StackRadar

CVE-2023-30861

High

Advisory

Published 1 May 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
161
of 17,781 indexed, latest versions
Container images
151
deployed by those charts
Fix available
2 of 2
affected packages

Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

Carried by container images the latest versions of 161 of 17,781 indexed charts deploy, on 151 images.

Affected packageAffected versionsFixed inImages
flaskpypi0.10.1, 0.11.1, 0.12, 0.12.2+17 more2.2.5151
flaskdeb1.1.1-21.1.1-2ubuntu0.11
OSV records
GHSA-m2qf-hxjv-5gpqUBUNTU-CVE-2023-30861
Also known as
PYSEC-2023-62, USN-6111-1

Charts affected

161 by stars
ChartLatestAffected imagesRadar Score
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
flask@1.1.1
2.2.5

Open the chart page →

9,854
http-reqtracejulb-meVerified publisher1.0.41 of 1See more

http-reqtrace julb-me 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
julb/http-reqtrace:1.1.00806409af397
flask@1.1.2
2.2.5

Open the chart page →

1,854
frigatek8s-home-lab-repo9.1.11 of 1See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
flask@2.1.3
2.2.5

Open the chart page →

2,370
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
flask@2.1.2
2.2.5

Open the chart page →

4,156
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
flask@1.1.2
2.2.5

Open the chart page →

12,527
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
flask@1.0.2
2.2.5

Open the chart page →

14,813
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
flask@1.1.2
2.2.5

Open the chart page →

1,850
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
flask@0.11.1
2.2.5

Open the chart page →

18,316
online-boutiquekubesphere-testVerified publisher0.1.01 of 11See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
flask@1.1.2
2.2.5

Open the chart page →

26,018
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
flask@0.12.4
2.2.5

Open the chart page →

9,378
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
flask@2.2.2
2.2.5

Open the chart page →

2,765
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
flask@1.1.2
2.2.5

Open the chart page →

6,611
webapp-colormarcusrepo0.1.11 of 1See more

webapp-color marcusrepo 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kodekloud/webapp-color:latest99c3821ea49b
flask@1.0.2
2.2.5

Open the chart page →

911
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
flask@1.1.2
2.2.5

Open the chart page →

1,902
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
flask@1.1.2
2.2.5

Open the chart page →

12,847
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
flask@2.0.2
2.2.5

Open the chart page →

2,233
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
flask@1.1.4
2.2.5

Open the chart page →

2,347
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
flask@1.1.2
2.2.5

Open the chart page →

43,341
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
flask@2.2.3
2.2.5

Open the chart page →

2,470
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
flask@2.2.3
2.2.5

Open the chart page →

3,811
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
flask@1.0.2
2.2.5

Open the chart page →

1,458
testwebappmy-helm-chartsVerified publisher0.1.11 of 1See more

testwebapp my-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
forchaladtest/testwebapp:0.15909cf64ef53
flask@1.1.4
2.2.5

Open the chart page →

1,166
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
flask@0.12.4
2.2.5

Open the chart page →

4,911
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
flask@2.2.3
2.2.5

Open the chart page →

5,456
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
flask@1.1.2
2.2.5

Open the chart page →

55,726
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
flask@1.1.1
2.2.5

Open the chart page →

18,023
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
flask@1.1.1
2.2.5

Open the chart page →

40,715
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
flask@0.11.1
2.2.5

Open the chart page →

36,215
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
flask@2.1.3
2.2.5

Open the chart page →

2,376
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
flask@2.1.3
2.2.5

Open the chart page →

4,616
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
flask@2.1.1
2.2.5
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
flask@1.1.1
2.2.5

Open the chart page →

25,737
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
flask@1.0.2
2.2.5

Open the chart page →

20,462
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
flask@0.12
2.2.5

Open the chart page →

11,422
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
flask@1.0.2
2.2.5

Open the chart page →

20,462
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
flask@2.2.3
2.2.5

Open the chart page →

4,707
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
flask@1.0.3
2.2.5

Open the chart page →

23,007
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
flask@2.0.2
2.2.5

Open the chart page →

21,997
classificationsignalen4.24.01 of 1See more

classification signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
flask@1.1.2
2.2.5

Open the chart page →

1,553
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
flask@2.2.3
2.2.5

Open the chart page →

2,243
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
flask@2.0.2
2.2.5

Open the chart page →

11,888
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
flask@1.0.2
2.2.5

Open the chart page →

2,060
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
flask@1.1.2
2.2.5

Open the chart page →

3,044
studygovernorstudy-governorVerified publisher0.1.381 of 3See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
flask@2.0.3
2.2.5

Open the chart page →

1,447
csv-viewsvtech-public-helm-charts1.0.01 of 1See more

csv-view svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
svtechnmaa/svtech_csv:v1.0.1b9d7ecf8de24
flask@2.0.3
2.2.5

Open the chart page →

1,220
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
flask@2.0.3
2.2.5

Open the chart page →

18,756
rundeck-option-providersvtech-public-helm-charts1.0.01 of 2See more

rundeck-option-provider svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck_option_provider:v1.1.1674fad30a51f
flask@2.0.3
2.2.5

