StackRadar

CVE-2023-29939

Medium

Advisory

Published 5 May 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
76
of 17,781 indexed, latest versions
Container images
65
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 76 of 17,781 indexed charts deploy, on 65 images.

Affected packageAffected versionsFixed inImages
llvm-toolchain-15deb1:15.0.6-4+b1no fix listed49
llvm-toolchain-14deb1:14.0.0-1ubuntu1, 1:14.0.6-121:14.0.0-1ubuntu1.114
llvm-toolchain-13deb1:13.0.1-2ubuntu2, 1:13.0.1-2ubuntu2.11:13.0.1-2ubuntu2.22
OSV records
DEBIAN-CVE-2023-29939UBUNTU-CVE-2023-29939
Also known as
USN-6258-1

Charts affected

76 by stars
ChartLatestAffected imagesRadar Score
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

37,942
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

33,242
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
llvm-toolchain-14@1:14.0.6-12
no fix listed

Open the chart page →

5,866
teimilvus-helm1.6.01 of 1See more

tei milvus-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
llvm-toolchain-14@1:14.0.6-12
no fix listed

Open the chart page →

3,278
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

30,028
cloakbrowser-mcpobeoneVerified publisher0.3.11 of 1See more

cloakbrowser-mcp obeone 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

2,278
firecrawlobeoneVerified publisher3.0.11 of 5See more

firecrawl obeone 3.0.1

1 of the 5 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

9,995
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

5,706
postgrespostgresVerified publisher0.1.11 of 1See more

postgres postgres 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
library/postgres:13.12ced3ba927f4c
llvm-toolchain-14@1:14.0.6-12
no fix listed

Open the chart page →

4,916
web-checkrm3lVerified publisher0.1.01 of 1See more

web-check rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

9,047
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

9,607
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
llvm-toolchain-14@1:14.0.6-12
no fix listed

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
llvm-toolchain-14@1:14.0.6-12
no fix listed

Open the chart page →

32,902
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

30,219
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
opea/embedding-tei:1.05c9639de61c1
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
opea/llm-tgi:1.00c25aab3f106
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
opea/reranking-tei:1.0e48613afb191
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
opea/retriever-redis:1.0eb746b263705
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
opea/llm-tgi:1.00c25aab3f106
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
opea/llm-tgi:1.00c25aab3f106
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

9,616
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-29939.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed

Open the chart page →

5,350

Container images carrying it

65 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
llvm-toolchain-13@1:13.0.1-2ubuntu2.1
1:13.0.1-2ubuntu2.2
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
llvm-toolchain-14@1:14.0.6-12
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
llvm-toolchain-14@1:14.0.6-12
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
llvm-toolchain-15@1:15.0.6-4+b1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.