StackRadar

CVE-2023-37920

Critical

Advisory

Published 25 Jul 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
610
of 17,787 indexed, latest versions
Container images
651
deployed by those charts
Fix available
3 of 5
affected packages

Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update

Carried by container images the latest versions of 610 of 17,787 indexed charts deploy, on 651 images.

Affected packageAffected versionsFixed inImages
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+19 moreno fix listed83
python-certifideb2018.1.18-2, 2019.11.28-1, 2020.6.20-1, 2022.9.24-1no fix listed57
py3-certifiapk2023.5.7-r02023.7.22-r01
ca-certificatesrpm2018.2.24-6.el8, 2019.2.32-80.0.el8_1, 2020.2.41-80.0.el8_2, 2021.2.50-80.0.el8_4+8 more0:2024.2.69_v8.0.303-80.0.el8_10, 0:2024.2.69_v8.0.303-91.4.el9_4203
certifipypi2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+21 more2023.7.22427
OSV records
ALPINE-CVE-2023-37920DEBIAN-CVE-2023-37920RHBA-2024:5691RHBA-2024:5736UBUNTU-CVE-2023-37920GHSA-xqr8-7jwr-rhp7
Also known as
PYSEC-2023-135

Charts affected

610 by stars
ChartLatestAffected imagesRadar Score
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
certifi@2020.6.20
2023.7.22

Open the chart page →

4,422
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
certifi@2020.6.20
2023.7.22

Open the chart page →

7,987
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ckan/ckan-base-datapusher:0.0.2184d11924549f
certifi@2020.12.5
2023.7.22

Open the chart page →

9,991
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
python-certifi@2019.11.28-1
certifi@2019.11.28
no fix listed
2023.7.22

Open the chart page →

18,923
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22

Open the chart page →

30,106
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed

Open the chart page →

14,350
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
python-pip@20.0.2-5ubuntu1.6
certifi@2022.12.7
no fix listed
2023.7.22

Open the chart page →

8,732
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

32,336
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,462
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
certifi@2023.5.7
2023.7.22

Open the chart page →

2,057
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
ca-certificates@2019.2.32-80.0.el8_1
0:2024.2.69_v8.0.303-80.0.el8_10
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
ca-certificates@2019.2.32-80.0.el8_1
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

12,460
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
ca-certificates@2018.2.24-6.el8
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

11,975
eoloserverihuertas2021-vmartinp2021-helm0.1.02 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,812
ikigaiikigai-chartVerified publisher0.0.92 of 58See more

ikigai ikigai-chart 0.0.9

2 of the 58 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
python-pip@20.0.2-5ubuntu1.6
certifi@2021.5.30
no fix listed
2023.7.22
kuberay/operator:v1.0.04e6ac8a3a2c4
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

37,844
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
certifi@2021.5.30
2023.7.22

Open the chart page →

6,502
healthchecksimprowisedVerified publisher1.1.11 of 2See more

healthchecks improwised 1.1.1

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
linuxserver/healthchecks:2.7.2023033194696dab3c50
certifi@2022.12.7
2023.7.22

Open the chart page →

2,628
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
certifi@2021.5.30
2023.7.22

Open the chart page →

3,314
evi-miniointelVerified publisher3.0.32 of 2See more

evi-minio intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

7,457
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

7,697
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
python-certifi@2019.11.28-1
python-pip@20.0.2-5ubuntu1.6
certifi@2019.11.28
no fix listed
no fix listed
2023.7.22

Open the chart page →

18,137
kesintelVerified publisher0.8.31 of 1See more

kes intel 0.8.3

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
minio/kes:v0.22.255f3aef5803e
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

3,570
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

7,697
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
certifi@2021.5.30
2023.7.22

Open the chart page →

7,233
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
certifi@2019.3.9
2023.7.22

Open the chart page →

18,998
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
ca-certificates@2023.2.60_v7.0.306-90.1.el9_2
0:2024.2.69_v8.0.303-91.4.el9_4

Open the chart page →

3,487
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22

Open the chart page →

10,816
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
ca-certificates@2019.2.32-80.0.el8_1
certifi@2020.4.5.1
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22

Open the chart page →

9,853
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
certifi@2021.10.8
2023.7.22

Open the chart page →

4,038
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
ca-certificates@2019.2.32-80.0.el8_1
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

12,856
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
certifi@2022.12.7
2023.7.22

Open the chart page →

2,581
frigatek8s-home-lab-repo9.1.11 of 1See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
certifi@2022.9.24
2023.7.22

Open the chart page →

2,370
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
python-pip@22.0.2+dfsg-1ubuntu0.2
no fix listed

Open the chart page →

9,832
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
python-pip@20.0.2-5ubuntu1.6
certifi@2022.12.7
no fix listed
2023.7.22

Open the chart page →

16,464
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
certifi@2022.5.18.1
2023.7.22

Open the chart page →

4,156
keycloak-operator-legacykeycloak-operator-legacy1.0.01 of 1See more

keycloak-operator-legacy keycloak-operator-legacy 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

5,066
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
python-pip@9.0.1-2.3~ubuntu1.18.04.6
certifi@2022.12.7
no fix listed
2023.7.22

Open the chart page →

12,541
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
certifi@2021.10.8
2023.7.22

Open the chart page →

1,598
kibana-index-pattern-updaterkfirfer0.0.31 of 1See more

kibana-index-pattern-updater kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
kfirfer/kibana-index-pattern-updater:1.0.12e88cfcec5c93
certifi@2020.12.5
2023.7.22

Open the chart page →

3,357
kube-hunterkfirfer1.0.51 of 1See more

kube-hunter kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
certifi@2021.10.8
2023.7.22

Open the chart page →

997
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
certifi@2020.12.5
2023.7.22

Open the chart page →

2,320
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
python-pip@9.0.1-2.3~ubuntu1
no fix listed

Open the chart page →

14,827
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
certifi@2019.9.11
2023.7.22

Open the chart page →

1,850
pavkrzwiatrzyk0.0.31 of 1See more

pav krzwiatrzyk 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
witcherek7/pav:0.0.342a744f29ac0
certifi@2022.12.7
2023.7.22

Open the chart page →

1,132
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

3,988
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

7,457
calicokubeblocksVerified publisher3.28.01 of 3See more

calico kubeblocks 3.28.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
calico/node:v3.28.0385bf6391fea
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

3,288
lokikubeblocksVerified publisher5.39.01 of 5See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
certifi@2023.5.7
2023.7.22

Open the chart page →

5,841
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

9,249
cephfs-csikubegems1.0.81 of 6See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
certifi@2018.10.15
2023.7.22

Open the chart page →

4,445
juicefs-csi-driverkubegems0.19.21 of 6See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
certifi@2020.6.20
2023.7.22

Open the chart page →

4,825

Container images carrying it

651 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.