StackRadar

CVE-2023-29491

High

Advisory

Published 14 Apr 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.009
58th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
854
of 17,787 indexed, latest versions
Container images
810
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: ncurses security update

Carried by container images the latest versions of 854 of 17,787 indexed charts deploy, on 810 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+2 more5.9+20140118-1ubuntu1+esm3, 6.0+20160213-1ubuntu1+esm3, 6.1-1ubuntu1.18.04.1, 6.2-0ubuntu2.1+1 more443
ncursesapk6.3_p20211120-r0, 6.3_p20211120-r1, 6.3_p20220423-r0, 6.3_p20220521-r0+1 more6.3_p20211120-r2, 6.3_p20220521-r1, 6.3_p20221119-r1206
ncursesrpm6.1-7.20180224.el8, 6.1-9.20180224.el8, 6.1-9.20180224.el8_6.1, 6.1-150000.5.12.1+1 more0:6.1-9.20180224.el8_8.1, 0:6.2-10.20210508.el9, 6.1-150000.5.15.1161
OSV records
ALPINE-CVE-2023-29491RHSA-2023:5249RHSA-2023:6698UBUNTU-CVE-2023-29491SUSE-SU-2023:2111-1
Also known as
RHSA-2023:7361, RHSA-2024:0416, USN-6099-1

Charts affected

854 by stars
ChartLatestAffected imagesRadar Score
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
ncurses@6.3_p20221119-r0
6.3_p20221119-r1

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-29491.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1

Open the chart page →

9,250

Container images carrying it

810 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
79
flyway/flyway:6.4.422d97ceb0c47
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
79
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
13
oomk8s/readiness-check:2.0.2875814cc853d
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
11
codeurjc/weatherservice:v1.0b9e2f7234349
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
10
library/mongo:5.0.6-focal8e70544b6c76
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
10
pnnlmiscscripts/anaconda:20201029-1700-nginx-105827b9efa7b
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
10
codeurjc/server:v1.0310bea5b1ee7
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
8
oomk8s/readiness-check:2.0.07daa08b81954
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
6
quay.io/devtron/kubectl:latest2ad610626658
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
6
solsson/kafka:latest41e5d8f6f290
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
5
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
5
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
4
hyperledger/fabric-tools:2.4b1194f509085
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
4
library/mongo:4.2.12-bionic628741415fc9
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
4
library/mongo:4.4.66efa05203990
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
4
mastercloudapps/planner:v1.2340a950b311b2
ncurses@6.3-2
6.3-2ubuntu0.1
4
mastercloudapps/server:v2.23f3d24dfe2686
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
4
mastercloudapps/weatherservice:v1.23de859d29c116
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1
4
quay.io/strimzi/operator:0.37.052f376e64b9b
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
4
ciscolabs/rtsp-client:latesta7b60ec88285
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
3
ciscolabs/rtsp-server:latestb59fc10bb821
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
3
codeurjc/planner:v1.0800cf520c245
ncurses@6.3-2
6.3-2ubuntu0.1
3
dgraph/dgraph:v21.12.03b55ea83fffe
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
3
dpage/pgadmin4:6.12781369df9994
ncurses@6.3_p20211120-r1
6.3_p20211120-r2
3
library/postgres:10-alpine63cfb6eac6b3
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
3
paulkellerman/resultserver-app:1.0381eeccb0618
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
3
paulkellerman/webserver-app:latest5a37b74f61b9
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
3
pnnlmiscscripts/anaconda9:1683907016.7470503-nginx-19a2fe06a1472
ncurses@6.3_p20221119-r0
6.3_p20221119-r1
3
selenium/hub:3.141.5902f251d48d5f
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
3
xenondb/percona:5.7.330e26872a2b67
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
ncurses@6.3-2
6.3-2ubuntu0.1
3
quay.io/devtron/bats:v1.4.1488cf079f415
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
ncurses@6.1-7.20180224.el8
0:6.1-9.20180224.el8_8.1
3
quay.io/devtron/clair:4.3.675fb847ac045
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm3
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
ncurses@6.3-2
6.3-2ubuntu0.1
3
quay.io/devtron/svn-git-sync:v78e54bc2d261f
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
ncurses@6.3_p20220521-r0
6.3_p20220521-r1
3
aquasec/kube-hunter:0.6.8e64fe49f059f
ncurses@6.3_p20211120-r0
6.3_p20211120-r2
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
ncurses@6.1-9.20180224.el8
0:6.1-9.20180224.el8_8.1
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.