Open the chart page →

1,428
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
flask@2.0.2
2.2.5

Open the chart page →

8,715
webapp1test-helm-chart-10.1.01 of 1See more

webapp1 test-helm-chart-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
devopsjourney1/mywebapp:latestbd1ec6838570
flask@2.2.2
2.2.5

Open the chart page →

1,469
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
flask@2.0.2
2.2.5

Open the chart page →

5,321
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
flask@2.2.3
2.2.5

Open the chart page →

4,661

Container images carrying it

151 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
flask@0.11.1
2.2.5
1
devopstales/kube-openid-connector:1.042c40a0e9f1b
flask@2.0.3
2.2.5
1
dpage/pgadmin4:4.5a5a656e1d5fd
flask@1.0.2
2.2.5
1
dpage/pgadmin4:4.22b1f00b8163cf
flask@1.0.2
2.2.5
1
drgrove/mtls-server:v0.14.2361721759a2b
flask@1.0.2
2.2.5
1
dysnix/pritunl:v1.29-r819951e3e7a32
flask@1.1.1
2.2.5
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
flask@0.12.4
2.2.5
1
errbotio/errbot:6.1.900ee4e0953ab
flask@2.0.2
2.2.5
1
evk02/mlflow:2.2.1ef6ff257ef35
flask@2.2.3
2.2.5
1
fiware/bae-activation-service:v0.0.33e3ec88d59ed
flask@1.1.2
2.2.5
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
flask@2.2.0
2.2.5
1
forchaladtest/testwebapp:0.15909cf64ef53
flask@1.1.4
2.2.5
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
flask@1.1.2
2.2.5
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
flask@1.1.2
2.2.5
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
flask@1.1.2
2.2.5
1
gmaas2/github-api:latest148fc2d9afe9
flask@2.2.2
2.2.5
1
goofball222/pritunl:1.30.3070.5943c0743701d4
flask@1.1.2
2.2.5
1
goofball222/pritunl:1.32.3602.807bf26032dfce
flask@2.2.3
2.2.5
1
greenbirdit/locust:0.9.0e99d53bdc944
flask@1.0.2
2.2.5
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
flask@1.0.3
2.2.5
1
i4trust/activation-service:2.2.09f3719176893
flask@2.2.0
2.2.5
1
ihatemoney/ihatemoney:5.2.0457fda1feb32
flask@2.1.1
2.2.5
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
flask@2.1.2
2.2.5
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
flask@2.0.3
2.2.5
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
flask@1.1.2
2.2.5
1
irakli/ms-hello-python:latest9e7a91ba9ae0
flask@1.1.2
2.2.5
1
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
flask@1.0.2
2.2.5
1
jakuboskera/guestbook:v0.3.04989afa06e74
flask@1.1.2
2.2.5
1
jakuboskera/todo:v0.2.3714b1adbbc2d
flask@2.0.3
2.2.5
1
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
flask@1.1.2
2.2.5
1
julb/http-reqtrace:1.1.00806409af397
flask@1.1.2
2.2.5
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
flask@1.1.2
2.2.5
1
kelvinsp/mlflow:1.26.1cd33e6db2a59
flask@2.1.2
2.2.5
1
kennethreitz/httpbin:latest599fe5e50731
flask@1.0.2
2.2.5
1
kfserving/models-web-app:v0.6.1f322d6ffdfa3
flask@2.0.1
2.2.5
1
kodekloud/webapp-color:latest99c3821ea49b
flask@1.0.2
2.2.5
1
kserve/models-web-app:v0.8.063ea05e73842
flask@2.1.2
2.2.5
1
kubeflownotebookswg/jupyter-web-app:v1.6.1d762690e21c1
flask@2.2.2
2.2.5
1
kubeflownotebookswg/tensorboards-web-app:v1.6.10876fef1973b
flask@2.2.2
2.2.5
1
kubeflownotebookswg/volumes-web-app:v1.6.17299fa94db15
flask@2.2.2
2.2.5
1
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
flask@0.12.4
2.2.5
1
kunchalavikram/connectedcity:v14a559a47579e
flask@1.1.2
2.2.5
1
kunchalavikram/connectedfactory:v152c13fb9b1d9
flask@1.1.2
2.2.5
1
kyso/kyso-nbdime:latest4aa9d38ee81d
flask@2.2.2
2.2.5
1
linuxserver/beets:1.5.0e36d16f7341c
flask@2.0.2
2.2.5
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
flask@1.1.4
2.2.5
1
lncm/specter-desktop:v0.10.4bca14d04397d
flask@1.1.2
2.2.5
1
lsstsqre/squash-api:0.5.34879415ec6ac
flask@1.1.2
2.2.5
1
marcinkujawski/flask-app:2.0.1a455017b9d0e
flask@2.0.3
2.2.5
1
miltex/python-api:1.0.0dab12a7748d5
flask@1.1.4
2.2.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.