CVE-2023-37920
CriticalAdvisory
Published 25 Jul 2023In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.006
- 45th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 604
- of 17,787 indexed, latest versions
- Container images
- 645
- deployed by those charts
- Fix available
- 3 of 5
- affected packages
Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update
Carried by container images the latest versions of 604 of 17,787 indexed charts deploy, on 645 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python-pipdeb | 1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+19 more | no fix listed | 83 |
| python-certifideb | 2018.1.18-2, 2019.11.28-1, 2020.6.20-1, 2022.9.24-1 | no fix listed | 57 |
| py3-certifiapk | 2023.5.7-r0 | 2023.7.22-r0 | 1 |
| ca-certificatesrpm | 2018.2.24-6.el8, 2019.2.32-80.0.el8_1, 2020.2.41-80.0.el8_2, 2021.2.50-80.0.el8_4+8 more | 0:2024.2.69_v8.0.303-80.0.el8_10, 0:2024.2.69_v8.0.303-91.4.el9_4 | 202 |
| certifipypi | 2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+21 more | 2023.7.22 | 422 |
- OSV records
- ALPINE-CVE-2023-37920DEBIAN-CVE-2023-37920RHBA-2024:5691RHBA-2024:5736UBUNTU-CVE-2023-37920GHSA-xqr8-7jwr-rhp7
- Also known as
- PYSEC-2023-135
Charts affected
604 by stars
Container images carrying it
645 by charts deploying them
A fixed version is listed for 3 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| aquasec/ | 0bf607ce9308 | certifi | 2023.7.22 | 1 |
| assistiot/ | 0aacefac9677 | certifi | 2023.7.22 | 1 |
| assistiot/ | 0fce3ea719a5 | certifi | 2023.7.22 | 1 |
| assistiot/ | 792715dd3084 | certifi | 2023.7.22 | 1 |
| assistiot/ | 0df4b4fa899a | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| assistiot/ | 30812ba93555 | python-pip | no fix listed | 1 |
| assistiot/ | 8b5d118bdf0e | certifi | 2023.7.22 | 1 |
| assistiot/ | e5ae539ce2cb | python-certifi python-pip certifi | no fix listed no fix listed 2023.7.22 | 1 |
| balihb/ | ee48e79f5d76 | certifi | 2023.7.22 | 1 |
| bbvalabs/ | 3ea299ae63c0 | certifi | 2023.7.22 | 1 |
| benbusby/ | f77f7e6e4ad2 | certifi | 2023.7.22 | 1 |
| beopenit/ | b4d9f9bee224 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| bicarus/ | b1dab0721e1c | python-pip | no fix listed | 1 |
| billimek/ | 801bba1228ac | certifi | 2023.7.22 | 1 |
| billimek/ | f14ccd7aad0e | certifi | 2023.7.22 | 1 |
| billimek/ | bf8158556035 | certifi | 2023.7.22 | 1 |
| blacktop/ | fc5e68e2f5ab | certifi | 2023.7.22 | 1 |
| blakeblackshear/ | ae269270ad9e | python-pip | no fix listed | 1 |
| bootc/ | f1383295e7be | certifi | 2023.7.22 | 1 |
| browserless/ | c81ae5585b47 | python-certifi certifi | no fix listed 2023.7.22 | 1 |
| bsgrigorov/ | 45ab095f09c8 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| buildkite/ | aec38cfaae0e | certifi | 2023.7.22 | 1 |
| buntha/ | 154542cc3083 | certifi | 2023.7.22 | 1 |
| calico/ | 385bf6391fea | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| calico/ | d8c644a8a3ee | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| camerahub/ | a5af37dd6e1b | certifi | 2023.7.22 | 1 |
| camptocamp/ | acfafc308d88 | certifi | 2023.7.22 | 1 |
| camptocamp/ | 35c91d5fda04 | certifi | 2023.7.22 | 1 |
| camptocamp/ | bff736b15623 | certifi | 2023.7.22 | 1 |
| camptocamp/ | 2924b43dbf40 | certifi | 2023.7.22 | 1 |
| cdignam/ | 5a6a55b39cee | certifi | 2023.7.22 | 1 |
| ceph/ | 90f30824a96e | certifi | 2023.7.22 | 1 |
| chaostoolkit/ | 734f3af86125 | certifi | 2023.7.22 | 1 |
| chaostoolkit/ | 7f4a7eb9f7df | certifi | 2023.7.22 | 1 |
| chaostoolkit/ | b95ba4961cfc | certifi | 2023.7.22 | 1 |
| chetangautamm/ | e7f7049e1544 | python-certifi certifi | no fix listed 2023.7.22 | 1 |
| cheyang/ | 46cc34755493 | certifi | 2023.7.22 | 1 |
| chubaofs/ | 15ff74209ce7 | certifi | 2023.7.22 | 1 |
| chubaofs/ | 205030e045f2 | certifi | 2023.7.22 | 1 |
| citizenstig/ | b81c818ccb86 | python-pip | no fix listed | 1 |
| ckan/ | 84d11924549f | certifi | 2023.7.22 | 1 |
| cloudve/ | af56e77ca587 | python-pip certifi | no fix listed 2023.7.22 | 1 |
| cloudve/ | d79c1c5881c0 | certifi | 2023.7.22 | 1 |
| cockroachdb/ | 1116820f4134 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| cockroachdb/ | 983312754620 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| codaprotocol/ | 37c68e67a401 | certifi | 2023.7.22 | 1 |
| codaprotocol/ | 4ba4dd3a041f | certifi | 2023.7.22 | 1 |
| coderenvs/ | 1deffc4670e6 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| coderenvs/ | 76fd37fe6830 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| codetogether/ | 4348c8a38752 | ca-certificates | 0:2024.2.69_v8.0.303-91.4.el9_4 | 1 |