StackRadar

CVE-2023-35945

High

Advisory

Published 13 Jul 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
207
of 17,781 indexed, latest versions
Container images
175
deployed by those charts
Fix available
2 of 2
affected packages

libnghttp2-14-1.55.1-1.1 on GA media

Carried by container images the latest versions of 207 of 17,781 indexed charts deploy, on 175 images.

Affected packageAffected versionsFixed inImages
nghttp2apk1.46.0-r0, 1.47.0-r0, 1.51.0-r01.46.0-r1, 1.47.0-r1, 1.51.0-r1165
nghttp2rpm1.39.2-lp151.3.3.1, 1.40.0-1.15, 1.40.0-3.6.31.40.0-150000.3.14.1, 1.40.0-150200.9.1, 1.55.1-1.110
OSV records
ALPINE-CVE-2023-35945openSUSE-SU-2024:13062-1SUSE-SU-2023:3997-1SUSE-SU-2023:4102-1

Charts affected

207 by stars
ChartLatestAffected imagesRadar Score
solr-operatorapache-solrVerified publisher0.9.11 of 3See more

solr-operator apache-solr 0.9.1

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.23.2e4d83478963b
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

2,943
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
dependencytrack/frontend:4.6.124422d762e08
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

2,503
telepresence-osstelepresence-ossOfficialVerified publisher2.31.21 of 2See more

telepresence-oss telepresence-oss 2.31.2

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:8.1.15af13420d29b
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

1,036
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

4,167
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

4,285
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

2,572
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
nghttp2@1.46.0-r0
1.46.0-r1
quay.io/devtron/kubectl:latest2ad610626658
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

32,902
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

2,344
filebrowserutkuozdemirVerified publisher1.0.01 of 1See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

3,073
openspeedtestspeedtestVerified publisher0.1.21 of 1See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
openspeedtest/latest:v2.0.0d4d62f4b7d85
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

2,040
phpipamstackhelmVerified publisher0.1.22 of 3See more

phpipam stackhelm 0.1.2

2 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.5.2f770577cb946
nghttp2@1.46.0-r0
1.46.0-r1
phpipam/phpipam-www:v1.5.23c6fd1332aeb
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

1,874
eshoponabpabp-charts1.0.01 of 15See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/volosoft/eshoponabp/app-web:1.0.0056bb4271626
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

19,799
k8upappuio2.0.51 of 1See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

3,300
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:7.85.09fab1b73f45e
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

24,700
frpc-ingressinfinity-server0.4.11 of 1See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
springhack/frpc_ingress:latest4aceb821da88
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

2,622
coreinstill-aiOfficialVerified publisher0.1.752 of 15See more

core instill-ai 0.1.75

2 of the 15 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:8.00.19e886c104cae
nghttp2@1.47.0-r0
1.47.0-r1
groundnuty/k8s-wait-for:v2.0c14d7271e401
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

30,816
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

7,776
oesopsmxVerified publisher4.0.323 of 25See more

oes opsmx 4.0.32

3 of the 25 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
nghttp2@1.46.0-r0
1.46.0-r1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
nghttp2@1.51.0-r0
1.51.0-r1
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

107,811
wharf-helmwharf-helmOfficialVerified publisher3.2.61 of 5See more

wharf-helm wharf-helm 3.2.6

1 of the 5 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

10,032
ueransimadaptivenetlabVerified publisher1.0.31 of 2See more

ueransim adaptivenetlab 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
openverso/ueransim:3.2.6733f1232b7d3
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

1,389
soft-servealphani-helm-chartsVerified publisher0.4.01 of 1See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
charmcli/soft-serve:v0.4.039523c1a6ba8
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

3,119
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

22,202
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
hyperledger/fabric-tools:2.4b1194f509085
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
hyperledger/fabric-tools:2.4b1194f509085
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

77,687
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

9,724
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

7,303
dao-2048dao-20481.4.11 of 1See more

dao-2048 dao-2048 1.4.1

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

1,883
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

5,598
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

4,614
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

4,333
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.22.1638b7962cd016
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

