StackRadar

CVE-2023-35945

High

Advisory

Published 13 Jul 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
207
of 17,781 indexed, latest versions
Container images
175
deployed by those charts
Fix available
2 of 2
affected packages

libnghttp2-14-1.55.1-1.1 on GA media

Carried by container images the latest versions of 207 of 17,781 indexed charts deploy, on 175 images.

Affected packageAffected versionsFixed inImages
nghttp2apk1.46.0-r0, 1.47.0-r0, 1.51.0-r01.46.0-r1, 1.47.0-r1, 1.51.0-r1165
nghttp2rpm1.39.2-lp151.3.3.1, 1.40.0-1.15, 1.40.0-3.6.31.40.0-150000.3.14.1, 1.40.0-150200.9.1, 1.55.1-1.110
OSV records
ALPINE-CVE-2023-35945openSUSE-SU-2024:13062-1SUSE-SU-2023:3997-1SUSE-SU-2023:4102-1

Charts affected

207 by stars
ChartLatestAffected imagesRadar Score
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

7,303
phpipamvquieVerified publisher1.0.32 of 3See more

phpipam vquie 1.0.3

2 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.5.2f770577cb946
nghttp2@1.46.0-r0
1.46.0-r1
phpipam/phpipam-www:v1.5.23c6fd1332aeb
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

7,025
webhookswebhooks0.1.51 of 1See more

webhooks webhooks 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

2,030
wharf-ainowharf-helmVerified publisher0.1.52 of 7See more

wharf-aino wharf-helm 0.1.5

2 of the 7 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
nghttp2@1.46.0-r0
1.46.0-r1
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

13,459
wharf-cmdwharf-helmVerified publisher0.3.31 of 1See more

wharf-cmd wharf-helm 0.3.3

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

3,427
admin-portaladmin-web-portal1.2.11 of 2See more

admin-portal admin-web-portal 1.2.1

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
soulou2019/angular-nginx:latesta3970f97c215
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

3,419
airports-frontendairports-frontend0.1.01 of 1See more

airports-frontend airports-frontend 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
daniacobext/airports-frontend:latest9eae4d39fc33
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

1,271
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

25,669
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

4,576
ingress-nginxantmediaVerified publisher4.4.01 of 2See more

ingress-nginx antmedia 4.4.0

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

3,322
test-chartapplication-chart0.2.01 of 1See more

test-chart application-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ahmedinfraplus/simple-app:STAGINGc50e6e81a637
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

1,197
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
hyperledger/fabric-tools:2.4b1194f509085
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
hyperledger/fabric-tools:2.4b1194f509085
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

77,706
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:ui-latest20338b353aaf
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

9,369
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
assistiot/open_api_kong:1.0.03fe850384689
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

18,277
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:8.00.0d1658d9c8ef9
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

8,032
dashboard-pui9assist-iot-tactile-dashboard0.2.01 of 3See more

dashboard-pui9 assist-iot-tactile-dashboard 0.2.0

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
assistiot/tacticle_dashboard:web-latest25fc9f373524
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

4,145
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
prefapp/nginx-proxified:latestf4d026fd9a26
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

3,009
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

4,568
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

7,342
wg-access-serverbicarus-labs0.9.91 of 1See more

wg-access-server bicarus-labs 0.9.9

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
bicarus/wg-access-server:v0.8.206cab48e9334
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

2,748
stackbitpokeVerified publisher0.12.41 of 6See more

stack bitpoke 0.12.4

1 of the 6 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

9,897
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

3,449
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:7.85.09fab1b73f45e
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

16,198
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
chaosnative/cle-frontend:2.7.007b82a82a702
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

16,389
servicechart-serviceVerified publisher0.0.41 of 1See more

service chart-service 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
punkerside/noroot:v0.0.7be20c81d6ca1
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

930
kamajiclastixVerified publisher0.0.0+latest1 of 4See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
clastix/kubectl:v1.2187fabaccb3a6
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

4,630
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
clastix/kubectl:v1.22d0376d87ac6b
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

11,995
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:7.87.0f7f265d5c64e
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

20,900
lampcloudnativeapp1.1.01 of 3See more

lamp cloudnativeapp 1.1.0

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
library/php:7-fpm-alpine0aeb129a60da
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

1,763
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

6,921
clamapicnieg2.0.51 of 2See more

clamapi cnieg 2.0.5

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

4,671
dependency-trackcnieg3.0.81 of 2See more

dependency-track cnieg 3.0.8

1 of the 2 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
dependencytrack/frontend:4.6.124422d762e08
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

