StackRadar

CVE-2023-36665

Critical

Advisory

Published 5 Jul 2023In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
36
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
1 of 1
affected package

protobufjs Prototype Pollution vulnerability

Carried by container images the latest versions of 36 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
protobufjsnpm6.10.2, 6.11.2, 6.11.3, 7.0.0+4 more6.11.4, 7.2.536
OSV records
GHSA-h755-8qp9-cq85

Charts affected

36 by stars
ChartLatestAffected imagesRadar Score
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
protobufjs@7.1.2
7.2.5

Open the chart page →

4,431
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
protobufjs@7.2.4
7.2.5

Open the chart page →

5,639
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
protobufjs@6.11.2
6.11.4

Open the chart page →

96,941
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
protobufjs@7.2.2
7.2.5

Open the chart page →

8,212
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
protobufjs@6.11.3
6.11.4

Open the chart page →

31,844
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
protobufjs@6.10.2
6.11.4

Open the chart page →

4,455
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
protobufjs@6.11.2
6.11.4

Open the chart page →

27,096
galoy-paygaloymoney0.11.481 of 2See more

galoy-pay galoymoney 0.11.48

1 of the 2 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
protobufjs@7.2.2
7.2.5

Open the chart page →

2,528
galoy-paygaloymoney20.11.481 of 2See more

galoy-pay galoymoney2 0.11.48

1 of the 2 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
krtk6160/galoy-nostrdigest-pinnedcc82a694f818
protobufjs@7.2.2
7.2.5

Open the chart page →

2,528
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
protobufjs@6.11.3
6.11.4

Open the chart page →

4,944
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
protobufjs@6.11.2
6.11.4

Open the chart page →

7,232
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
protobufjs@6.11.2
6.11.4

Open the chart page →

70,530
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
protobufjs@6.11.2
6.11.4

Open the chart page →

5,410
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
protobufjs@6.10.2
6.11.4
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
protobufjs@6.10.2
6.11.4

Open the chart page →

26,018
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
hugohg34/server:0.0.2503e5d8960ff
protobufjs@6.11.2
6.11.4

Open the chart page →

29,588
middleware-odigosmiddleware-labsVerified publisher0.2.411 of 6See more

middleware-odigos middleware-labs 0.2.41

1 of the 6 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
protobufjs@7.2.2
7.2.5

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.651 of 6See more

middleware-vision middleware-labs 0.2.65

1 of the 6 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
protobufjs@7.2.2
7.2.5

Open the chart page →

8,361
account-lookup-servicemojaloop13.0.02 of 4See more

account-lookup-service mojaloop 13.0.0

2 of the 4 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
protobufjs@6.11.2
6.11.4
mojaloop/event-sidecar:v11.0.189b8ab71b74b
protobufjs@6.11.2
6.11.4

Open the chart page →

11,695
account-lookup-service-adminmojaloop13.0.02 of 4See more

account-lookup-service-admin mojaloop 13.0.0

2 of the 4 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
protobufjs@6.11.2
6.11.4
mojaloop/event-sidecar:v11.0.189b8ab71b74b
protobufjs@6.11.2
6.11.4

Open the chart page →

11,695
admin-api-svcmojaloop12.0.02 of 4See more

admin-api-svc mojaloop 12.0.0

2 of the 4 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
mojaloop/central-ledger:v13.14.01abc8a7aa71c
protobufjs@6.11.2
6.11.4
mojaloop/event-sidecar:v11.0.189b8ab71b74b
protobufjs@6.11.2
6.11.4

Open the chart page →

12,108
fspiop-transfer-api-svcmojaloop12.0.12 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

2 of the 3 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
mojaloop/event-sidecar:v11.0.189b8ab71b74b
protobufjs@6.11.2
6.11.4
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
protobufjs@6.11.2
6.11.4

Open the chart page →

11,479
mojaloopmojaloop14.0.04 of 6See more

mojaloop mojaloop 14.0.0

4 of the 6 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
protobufjs@6.11.2
6.11.4
mojaloop/central-ledger:v13.14.01abc8a7aa71c
protobufjs@6.11.2
6.11.4
mojaloop/event-sidecar:v11.0.189b8ab71b74b
protobufjs@6.11.2
6.11.4
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
protobufjs@6.11.2
6.11.4

Open the chart page →

19,226
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
protobufjs@6.11.3
6.11.4

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
protobufjs@6.11.3
6.11.4

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
protobufjs@7.2.3
7.2.5

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
protobufjs@6.11.3
6.11.4

Open the chart page →

2,116
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
protobufjs@7.1.2
7.2.5

