StackRadar

CVE-2023-30861

High

Advisory

Published 1 May 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
161
of 17,781 indexed, latest versions
Container images
151
deployed by those charts
Fix available
2 of 2
affected packages

Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header

Carried by container images the latest versions of 161 of 17,781 indexed charts deploy, on 151 images.

Affected packageAffected versionsFixed inImages
flaskpypi0.10.1, 0.11.1, 0.12, 0.12.2+17 more2.2.5151
flaskdeb1.1.1-21.1.1-2ubuntu0.11
OSV records
GHSA-m2qf-hxjv-5gpqUBUNTU-CVE-2023-30861
Also known as
PYSEC-2023-62, USN-6111-1

Charts affected

161 by stars
ChartLatestAffected imagesRadar Score
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
flask@1.1.1
2.2.5

Open the chart page →

9,854
http-reqtracejulb-meVerified publisher1.0.41 of 1See more

http-reqtrace julb-me 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
julb/http-reqtrace:1.1.00806409af397
flask@1.1.2
2.2.5

Open the chart page →

1,854
frigatek8s-home-lab-repo9.1.11 of 1See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
flask@2.1.3
2.2.5

Open the chart page →

2,370
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
flask@2.1.2
2.2.5

Open the chart page →

4,156
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
flask@1.1.2
2.2.5

Open the chart page →

12,527
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
flask@1.0.2
2.2.5

Open the chart page →

14,813
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
flask@1.1.2
2.2.5

Open the chart page →

1,850
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
flask@0.11.1
2.2.5

Open the chart page →

18,316
online-boutiquekubesphere-testVerified publisher0.1.01 of 11See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
flask@1.1.2
2.2.5

Open the chart page →

26,018
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
flask@0.12.4
2.2.5

Open the chart page →

9,378
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
flask@2.2.2
2.2.5

Open the chart page →

2,765
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
flask@1.1.2
2.2.5

Open the chart page →

6,611
webapp-colormarcusrepo0.1.11 of 1See more

webapp-color marcusrepo 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
kodekloud/webapp-color:latest99c3821ea49b
flask@1.0.2
2.2.5

Open the chart page →

911
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
flask@1.1.2
2.2.5

Open the chart page →

1,902
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
flask@1.1.2
2.2.5

Open the chart page →

12,847
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
flask@2.0.2
2.2.5

Open the chart page →

2,233
python-api-postgresmiltex0.0.11 of 2See more

python-api-postgres miltex 0.0.1

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
miltex/python-api:1.0.0dab12a7748d5
flask@1.1.4
2.2.5

Open the chart page →

2,347
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
flask@1.1.2
2.2.5

Open the chart page →

43,341
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
flask@2.2.3
2.2.5

Open the chart page →

2,470
mlflowmondata-helm-chartsVerified publisher0.2.31 of 1See more

mlflow mondata-helm-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
flask@2.2.3
2.2.5

Open the chart page →

3,811
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
flask@1.0.2
2.2.5

Open the chart page →

1,458
testwebappmy-helm-chartsVerified publisher0.1.11 of 1See more

testwebapp my-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
forchaladtest/testwebapp:0.15909cf64ef53
flask@1.1.4
2.2.5

Open the chart page →

1,166
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
flask@0.12.4
2.2.5

Open the chart page →

4,911
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
flask@2.2.3
2.2.5

Open the chart page →

5,456
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
flask@1.1.2
2.2.5

Open the chart page →

55,726
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
flask@1.1.1
2.2.5

Open the chart page →

18,023
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
flask@1.1.1
2.2.5

Open the chart page →

40,715
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
flask@0.11.1
2.2.5

Open the chart page →

36,215
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
flask@2.1.3
2.2.5

Open the chart page →

2,376
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
flask@2.1.3
2.2.5

Open the chart page →

4,616
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
flask@2.1.1
2.2.5
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
flask@1.1.1
2.2.5

Open the chart page →

25,737
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
flask@1.0.2
2.2.5

Open the chart page →

20,462
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
flask@0.12
2.2.5

Open the chart page →

11,422
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
flask@1.0.2
2.2.5

Open the chart page →

20,462
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
flask@2.2.3
2.2.5

Open the chart page →

4,707
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
flask@1.0.3
2.2.5

Open the chart page →

23,007
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
flask@2.0.2
2.2.5

Open the chart page →

21,997
classificationsignalen4.24.01 of 1See more

classification signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
flask@1.1.2
2.2.5

Open the chart page →

1,553
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
flask@2.2.3
2.2.5

Open the chart page →

2,243
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
flask@2.0.2
2.2.5

Open the chart page →

11,888
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
flask@1.0.2
2.2.5

Open the chart page →

2,060
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
flask@1.1.2
2.2.5

Open the chart page →

3,044
studygovernorstudy-governorVerified publisher0.1.381 of 3See more

studygovernor study-governor 0.1.38

1 of the 3 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
flask@2.0.3
2.2.5

Open the chart page →

1,447
csv-viewsvtech-public-helm-charts1.0.01 of 1See more

csv-view svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
svtechnmaa/svtech_csv:v1.0.1b9d7ecf8de24
flask@2.0.3
2.2.5

