StackRadar

CVE-2023-3138

High

Advisory

Published 15 Jun 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.017
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
462
of 17,781 indexed, latest versions
Container images
419
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: libX11 security update

Carried by container images the latest versions of 462 of 17,781 indexed charts deploy, on 419 images.

Affected packageAffected versionsFixed inImages
libx11deb2:1.6.2-1ubuntu2, 2:1.6.2-1ubuntu2.1, 2:1.6.3-1ubuntu2, 2:1.6.3-1ubuntu2.1+12 more2:1.6.2-1ubuntu2.1+esm3, 2:1.6.3-1ubuntu2.2+esm2, 2:1.6.4-3ubuntu0.4+esm1, 2:1.6.7-1+deb10u3+4 more356
libx11apk1.7.2-r0, 1.7.3.1-r0, 1.8-r0, 1.8.3-r0+2 more1.7.3.1-r1, 1.8-r1, 1.8.4-r139
libX11rpm1.6.8-3.el8, 1.6.8-4.el8, 1.6.8-5.el8, 1.7.0-7.el90:1.6.8-6.el8, 0:1.7.0-8.el924
OSV records
ALPINE-CVE-2023-3138DEBIAN-CVE-2023-3138RHSA-2023:6497RHSA-2023:7029UBUNTU-CVE-2023-3138DLA-3472-1DSA-5433-1
Also known as
RHSA-2024:1088, RHSA-2024:1417, USN-6168-1, USN-6168-2

Charts affected

462 by stars
ChartLatestAffected imagesRadar Score
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

3,392
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5

Open the chart page →

11,405
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,132
weather-chartweather-web-app0.1.01 of 1See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
zohardocker12/weather_app_flask:latestb86d60dbb68d
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3

Open the chart page →

2,670
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

7,552
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

2,021
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
thecodingmachine/workadventure-uploader:v1.17.73ccd467543b3
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3

Open the chart page →

16,083
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
libX11@1.6.8-5.el8
0:1.6.8-6.el8

Open the chart page →

11,577
myfirstchartww-helm-charts-repo0.1.01 of 1See more

myfirstchart ww-helm-charts-repo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginx:0.1.0205961b09a80
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3

Open the chart page →

1,138
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1

Open the chart page →

1,838
myfirstchartzikilabVerified publisher0.2.01 of 1See more

myfirstchart zikilab 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-3138.

Container imageDigestPackageFixed in
ghcr.io/stacksimplify/kubenginxhelm:0.2.0ae2268dcc930
libx11@2:1.6.7-1
2:1.6.7-1+deb10u3

Open the chart page →

1,138

Container images carrying it

419 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
xeladock/mysql_dns:latest4baf531453f1
libx11@2:1.7.5-1
2:1.7.5-1ubuntu0.2
1
xeladock/nginx2:latestc259a67b1dff
libx11@2:1.7.5-1
2:1.7.5-1ubuntu0.2
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
yuzutech/kroki:0.17.0192b7b27c857
libx11@1.7.2-r0
1.7.3.1-r1
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
libx11@2:1.7.5-1
2:1.7.5-1ubuntu0.2
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
libx11@2:1.7.5-1
2:1.7.5-1ubuntu0.2
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
zohardocker12/weather_app_flask:latestb86d60dbb68d
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
libx11@2:1.6.4-3ubuntu0.2
2:1.6.4-3ubuntu0.4+esm1
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/0xemma/reddark:main2a115e991894
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/advplyr/audiobookshelf:2.0.3140aed2752c3
libx11@1.7.2-r0
1.7.3.1-r1
1
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
libx11@2:1.6.9-2ubuntu1.2
2:1.6.9-2ubuntu1.5
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/adresservice-nginx:latest849af80ab017
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/authorization-component-nginx:latest02d0644aa99b
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/berichtservice-nginx:latest833d26df3840
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/bisc-frontend:latestd8a0334cddfc
libx11@2:1.6.7-1+deb10u1
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/brpservice-nginx:latest4db9b77c4425
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/contactcatalogus-nginx:latest480c84fa9e63
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/eherkenning-ui-nginx:latestfcd2100d863f
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/grafregistratiecomponent-nginx:latestd0daf48dec68
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/instemmingservice-nginx:latesteeeb4e9f0485
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/landelijketabellencatalogus-nginx:lateste7076242888a
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/loggingcomponent-nginx:latestcee37e9cef09
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/logicservice-nginx:latest7c8ee08c591c
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/medewerkercatalogus-nginx:latest06c3b27462e6
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/memo-component-nginx:latestfd28182f7ecf
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/notification-component-nginx:latestd53bda41ee3b
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/ocatiecatalogus-nginx:latestc46374fc8f32
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/orderregistratiecomponent-nginx:latest42acee4ab31c
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/procestypecatalogus-nginx:latestca6fc575a3ba
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/productenendienstencatalogus-nginx:latest4095e7207822
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/proto-component-commonground-nginx:latest5b1384e29b7d
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/review-component-nginx:latest5df5f92870a5
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/taalhuizen-service-nginx:latest0bbaa7487c63
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/trouw-service-nginx:latest86fe293b99a2
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
libx11@2:1.7.2-1
2:1.7.2-1+deb11u1
1
ghcr.io/conductionnl/verhuis-service-nginx:latest4473ce50435e
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/verzoekconversieservice-nginx:latestf449b82ce9d6
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/verzoekregistratiecomponent-nginx:lateste0c5f8a95098
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1
ghcr.io/conductionnl/verzoektypecatalogus-nginx:latest42c75ea8082c
libx11@2:1.6.7-1+deb10u2
2:1.6.7-1+deb10u3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.