StackRadar

CVE-2023-28370

Medium

Advisory

Published 25 May 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
47
of 17,781 indexed, latest versions
Container images
49
deployed by those charts
Fix available
1 of 1
affected package

Open redirect in Tornado

Carried by container images the latest versions of 47 of 17,781 indexed charts deploy, on 49 images.

Affected packageAffected versionsFixed inImages
tornadopypi2.4.1, 4.5.3, 5.1.1, 6.0.2+3 more6.3.249
OSV records
GHSA-hj3f-6gcp-jg8j
Also known as
PYSEC-2023-75

Charts affected

47 by stars
ChartLatestAffected imagesRadar Score
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tornado@6.1
6.3.2

Open the chart page →

7,705
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
tornado@6.1
6.3.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tornado@6.0.4
6.3.2

Open the chart page →

52,919
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
tornado@6.1
6.3.2

Open the chart page →

3,717
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
tornado@4.5.3
6.3.2

Open the chart page →

36,094
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
apsl/thumbor:6.7.051e2de5c2c70
tornado@5.1.1
6.3.2

Open the chart page →

38,346
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
tornado@6.1
6.3.2

Open the chart page →

5,305
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
tornado@5.1.1
6.3.2

Open the chart page →

3,153
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
tornado@4.5.3
6.3.2

Open the chart page →

3,608
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
tornado@6.1
6.3.2

Open the chart page →

2,850
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
tornado@6.1
6.3.2

Open the chart page →

3,332
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
tornado@4.5.3
6.3.2

Open the chart page →

20,671
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
tornado@6.1
6.3.2

Open the chart page →

22,891
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
tornado@4.5.3
6.3.2

Open the chart page →

18,980
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
tornado@5.1.1
6.3.2

Open the chart page →

2,504
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
tornado@5.1.1
6.3.2
daskdev/dask-notebook:1.1.0052630f5ca04
tornado@5.1.1
6.3.2

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
tornado@4.5.3
6.3.2

Open the chart page →

36,094
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
tornado@5.1.1
6.3.2

Open the chart page →

5,060
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
tornado@4.5.3
6.3.2

Open the chart page →

77,758
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
tornado@6.0.4
6.3.2

Open the chart page →

18,863
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
tornado@4.5.3
6.3.2

Open the chart page →

11,174
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
tornado@6.2
6.3.2

Open the chart page →

4,085
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
tornado@6.1
6.3.2

Open the chart page →

16,123
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
tornado@6.2
6.3.2

Open the chart page →

12,958
gmaas-github-apigmaas-github-api2.0.11 of 1See more

gmaas-github-api gmaas-github-api 2.0.1

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
gmaas2/github-api:latest148fc2d9afe9
tornado@6.2
6.3.2

Open the chart page →

1,205
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
tornado@6.1
6.3.2

Open the chart page →

37,671
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
tornado@6.1
6.3.2

Open the chart page →

18,066
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
tornado@5.1.1
6.3.2

Open the chart page →

7,232
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
tornado@4.5.3
6.3.2

Open the chart page →

18,980
webappiti-web-appVerified publisher0.1.01 of 2See more

webapp iti-web-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
mohameddev006/web-app:v50fbc7360ecf4
tornado@5.1.1
6.3.2

Open the chart page →

1,230
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
tornado@6.2
6.3.2

Open the chart page →

16,417
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
tornado@4.5.3
6.3.2

Open the chart page →

9,378
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
tornado@6.2
6.3.2

Open the chart page →

2,765
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
tornado@6.1
6.3.2
lsstsqre/sciplat-hub:latest5e0ade6bed1c
tornado@6.1
6.3.2
lsstsqre/wfdispatcher:lateste9feb99f524d
tornado@6.1
6.3.2

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
tornado@6.1
6.3.2

Open the chart page →

17,779
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
tornado@6.1
6.3.2

Open the chart page →

2,233
python-apppython-app-chart0.1.01 of 2See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
mnaggar3396/python-app:latest371d8ed84b15
tornado@6.2
6.3.2

Open the chart page →

3,382
reload-counterreload-counter0.1.01 of 1See more

reload-counter reload-counter 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
alaaamin/reload-count-tornado-py-app:v1.0.1alpine46da5844794e
tornado@5.1.1
6.3.2