Open the chart page →

4,744
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
protobufjs@7.0.0
7.2.5

Open the chart page →

5,582
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
protobufjs@7.1.2
7.2.5

Open the chart page →

4,431
k8soketisoketi1.0.11 of 1See more

k8soketi soketi 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
protobufjs@6.11.3
6.11.4

Open the chart page →

2,267
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
protobufjs@6.11.2
6.11.4

Open the chart page →

3,881
csmmth-chartsVerified publisher0.1.01 of 3See more

csmm th-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
catalysm/csmm:latestf003b35f54d9
protobufjs@6.11.2
6.11.4

Open the chart page →

3,576
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
thingsboard/tb-js-executor:3.4.113e1eadf8ace
protobufjs@6.11.3
6.11.4

Open the chart page →

25,394
kubernetes-external-secretstrozz6.3.01 of 1See more

kubernetes-external-secrets trozz 6.3.0

1 of the 1 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
protobufjs@6.10.2
6.11.4

Open the chart page →

2,838
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
temporalio/web:1.14.033cfa863d8ce
protobufjs@6.10.2
6.11.4

Open the chart page →

22,665
workadventureworkadventure1.1.03 of 9See more

workadventure workadventure 1.1.0

3 of the 9 container images this version deploys carry CVE-2023-36665.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-back:v1.17.764001369dad5
protobufjs@7.2.4
7.2.5
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
protobufjs@7.2.4
7.2.5
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
protobufjs@7.2.4
7.2.5

Open the chart page →

16,083

Container images carrying it

36 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mojaloop/event-sidecar:v11.0.189b8ab71b74b
protobufjs@6.11.2
6.11.4
5
mojaloop/account-lookup-service:v11.8.0b06d3287ea82
protobufjs@6.11.2
6.11.4
3
krtk6160/galoy-nostrcc82a694f818
protobufjs@7.2.2
7.2.5
2
mojaloop/central-ledger:v13.14.01abc8a7aa71c
protobufjs@6.11.2
6.11.4
2
mojaloop/ml-api-adapter:v11.1.6fb71d233c742
protobufjs@6.11.2
6.11.4
2
outlinewiki/outline:0.69.1d060dcd8f9aa
protobufjs@7.1.2
7.2.5
2
arturisimo/server-urjc:v1.0d8dc4430531e
protobufjs@6.11.2
6.11.4
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
protobufjs@6.10.2
6.11.4
1
catalysm/csmm:latestf003b35f54d9
protobufjs@6.11.2
6.11.4
1
ccjacobs14/amazon:59a9b14a6f09e
protobufjs@6.11.3
6.11.4
1
codercom/code-server:4.11.0-debian1e2cc688008e
protobufjs@6.11.3
6.11.4
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
protobufjs@6.11.3
6.11.4
1
hugohg34/server:0.0.2503e5d8960ff
protobufjs@6.11.2
6.11.4
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
protobufjs@6.11.2
6.11.4
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
protobufjs@6.11.2
6.11.4
1
linuxserver/code-server:4.10.1a5e43a05ae79
protobufjs@7.2.2
7.2.5
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
protobufjs@7.1.2
7.2.5
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
protobufjs@7.0.0
7.2.5
1
mitchxxx/amazon:214e72480ec63a
protobufjs@6.11.3
6.11.4
1
n8nio/n8n:1.33.1dd171d45102a
protobufjs@7.2.4
7.2.5
1
ooghenekaro/amazon:latest03394ba1d6d8
protobufjs@7.2.3
7.2.5
1
roadiehq/community-backstage-image:latestef355bf5b639
protobufjs@6.11.2
6.11.4
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
protobufjs@6.11.2
6.11.4
1
temporalio/web:1.14.033cfa863d8ce
protobufjs@6.10.2
6.11.4
1
thecodingmachine/workadventure-back:v1.17.764001369dad5
protobufjs@7.2.4
7.2.5
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
protobufjs@7.2.4
7.2.5
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
protobufjs@7.2.4
7.2.5
1
thingsboard/tb-js-executor:3.4.113e1eadf8ace
protobufjs@6.11.3
6.11.4
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
protobufjs@6.11.2
6.11.4
1
winfred008/amazon:910a68de5b398
protobufjs@6.11.3
6.11.4
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
protobufjs@6.10.2
6.11.4
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
protobufjs@6.10.2
6.11.4
1
ghcr.io/external-secrets/kubernetes-external-secrets:6.3.0eab9bd0b6986
protobufjs@6.10.2
6.11.4
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
protobufjs@7.2.2
7.2.5
1
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
protobufjs@7.2.2
7.2.5
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
protobufjs@6.11.3
6.11.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.