StackRadar

CVE-2023-29159

Low

Advisory

Published 17 May 2023In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
27
of 17,781 indexed, latest versions
Container images
31
deployed by those charts
Fix available
1 of 1
affected package

Starlette has Path Traversal vulnerability in StaticFiles

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
starlettepypi0.13.6, 0.13.8, 0.14.1, 0.14.2+6 more0.27.031
OSV records
GHSA-v5gw-mw7f-84px
Also known as
PYSEC-2023-83

Charts affected

27 by stars
ChartLatestAffected imagesRadar Score
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
starlette@0.14.2
0.27.0

Open the chart page →

3,717
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
starlette@0.19.1
0.27.0

Open the chart page →

7,579
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
starlette@0.26.1
0.27.0

Open the chart page →

17,877
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
starlette@0.26.1
0.27.0
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
starlette@0.26.1
0.27.0
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
starlette@0.26.1
0.27.0

Open the chart page →

37,373
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
assistiot/fl_repository:latest0fce3ea719a5
starlette@0.19.1
0.27.0

Open the chart page →

4,367
trainingcollectorassist-iot-fl-training-collector1.1.01 of 1See more

trainingcollector assist-iot-fl-training-collector 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
assistiot/fl_training_collector:latest792715dd3084
starlette@0.16.0
0.27.0

Open the chart page →

1,719
azure-app-exporterazure-app-exporterVerified publisher0.4.21 of 2See more

azure-app-exporter azure-app-exporter 0.4.2

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
starlette@0.17.1
0.27.0

Open the chart page →

1,790
ctk-walkthroughchaostoolkit-walkthrough0.1.03 of 3See more

ctk-walkthrough chaostoolkit-walkthrough 0.1.0

3 of the 3 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
chaostoolkit/back:latest734f3af86125
starlette@0.13.8
0.27.0
chaostoolkit/front:latest7f4a7eb9f7df
starlette@0.14.1
0.27.0
chaostoolkit/middle:latestb95ba4961cfc
starlette@0.14.1
0.27.0

Open the chart page →

5,557
design-cataloguedesign-catalogue0.1.01 of 2See more

design-catalogue design-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
starlette@0.14.2
0.27.0

Open the chart page →

2,770
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
starlette@0.19.1
0.27.0

Open the chart page →

4,550
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
starlette@0.20.4
0.27.0

Open the chart page →

4,085
kodiakfikaworks1.1.41 of 2See more

kodiak fikaworks 1.1.4

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
cdignam/kodiak:v0.54.05a6a55b39cee
starlette@0.20.4
0.27.0

Open the chart page →

3,892
forms-catalogueforms-catalogue0.1.01 of 2See more

forms-catalogue forms-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
starlette@0.14.2
0.27.0

Open the chart page →

2,188
pavkrzwiatrzyk0.0.31 of 1See more

pav krzwiatrzyk 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
witcherek7/pav:0.0.342a744f29ac0
starlette@0.22.0
0.27.0

Open the chart page →

1,132
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
starlette@0.19.1
0.27.0

Open the chart page →

1,949
exposureloglsst-sqre0.2.11 of 1See more

exposurelog lsst-sqre 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
lsstsqre/exposurelog:0.8.079b00fb67a65
starlette@0.17.1
0.27.0

Open the chart page →

2,078
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
starlette@0.17.1
0.27.0

Open the chart page →

7,315
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
starlette@0.20.4
0.27.0

Open the chart page →

43,341
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
starlette@0.13.6
0.27.0

Open the chart page →

6,438
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi:x86bacb2ddd8394
starlette@0.19.1
0.27.0

Open the chart page →

8,556
my-fastapi-chartmy-fastapi-template0.1.01 of 1See more

my-fastapi-chart my-fastapi-template 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
john19968010/fastapi-template:latest31a90f6bd69c
starlette@0.26.1
0.27.0

Open the chart page →

967
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
starlette@0.22.0
0.27.0

Open the chart page →

5,456
python-fastapi-postgrespython-fastapi-postgres0.1.01 of 1See more

python-fastapi-postgres python-fastapi-postgres 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
archish27/python-fastapi-postgres:latest6610071a2101
starlette@0.19.1
0.27.0

Open the chart page →

2,983
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
starlette@0.14.2
0.27.0

Open the chart page →

2,201
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
starlette@0.14.2
0.27.0

Open the chart page →

2,770
horcruxstakewise1.0.11 of 1See more

horcrux stakewise 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
starlette@0.13.6
0.27.0

Open the chart page →

1,421
take-the-helmtake-the-helm0.1.01 of 1See more

take-the-helm take-the-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-29159.

Container imageDigestPackageFixed in
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
starlette@0.19.1
0.27.0

Open the chart page →

805

Container images carrying it

31 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
starlette@0.26.1
0.27.0
1
archish27/python-fastapi-postgres:latest6610071a2101
starlette@0.19.1
0.27.0
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
starlette@0.14.2
0.27.0
1
assistiot/fl_repository:latest0fce3ea719a5
starlette@0.19.1
0.27.0
1
assistiot/fl_training_collector:latest792715dd3084
starlette@0.16.0
0.27.0
1
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
starlette@0.19.1
0.27.0
1
cdignam/kodiak:v0.54.05a6a55b39cee
starlette@0.20.4
0.27.0
1
chaostoolkit/back:latest734f3af86125
starlette@0.13.8
0.27.0
1
chaostoolkit/front:latest7f4a7eb9f7df
starlette@0.14.1
0.27.0
1
chaostoolkit/middle:latestb95ba4961cfc
starlette@0.14.1
0.27.0
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
starlette@0.26.1
0.27.0
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
starlette@0.26.1
0.27.0
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
starlette@0.26.1
0.27.0
1
douz/helpdesk:latest4384103d0219
starlette@0.19.1
0.27.0
1
esphome/esphome:1.18.03f51ec10e823
starlette@0.14.2
0.27.0
1
evk02/mlflow:2.2.1ef6ff257ef35
starlette@0.22.0
0.27.0
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
starlette@0.20.4
0.27.0
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
starlette@0.19.1
0.27.0
1
john19968010/fastapi-template:latest31a90f6bd69c
starlette@0.26.1
0.27.0
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
starlette@0.19.1
0.27.0
1
lsstsqre/exposurelog:0.8.079b00fb67a65
starlette@0.17.1
0.27.0
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
starlette@0.20.4
0.27.0
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
starlette@0.19.1
0.27.0
1
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
starlette@0.13.6
0.27.0
1
witcherek7/pav:0.0.342a744f29ac0
starlette@0.22.0
0.27.0
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
starlette@0.17.1
0.27.0
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
starlette@0.17.1
0.27.0
1
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
starlette@0.13.6
0.27.0
1
registry.gitlab.com/open-forms/design-catalogue:latestf21f19346b29
starlette@0.14.2
0.27.0
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
starlette@0.14.2
0.27.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
starlette@0.14.2
0.27.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.