StackRadar

CVE-2023-29491

High

Advisory

Published 14 Apr 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
854
of 17,787 indexed, latest versions
Container images
810
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: ncurses security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 810 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+2 more5.9+20140118-1ubuntu1+esm3, 6.0+20160213-1ubuntu1+esm3, 6.1-1ubuntu1.18.04.1, 6.2-0ubuntu2.1+1 more443
ncursesapk6.3_p20211120-r0, 6.3_p20211120-r1, 6.3_p20220423-r0, 6.3_p20220521-r0+1 more6.3_p20211120-r2, 6.3_p20220521-r1, 6.3_p20221119-r1206
ncursesrpm6.1-7.20180224.el8, 6.1-9.20180224.el8, 6.1-9.20180224.el8_6.1, 6.1-150000.5.12.1+1 more0:6.1-9.20180224.el8_8.1, 0:6.2-10.20210508.el9, 6.1-150000.5.15.1161
OSV records
ALPINE-CVE-2023-29491RHSA-2023:5249RHSA-2023:6698UBUNTU-CVE-2023-29491SUSE-SU-2023:2111-1
Also known as
RHSA-2023:7361, RHSA-2024:0416, USN-6099-1

Charts affected

854 by stars
ChartLatestAffected imagesRadar Score
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
ncurses@6.3_p20221119-r0
6.3_p20221119-r1

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1

Open the chart page →

9,250

Container images carrying it

810 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
cs3org/wopiserver:v9.4.202a9e78757b4
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
2
dependencytrack/frontend:4.6.124422d762e08
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
2
devopsjourney1/mywebapp:latestbd1ec6838570
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
grafana/grafana:9.2.4057896e23443
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
2
grafana/grafana:8.5.042d3e6bc1865
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
2
hashicorp/consul:1.14.2e38576edcdfd
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
2
honestica/kube-iptables-tailer:master-91a393242fb939
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
hookiesolutions/webhookie:latest0629694246ba
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
iomesh/localpv-manager:v0.2.0f13deacac3f4
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
2
iomesh/node-disk-exporter:1.8.0f03148764f38
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
istio/kubectl:1.5.10dbb7726d1bf0
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
2
istio/proxyv2:1.10.3a78b7a165744
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
2
kiwigrid/k8s-sidecar:1.24.44138bea678f0
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
2
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
2
krtk6160/galoy-nostrcc82a694f818
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
2
library/bash:alpine3.15463b668dccc3
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
2
library/cassandra:3.11.65aa8400b4b3b
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
2
library/elasticsearch:7.17.35e6ac15bf6a5
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
library/influxdb:2.6.1-alpine44a366dd7724
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
2
library/mariadb:10.8.30abf60f81588
ncurses@6.3-2
6.3-2ubuntu0.1
2
library/mongo:4.2.358b25d51baa1
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
2
library/postgres:9.6-alpine8342bcb43446
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
2
library/postgres:15.2-alpined9c304353c03
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
2
library/ubuntu:16.04:xenial1f1a2d56de1d
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
metabase/metabase:v0.45.21fb334ce4820
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
2
minio/operator:v4.3.754393e03f3b2
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
ncurses@6.1-1ubuntu1
6.1-1ubuntu1.18.04.1
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
ncurses@6.3-2
6.3-2ubuntu0.1
2
openebs/node-disk-operator:2.1.06afe2123c457
ncurses@6.3-2
6.3-2ubuntu0.1
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.