5,291
mainfancywhale-stable0.15.121 of 1See more

main fancywhale-stable 0.15.12

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
gcarrarom/landing:0.0.0769d19e441d9
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

1,032
fedodo.chartfedodo0.5.112 of 4See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
fedodo/fedodo.ui.home:3c69413c4d690
nghttp2@1.51.0-r0
1.51.0-r1
fedodo/fedodo.ui.micro:12b2b540081c21
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

4,399
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
taigaio/taiga-front:latest570c8792ce80
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

8,496
fsmfsmOfficialVerified publisher0.2.111 of 5See more

fsm fsm 0.2.11

1 of the 5 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
flomesh/curl:7.84.0bc34fa2aca2c
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

4,215
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:7.85.09fab1b73f45e
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

16,346
jmeterjmeterVerified publisher1.2.51 of 1See more

jmeter jmeter 1.2.5

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
liukunup/jmeter:5.59c079617a81b
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

2,067
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

3,136
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

2,221
librenmsmidokura-communityVerified publisher0.3.21 of 6See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
librenms/librenms:22.4.14f1f3d667cc7
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

8,967
oadaoadaVerified publisher5.0.51 of 11See more

oada oada 5.0.5

1 of the 11 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

13,317
opencatalogiopencatalogi1.0.61 of 8See more

opencatalogi opencatalogi 1.0.6

1 of the 8 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

14,838
traefik-errorspascaliskeVerified publisher4.0.01 of 1See more

traefik-errors pascaliske 4.0.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

1,271
unboundpascaliskeVerified publisher2.0.01 of 1See more

unbound pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

1,957
pdf-editor-helmpdf-editor-web1.0.01 of 4See more

pdf-editor-helm pdf-editor-web 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
dipugodocker/pdf-editor:1.0-frontendd431c37fe1cd
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

4,206
qrcode-generatorqrcode-generatorVerified publisher0.1.01 of 1See more

qrcode-generator qrcode-generator 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
felipecs8/qrcode-generator:v1d5f4f17cb066
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

1,883
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

4,052
hlf-k8ssubstraVerified publisher10.2.41 of 7See more

hlf-k8s substra 10.2.4

1 of the 7 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

12,006
boundaryundergridVerified publisher0.1.01 of 3See more

boundary undergrid 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v1.684edcf796267
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

4,957
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
taigaio/taiga-front:latest570c8792ce80
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

9,148

Container images carrying it

175 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
nghttp2@1.46.0-r0
1.46.0-r1
1
ghcr.io/eugenmayer/nist-data-mirror:0.1.1a2162df94729
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/k10app/businit:latest94c9a3e799c2
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/mjohnson9/docker-pleroma:v0.1.44f08e2823756
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/petio-team/petio:new-uia5802962de0f
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/reitermarkus/strongswan:v1.0.0e7a8afe6e6eb
nghttp2@1.46.0-r0
1.46.0-r1
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
nghttp2@1.46.0-r0
1.46.0-r1
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/volosoft/eshoponabp/app-web:1.0.0056bb4271626
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
nghttp2@1.46.0-r0
1.46.0-r1
1
ghcr.io/wbstack/ui:3.94b01f67faadf1
nghttp2@1.46.0-r0
1.46.0-r1
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
nghttp2@1.47.0-r0
1.47.0-r1
1
quay.io/k8start/http-headers:1.2.0c7a9987f2ac5
nghttp2@1.47.0-r0
1.47.0-r1
1
quay.io/netwarps/blockscoutbecd3e39360a
nghttp2@1.46.0-r0
1.46.0-r1
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
nghttp2@1.46.0-r0
1.46.0-r1
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
nghttp2@1.51.0-r0
1.51.0-r1
1
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
nghttp2@1.47.0-r0
1.47.0-r1
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
nghttp2@1.51.0-r0
1.51.0-r1
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
nghttp2@1.47.0-r0
1.47.0-r1
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
nghttp2@1.51.0-r0
1.51.0-r1
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
nghttp2@1.47.0-r0
1.47.0-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.