

1 of 1 See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	curl@7.47.0-1ubuntu2.2	7.47.0-1ubuntu2.19+esm9

Open the chart page →

11,012

pagesthiru-pages

1.0.0

2 of 3 See more

pages thiru-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.19
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm1

Open the chart page →

20,233

pagesthuy-pages

1.0.0

2 of 3 See more

pages thuy-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.19
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm1

Open the chart page →

20,233

test0tohlejezkouska

0.1.0

1 of 2 See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
devopsjourney1/mywebapp :latest	bd1ec6838570	curl@7.83.1-r2	8.1.0-r0

Open the chart page →

3,308

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
jupyterhub/configurable-http-proxy :4.5.3	9e2c0107c7a3	curl@7.83.1-r3	8.1.0-r0

Open the chart page →

8,370

lightstepupdater-lightstep-satellite

1.2.2

1 of 1 See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	curl@7.47.0-1ubuntu2.12	7.47.0-1ubuntu2.19+esm9

Open the chart page →

15,345

pagesvictor-pages

1.0.0

2 of 3 See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.19
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm1

Open the chart page →

20,233

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.19

Open the chart page →

11,444

pageswalter

1.0.0

2 of 3 See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	curl@7.68.0-1ubuntu2.4	7.68.0-1ubuntu2.19
flyway/flyway :6.4.4	22d97ceb0c47	curl@7.58.0-2ubuntu3.8	7.58.0-2ubuntu3.24+esm1

Open the chart page →

20,233

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.19

Open the chart page →

11,167

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.11

Open the chart page →

6,272

queryservice-uiwbstack

0.2.0

1 of 1 See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	8.1.0-r0

Open the chart page →

1,996

uiwbstack

0.4.0

1 of 1 See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	8.1.0-r0

Open the chart page →

1,523

wbaas-backupwbstack

0.1.0

1 of 1 See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.24+esm1

Open the chart page →

9,748

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.19

Open the chart page →

9,225

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.19

Open the chart page →

9,225

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	curl@7.87.0-r2	8.1.0-r0

Open the chart page →

2,031

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	curl@7.80.0-r0	8.1.0-r0

Open the chart page →

7,552

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	curl@7.58.0-2ubuntu3.9	7.58.0-2ubuntu3.24+esm1

Open the chart page →

10,857

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.19

Open the chart page →

15,287

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-28321.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	curl@7.80.0-r1	8.1.0-r0
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	curl@7.80.0-r5	8.1.0-r0

Open the chart page →

16,083

Container images carrying it

458 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.11	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	curl@7.68.0-1ubuntu2.10	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.11	1
ghcr.io/k8s-at-home/readarr :v0.1.0.715	ad943e9309e4	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.11	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/wireguard :v1.0.20210424	448045c4270b	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	curl@7.68.0-1ubuntu2.11	7.68.0-1ubuntu2.19	1
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	curl@7.68.0-1ubuntu2.18	7.68.0-1ubuntu2.19	1
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	curl@7.83.1-r1	8.1.0-r0	1
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	curl@7.58.0-2ubuntu3.21	7.58.0-2ubuntu3.24+esm1	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	curl@7.68.0-1ubuntu2.7	7.68.0-1ubuntu2.19	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.19	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.19	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.19	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	curl@7.68.0-1ubuntu2.6	7.68.0-1ubuntu2.19	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	curl@7.58.0-2ubuntu3.16	7.58.0-2ubuntu3.24+esm1	1
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.11	1
ghcr.io/linuxserver/resilio-sync :version-2.7.2.1375	605b6d544028	curl@7.58.0-2ubuntu3.14	7.58.0-2ubuntu3.24+esm1	1
ghcr.io/mailu/clamav :1.9.50	01d30483e4a8	curl@7.87.0-r2	8.1.0-r0	1
ghcr.io/mjohnson9/docker-pleroma :v0.1.4	4f08e2823756	curl@7.83.1-r4	8.1.0-r0	1
ghcr.io/onedr0p/qbittorrent :4.5.2	0efdd8d3ef39	curl@8.0.1-r2	8.1.0-r0	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	curl@7.68.0-1ubuntu2.12	7.68.0-1ubuntu2.19	1
ghcr.io/reitermarkus/strongswan :v1.0.0	e7a8afe6e6eb	curl@7.80.0-r0	8.1.0-r0	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.19	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.19	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	curl@7.68.0-1ubuntu2.14	7.68.0-1ubuntu2.19	1
ghcr.io/stefanprodan/podinfo :6.1.3	f25ebb9c6788	curl@7.80.0-r0	8.1.0-r0	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	curl@8.0.1-r0	8.1.0-r0	1
ghcr.io/volosoft/eshoponabp/app-web :1.0.0	056bb4271626	curl@7.83.1-r2	8.1.0-r0	1
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	8.1.0-r0	1
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	8.1.0-r0	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	curl@7.58.0-2ubuntu3.18	7.58.0-2ubuntu3.24+esm1	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	curl@7.58.0-2ubuntu3.19	7.58.0-2ubuntu3.24+esm1	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	curl@7.68.0-1ubuntu2.5	7.68.0-1ubuntu2.19	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.11	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	curl@7.83.1-r1	8.1.0-r0	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	curl@7.58.0-2ubuntu3.20	7.58.0-2ubuntu3.24+esm1	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.11	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.11	1
quay.io/k8start/http-headers :1.2.0	c7a9987f2ac5	curl@7.83.1-r4	8.1.0-r0	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	curl@7.47.0-1ubuntu2.16	7.47.0-1ubuntu2.19+esm9	1
quay.io/netwarps/blockscout	becd3e39360a	curl@7.80.0-r0	8.1.0-r0	1
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	curl@7.80.0-r0	8.1.0-r0	1