CVE-2023-37788

High

Advisory

Published 18 Jul 2023In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.010; 60th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 16; of 17,781 indexed, latest versions
Container images: 12; deployed by those charts
Fix available: 1 of 1; affected package

goproxy Denial of Service vulnerability

Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 12 images.

Affected package	Affected versions	Fixed in	Images
github.com/elazarl/goproxygolang	v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	12

OSV records: GHSA-4r8x-2p26-976p
Also known as: GO-2023-1941

Charts affected

16 by stars

Chart

Latest

Affected images

Radar Score

kubecostmesosphere-stable

0.37.5

1 of 9 See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.7	1a359d92f40e	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

17,693

sn-platformstreamnative

1.11.44

1 of 9 See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

15,477

clearml-servingallegroai

1.6.2

1 of 9 See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.3	76dcf36e7d2a	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

17,877

carettagroundcover

0.0.16

1 of 3 See more

caretta groundcover 0.0.16

1 of the 3 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

6,799

hawkhawk

1.1.5

1 of 4 See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.0	42d3e6bc1865	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

13,610

itera-lmaarzu

1.34.60

1 of 6 See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :9.0.1	a738d0744784	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

8,608

performanceandusagediagnosisassist-iot-pud

1.0.0

1 of 7 See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :9.1.1	9746858c20e6	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

8,556

drogue-cloud-examplesdrogue-iot

0.7.11

1 of 6 See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

30,699

drogue-cloud-metricsdrogue-iot

0.7.11

1 of 8 See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :9.2.4	057896e23443	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

13,558

multimodal-data-visualizationintel

3.0.0

1 of 2 See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
intel/multimodal-data-visualization :3.0	3426deb77337	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

11,069

deepflowkubesphere-stable

6.2.606

1 of 8 See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :9.5.2	39c849cebccc	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

18,316

one-green-coreone-green-core

0.0.7

1 of 8 See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.3	ecc1b80b8ca2	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

9,558

npre-essentialsphntom

0.1.60

1 of 22 See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

26,840

sn-platform-slimstreamnative

1.11.44

1 of 6 See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

10,134

grafanasvtech-public-helm-charts

1.0.0

1 of 2 See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

10,902

monitoringthl-charts

0.1.1

1 of 10 See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2023-37788.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.0	42d3e6bc1865	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027

Open the chart page →

18,908

Container images carrying it

12 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
grafana/grafana :9.2.4	057896e23443	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	2
grafana/grafana :8.5.0	42d3e6bc1865	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	2
quay.io/groundcover/grafana :9.3.1	8c65b333a3d3	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	2
grafana/grafana :9.4.7	1a359d92f40e	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	1
grafana/grafana :9.5.2	39c849cebccc	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	1
grafana/grafana :9.4.3	76dcf36e7d2a	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	1
grafana/grafana :9.1.1	9746858c20e6	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	1
grafana/grafana :9.0.1	a738d0744784	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	1
grafana/grafana :8.5.3	ecc1b80b8ca2	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	1
intel/multimodal-data-visualization :3.0	3426deb77337	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	github.com/elazarl/goproxy@v0.0.0-20220115173737-adb46da277ac	0.0.0-20230731152917-f99041a5c027	1