StackRadar

CVE-2023-37920

Critical

Advisory

Published 25 Jul 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
604
of 17,781 indexed, latest versions
Container images
645
deployed by those charts
Fix available
3 of 5
affected packages

Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update

Carried by container images the latest versions of 604 of 17,781 indexed charts deploy, on 645 images.

Affected packageAffected versionsFixed inImages
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+19 moreno fix listed83
python-certifideb2018.1.18-2, 2019.11.28-1, 2020.6.20-1, 2022.9.24-1no fix listed57
py3-certifiapk2023.5.7-r02023.7.22-r01
ca-certificatesrpm2018.2.24-6.el8, 2019.2.32-80.0.el8_1, 2020.2.41-80.0.el8_2, 2021.2.50-80.0.el8_4+8 more0:2024.2.69_v8.0.303-80.0.el8_10, 0:2024.2.69_v8.0.303-91.4.el9_4202
certifipypi2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+21 more2023.7.22422
OSV records
ALPINE-CVE-2023-37920DEBIAN-CVE-2023-37920RHBA-2024:5691RHBA-2024:5736UBUNTU-CVE-2023-37920GHSA-xqr8-7jwr-rhp7
Also known as
PYSEC-2023-135

Charts affected

604 by stars
ChartLatestAffected imagesRadar Score
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-certifi@2018.1.18-2
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
no fix listed
2023.7.22

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python-pip@9.0.1-2.3~ubuntu1.18.04.2
certifi@2020.6.20
no fix listed
2023.7.22

Open the chart page →

18,863
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
2023.7.22

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-certifi@2018.1.18-2
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
no fix listed
2023.7.22

Open the chart page →

24,335
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

7,486
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
certifi@2020.6.20
2023.7.22

Open the chart page →

2,264
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
python-pip@22.0.2+dfsg-1ubuntu0.3
no fix listed

Open the chart page →

4,798
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
certifi@2020.6.20
2023.7.22

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-certifi@2019.11.28-1
python-pip@20.0.2-5ubuntu1.9
certifi@2022.12.7
no fix listed
no fix listed
2023.7.22

Open the chart page →

14,856
kube-openid-connectdevopstalesVerified publisher1.1.01 of 1See more

kube-openid-connect devopstales 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
devopstales/kube-openid-connector:1.042c40a0e9f1b
certifi@2021.10.8
2023.7.22

Open the chart page →

1,333
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
certifi@2021.5.30
2023.7.22

Open the chart page →

8,645
calicodevtron-labs0.1.11 of 4See more

calico devtron-labs 0.1.1

1 of the 4 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

10,071
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

6,237
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
certifi@2021.5.30
2023.7.22

Open the chart page →

8,645
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
certifi@2018.8.24
2023.7.22

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

21,641
vmware-exporterdniel0.0.11 of 1See more

vmware-exporter dniel 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
certifi@2021.10.8
2023.7.22

Open the chart page →

1,351
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
python-certifi@2020.6.20-1
certifi@2020.6.20
no fix listed
2023.7.22

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
certifi@2022.6.15
2023.7.22

Open the chart page →

4,550
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
quay.io/keycloak/keycloak:20.0054ef67eb7da
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

55,666
drogue-cloud-examplesdrogue-iotVerified publisher0.7.114 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

4 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
python-certifi@2020.6.20-1
certifi@2020.6.20
no fix listed
2023.7.22
ghcr.io/ctron/kubectl:1.25e37d61b5277c
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
certifi@2022.5.18.1
2023.7.22

Open the chart page →

13,558
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

6,915
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
certifi@2023.5.7
2023.7.22

Open the chart page →

1,990
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
certifi@2020.4.5.1
2023.7.22
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
certifi@2020.6.20
2023.7.22
amundsendev/amundsen-search:2.4.099dda9502c3e
certifi@2020.6.20
2023.7.22

Open the chart page →

11,174
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
certifi@2020.12.5
2023.7.22

Open the chart page →

5,161
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
certifi@2020.4.5.1
2023.7.22

Open the chart page →

5,055
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

11,482
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22

Open the chart page →

30,159
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
python-certifi@2019.11.28-1
python-pip@20.0.2-5ubuntu1.6
certifi@2019.11.28
no fix listed
no fix listed
2023.7.22

Open the chart page →

25,122
eoloPlanteolo-plannerVerified publisher0.1.02 of 7See more

eoloPlant eolo-planner 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.02 of 7See more

eoloplanner eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.02 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.02 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,096
eoloplanteoloplant1.0.02 of 7See more

eoloplant eoloplant 1.0.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.02 of 7See more

eoloplants eoloplants-urjc 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,721
servereoloserverVerified publisher0.1.02 of 7See more

server eoloserver 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

32,205
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
python-pip@20.0.2-5ubuntu1.8
no fix listed

Open the chart page →

9,334
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
certifi@2022.12.7
2023.7.22

Open the chart page →

4,678
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
python-certifi@2019.11.28-1
certifi@2019.11.28
no fix listed
2023.7.22

Open the chart page →

20,933
argocd-version-exporterevilmartians0.0.11 of 1See more

argocd-version-exporter evilmartians 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
certifi@2021.5.30
2023.7.22

Open the chart page →

2,401
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
certifi@2023.5.7
2023.7.22

Open the chart page →

2,885
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
certifi@2022.12.7
2023.7.22

