CVE-2023-30590

High

Advisory

Published 28 Nov 2023In the index since 8 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.015; 72nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 7; of 17,781 indexed, latest versions
Container images: 7; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 7 images.

Affected package	Affected versions	Fixed in	Images
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 8.10.0~dfsg-2ubuntu0.4, 10.19.0~dfsg-3ubuntu1, 10.19.0~dfsg-3ubuntu1.3+1 more	4.2.6~dfsg-1ubuntu4.2+esm3, 8.10.0~dfsg-2ubuntu0.4+esm5, 10.19.0~dfsg-3ubuntu1.6, 18.19.0+dfsg-6~deb12u1	7

OSV records: DEBIAN-CVE-2023-30590 UBUNTU-CVE-2023-30590
Also known as: USN-6735-1

Charts affected

7 by stars

Chart

Latest

Affected images

Radar Score

otbrcharts-derwitt-dev

0.2.0

1 of 1 See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-30590.

Container image	Digest	Package	Fixed in
openthread/otbr :latest	f307f59f6432	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm5

Open the chart page →

12,779

ethereumcloudnativeapp

1.0.0

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-30590.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm3

Open the chart page →

27,417

scanservjsgabe565

0.9.2

1 of 1 See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2023-30590.

Container image	Digest	Package	Fixed in
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	nodejs@18.13.0+dfsg1-1	18.19.0+dfsg-6~deb12u1

Open the chart page →

13,241

ibm-microclimateibm-charts

0.1.0

1 of 8 See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-30590.

Container image	Digest	Package	Fixed in
ibmcom/microclimate-theia :latest	e17bdccc5030	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm3

Open the chart page →

57,669

nublado2lsst-sqre

0.8.5

1 of 2 See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2023-30590.

Container image	Digest	Package	Fixed in
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	nodejs@10.19.0~dfsg-3ubuntu1	10.19.0~dfsg-3ubuntu1.6

Open the chart page →

17,779

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2023-30590.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm5

Open the chart page →

36,215

grafanasvtech-public-helm-charts

1.0.0

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-30590.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	nodejs@10.19.0~dfsg-3ubuntu1.3	10.19.0~dfsg-3ubuntu1.6

Open the chart page →

10,902

Container images carrying it

7 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm3	1
ibmcom/microclimate-theia :latest	e17bdccc5030	nodejs@4.2.6~dfsg-1ubuntu4.1	4.2.6~dfsg-1ubuntu4.2+esm3	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	nodejs@10.19.0~dfsg-3ubuntu1	10.19.0~dfsg-3ubuntu1.6	1
openthread/otbr :latest	f307f59f6432	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm5	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4	8.10.0~dfsg-2ubuntu0.4+esm5	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	nodejs@18.13.0+dfsg1-1	18.19.0+dfsg-6~deb12u1	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	nodejs@10.19.0~dfsg-3ubuntu1.3	10.19.0~dfsg-3ubuntu1.6	1