StackRadar

CVE-2023-36308

Low

Advisory

Published 5 Sept 2023In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
79
deployed by those charts
Fix available
None
affected package

Crash when processing crafted TIFF files

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 79 images.

Affected packageAffected versionsFixed inImages
github.com/disintegration/imaginggolangv1.6.0, v1.6.2no fix listed79
OSV records
GHSA-q7pp-wcgr-pffx

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
photoprismk8s-home-lab-repo10.0.11 of 1See more

photoprism k8s-home-lab-repo 10.0.1

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
photoprism/photoprism:231128-ce284de9cc4f9c
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

1,140
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

1,513
listmonklbenicio-communityVerified publisher0.1.01 of 1See more

listmonk lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
listmonk/listmonk:latestf535d59e1499
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

720
listmonklistmonk-chartVerified publisher2.0.11 of 2See more

listmonk listmonk-chart 2.0.1

1 of the 2 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
listmonk/listmonk:v6.0.0bf3903d54a46
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

3,067
pocketbase-halitesql0.0.31 of 1See more

pocketbase-ha litesql 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/litesql/pocketbase-ha:latestc5b28608958b
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

1,109
filebrowserluiscajl0.0.11 of 1See more

filebrowser luiscajl 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
filebrowser/filebrowser:latesta469ea076d4a
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

133
focalboardmattermostVerified publisher0.5.01 of 1See more

focalboard mattermost 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
mattermost/focalboard:0.6.7f2f987dada52
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

4,014
mattermost-chaos-enginemattermostVerified publisher0.2.01 of 1See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
mattermost/mattermost-app-chaosengine:c153e436268954edd67
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

4,067
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
neosmemo/memos:0.26.23eefcc231141
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

2,443
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

2,968
vikunjapascaliskeVerified publisher5.1.01 of 1See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

1,342
mindavphntom0.1.61 of 2See more

mindav phntom 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
phntom/mindav:0.1.7-kix35695f546abbb
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

4,158
filebrowserquench-filebrowserVerified publisher0.0.101 of 1See more

filebrowser quench-filebrowser 0.0.10

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/filebrowserdigest-pinned32496ccb3298
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

53
pocketbasequench-pocketbase0.0.101 of 1See more

pocketbase quench-pocketbase 0.0.10

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/pocketbasedigest-pinnedaceec34b62a9
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

7
vikunjaquench-vikunja0.0.111 of 1See more

vikunja quench-vikunja 0.0.11

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/quenchworks/images/vikunjadigest-pinnedef5d7b5ac5e2
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

231
memosrm3lVerified publisher0.1.11 of 1See more

memos rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
neosmemo/memos:0.24c6defc2dfb98
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

1,614
endeavorrotationalVerified publisher1.3.11 of 2See more

endeavor rotational 1.3.1

1 of the 2 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
rotationalio/endeavor:1.3.0ac566baddc06
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

2,200
recipyartomik-helm-chartsVerified publisher0.0.21 of 2See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
reaper99/recipya:v1.2.27f7ec3aeb88c
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

2,066
memorubxkubeVerified publisher1.2.11 of 1See more

memo rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
neosmemo/memos:0.293e1253477066
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

555
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
github.com/disintegration/imaging@v1.6.0
no fix listed

Open the chart page →

5,582
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

4,070
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

3,286
prestashopstack-prestahop22.0.01 of 4See more

prestashop stack-prestahop 22.0.0

1 of the 4 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

3,073
stashswuuper-githubVerified publisher0.1.161 of 1See more

stash swuuper-github 0.1.16

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
stashapp/stash:v0.31.1df744af5a0c9
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

2,396
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

8,193
agentssynapse0.1.302 of 9See more

agents synapse 0.1.30

2 of the 9 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
github.com/disintegration/imaging@v1.6.2
no fix listed
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

7,244
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

8,518
scribesynapse0.2.161 of 7See more

scribe synapse 0.2.16

1 of the 7 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

2,680
sinnersynapse0.1.01 of 6See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

1,955
tyk-dev-portaltyk-helm5.3.01 of 2See more

tyk-dev-portal tyk-helm 5.3.0

1 of the 2 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
tykio/portal:v1.18.092509e00e618
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

867
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

3,174
commentopluspluswyrihaximusnetVerified publisher0.4.01 of 1See more

commentoplusplus wyrihaximusnet 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-36308.

Container imageDigestPackageFixed in
caroga/commentoplusplus:v1.8.7f3233882b3bd
github.com/disintegration/imaging@v1.6.2
no fix listed

Open the chart page →

1,960

Container images carrying it

79 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
stashapp/stash:latest24dbd7607174
github.com/disintegration/imaging@v1.6.0
no fix listed
1
stashapp/stash:v0.31.1df744af5a0c9
github.com/disintegration/imaging@v1.6.2
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
github.com/disintegration/imaging@v1.6.2
no fix listed
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
github.com/disintegration/imaging@v1.6.2
no fix listed
1
tykio/portal:v1.18.092509e00e618
github.com/disintegration/imaging@v1.6.2
no fix listed
1
vikunja/api:0.17.18cba0520bf8c
github.com/disintegration/imaging@v1.6.2
no fix listed
1
willnorris/imageproxy:latest21d0c90f4c31
github.com/disintegration/imaging@v1.6.2
no fix listed
1
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/candiddev/homechart:latestd568c5a77bd4
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/diillson/chatcli:1.203.010ba7ef37570
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/gabe565/relax-sounds:latestd9330eda7d8e
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/litesql/pocketbase-ha:latestc5b28608958b
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/quenchworks/images/filebrowser32496ccb3298
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/quenchworks/images/pocketbaseaceec34b62a9
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/quenchworks/images/vikunjaef5d7b5ac5e2
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/usememos/memos:0.24.04723d86e6797
github.com/disintegration/imaging@v1.6.2
no fix listed
1
ghcr.io/zoriya/kyoo_transcoder:4.7.12dadea51a91e
github.com/disintegration/imaging@v1.6.2
no fix listed
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
github.com/disintegration/imaging@v1.6.2
no fix listed
1
registry.gitlab.com/commento/commento:v1.8.0e0ab1fc86761
github.com/disintegration/imaging@v1.6.2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.