StackRadar

CVE-2023-2975

Medium

Advisory

Published 14 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
362
of 17,781 indexed, latest versions
Container images
359
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 362 of 17,781 indexed charts deploy, on 359 images.

Affected packageAffected versionsFixed inImages
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+5 more3.0.9-r2, 3.1.1-r2225
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+6 more3.0.2-0ubuntu1.12, 3.0.2-0ubuntu1.12+Fips1, 3.0.10-1~deb12u1132
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
ALPINE-CVE-2023-2975DEBIAN-CVE-2023-2975UBUNTU-CVE-2023-2975
Also known as
USN-6450-1

Charts affected

362 by stars
ChartLatestAffected imagesRadar Score
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1

Open the chart page →

9,248
wiremind-baremetalwiremindVerified publisher2.0.21 of 1See more

wiremind-baremetal wiremind 2.0.2

1 of the 1 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
library/alpine:3.18.002bb6f428431
openssl@3.1.0-r4
3.1.1-r2

Open the chart page →

487
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,100
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
openssl@3.0.8-r0
3.0.9-r2

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
openssl@3.0.8-r0
3.0.9-r2
lishimeng/owl-messager:v0.11.23d00485e64dc
openssl@3.0.8-r0
3.0.9-r2

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
openssl@3.0.8-r0
3.0.9-r2
lishimeng/passport-profile:v0.2.160970dfe5dc8f
openssl@3.0.8-r0
3.0.9-r2

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.9-r2

Open the chart page →

7,673
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.9-r2

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.9-r2

Open the chart page →

1,955
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.9-r2
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.9-r2

Open the chart page →

5,033
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
openssl@3.1.1-r1
3.1.1-r2

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-2975.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.9-r2
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.9-r2

Open the chart page →

5,846

Container images carrying it

359 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.9-r2
1
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.9-r2
1
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.9-r2
1
litestream/litestream:0.3c5a1e1b01916
openssl@3.0.8-r0
3.0.9-r2
1
livekit/ingress:v1.2.21ab01641b366
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
openssl@3.0.7-r0
3.0.9-r2
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
openssl@3.1.1-r1
3.1.1-r2
1
metabase/metabase:v0.46.09ebdc664a6b2
openssl@3.0.8-r1
3.0.9-r2
1
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
openssl@3.1.0-r4
3.1.1-r2
1
muonsoft/openapi-mock:latestc9afe1295484
openssl@3.0.8-r0
3.0.9-r2
1
natsio/nats-box:0.13.559cf2e949181
openssl@3.0.7-r2
3.0.9-r2
1
natsio/nats-box:0.13.3c507bd7e3831
openssl@3.0.7-r0
3.0.9-r2
1
natsio/nats-server-config-reloader:0.14.08c28b75bc416
openssl@3.1.1-r1
3.1.1-r2
1
natsio/nats-server-config-reloader:0.11.0c3a755eab2cc
openssl@3.1.1-r1
3.1.1-r2
1
netboxcommunity/netbox:v3.2.83d652dca5351
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.12
1
nethermind/nethermind:1.14.615517708c3b6
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
1
networkboot/dhcpd:lateste99bbfbd6fb2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.12
1
oled01/db-backup:0.1.06302fd2b5333
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
1
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
openssl@3.0.9-r1
3.0.9-r2
1
ooghenekaro/nodejswebapp:latestea5b71588a76
openssl@3.0.8-r3
3.0.9-r2
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
openssl@3.0.8-r3
3.0.9-r2
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
openssl@3.0.9-r1
3.0.9-r2
1
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
openssl@3.0.7-r0
3.0.9-r2
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
openssl@3.0.7-r0
3.0.9-r2
1
pangeo/base-notebook:2024.01.155fbe688a4f80
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
pgpool/pgpool:latest3782cbf9bb0c
openssl@3.0.8-r0
3.0.9-r2
1
phntom/chartmuseum:v0.16.053883b65d9b7
openssl@3.1.1-r1
3.1.1-r2
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
phntom/postgresql-backup-s3:1.0.2249b6488f618b
openssl@3.0.7-r0
3.0.9-r2
1
photoprism/photoprism:220629-jammy2954334adbda
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.12
1
phsmith/rundeck-exporter:2.6.10265a7616ae8
openssl@3.1.0-r4
3.1.1-r2
1
pinclr/v2ray-proxy:latestf37f250b7091
openssl@3.1.0-r4
3.1.1-r2
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
openssl@3.1.1-r1
3.1.1-r2
1
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
openssl@3.0.8-r3
3.0.9-r2
1
pysga1996/python-redis-web:latestfdeec30ad482
openssl@3.0.8-r3
3.0.9-r2
1
qdrant/qdrant:v1.4.166ee661d5241
openssl@3.0.9-1
3.0.10-1~deb12u1
1
qumine/minecraft-server:v0.1.15c0b650d51132
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
1
rabeh/apibootspring:1.0941007b6946e
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
rclone/rclone:1.63.008e1af3c8814
openssl@3.1.1-r1
3.1.1-r2
1
restic/restic:0.15.2579e4e6a4931
openssl@3.0.8-r3
3.0.9-r2
1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3ce9ce8293e4e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9bb64bf14467d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525799c35f9f306
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.12
1
santisbon/evwatcher:latestc4e994ca4540
openssl@3.0.9-1
3.0.10-1~deb12u1
1
santisbon/evworker:lateste807283f8d69
openssl@3.0.9-1
3.0.10-1~deb12u1
1
santisbon/speedtest:latest8ee3a1697227
openssl@3.0.9-1
3.0.10-1~deb12u1
1
semitechnologies/weaviate:1.19.17a00d226f063
openssl@3.1.0-r4
3.1.1-r2
1
skylenet/ethereum-testnet-homepage:latest8698903e379f
openssl@3.0.7-r0
3.0.9-r2
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
openssl@3.0.9-1
3.0.10-1~deb12u1
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
openssl@3.0.9-1
3.0.10-1~deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.