Open the chart page →

4,085
fediblockholefedihost0.1.01 of 1See more

fediblockhole fedihost 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
certifi@2022.12.7
2023.7.22

Open the chart page →

815
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
certifi@2019.6.16
2023.7.22

Open the chart page →

14,673

Container images carrying it

645 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
aquasec/kube-hunter:1950bf607ce9308
certifi@2018.11.29
2023.7.22
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
certifi@2020.4.5.1
2023.7.22
1
assistiot/fl_repository:latest0fce3ea719a5
certifi@2022.6.15.1
2023.7.22
1
assistiot/fl_training_collector:latest792715dd3084
certifi@2021.10.8
2023.7.22
1
assistiot/identity-manager_kc:latest0df4b4fa899a
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
assistiot/open_api_backend:1.1.230812ba93555
python-pip@22.0.2+dfsg-1ubuntu0.4
no fix listed
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
certifi@2023.5.7
2023.7.22
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python-certifi@2019.11.28-1
python-pip@20.0.2-5ubuntu1.8
certifi@2019.11.28
no fix listed
no fix listed
2023.7.22
1
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
certifi@2021.10.8
2023.7.22
1
bbvalabs/sensitive-data:1.0.13ea299ae63c0
certifi@2020.12.5
2023.7.22
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
certifi@2020.4.5.1
2023.7.22
1
beopenit/door-helm:v3.0.1b4d9f9bee224
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
billimek/comcastusage-for-influxdb:latest801bba1228ac
certifi@2018.10.15
2023.7.22
1
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
certifi@2020.4.5.2
2023.7.22
1
billimek/sb6183-for-influxdb:latestbf8158556035
certifi@2018.4.16
2023.7.22
1
blacktop/httpie:latestfc5e68e2f5ab
certifi@2018.4.16
2023.7.22
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
python-pip@20.0.2-5ubuntu1.6
no fix listed
1
bootc/puppetboard:1.1.0f1383295e7be
certifi@2019.11.28
2023.7.22
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
python-certifi@2019.11.28-1
certifi@2019.11.28
no fix listed
2023.7.22
1
bsgrigorov/helm-operator:latest45ab095f09c8
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10
1
buildkite/agent:3.25.0aec38cfaae0e
certifi@2020.6.20
2023.7.22
1
buntha/mlflow:2.1.1154542cc3083
certifi@2022.12.7
2023.7.22
1
calico/node:v3.28.0385bf6391fea
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
calico/node:v3.28.1d8c644a8a3ee
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
camerahub/camerahub:0.36.23a5af37dd6e1b
certifi@2022.12.7
2023.7.22
1
camptocamp/bucket-cloner:latestacfafc308d88
certifi@2021.5.30
2023.7.22
1
camptocamp/ekorre:0.1.035c91d5fda04
certifi@2019.11.28
2023.7.22
1
camptocamp/pghoard:10bff736b15623
certifi@2018.10.15
2023.7.22
1
camptocamp/snow-webhook:latest2924b43dbf40
certifi@2018.8.24
2023.7.22
1
cdignam/kodiak:v0.54.05a6a55b39cee
certifi@2021.5.30
2023.7.22
1
ceph/daemon:latest-nautilus90f30824a96e
certifi@2018.10.15
2023.7.22
1
chaostoolkit/back:latest734f3af86125
certifi@2020.6.20
2023.7.22
1
chaostoolkit/front:latest7f4a7eb9f7df
certifi@2020.11.8
2023.7.22
1
chaostoolkit/middle:latestb95ba4961cfc
certifi@2020.11.8
2023.7.22
1
chetangautamm/repo:sipp.v3e7f7049e1544
python-certifi@2019.11.28-1
certifi@2019.11.28
no fix listed
2023.7.22
1
cheyang/distributed-tf:1.6.046cc34755493
certifi@2018.1.18
2023.7.22
1
chubaofs/cfs-client:3.2.015ff74209ce7
certifi@2021.10.8
2023.7.22
1
chubaofs/cfs-server:3.2.0205030e045f2
certifi@2021.10.8
2023.7.22
1
citizenstig/httpbin:latestb81c818ccb86
python-pip@8.1.1-2ubuntu0.4
no fix listed
1
ckan/ckan-base-datapusher:0.0.2184d11924549f
certifi@2020.12.5
2023.7.22
1
cloudve/janis-terminal:latestaf56e77ca587
python-pip@9.0.1-2.3~ubuntu1.18.04.1
certifi@2020.4.5.2
no fix listed
2023.7.22
1
cloudve/ttyd:latestd79c1c5881c0
certifi@2020.4.5.1
2023.7.22
1
cockroachdb/cockroach:v22.2.91116820f4134
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
cockroachdb/cockroach-operator:v2.1.0983312754620
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10
1
codaprotocol/buildkite-exporter:0.2.137c68e67a401
certifi@2020.12.5
2023.7.22
1
codaprotocol/coda-user-agent:0.1.54ba4dd3a041f
certifi@2020.4.5.1
2023.7.22
1
coderenvs/coder-service:1.44.61deffc4670e6
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
coderenvs/timescale:1.44.676fd37fe6830
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
codetogether/codetogether:latest4348c8a38752
ca-certificates@2023.2.60_v7.0.306-90.1.el9_2
0:2024.2.69_v8.0.303-91.4.el9_4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.