2,503
commonground-gatewaycommonground-gateway-frontend0.1.51 of 4See more

commonground-gateway commonground-gateway-frontend 0.1.5

1 of the 4 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

2,825
commonground-gateway-frontendcommonground-gateway-frontend0.1.01 of 1See more

commonground-gateway-frontend commonground-gateway-frontend 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-frontend:dev3b3fbb57cae8
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

1,142
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

5,488
bitwarden-rscronce0.1.71 of 1See more

bitwarden-rs cronce 0.1.7

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
vaultwarden/server:1.27.0-alpine7cd450642c54
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

1,589
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

2,348
rtcsic-charts0.1.12 of 5See more

rt csic-charts 0.1.1

2 of the 5 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
nghttp2@1.51.0-r0
1.51.0-r1
firefart/requesttracker:nginx-nightly-202307101028236b42a0
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

15,380
symfony-appdefault-ghVerified publisher0.6.52 of 3See more

symfony-app default-gh 0.6.5

2 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
alpine/git:2.36.366b210a97bc0
nghttp2@1.47.0-r0
1.47.0-r1
xvilo/php:8.2-composera138e57d3204
nghttp2@1.51.0-r0
1.51.0-r1

Open the chart page →

5,122
pleromaderp0.1.91 of 1See more

pleroma derp 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
ghcr.io/mjohnson9/docker-pleroma:v0.1.44f08e2823756
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

2,707
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
nghttp2@1.46.0-r0
1.46.0-r1
quay.io/devtron/k8s-utils:tutum-curl38b970c84cce
nghttp2@1.46.0-r0
1.46.0-r1
quay.io/devtron/kubectl:latest2ad610626658
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

68,240
svn-git-syncdevtron0.1.31 of 1See more

svn-git-sync devtron 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/devtron/svn-git-sync:v78e54bc2d261f
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

1,860
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
nghttp2@1.46.0-r0
1.46.0-r1
quay.io/devtron/k8s-utils:tutum-curl38b970c84cce
nghttp2@1.46.0-r0
1.46.0-r1
quay.io/devtron/kubectl:latest2ad610626658
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
nghttp2@1.46.0-r0
1.46.0-r1
quay.io/devtron/kubectl:latest2ad610626658
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

32,902
svn-git-syncdevtron-labs0.1.31 of 1See more

svn-git-sync devtron-labs 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
quay.io/devtron/svn-git-sync:v78e54bc2d261f
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

1,860
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:7.87.0f7f265d5c64e
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

24,917
gatekeeperdoubanVerified publisher3.17.11 of 3See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
curlimages/curl:7.83.1e83fef2d5a03
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

2,490
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v4.12.00d7088d47928
nghttp2@1.46.0-r0
1.46.0-r1

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-35945.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v4.15.27ff9a86f35ff
nghttp2@1.47.0-r0
1.47.0-r1

Open the chart page →

6,915

Container images carrying it

175 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
nghttp2@1.46.0-r0
1.46.0-r1
1
ghcr.io/eugenmayer/nist-data-mirror:0.1.1a2162df94729
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/k10app/businit:latest94c9a3e799c2
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/mjohnson9/docker-pleroma:v0.1.44f08e2823756
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/pascaliske/unbound:0.1.09009fbd2ef16
nghttp2@1.51.0-r0
1.51.0-r1
1
ghcr.io/petio-team/petio:new-uia5802962de0f
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/reitermarkus/strongswan:v1.0.0e7a8afe6e6eb
nghttp2@1.46.0-r0
1.46.0-r1
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
nghttp2@1.46.0-r0
1.46.0-r1
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/volosoft/eshoponabp/app-web:1.0.0056bb4271626
nghttp2@1.47.0-r0
1.47.0-r1
1
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
nghttp2@1.46.0-r0
1.46.0-r1
1
ghcr.io/wbstack/ui:3.94b01f67faadf1
nghttp2@1.46.0-r0
1.46.0-r1
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
nghttp2@1.47.0-r0
1.47.0-r1
1
quay.io/k8start/http-headers:1.2.0c7a9987f2ac5
nghttp2@1.47.0-r0
1.47.0-r1
1
quay.io/netwarps/blockscoutbecd3e39360a
nghttp2@1.46.0-r0
1.46.0-r1
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
nghttp2@1.46.0-r0
1.46.0-r1
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
nghttp2@1.51.0-r0
1.51.0-r1
1
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
nghttp2@1.47.0-r0
1.47.0-r1
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
nghttp2@1.51.0-r0
1.51.0-r1
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
nghttp2@1.47.0-r0
1.47.0-r1
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
nghttp2@1.51.0-r0
1.51.0-r1
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
nghttp2@1.47.0-r0
1.47.0-r1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.