StackRadar

CVE-2023-29331

High

Advisory

Published 14 Jun 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
10
of 17,781 indexed, latest versions
Container images
25
deployed by those charts
Fix available
4 of 4
affected packages

.NET Denial of Service vulnerability

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 25 images.

Affected packageAffected versionsFixed inImages
Microsoft.NETCore.App.Runtime.linux-x64nuget6.0.4, 6.0.7, 6.0.8, 6.0.116.0.1817
System.Security.Cryptography.Pkcsnuget6.0.0, 6.0.16.0.314
Microsoft.NETCore.App.Runtime.linux-musl-x64nuget7.0.57.0.72
Microsoft.Windows.Compatibilitynuget6.0.06.0.61
OSV records
GHSA-555c-2p6r-68mm
Also known as
BIT-dotnet-2023-29331, BIT-dotnet-sdk-2023-29331

Charts affected

10 by stars
ChartLatestAffected imagesRadar Score
servarrservarr1.0.23 of 10See more

servarr servarr 1.0.2

3 of the 10 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
System.Security.Cryptography.Pkcs@6.0.0
6.0.3
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
System.Security.Cryptography.Pkcs@6.0.0
6.0.3
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
System.Security.Cryptography.Pkcs@6.0.0
6.0.3

Open the chart page →

14,238
eshoponabpabp-charts1.0.010 of 15See more

eshoponabp abp-charts 1.0.0

10 of the 15 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.18
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.18
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3

Open the chart page →

19,799
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
Microsoft.Windows.Compatibility@6.0.0
System.Security.Cryptography.Pkcs@6.0.1
6.0.6
6.0.3

Open the chart page →

6,940
fedodo.chartfedodo0.5.112 of 4See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
fedodo/fedodo.be.activitypub:14728dada8e3216
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5
7.0.7
fedodo/fedodo.be.auth:208f8eb7a1207e
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5
7.0.7

Open the chart page →

4,399
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
System.Security.Cryptography.Pkcs@6.0.0
6.0.3

Open the chart page →

11,558
prowlarrbeluga-cloudVerified publisher1.0.11 of 1See more

prowlarr beluga-cloud 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/prowlarr/prowlarr:1.4.1.3258aa774b3c3425
System.Security.Cryptography.Pkcs@6.0.0
6.0.3

Open the chart page →

169
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.14 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

4 of the 7 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.18
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.18
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.18
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.18

Open the chart page →

10,091
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
Microsoft.NETCore.App.Runtime.linux-x64@6.0.11
6.0.18

Open the chart page →

4,920
archisteamfarmg0dscookie0.3.01 of 2See more

archisteamfarm g0dscookie 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.NETCore.App.Runtime.linux-x64@6.0.4
6.0.18

Open the chart page →

966
cyclonedxopenshift-bootstrapsVerified publisher1.0.121 of 1See more

cyclonedx openshift-bootstraps 1.0.12

1 of the 1 container images this version deploys carry CVE-2023-29331.

Container imageDigestPackageFixed in
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.18

Open the chart page →

726

Container images carrying it

25 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.18
1
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.18
1
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.18
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Microsoft.NETCore.App.Runtime.linux-x64@6.0.7
6.0.18
1
cyclonedx/cyclonedx-bom-repo-server:latest9e0c4db6e688
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.18
1
fedodo/fedodo.be.activitypub:14728dada8e3216
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5
7.0.7
1
fedodo/fedodo.be.auth:208f8eb7a1207e
Microsoft.NETCore.App.Runtime.linux-musl-x64@7.0.5
7.0.7
1
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
Microsoft.Windows.Compatibility@6.0.0
System.Security.Cryptography.Pkcs@6.0.1
6.0.6
6.0.3
1
nethermind/nethermind:1.14.615517708c3b6
Microsoft.NETCore.App.Runtime.linux-x64@6.0.11
6.0.18
1
ghcr.io/beluga-cloud/prowlarr/prowlarr:1.4.1.3258aa774b3c3425
System.Security.Cryptography.Pkcs@6.0.0
6.0.3
1
ghcr.io/justarchinet/archisteamfarm:5.2.5.4c7c0a52303cb
Microsoft.NETCore.App.Runtime.linux-x64@6.0.4
6.0.18
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
System.Security.Cryptography.Pkcs@6.0.0
6.0.3
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
System.Security.Cryptography.Pkcs@6.0.0
6.0.3
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
System.Security.Cryptography.Pkcs@6.0.0
6.0.3
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
System.Security.Cryptography.Pkcs@6.0.0
6.0.3
1
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
1
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
1
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.18
1
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
6.0.18
1
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
1
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
1
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
1
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
1
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
1
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
Microsoft.NETCore.App.Runtime.linux-x64@6.0.8
System.Security.Cryptography.Pkcs@6.0.0
6.0.18
6.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.