StackRadar

CVE-2023-29491

High

Advisory

Published 14 Apr 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
854
of 17,787 indexed, latest versions
Container images
810
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: ncurses security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 810 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+2 more5.9+20140118-1ubuntu1+esm3, 6.0+20160213-1ubuntu1+esm3, 6.1-1ubuntu1.18.04.1, 6.2-0ubuntu2.1+1 more443
ncursesapk6.3_p20211120-r0, 6.3_p20211120-r1, 6.3_p20220423-r0, 6.3_p20220521-r0+1 more6.3_p20211120-r2, 6.3_p20220521-r1, 6.3_p20221119-r1206
ncursesrpm6.1-7.20180224.el8, 6.1-9.20180224.el8, 6.1-9.20180224.el8_6.1, 6.1-150000.5.12.1+1 more0:6.1-9.20180224.el8_8.1, 0:6.2-10.20210508.el9, 6.1-150000.5.15.1161
OSV records
ALPINE-CVE-2023-29491RHSA-2023:5249RHSA-2023:6698UBUNTU-CVE-2023-29491SUSE-SU-2023:2111-1
Also known as
RHSA-2023:7361, RHSA-2024:0416, USN-6099-1

Charts affected

854 by stars
ChartLatestAffected imagesRadar Score
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
ncurses@6.3_p20221119-r0
6.3_p20221119-r1

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1

Open the chart page →

9,250

Container images carrying it

810 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
pecan/db:latest9a1cdc3a9ccb
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
2
phpipam/phpipam-cron:v1.5.2f770577cb946
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
2
phpipam/phpipam-www:v1.5.23c6fd1332aeb
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
ncurses@6.3-2
6.3-2ubuntu0.1
2
privatebin/pdo:1.3.500466418121c
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
ncurses@6.3-2
6.3-2ubuntu0.1
2
taigaio/taiga-front:latest570c8792ce80
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
ncurses@6.3-2
6.3-2ubuntu0.1
2
wurstmeister/zookeeper:latest7a7fd44a7210
ncurses@5.9+20140118-1ubuntu1
5.9+20140118-1ubuntu1+esm3
2
xelalex/dregsy:0.4.3574054e1c417
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
ncurses@6.3-2
6.3-2ubuntu0.1
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
ncurses@6.3-2
6.3-2ubuntu0.1
2
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
2
ghcr.io/miguelndecarvalho/speedtest-exporter:v3.5.4f1064d49124c
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
ncurses@6.3-2
6.3-2ubuntu0.1
2
quay.io/frrouting/frr:8.4.254f9a7b9e543
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
2
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
2
300481/shield:0.3.18e11c521c2d8
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
ahmedinfraplus/simple-app:STAGINGc50e6e81a637
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
1
alaaamin/reload-count-tornado-py-app:v1.0.1alpine46da5844794e
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
1
alexeyr7/sf-test-app:latestdf0b41fdbd53
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
alpine/git:2.36.366b210a97bc0
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
alpine/k8s:1.22.600ac10bcb759
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
altinity/clickhouse-operator:0.19.07a85f522c5bc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
altinity/clickhouse-operator:0.20.08f0f582d41f0
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
altinity/metrics-exporter:0.20.01a46d104406d
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
amagdi888/my-repo:hello-appd8a10fc8faf6
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
anchore/anchore-engine:v0.10.0bde9eedf639d
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.