StackRadar

CVE-2023-34062

High

Advisory

Published 15 Nov 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
46
deployed by those charts
Fix available
1 of 1
affected package

In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 46 images.

Affected packageAffected versionsFixed inImages
reactor-netty-httpmaven1.0.1, 1.0.4, 1.0.7, 1.0.11+19 more1.0.39, 1.1.1346
OSV records
GHSA-xjhv-p3fv-x24r

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-34062.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
reactor-netty-http@1.0.19
1.0.39

Open the chart page →

8,033
kafkasb-helm-charts0.3.01 of 2See more

kafka sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-34062.

Container imageDigestPackageFixed in
provectuslabs/kafka-ui:latest8f2ff02d64b0
reactor-netty-http@1.1.10
1.1.13

Open the chart page →

1,597
shenyushenyu0.6.31 of 2See more

shenyu shenyu 0.6.3

1 of the 2 container images this version deploys carry CVE-2023-34062.

Container imageDigestPackageFixed in
apache/shenyu-bootstrap:2.5.11bd5756f6273
reactor-netty-http@1.0.19
1.0.39

Open the chart page →

8,804
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-34062.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
reactor-netty-http@1.0.14
1.0.39

Open the chart page →

13,767
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-34062.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
reactor-netty-http@1.0.15
1.0.39

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2023-34062.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
reactor-netty-http@1.0.15
1.0.39

Open the chart page →

28,605
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-34062.

Container imageDigestPackageFixed in
zahoriaut/zahori-server:0.1.17b2de13916f3e
reactor-netty-http@1.0.27
1.0.39

Open the chart page →

5,846

Container images carrying it

46 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
reactor-netty-http@1.1.0
1.1.13
13
oscarsotosanchez/toposervice:v1.0d4d020e9f272
reactor-netty-http@1.0.1
1.0.39
4
provectuslabs/kafka-ui:latest8f2ff02d64b0
reactor-netty-http@1.1.10
1.1.13
3
hookiesolutions/webhookie:latest0629694246ba
reactor-netty-http@1.0.15
1.0.39
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
reactor-netty-http@1.0.13
1.0.39
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
reactor-netty-http@1.0.13
1.0.39
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
reactor-netty-http@1.0.13
1.0.39
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
reactor-netty-http@1.0.13
1.0.39
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
reactor-netty-http@1.0.13
1.0.39
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
reactor-netty-http@1.0.13
1.0.39
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
reactor-netty-http@1.0.13
1.0.39
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
reactor-netty-http@1.0.13
1.0.39
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
reactor-netty-http@1.0.13
1.0.39
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
reactor-netty-http@1.0.19
1.0.39
2
apache/iotdb:0.13.3-nodeafa47bf1692a
reactor-netty-http@1.0.4
1.0.39
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
reactor-netty-http@1.0.19
1.0.39
1
apache/skywalking-ui:9.2.0295f1dc87d98
reactor-netty-http@1.0.18
1.0.39
1
apache/skywalking-ui:8.9.180530f0308a5
reactor-netty-http@1.0.7
1.0.39
1
apimap/api:v1.8.11ae2b3ab00177
reactor-netty-http@1.0.24
1.0.39
1
drpcorg/dshackle:0.54.08858fae1859d
reactor-netty-http@1.1.10
1.1.13
1
elastictranscoder/media-storage:f6d861a026208b8c2359
reactor-netty-http@1.0.7
1.0.39
1
emeraldpay/dshackle:0.14.0126f0ae0b388
reactor-netty-http@1.0.11
1.0.39
1
emeraldpay/dshackle:0.12ac2a4bc66ab6
reactor-netty-http@1.0.11
1.0.39
1
expediagroup/pitchfork:1.314f2cf61e7de9
reactor-netty-http@1.0.11
1.0.39
1
graviteeio/am-gateway:4.12.607b7f6dc267a
reactor-netty-http@1.1.0
1.1.13
1
graviteeio/am-management-api:4.12.6a8eb04ee0c70
reactor-netty-http@1.1.0
1.1.13
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
reactor-netty-http@1.0.17
1.0.39
1
hugohg34/toposervice:0.0.2812a03b3f274
reactor-netty-http@1.0.13
1.0.39
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
reactor-netty-http@1.1.5
1.1.13
1
maksimkavalenka/microservices-learning.resource-processor:latest64a25afb8748
reactor-netty-http@1.1.11
1.1.13
1
maksimkavalenka/microservices-learning.resource-service:latest13ad9bb170a0
reactor-netty-http@1.1.11
1.1.13
1
redestroyder/authorization-service:0.0.1740364a619fd
reactor-netty-http@1.0.15
1.0.39
1
redestroyder/business-service:0.0.1db03499a0726
reactor-netty-http@1.0.15
1.0.39
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
reactor-netty-http@1.0.13
1.0.39
1
slagattollas/toposervice-practica:latestdc63973dae0d
reactor-netty-http@1.0.1
1.0.39
1
thmmniii/fbs-core:v1.27.15438517d9fc2
reactor-netty-http@1.0.32
1.0.39
1
trinodb/trino:405ee80ab5eeab2
reactor-netty-http@1.0.14
1.0.39
1
vitalii1992/api-gateway-service:latestaabe6ac39356
reactor-netty-http@1.1.7
1.1.13
1
vlebediantsev/logic-ms:latestdf8bf38c535b
reactor-netty-http@1.0.20
1.0.39
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
reactor-netty-http@1.0.31
1.0.39
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
reactor-netty-http@1.0.27
1.0.39
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
reactor-netty-http@1.0.23
1.0.39
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
reactor-netty-http@1.1.9
1.1.13
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
reactor-netty-http@1.1.7
1.1.13
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
reactor-netty-http@1.0.26
1.0.39
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
reactor-netty-http@1.0.26
1.0.39
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.