StackRadar

CVE-2023-28867

High

Advisory

Published 27 Mar 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
1 of 1
affected package

GraphQL Java vulnerable to stack consumption

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
graphql-javamaven8.0, 9.2, 13.0, 15.0+5 more17.5, 18.4, 19.4, 20.116
OSV records
GHSA-p4qx-6w5p-4rj2

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
graphql-java@8.0
17.5

Open the chart page →

18,042
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
rm3l/dev-feed-api:latest9a7f732245a3
graphql-java@18.3
18.4

Open the chart page →

9,837
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
graphql-java@17.3
17.5

Open the chart page →

10,120
akto-testing-db-layerakto1.42.161 of 2See more

akto-testing-db-layer akto 1.42.16

1 of the 2 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
graphql-java@20.0
20.1

Open the chart page →

5,489
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
graphql-java@17.3
17.5

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
graphql-java@17.3
17.5

Open the chart page →

7,963
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
graphql-java@19.2
19.4

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
graphql-java@19.2
19.4

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4

Open the chart page →

28,482
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
graphql-java@19.2
19.4

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4

Open the chart page →

32,205
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4

Open the chart page →

32,205
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
graphql-java@17.3
17.5

Open the chart page →

16,401
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
graphql-java@8.0
17.5

Open the chart page →

20,650
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4

Open the chart page →

27,721
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
graphql-java@13.0
17.5

Open the chart page →

11,188
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4

Open the chart page →

27,721
apicurioone-acre-fundVerified publisher2.3.02 of 5See more

apicurio one-acre-fund 2.3.0

2 of the 5 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
graphql-java@19.3
19.4
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
graphql-java@19.3
19.4

Open the chart page →

18,667
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
graphql-java@19.2
19.4

Open the chart page →

27,537
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4

Open the chart page →

27,558
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
graphql-java@9.2
17.5

Open the chart page →

13,605
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
graphql-java@13.0
17.5

Open the chart page →

14,493
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
graphql-java@17.3
17.5

Open the chart page →

12,455
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-28867.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
graphql-java@15.0
17.5

Open the chart page →

3,424

Container images carrying it

16 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
codeurjc/server:v1.0310bea5b1ee7
graphql-java@19.2
19.4
8
mastercloudapps/server:v2.23f3d24dfe2686
graphql-java@19.2
19.4
4
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
graphql-java@17.3
17.5
2
apache/skywalking-oap-server:9.2.0133d35d2c263
graphql-java@17.3
17.5
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
graphql-java@8.0
17.5
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
graphql-java@8.0
17.5
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
graphql-java@15.0
17.5
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
graphql-java@17.3
17.5
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
graphql-java@19.3
19.4
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
graphql-java@19.3
19.4
1
atlassian/confluence-server:7.10.03b9222ab32ef
graphql-java@9.2
17.5
1
jacobalberty/unifi:v7.1.664a3616625dda
graphql-java@13.0
17.5
1
linuxserver/unifi-controller:7.3.83ab105cc50322
graphql-java@13.0
17.5
1
rm3l/dev-feed-api:latest9a7f732245a3
graphql-java@18.3
18.4
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
graphql-java@17.3
17.5
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.59.3_local8cdcb7e83f9f
graphql-java@20.0
20.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.