StackRadar

CVE-2023-3446

Medium

Advisory

Published 19 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.065
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,790 indexed, latest versions
Container images
1,218
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1u-5.1 on GA media

Carried by container images the latest versions of 1,202 of 17,790 indexed charts deploy, on 1,218 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+20 more1.1.1u-r2, 3.0.9-r3, 3.1.1-r3627
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+60 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm10, 1.1.1-1ubuntu2.1~18.04.23+esm3, 1.1.1f-1ubuntu2.20+4 more580
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.11.1.0i-150100.14.59.1, 1.1.1u-5.19
OSV records
ALPINE-CVE-2023-3446DEBIAN-CVE-2023-3446UBUNTU-CVE-2023-3446openSUSE-SU-2024:13064-1SUSE-SU-2023:2961-1
Also known as
USN-6435-1, USN-6435-2, USN-6450-1, USN-6709-1, USN-7018-1

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm3
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20

Open the chart page →

9,256

Container images carrying it

1,218 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20
1
maptiler/server:4.8.07e206140057b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.20
1
marcinkujawski/flask-app:2.0.1a455017b9d0e
openssl@1.1.1l-r7
1.1.1u-r2
1
matrixdb/rawfile-csi:v0.2.195b2e38e913d
openssl@1.1.1n-r0
1.1.1u-r2
1
mediagis/nominatim:3.7c15e941485ef
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
openssl@3.1.1-r1
3.1.1-r3
1
metabase/metabase:v0.46.09ebdc664a6b2
openssl@3.0.8-r1
3.0.9-r3
1
metacontrollerio/metacontroller:v2.1.10336993b88e4
openssl@1.1.1l-r7
1.1.1u-r2
1
micross/hyperapi:0.2.435f59bc3cd64
openssl@1.1.1l-r7
1.1.1u-r2
1
milvusdb/milvus:v2.2.13a3a55e1c1497
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
miniflux/miniflux:2.0.36e2fb990dae74
openssl@1.1.1l-r7
1.1.1u-r2
1
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
openssl@1.1.1u-r1
1.1.1u-r2
1
mintproject/data-catalog-db:9be70359feabe03ed55bfdbf92c20a7e43ab928b9bf26fedd848
openssl@1.1.1s-r0
1.1.1u-r2
1
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
openssl@3.1.0-r4
3.1.1-r3
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.20
1
mintproject/mint-ui-lit:246a8771e8c043f8c1840d3c32262d3d6a9a553208c1a13c3397
openssl@1.1.1s-r0
1.1.1u-r2
1
mintproject/model-catalog-explorer:0b2f9f0a9124076aeb492add2f123d0757066f6bdeb80c93b4a9
openssl@1.1.1s-r0
1.1.1u-r2
1
misskey/misskey:12.110.1e08b7c478093
openssl@1.1.1n-r0
1.1.1u-r2
1
moby/buildkit:v0.10.0c2aeafaed434
openssl@1.1.1l-r7
1.1.1u-r2
1
mohameddev006/web-app:v50fbc7360ecf4
openssl@1.1.1q-r0
1.1.1u-r2
1
moul/sshportal:v1.19.3332b603727c3
openssl@1.1.1l-r7
1.1.1u-r2
1
mshanley80/httpbin2022:latest5b189a70c0fb
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
muluder/prograncontrollermcord:0.1.843b597a93da7
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm10
1
muonsoft/openapi-mock:latestc9afe1295484
openssl@3.0.8-r0
3.0.9-r3
1
n8nio/n8n:0.212.0a9195bc499a3
openssl@1.1.1q-r0
1.1.1u-r2
1
natsio/nats-box:0.13.559cf2e949181
openssl@3.0.7-r2
3.0.9-r3
1
natsio/nats-box:0.13.3c507bd7e3831
openssl@3.0.7-r0
3.0.9-r3
1
natsio/nats-server-config-reloader:0.8.06bdaceb63aa5
openssl@1.1.1s-r0
1.1.1u-r2
1
natsio/nats-server-config-reloader:0.14.08c28b75bc416
openssl@3.1.1-r1
3.1.1-r3
1
natsio/nats-server-config-reloader:0.11.0c3a755eab2cc
openssl@3.1.1-r1
3.1.1-r3
1
neilpang/acme.sh:3.0.2595809ad43a2
openssl@1.1.1l-r8
1.1.1u-r2
1
netboxcommunity/netbox:v3.2.83d652dca5351
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.12
1
nethermind/nethermind:1.14.615517708c3b6
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
1
networkboot/dhcpd:lateste99bbfbd6fb2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.12
1
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm10
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
openssl@1.1.1q-r0
1.1.1u-r2
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
openssl@1.1.1q-r0
1.1.1u-r2
1
nocodb/nocodb:0.100.2b0b91ec2a2dd
openssl@1.1.1q-r0
1.1.1u-r2
1
nonkronk/tristian-id:latest0a3694d70647
openssl@1.1.1l-r7
1.1.1u-r2
1
ofekmeister/csi-gcs:v0.9.030d70fa9211b
openssl@1.1.1n-r0
1.1.1u-r2
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
openssl@1.1.1l-r7
1.1.1u-r2
1
oled01/db-backup:0.1.06302fd2b5333
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.12
1
omecproject/c3po-hss:master-latest638671ef4842
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm10
1
omecproject/c3po-hssdb:master-latest28a90cc26716
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.20
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm3
1
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
openssl@1.1.1-1ubuntu2.1~18.04.6
openssl1.0@1.0.2n-1ubuntu5.4
1.1.1-1ubuntu2.1~18.04.23+esm3
1.0.2n-1ubuntu5.13+esm1
1
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
openssl@1.1.1-1ubuntu2.1~18.04.9
openssl1.0@1.0.2n-1ubuntu5.6
1.1.1-1ubuntu2.1~18.04.23+esm3
1.0.2n-1ubuntu5.13+esm1
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm3
1
omecproject/onos-progran:1.0.05715e5648aa0
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm10
1
omecproject/openmme:master-latest64776cb9edb3
openssl@1.0.2g-1ubuntu4.17
1.0.2g-1ubuntu4.20+esm10
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.