Open the chart page →

1,009
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
tornado@4.5.3
6.3.2

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
tornado@4.5.3
6.3.2

Open the chart page →

20,462
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
tornado@6.1
6.3.2

Open the chart page →

21,997
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
tornado@2.4.1
6.3.2

Open the chart page →

3,116
icinga2-reportsvtech-public-helm-charts1.0.01 of 1See more

icinga2-report svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
tornado@5.1.1
6.3.2

Open the chart page →

1,779
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tornado@6.1
6.3.2

Open the chart page →

5,321
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
tornado@6.1
6.3.2

Open the chart page →

3,164
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
tornado@6.2
6.3.2

Open the chart page →

8,607
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
tornado@6.0.2
6.3.2

Open the chart page →

9,347
webapp-chartwebappchart1.0.01 of 1See more

webapp-chart webappchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-28370.

Container imageDigestPackageFixed in
amagdi888/my-repo:hello-appd8a10fc8faf6
tornado@5.1.1
6.3.2

Open the chart page →

1,201

Container images carrying it

49 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
tornado@4.5.3
6.3.2
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
tornado@4.5.3
6.3.2
2
alaaamin/reload-count-tornado-py-app:v1.0.1alpine46da5844794e
tornado@5.1.1
6.3.2
1
amagdi888/my-repo:hello-appd8a10fc8faf6
tornado@5.1.1
6.3.2
1
amancevice/superset:0.28.1c8c04bfe3d66
tornado@5.1.1
6.3.2
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
tornado@4.5.3
6.3.2
1
apsl/thumbor:6.7.051e2de5c2c70
tornado@5.1.1
6.3.2
1
cheyang/distributed-tf:1.6.046cc34755493
tornado@4.5.3
6.3.2
1
daskdev/dask:1.1.04ecd7bc35500
tornado@5.1.1
6.3.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
tornado@5.1.1
6.3.2
1
errbotio/errbot:6.1.900ee4e0953ab
tornado@6.1
6.3.2
1
esphome/esphome:1.18.03f51ec10e823
tornado@6.1
6.3.2
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
tornado@6.2
6.3.2
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
tornado@6.0.4
6.3.2
1
gethue/hue:4.11.011b649636e68
tornado@6.2
6.3.2
1
gethue/hue:4.10.05702b2c37ff9
tornado@6.1
6.3.2
1
gmaas2/github-api:latest148fc2d9afe9
tornado@6.2
6.3.2
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
tornado@6.1
6.3.2
1
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
tornado@4.5.3
6.3.2
1
jaedb/iris:latest048cfbf58d57
tornado@6.2
6.3.2
1
josh5/unmanic:0.2.64d49c4816260
tornado@6.0.2
6.3.2
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
tornado@6.1
6.3.2
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
tornado@6.1
6.3.2
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tornado@6.0.4
6.3.2
1
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
tornado@4.5.3
6.3.2
1
kyso/kyso-nbdime:latest4aa9d38ee81d
tornado@6.2
6.3.2
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
tornado@6.1
6.3.2
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
tornado@5.1.1
6.3.2
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
tornado@6.1
6.3.2
1
lsstsqre/prepuller:latest19c2dfc4e4ff
tornado@6.1
6.3.2
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
tornado@6.1
6.3.2
1
lsstsqre/wfdispatcher:lateste9feb99f524d
tornado@6.1
6.3.2
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
tornado@6.1
6.3.2
1
matrixdotorg/synapse:v1.78.0def97fd537d8
tornado@6.1
6.3.2
1
mnaggar3396/python-app:latest371d8ed84b15
tornado@6.2
6.3.2
1
mohameddev006/web-app:v50fbc7360ecf4
tornado@5.1.1
6.3.2
1
octoprint/octoprint:1.4.0106c26efcd8a
tornado@4.5.3
6.3.2
1
octoprint/octoprint:1.6.1ea3bffae2470
tornado@5.1.1
6.3.2
1
openzaak/open-notificaties:1.3.02e65313b9b10
tornado@6.1
6.3.2
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tornado@6.1
6.3.2
1
roadiehq/community-backstage-image:latestef355bf5b639
tornado@5.1.1
6.3.2
1
robmarkcole/deepstack-ui:latest410275726459
tornado@6.1
6.3.2
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
tornado@6.1
6.3.2
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
tornado@2.4.1
6.3.2
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
tornado@4.5.3
6.3.2
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
tornado@4.5.3
6.3.2
1
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
tornado@5.1.1
6.3.2
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tornado@6.1
6.3.2
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
tornado@6.2
6.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.