StackRadar

CVE-2023-3138

High

Advisory

Published 15 Jun 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.017
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
462
of 17,781 indexed, latest versions
Container images
419
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libX11 security update

Carried by container images the latest versions of 462 of 17,781 indexed charts deploy, on 419 images.

Affected packageAffected versionsFixed inImages
libx11deb2:1.6.2-1ubuntu2, 2:1.6.2-1ubuntu2.1, 2:1.6.3-1ubuntu2, 2:1.6.3-1ubuntu2.1+12 more2:1.6.2-1ubuntu2.1+esm3, 2:1.6.3-1ubuntu2.2+esm2, 2:1.6.4-3ubuntu0.4+esm1, 2:1.6.7-1+deb10u3+4 more356
libx11apk1.7.2-r0, 1.7.3.1-r0, 1.8-r0, 1.8.3-r0+2 more1.7.3.1-r1, 1.8-r1, 1.8.4-r139
libX11rpm1.6.8-3.el8, 1.6.8-4.el8, 1.6.8-5.el8, 1.7.0-7.el90:1.6.8-6.el8, 0:1.7.0-8.el924
OSV records
ALPINE-CVE-2023-3138DEBIAN-CVE-2023-3138RHSA-2023:6497RHSA-2023:7029UBUNTU-CVE-2023-3138DLA-3472-1DSA-5433-1
Also known as
RHSA-2024:1088, RHSA-2024:1417, USN-6168-1, USN-6168-2

Charts affected

462 by stars
ChartLatestAffected imagesRadar Score
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

3,392
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5

Open the chart page →

11,405
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,132
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3

Open the chart page →

2,670
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,021
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3

Open the chart page →

16,083
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
libX11@1.6.8-5.el8
0:1.6.8-6.el8

Open the chart page →

11,577
myfirstchartww-helm-charts-repo0.1.01 of 1See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.1.0205961b09a80
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3

Open the chart page →

1,138
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

1,838
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3

Open the chart page →

1,138

Container images carrying it

419 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
aidasi/swpspa:v1-1-net6-k8s-test-betadee4ec566312
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
libx11@2:1.6.4-3ubuntu0.4
2:1.6.4-3ubuntu0.4+esm1
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
andrianrf/backoffice-be:latest6036614803d4
libX11@1.7.0-7.el9
0:1.7.0-8.el9
1
andrianrf/iso-server:latest7da47f525c7d
libX11@1.7.0-7.el9
0:1.7.0-8.el9
1
anguda/ant-media:2.5c435285fc241
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
anonaddy/anonaddy:0.12.3957a95565166
libx11@1.8-r0
1.8-r1
1
apachepulsar/pulsar:2.6.14db6ff0b4045
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3
1
apachepulsar/pulsar:2.9.0d056c89b7131
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
apachepulsar/pulsar:2.8.2d538416d5afe
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
libX11@1.6.8-4.el8
0:1.6.8-6.el8
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
libX11@1.6.8-5.el8
0:1.6.8-6.el8
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
libX11@1.6.8-5.el8
0:1.6.8-6.el8
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
libX11@1.6.8-5.el8
0:1.6.8-6.el8
1
archish27/python-fastapi-postgres:latest6610071a2101
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
arfath29/3-tier-app-backend:latestee0750b18406
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
arfath29/3-tier-app-frontend:latest384b3e377f47
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
arturisimo/server-urjc:v1.0d8dc4430531e
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
libx11@2:1.6.7-1+deb10u1
2:1.6.7-1+deb10u3
1
asonix/pictrs:0.4.0-beta.19480d36cd97e5
libx11@1.8-r0
1.8-r1
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
avinash263/pyredis263:latestaa2b8727f1a6
libx11@2:1.8.4-2
2:1.8.4-2+deb12u1
1
azhar008/flaskapplication:latesta1e827b0adea
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
libx11@2:1.6.7-1+deb10u1
2:1.6.7-1+deb10u3
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
buntha/mlflow:2.1.1154542cc3083
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
calltelemetry/web:0.6.7457a7e353542
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
camptocamp/bucket-cloner:latestacfafc308d88
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
camptocamp/ekorre:0.1.035c91d5fda04
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3
1
cdignam/kodiak:v0.54.05a6a55b39cee
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
libx11@2:1.6.2-1ubuntu2.1
2:1.6.2-1ubuntu2.1+esm3
1
chetangautamm/repo:sipp.v3e7f7049e1544
libx11@2:1.6.9-2ubuntu1.1
2:1.6.9-2ubuntu1.5
1
cheyang/distributed-tf:1.6.046cc34755493
libx11@2:1.6.3-1ubuntu2
2:1.6.3-1ubuntu2.2+esm2
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
codercom/code-server:4.11.0-debian1e2cc688008e
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
codercom/code-server:3.10.247605610ad8d
libx11@2:1.6.7-1+deb10u1
2:1.6.7-1+deb10u3
1
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
libx11@1.8.3-r0
1.8.4-r1
1
danuk/k8s-sftp-gcs:latestdd0e6585c44f
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
danuk/telegram-sender:0.0.1026560388070
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
daskdev/dask-notebook:1.1.0052630f5ca04
libx11@2:1.6.4-3ubuntu0.1
2:1.6.4-3ubuntu0.4+esm1
1
deconzcommunity/deconz:2.12.066541bbb78952
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
deluan/navidrome:0.49.311a24da08977
libx11@1.8.4-r0
1.8.4-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.