Open the chart page →

1,220
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
flask@2.0.3
2.2.5

Open the chart page →

18,756
rundeck-option-providersvtech-public-helm-charts1.0.01 of 2See more

rundeck-option-provider svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck_option_provider:v1.1.1674fad30a51f
flask@2.0.3
2.2.5

Open the chart page →

1,428
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
yuzutech/kroki-blockdiag:0.16.07c1917c66d96
flask@2.0.2
2.2.5

Open the chart page →

8,715
webapp1test-helm-chart-10.1.01 of 1See more

webapp1 test-helm-chart-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
devopsjourney1/mywebapp:latestbd1ec6838570
flask@2.2.2
2.2.5

Open the chart page →

1,469
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
flask@2.0.2
2.2.5

Open the chart page →

5,321
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-30861.

Container imageDigestPackageFixed in
pysga1996/python-redis-web:latestfdeec30ad482
flask@2.2.3
2.2.5

Open the chart page →

4,661

Container images carrying it

151 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:6.12781369df9994
flask@2.1.3
2.2.5
3
paulkellerman/resultserver-app:1.0381eeccb0618
flask@2.2.2
2.2.5
3
paulkellerman/webserver-app:latest5a37b74f61b9
flask@2.2.2
2.2.5
3
amancevice/superset:0.35.212a0a9e66550
flask@1.1.1
2.2.5
2
blakeblackshear/frigate:0.11.18330b0a265b8
flask@2.1.3
2.2.5
2
cs3org/wopiserver:v9.4.202a9e78757b4
flask@2.2.3
2.2.5
2
datawire/aes:1.14.48588eafe6862
flask@1.1.2
2.2.5
2
devopsjourney1/mywebapp:latestbd1ec6838570
flask@2.2.2
2.2.5
2
hjacobs/kube-ops-view:20.4.058221b57d4d2
flask@1.1.2
2.2.5
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
flask@1.0.2
2.2.5
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
flask@1.0.2
2.2.5
2
kodekloud/examplevotingapp_vote:v13a856afb02a3
flask@2.2.2
2.2.5
2
larribas/mlflow:1.9.105ccb0b46bfb
flask@1.1.2
2.2.5
2
lncm/specter-desktop:v1.10.536eaa06f99f4
flask@2.1.1
2.2.5
2
nachomillangarcia/prometheus_aws_cost_exporter:lateste4ce056f2d6d
flask@1.0.2
2.2.5
2
neilpeterson/azure-vote-front:v384062718347c
flask@0.12.2
2.2.5
2
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
flask@1.1.2
2.2.5
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
flask@2.0.3
2.2.5
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
flask@0.12.2
2.2.5
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
flask@1.1.2
2.2.5
1
alerta/alerta-web:8.5.04786b9eaa606
flask@1.1.2
2.2.5
1
amancevice/superset:0.28.1c8c04bfe3d66
flask@0.12.2
2.2.5
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
flask@1.0.2
2.2.5
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
flask@1.0.2
2.2.5
1
amundsendev/amundsen-search:2.4.099dda9502c3e
flask@1.0.2
2.2.5
1
anchore/anchore-engine:v0.10.0bde9eedf639d
flask@1.1.1
2.2.5
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
flask@1.1.1
2.2.5
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
flask@2.0.3
2.2.5
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
flask@1.1.2
2.2.5
1
assistiot/fl_training_collector:latest792715dd3084
flask@2.0.2
2.2.5
1
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
flask@2.0.2
2.2.5
1
assistiot/resource-provisioning_im:1.0.0a942dc14030a
flask@2.0.2
2.2.5
1
assistiot/traffic-classification_api:2.0.0e32b87786142
flask@2.0.2
2.2.5
1
azhar008/flaskapplication:latesta1e827b0adea
flask@2.0.2
2.2.5
1
badsmoke/wunderground_exporter:0.0.5c54c004f24cc
flask@1.1.2
2.2.5
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
flask@1.1.1
2.2.5
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
flask@1.1.2
2.2.5
1
bootc/puppetboard:1.1.0f1383295e7be
flask@1.1.1
2.2.5
1
buntha/mlflow:2.1.1154542cc3083
flask@2.2.2
2.2.5
1
cbanuka/pythonapp:latestc742770d4247
flask@0.10.1
2.2.5
1
ceph/daemon:latest-nautilus90f30824a96e
flask@0.10.1
2.2.5
1
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
flask@2.0.1
2.2.5
1
chorss/docker-pgadmin4:4.115c549cacb8ab
flask@1.0.2
2.2.5
1
citizenstig/httpbin:latestb81c818ccb86
flask@0.12
2.2.5
1
cleveritcz/opencve:1.5.0c75c1636e0b7
flask@1.0.2
2.2.5
1
craigwillis/c2metadata-bd:latestae317d7e4724
flask@1.1.2
2.2.5
1
danuk/telegram-sender:0.0.1026560388070
flask@2.2.2
2.2.5
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
flask@1.1.2
2.2.5
1
datawire/aes:1.13.62beb65062c8b
flask@1.1.2
2.2.5
1
datawire/emissary:2.0.2-ea9716efbdd24b
flask@1.1.2
2.2.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.