StackRadar

CVE-2023-29491

High

Advisory

Published 14 Apr 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
854
of 17,787 indexed, latest versions
Container images
810
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: ncurses security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 810 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+2 more5.9+20140118-1ubuntu1+esm3, 6.0+20160213-1ubuntu1+esm3, 6.1-1ubuntu1.18.04.1, 6.2-0ubuntu2.1+1 more443
ncursesapk6.3_p20211120-r0, 6.3_p20211120-r1, 6.3_p20220423-r0, 6.3_p20220521-r0+1 more6.3_p20211120-r2, 6.3_p20220521-r1, 6.3_p20221119-r1206
ncursesrpm6.1-7.20180224.el8, 6.1-9.20180224.el8, 6.1-9.20180224.el8_6.1, 6.1-150000.5.12.1+1 more0:6.1-9.20180224.el8_8.1, 0:6.2-10.20210508.el9, 6.1-150000.5.15.1161
OSV records
ALPINE-CVE-2023-29491RHSA-2023:5249RHSA-2023:6698UBUNTU-CVE-2023-29491SUSE-SU-2023:2111-1
Also known as
RHSA-2023:7361, RHSA-2024:0416, USN-6099-1

Charts affected

854 by stars
ChartLatestAffected imagesRadar Score
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
ncurses@6.3_p20221119-r0
6.3_p20221119-r1

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1

Open the chart page →

9,250

Container images carrying it

810 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/telegraf:1.19-alpineaddb86c0c520
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
librenms/librenms:22.4.14f1f3d667cc7
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
lightbend/curl:7.47.0b0c9894ac8dd
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
linuxserver/cloud9:latest45c5fe102ff3
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
linuxserver/code-server:4.10.1a5e43a05ae79
ncurses@6.3-2
6.3-2ubuntu0.1
1
linuxserver/codimd:latestb801bbcf6386
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
linuxserver/deluge:18.04.10ac871624394
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
linuxserver/healthchecks:2.7.2023033194696dab3c50
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
linuxserver/jellyfin:10.7.72427dde159a2
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
linuxserver/plex:1.25.24a13ced2326c
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
linuxserver/unifi-controller:7.3.83ab105cc50322
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
litmuschaos/mongo:4.2.899961210d467
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
liukunup/jmeter:5.59c079617a81b
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
logiqai/flash-discovery:v2.0.3f5b551bca98e
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
1
longhornio/longhorn-manager:v1.2.3dca34321452c
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-audit:2.0.079428add7f38
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-deployment:2.0.0ea8110886d38
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
marcinkujawski/flask-app:2.0.1a455017b9d0e
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
1
matrixdb/rawfile-csi:v0.2.195b2e38e913d
ncurses@6.3_p20220423-r0
6.3_p20220521-r1
1
mediagis/nominatim:3.7c15e941485ef
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
metabase/metabase:v0.46.09ebdc664a6b2
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
1
milvusdb/milvus:v2.2.13a3a55e1c1497
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
1
minio/kes:v0.22.255f3aef5803e
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/kes:2023-04-03T16-41-28Zf93c2d9088df
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/operator:v5.0.9170b154d2c61
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
1
minio/operator:v4.1.02adc5be088f5
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.