CVE-2023-29007
HighAdvisory
Published 25 Apr 2023In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.8
- base score, highest
- EPSS
- 0.061
- 93rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 181
- of 17,781 indexed, latest versions
- Container images
- 148
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 181 of 17,781 indexed charts deploy, on 148 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gitdeb | 1:2.7.4-0ubuntu1.3, 1:2.7.4-0ubuntu1.4, 1:2.7.4-0ubuntu1.6, 1:2.7.4-0ubuntu1.7+20 more | 1:2.7.4-0ubuntu1.10+esm7, 1:2.17.1-1ubuntu0.18, 1:2.25.1-1ubuntu3.11, 1:2.34.1-1ubuntu1.9+1 more | 113 |
| gitapk | 2.32.0-r0, 2.32.1-r0, 2.34.1-r0, 2.34.2-r0+7 more | 2.32.7-r0, 2.34.8-r0, 2.36.6-r0, 2.38.5-r0 | 35 |
- OSV records
- ALPINE-CVE-2023-29007DEBIAN-CVE-2023-29007UBUNTU-CVE-2023-29007
- Also known as
- USN-6050-1, USN-6050-2
Charts affected
181 by stars
Container images carrying it
148 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| oomk8s/ | 875814cc853d | git | 1:2.7.4-0ubuntu1.10+esm7 | 11 |
| oomk8s/ | 7daa08b81954 | git | 1:2.7.4-0ubuntu1.10+esm7 | 6 |
| quay.io/ | c8958d9533c7 | git | 2.34.8-r0 | 6 |
| quay.io/ | 95d6f0e05636 | git | 1:2.39.5-0+deb12u1 | 6 |
| bitnamilegacy/ | c74b703deed2 | git | 1:2.39.5-0+deb12u1 | 5 |
| hyperledger/ | 4ce6f43ded2e | git | 1:2.7.4-0ubuntu1.10+esm7 | 4 |
| hyperledger/ | f6c724592abf | git | 1:2.7.4-0ubuntu1.10+esm7 | 4 |
| hyperledger/ | b1194f509085 | git | 2.36.6-r0 | 4 |
| cloudve/ | 4a3d7fae90bb | git | 1:2.25.1-1ubuntu3.11 | 3 |
| quay.io/ | 2b6db27eaf3d | git | 1:2.34.1-1ubuntu1.9 | 3 |
| quay.io/ | 8e54bc2d261f | git | 2.36.6-r0 | 3 |
| cfssl/ | c9018c2ddf0b | git | 1:2.39.5-0+deb12u1 | 2 |
| gjeanmart/ | 926264c8f2d1 | git | 1:2.39.5-0+deb12u1 | 2 |
| jenkins/ | b470bcdc4ecd | git | 1:2.39.5-0+deb12u1 | 2 |
| krtk6160/ | cc82a694f818 | git | 2.38.5-r0 | 2 |
| library/ | eedf63967cdb | git | 1:2.39.5-0+deb12u1 | 2 |
| mesosphere/ | 073db43d0b8b | git | 1:2.25.1-1ubuntu3.11 | 2 |
| moreillon/ | e1c9bfab5c16 | git | 1:2.39.5-0+deb12u1 | 2 |
| qichenxu4pd/ | f3a8502bc21b | git | 1:2.39.5-0+deb12u1 | 2 |
| svtechnmaa/ | b2987abe57d3 | git | 1:2.34.1-1ubuntu1.9 | 2 |
| uffizzi/ | 0344805f267b | git | 1:2.39.5-0+deb12u1 | 2 |
| ghcr.io/ | 5be52524664c | git | 1:2.34.1-1ubuntu1.9 | 2 |
| ghcr.io/ | cd264d33efd4 | git | 1:2.39.5-0+deb12u1 | 2 |
| quay.io/ | e98d13459cdc | git | 2.34.8-r0 | 2 |
| aboogie/ | 9c41a4483ac8 | git | 1:2.39.5-0+deb12u1 | 1 |
| adwerx/ | 840d2b078682 | git | 1:2.25.1-1ubuntu3.11 | 1 |
| allegroai/ | 772827a01bb5 | git | 1:2.17.1-1ubuntu0.18 | 1 |
| alpine/ | 66b210a97bc0 | git | 2.36.6-r0 | 1 |
| alpine/ | 00ac10bcb759 | git | 2.34.8-r0 | 1 |
| alpine/ | a41efe02a041 | git | 2.32.7-r0 | 1 |
| aquasec/ | 973d0df16189 | git | 2.36.6-r0 | 1 |
| artur9010/ | 6b4de3ce8b0e | git | 1:2.39.5-0+deb12u1 | 1 |
| assistiot/ | 3fe850384689 | git | 2.36.6-r0 | 1 |
| assistiot/ | b1dbe4d62a03 | git | 1:2.39.5-0+deb12u1 | 1 |
| avinash263/ | aa2b8727f1a6 | git | 1:2.39.5-0+deb12u1 | 1 |
| bitnamilegacy/ | f5fc0d561d9e | git | 1:2.39.5-0+deb12u1 | 1 |
| blockscout/ | c365a8f2dc12 | git | 2.36.6-r0 | 1 |
| browserless/ | c81ae5585b47 | git | 1:2.25.1-1ubuntu3.11 | 1 |
| charmcli/ | 39523c1a6ba8 | git | 2.36.6-r0 | 1 |
| chetangautamm/ | e7f7049e1544 | git | 1:2.25.1-1ubuntu3.11 | 1 |
| cheyang/ | 46cc34755493 | git | 1:2.7.4-0ubuntu1.10+esm7 | 1 |
| cloudve/ | d79c1c5881c0 | git | 1:2.17.1-1ubuntu0.18 | 1 |
| cribl/ | 762747cb6796 | git | 1:2.17.1-1ubuntu0.18 | 1 |
| daskdev/ | 052630f5ca04 | git | 1:2.17.1-1ubuntu0.18 | 1 |
| dtzar/ | a1041bb0f1d1 | git | 2.38.5-r0 | 1 |
| eclipseaerios/ | 2f93bfa4cf0d | git | 2.34.8-r0 | 1 |
| esphome/ | 9ab8cc88b28c | git | 1:2.39.5-0+deb12u1 | 1 |
| ethereumex/ | a7603aa8df4c | git | 1:2.7.4-0ubuntu1.10+esm7 | 1 |
| galaxy/ | e5c265fe9fcd | git | 1:2.25.1-1ubuntu3.11 | 1 |
| gethue/ | 11b649636e68 | git | 1:2.25.1-1ubuntu3.11 | 1 |