StackRadar

CVE-2023-3138

High

Advisory

Published 15 Jun 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.017
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
462
of 17,787 indexed, latest versions
Container images
419
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libX11 security update

Carried by container images the latest versions of 462 of 17,787 indexed charts deploy, on 419 images.

Affected packageAffected versionsFixed inImages
libx11deb2:1.6.2-1ubuntu2, 2:1.6.2-1ubuntu2.1, 2:1.6.3-1ubuntu2, 2:1.6.3-1ubuntu2.1+12 more2:1.6.2-1ubuntu2.1+esm3, 2:1.6.3-1ubuntu2.2+esm2, 2:1.6.4-3ubuntu0.4+esm1, 2:1.6.7-1+deb10u3+4 more356
libx11apk1.7.2-r0, 1.7.3.1-r0, 1.8-r0, 1.8.3-r0+2 more1.7.3.1-r1, 1.8-r1, 1.8.4-r139
libX11rpm1.6.8-3.el8, 1.6.8-4.el8, 1.6.8-5.el8, 1.7.0-7.el90:1.6.8-6.el8, 0:1.7.0-8.el924
OSV records
ALPINE-CVE-2023-3138DEBIAN-CVE-2023-3138RHSA-2023:6497RHSA-2023:7029UBUNTU-CVE-2023-3138DLA-3472-1DSA-5433-1
Also known as
RHSA-2024:1088, RHSA-2024:1417, USN-6168-1, USN-6168-2

Charts affected

462 by stars
ChartLatestAffected imagesRadar Score
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

3,392
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5

Open the chart page →

11,405
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,132
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3

Open the chart page →

2,670
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,021
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3

Open the chart page →

16,083
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
libX11@1.6.8-5.el8
0:1.6.8-6.el8

Open the chart page →

11,577
myfirstchartww-helm-charts-repo0.1.01 of 1See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.1.0205961b09a80
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3

Open the chart page →

1,138
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

1,838
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3

Open the chart page →

1,138

Container images carrying it

419 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
simpleidserver/faaswebsite:0.0.4367218ae760f
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
sinusbot/docker:1.0.0-beta.14-dc94a7cc7a4f3cc4393
libx11@2:1.6.7-1+deb10u1
2:1.6.7-1+deb10u3
1
sirfragalot/hyperion.ng:2.0.0-alpha.9-x86_6434577843cb7b
libx11@2:1.6.7-1+deb10u1
2:1.6.7-1+deb10u3
1
sismics/docs:v1.10f4b0ef019cf1
libx11@2:1.6.4-3ubuntu0.3
2:1.6.4-3ubuntu0.4+esm1
1
smailkoz/torrserver:1.0.1117b52d15de8f0
libx11@1.7.2-r0
1.7.3.1-r1
1
snipe/snipe-it:v6.0.1455fb7636a98c
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
socialmediamacroscope/classification_train:0.1.207477060bba8
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
socialmediamacroscope/clowder_list:0.1.051cb17626519
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
solidnerd/bookstack:21.12762ffd5c51d3
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
stacksimplify/kube-nginxapp1:1.0.0ead648280067
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3
1
stacksimplify/kube-nginxapp2:1.0.0ce2b15139aca
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3
1
stanfordoval/almond-server:latest1a63cdccedaf
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
stashapp/stash:latest24dbd7607174
libx11@2:1.6.9-2ubuntu1.1
2:1.6.9-2ubuntu1.5
1
statcan/ckan:2.93921305425b8
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
stratospire/activityrelay:0.2.3a4c34cb01117
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
stremio/server:latest3dc145603def
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
tdeutsch/podsync:v2.4.2b67186f4c9a5
libx11@1.8-r0
1.8-r1
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
libx11@2:1.6.3-1ubuntu2
2:1.6.3-1ubuntu2.2+esm2
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
thingsboard/tb-coap-transport:3.4.1bd45a09d85d9
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
thingsboard/tb-http-transport:3.4.1a06f53c5e2da
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
thingsboard/tb-mqtt-transport:3.4.1030f316ce301
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
thingsboard/tb-node:3.4.1645f43b688f7
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
thingsboard/tb-node:3.6.0f40a542832c4
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
libx11@2:1.7.5-1
2:1.7.5-1ubuntu0.2
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
libx11@2:1.7.5-1
2:1.7.5-1ubuntu0.2
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libx11@2:1.6.3-1ubuntu2
2:1.6.3-1ubuntu2.2+esm2
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
vikunja/frontend:0.17.0863a426a8e49
libx11@2:1.6.7-1+deb10u1
2:1.6.7-1+deb10u3
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libx11@2:1.6.4-3ubuntu0.4
2:1.6.4-3ubuntu0.4+esm1
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
libX11@1.6.8-5.el8
0:1.6.8-6.el8
1
voltha/voltha-cli:1.6.0c4e41e92f046
libx11@2:1.6.3-1ubuntu2.1
2:1.6.3-1ubuntu2.2+esm2
1
voltha/voltha-onos:5.1.8e038acb950d3
libx11@2:1.6.4-3ubuntu0.2
2:1.6.4-3ubuntu0.4+esm1
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
wavefronthq/proxy:9.2d1064d28f6eb
libx11@2:1.6.4-3ubuntu0.2
2:1.6.4-3ubuntu0.4+esm1
1
weblate/weblate:3.11.3-182848df56ecd
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3
1
wolveix/satisfactory-server:v1.2.4db00d63f4791
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.