StackRadar

CVE-2023-37920

Critical

Advisory

Published 25 Jul 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
604
of 17,787 indexed, latest versions
Container images
645
deployed by those charts
Fix available
3 of 5
affected packages

Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update

Carried by container images the latest versions of 604 of 17,787 indexed charts deploy, on 645 images.

Affected packageAffected versionsFixed inImages
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+19 moreno fix listed83
python-certifideb2018.1.18-2, 2019.11.28-1, 2020.6.20-1, 2022.9.24-1no fix listed57
py3-certifiapk2023.5.7-r02023.7.22-r01
ca-certificatesrpm2018.2.24-6.el8, 2019.2.32-80.0.el8_1, 2020.2.41-80.0.el8_2, 2021.2.50-80.0.el8_4+8 more0:2024.2.69_v8.0.303-80.0.el8_10, 0:2024.2.69_v8.0.303-91.4.el9_4202
certifipypi2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+21 more2023.7.22422
OSV records
ALPINE-CVE-2023-37920DEBIAN-CVE-2023-37920RHBA-2024:5691RHBA-2024:5736UBUNTU-CVE-2023-37920GHSA-xqr8-7jwr-rhp7
Also known as
PYSEC-2023-135

Charts affected

604 by stars
ChartLatestAffected imagesRadar Score
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

11,577
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

6,016
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
certifi@2022.12.7
2023.7.22

Open the chart page →

1,838
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

3,697

Container images carrying it

645 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
ca-certificates@2020.2.41-80.0.el8_2
certifi@2020.12.5
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
ca-certificates@2020.2.41-80.0.el8_2
certifi@2020.12.5
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
ca-certificates@2021.2.50-80.0.el8_4
certifi@2022.6.15
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
confluentinc/cp-kafka:7.5.1dc9b972db002
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
ca-certificates@2020.2.41-80.0.el8_2
certifi@2020.12.5
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
ca-certificates@2020.2.41-80.0.el8_2
certifi@2020.12.5
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
ca-certificates@2020.2.41-80.0.el8_2
certifi@2020.12.5
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
ca-certificates@2020.2.41-80.0.el8_2
certifi@2020.12.5
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
ca-certificates@2020.2.41-80.0.el8_2
certifi@2020.12.5
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
1
countly/countly-server:25.05.4e3c238248f99
python-certifi@2019.11.28-1
certifi@2019.11.28
no fix listed
2023.7.22
1
craftypath/sops-operator:v0.8.0402a0024c732
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10
1
craigwillis/c2metadata-bd:latestae317d7e4724
certifi@2020.11.8
2023.7.22
1
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
certifi@2022.12.7
2023.7.22
1
ctron/hawkbit-operator:0.1.48fdea8f76499
ca-certificates@2019.2.32-80.0.el8_1
0:2024.2.69_v8.0.303-80.0.el8_10
1
danuk/telegram-sender:0.0.1026560388070
certifi@2022.9.24
2023.7.22
1
daskdev/dask:1.1.04ecd7bc35500
certifi@2018.11.29
2023.7.22
1
daskdev/dask-notebook:1.1.0052630f5ca04
certifi@2018.11.29
2023.7.22
1
datadog/agent:7.22.08f20e56b5311
certifi@2020.6.20
2023.7.22
1
datadog/agent:6aad9994de6a7
certifi@2021.10.8
2023.7.22
1
datadog/extendeddaemonset:v0.8.0513a4377aed5
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
1
datamate/seafile-professional:11.0.202dd66b722464
python-pip@22.0.2+dfsg-1ubuntu0.6
no fix listed
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
certifi@2020.6.20
2023.7.22
1
datawire/aes:1.13.62beb65062c8b
certifi@2020.6.20
2023.7.22
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10
1
datawire/emissary:2.0.2-ea9716efbdd24b
certifi@2020.6.20
2023.7.22
1
dchesterton/amcrest2mqtt:1.0.9cc70f2238aa9
certifi@2021.5.30
2023.7.22
1
deconzcommunity/deconz:2.29.2062de2362641
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22
1
deconzcommunity/deconz:2.12.066541bbb78952
certifi@2018.8.24
2023.7.22
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
certifi@2021.10.8
2023.7.22
1
deepflowce/mysql:8.0.313d7ae561cf60
certifi@2022.6.15
2023.7.22
1
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
1
devopstales/kube-openid-connector:1.042c40a0e9f1b
certifi@2021.10.8
2023.7.22
1
devopstales/trivy-operator:2.575136aa7a26e
certifi@2022.12.7
2023.7.22
1
dockerid31415926/pod-pvc-mapping:v0.1.3354309669f16
certifi@2021.10.8
2023.7.22
1
dockerid31415926/pvc-exporter:v0.1.35a1dd17e0e07
certifi@2021.10.8
2023.7.22
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
python-pip@20.0.2-5ubuntu1.11
no fix listed
1
douz/helpdesk:latest4384103d0219
certifi@2022.6.15
2023.7.22
1
dpage/pgadmin4:7.537946e4f3e7b
certifi@2023.5.7
2023.7.22
1
dysnix/pritunl:v1.29-r819951e3e7a32
certifi@2020.4.5.1
2023.7.22
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
certifi@2019.9.11
2023.7.22
1
elyra/kernel-image-puller:3.2.2c922f1f1646a
certifi@2022.12.7
2023.7.22
1
erlangsolutions/wombatoam:4.1.284680c990147a
certifi@2020.6.20
2023.7.22
1
errbotio/errbot:6.1.900ee4e0953ab
certifi@2022.5.18.1
2023.7.22
1
esphome/esphome:1.18.03f51ec10e823
certifi@2020.12.5
2023.7.22
1
evgkrsk/postgres-controller:0.6.237f0e1f435c3
certifi@2022.12.7
2023.7.22
1
evk02/mlflow:2.2.1ef6ff257ef35
certifi@2022.12.7
2023.7.22
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.