StackRadar

CVE-2023-3446

Medium

Advisory

Published 19 Jul 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.065
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,202
of 17,790 indexed, latest versions
Container images
1,218
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1u-5.1 on GA media

Carried by container images the latest versions of 1,202 of 17,790 indexed charts deploy, on 1,218 images.

Affected packageAffected versionsFixed inImages
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+20 more1.1.1u-r2, 3.0.9-r3, 3.1.1-r3627
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+60 more1.0.1f-1ubuntu2.27+esm10, 1.0.2g-1ubuntu4.20+esm10, 1.1.1-1ubuntu2.1~18.04.23+esm3, 1.1.1f-1ubuntu2.20+4 more580
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.11.1.0i-150100.14.59.1, 1.1.1u-5.19
OSV records
ALPINE-CVE-2023-3446DEBIAN-CVE-2023-3446UBUNTU-CVE-2023-3446openSUSE-SU-2024:13064-1SUSE-SU-2023:2961-1
Also known as
USN-6435-1, USN-6435-2, USN-6450-1, USN-6709-1, USN-7018-1

Charts affected

1,202 by stars
ChartLatestAffected imagesRadar Score
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
zl0i/alertmanager-matrix-forwarder:v1.0.0e94047931739
openssl@1.1.1l-r7
1.1.1u-r2

Open the chart page →

3,118
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-3446.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm3
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.20

Open the chart page →

9,256

Container images carrying it

1,218 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
openssl@1.1.1n-r0
1.1.1u-r2
1
sismics/docs:v1.10f4b0ef019cf1
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm3
1
skylenet/ethereum-testnet-homepage:latest8698903e379f
openssl@3.0.7-r0
3.0.9-r3
1
skylenet/ethstats-server:pow-latestd757cc016198
openssl@1.1.1q-r0
1.1.1u-r2
1
slagattollas/weatherservice-practica:latest68e7f56393fc
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm3
1
smailkoz/torrserver:1.0.1117b52d15de8f0
openssl@1.1.1l-r7
1.1.1u-r2
1
snipe/snipe-it:v6.0.1455fb7636a98c
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.20
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.20
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm3
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
openssl@3.0.9-1
3.0.10-1~deb12u1
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm3
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
openssl@3.0.9-1
3.0.10-1~deb12u1
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
openssl@3.0.9-1
3.0.10-1~deb12u1
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
openssl@3.0.9-1
3.0.10-1~deb12u1
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.20
1
soulou2019/angular-nginx:latesta3970f97c215
openssl@1.1.1l-r7
1.1.1u-r2
1
soulou2019/node-server:latest5e6ecfcc109e
openssl@1.1.1l-r7
1.1.1u-r2
1
springhack/frpc_ingress:latest4aceb821da88
openssl@1.1.1s-r0
1.1.1u-r2
1
spy86/rabbitmq-stomp:latestea649101b9fb
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.20
1
srini78/nodejswebappeks:latest5d1cbdc6833a
openssl@3.0.8-r3
3.0.9-r3
1
stackstorm/st2actionrunner:3.888235ba70cad
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2api:3.86f56d239d280
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2auth:3.833ecfda16608
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2notifier:3.8f190a6212195
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2rulesengine:3.8259503496ff9
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2scheduler:3.8b1de2055c362
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2stream:3.81c8904a3bf67
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2timersengine:3.81bf35bfaf00c
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2web:3.809989a26c8b7
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stackstorm/st2workflowengine:3.819fdfffdbba8
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.fips.20
1
stakater/workshop-exercise:0.0.26076926b7159d3
openssl@1.1.1n-r0
1.1.1u-r2
1
stashapp/stash:latest24dbd7607174
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.20
1
statcan/ckan:2.93921305425b8
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.20
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.20
1
stubin87/tiny-api:v1.1.02e5c42e92ec8
openssl@1.1.1q-r0
1.1.1u-r2
1
su541/cert-manager-desec-webhook:latest371ee33f83c1
openssl@3.1.1-r1
3.1.1-r3
1
subsquid/hydra-indexer:5.0.0-alpha.37a7f8b9bad7ee
openssl@1.1.1n-r0
1.1.1u-r2
1
subsquid/hydra-indexer-status-service:5.0.0-alpha.37a4136013909c
openssl@1.1.1n-r0
1.1.1u-r2
1
subsquid/substrate-explorer:firesquid0889a857f192
openssl@3.0.8-r0
3.0.9-r3
1
subsquid/substrate-ingest:firesquidfa549779e9b1
openssl@3.0.8-r0
3.0.9-r3
1
supabase/gotrue:v2.91.07174d551d720
openssl@3.0.9-r1
3.0.9-r3
1
superorbital/cludod:0.0.2-alphad59732f61d6e
openssl@1.1.1l-r7
1.1.1u-r2
1
svenwal/jsonplaceholder:latestba2f285af432
openssl@1.1.1l-r7
1.1.1u-r2
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.20
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.12+Fips1
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.20
1
swaggerapi/swagger-ui:v4.12.00d7088d47928
openssl@1.1.1n-r0
1.1.1u-r2
1
swaggerapi/swagger-ui:v4.15.511b20aebb92c
openssl@1.1.1q-r0
1.1.1u-r2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.