StackRadar

CVE-2023-29491

High

Advisory

Published 14 Apr 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
854
of 17,787 indexed, latest versions
Container images
810
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: ncurses security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 810 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+2 more5.9+20140118-1ubuntu1+esm3, 6.0+20160213-1ubuntu1+esm3, 6.1-1ubuntu1.18.04.1, 6.2-0ubuntu2.1+1 more443
ncursesapk6.3_p20211120-r0, 6.3_p20211120-r1, 6.3_p20220423-r0, 6.3_p20220521-r0+1 more6.3_p20211120-r2, 6.3_p20220521-r1, 6.3_p20221119-r1206
ncursesrpm6.1-7.20180224.el8, 6.1-9.20180224.el8, 6.1-9.20180224.el8_6.1, 6.1-150000.5.12.1+1 more0:6.1-9.20180224.el8_8.1, 0:6.2-10.20210508.el9, 6.1-150000.5.15.1161
OSV records
ALPINE-CVE-2023-29491RHSA-2023:5249RHSA-2023:6698UBUNTU-CVE-2023-29491SUSE-SU-2023:2111-1
Also known as
RHSA-2023:7361, RHSA-2024:0416, USN-6099-1

Charts affected

854 by stars
ChartLatestAffected imagesRadar Score
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
ncurses@6.3_p20221119-r0
6.3_p20221119-r1

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1

Open the chart page →

9,250

Container images carrying it

810 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
wazuh/wazuh-dashboard:4.4.11787550d2358
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
wazuh/wazuh-manager:4.4.121994f40e0da
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
wekanteam/wekan:v4.2268a51f0327df
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
wistefan/mvf:lateste0887302b2d8
ncurses@6.3-2
6.3-2ubuntu0.1
1
woojoong/wowza:latestec230db19652
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
xeladock/mysql_dns:latest4baf531453f1
ncurses@6.3-2
6.3-2ubuntu0.1
1
xeladock/nginx2:latestc259a67b1dff
ncurses@6.3-2
6.3-2ubuntu0.1
1
xeotek/kadeck:4.2.94c6b04d9ce55
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
xvilo/php:8.2-composera138e57d3204
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
yandex/clickhouse-server:latest1cbf75aabe1e
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
yandex/clickhouse-server:19.17ab1738a64b70
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
yandex/clickhouse-server:19.16d210dc69321e
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
ncurses@6.3-2
6.3-2ubuntu0.1
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
ncurses@6.3-2
6.3-2ubuntu0.1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
ncurses@6.3-2
6.3-2ubuntu0.1
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
ncurses@6.3-2
6.3-2ubuntu0.1
1
zeetdev/tailscale-relay:v1.24.21967aa2840b6
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/conductionnl/commonground-gateway-frontend:dev3b3fbb57cae8
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/crazy-max/samba:4.15.5bed6f4ec2e82
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.