StackRadar

CVE-2023-2974

Medium

Advisory

Published 4 Jul 2023In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.009
57th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
23
of 17,781 indexed, latest versions
Container images
14
deployed by those charts
Fix available
1 of 1
affected package

quarkus-core vulnerable to client driven TLS cipher downgrading

Carried by container images the latest versions of 23 of 17,781 indexed charts deploy, on 14 images.

Affected packageAffected versionsFixed inImages
quarkus-coremaven1.9.0.Final, 1.13.2.Final, 2.4.2.Final, 2.12.3.Final+5 more2.16.8.Final14
OSV records
GHSA-3fhx-3vvg-2j84

Charts affected

23 by stars
ChartLatestAffected imagesRadar Score
apicurio-registryapicurio-registry-helmVerified publisher3.8.01 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
quarkus-core@2.4.2.Final
2.16.8.Final

Open the chart page →

6,675
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
quarkus-core@2.13.3.Final
2.16.8.Final

Open the chart page →

4,652
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
quarkus-core@2.13.7.Final
2.16.8.Final

Open the chart page →

37,373
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
quarkus-core@2.13.7.Final
2.16.8.Final

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
quarkus-core@2.13.7.Final
2.16.8.Final

Open the chart page →

6,915
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

28,482
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

32,205
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

32,205
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

27,721
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
quarkus-core@2.12.3.Final
2.16.8.Final

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

27,721
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
quarkus-core@2.16.4.Final
2.16.8.Final
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
quarkus-core@2.16.4.Final
2.16.8.Final
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
quarkus-core@2.16.4.Final
2.16.8.Final

Open the chart page →

18,667
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

27,537
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final

Open the chart page →

27,558
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
quarkus-core@2.13.3.Final
2.16.8.Final

Open the chart page →

6,443
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
quarkus-core@1.13.2.Final
2.16.8.Final

Open the chart page →

12,455
apicurio-registry-sqlwitcom-gmbh0.1.01 of 1See more

apicurio-registry-sql witcom-gmbh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
quarkus-core@1.9.0.Final
2.16.8.Final

Open the chart page →

3,424
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-2974.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
quarkus-core@2.13.6.Final
2.16.8.Final

Open the chart page →

6,016

Container images carrying it

14 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
codeurjc/server:v1.0310bea5b1ee7
quarkus-core@2.14.3.Final
2.16.8.Final
8
mastercloudapps/server:v2.23f3d24dfe2686
quarkus-core@2.14.3.Final
2.16.8.Final
4
quay.io/keycloak/keycloak:20.0054ef67eb7da
quarkus-core@2.13.7.Final
2.16.8.Final
2
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
quarkus-core@1.9.0.Final
2.16.8.Final
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
quarkus-core@1.13.2.Final
2.16.8.Final
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
quarkus-core@2.16.4.Final
2.16.8.Final
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
quarkus-core@2.16.4.Final
2.16.8.Final
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
quarkus-core@2.16.4.Final
2.16.8.Final
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
quarkus-core@2.13.7.Final
2.16.8.Final
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
quarkus-core@2.12.3.Final
2.16.8.Final
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
quarkus-core@2.4.2.Final
2.16.8.Final
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
quarkus-core@2.13.3.Final
2.16.8.Final
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
quarkus-core@2.13.6.Final
2.16.8.Final
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
quarkus-core@2.13.3.Final
2.16.8.Final
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.