StackRadar

CVE-2023-29491

High

Advisory

Published 14 Apr 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
854
of 17,787 indexed, latest versions
Container images
810
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: ncurses security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 810 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+2 more5.9+20140118-1ubuntu1+esm3, 6.0+20160213-1ubuntu1+esm3, 6.1-1ubuntu1.18.04.1, 6.2-0ubuntu2.1+1 more443
ncursesapk6.3_p20211120-r0, 6.3_p20211120-r1, 6.3_p20220423-r0, 6.3_p20220521-r0+1 more6.3_p20211120-r2, 6.3_p20220521-r1, 6.3_p20221119-r1206
ncursesrpm6.1-7.20180224.el8, 6.1-9.20180224.el8, 6.1-9.20180224.el8_6.1, 6.1-150000.5.12.1+1 more0:6.1-9.20180224.el8_8.1, 0:6.2-10.20210508.el9, 6.1-150000.5.15.1161
OSV records
ALPINE-CVE-2023-29491RHSA-2023:5249RHSA-2023:6698UBUNTU-CVE-2023-29491SUSE-SU-2023:2111-1
Also known as
RHSA-2023:7361, RHSA-2024:0416, USN-6099-1

Charts affected

854 by stars
ChartLatestAffected imagesRadar Score
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
ncurses@6.3_p20221119-r0
6.3_p20221119-r1

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1

Open the chart page →

9,250

Container images carrying it

810 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
enix/san-iscsi-csi:v4.0.2f963da81ecf7
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
envoyproxy/envoy:v1.18.2e8b37c1d7578
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
epamedp/admin-console-operator:2.14.090f9921d8d58
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
esailors/aws-ecr-http-proxy:1.5.15608ae045fa7
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
evgkrsk/postgres-controller:0.6.237f0e1f435c3
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
felipecs8/qrcode-generator:v1d5f4f17cb066
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
fiware/mintaka:0.7.092a3c5cf43c0
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
fiware/mintaka:latestefc6793388cc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
flyway/flyway:9.1545b5d7cdc75a
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
flyway/flyway:9.14.1-alpine80f12c80502b
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
foldingathome/fah-gpu:latest5ef7742d1eb4
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
free5gmano/nextepc-mongodb:latest36f806935519
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
galaxy/cloudman-server:lateste5c265fe9fcd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
galaxy/galaxy-init:v18.010267bad550e6
ncurses@5.9+20140118-1ubuntu1
5.9+20140118-1ubuntu1+esm3
1
galaxy/galaxy-stable:v18.018e577a626dfd
ncurses@5.9+20140118-1ubuntu1
5.9+20140118-1ubuntu1+esm3
1
gcarrarom/landing:0.0.0769d19e441d9
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
gethue/hue:4.11.011b649636e68
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
gethue/hue:4.10.05702b2c37ff9
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
goofball222/pritunl:1.30.3070.5943c0743701d4
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
gotson/komga:0.99.49b15ea6bfc30
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
grafana/grafana:9.4.71a359d92f40e
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
grafana/grafana:9.5.239c849cebccc
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
grafana/grafana:9.4.376dcf36e7d2a
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
1
grafana/grafana:9.1.19746858c20e6
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
1
grafana/grafana:9.0.1a738d0744784
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
grafana/grafana:8.5.3ecc1b80b8ca2
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
gresearchdev/siembol-config-editor-ui:latest071e7109a981
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
haugene/transmission-openvpn:4.0059216cfae4b
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
haveagitgat/tdarr:2.00.181256348872ce
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
hazelcast/management-center:5.3.2f9d34300d330
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
hcguersoy/cleanreg:v0.8.063b76fdcfbe1
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
hetznercloud/hcloud-csi-driver:v2.3.2b7ed90d5fab2
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
1
hiett/serverless-redis-http:0.0.485cdc5801e66
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
ncurses@6.3-2
6.3-2ubuntu0.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.