CVE-2023-37920
CriticalAdvisory
Published 25 Jul 2023In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.006
- 45th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 610
- of 17,787 indexed, latest versions
- Container images
- 651
- deployed by those charts
- Fix available
- 3 of 5
- affected packages
Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update
Carried by container images the latest versions of 610 of 17,787 indexed charts deploy, on 651 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python-pipdeb | 1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+19 more | no fix listed | 83 |
| python-certifideb | 2018.1.18-2, 2019.11.28-1, 2020.6.20-1, 2022.9.24-1 | no fix listed | 57 |
| py3-certifiapk | 2023.5.7-r0 | 2023.7.22-r0 | 1 |
| ca-certificatesrpm | 2018.2.24-6.el8, 2019.2.32-80.0.el8_1, 2020.2.41-80.0.el8_2, 2021.2.50-80.0.el8_4+8 more | 0:2024.2.69_v8.0.303-80.0.el8_10, 0:2024.2.69_v8.0.303-91.4.el9_4 | 203 |
| certifipypi | 2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+21 more | 2023.7.22 | 427 |
- OSV records
- ALPINE-CVE-2023-37920DEBIAN-CVE-2023-37920RHBA-2024:5691RHBA-2024:5736UBUNTU-CVE-2023-37920GHSA-xqr8-7jwr-rhp7
- Also known as
- PYSEC-2023-135
Charts affected
610 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| miniowenerme | 8.0.10 | 1 of 1See more | 6,915 |
| minio-standalonewenerme | 1.0.2 | 1 of 1See more | 6,138 |
| ceph-csi-cephfswikimedia | 0.1.8 | 1 of 5See more | 10,286 |
| ceph-csi-rbdwikimedia | 0.1.13 | 1 of 6See more | 11,785 |
| docker-hub-rate-limit-exporterwiremindVerified publisher | 0.3.0 | 1 of 1See more | 1,843 |
| powerdnsadminwitcom-gmbh | 0.3.4 | 1 of 1See more | 2,643 |
| workshop-pipelinesworkshop-pipelines | 0.1.6 | 1 of 2See more | 11,592 |
| keycloakxzaks | 2.2.0 | 1 of 1See more | 6,016 |
| enterprise-gatewayzeet | 3.2.2 | 1 of 2See more | 1,838 |
| posthogzeet | 0.23.2 | 1 of 9See more | 3,697 |
Container images carrying it
651 by charts deploying them
A fixed version is listed for 3 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | 2a374c124d44 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| minio/ | 4b415310d8d0 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| minio/ | c631532a394e | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| minio/ | 1484c87239ea | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| minio/ | 6d770d7f255c | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| minio/ | f9576903f19d | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| minio/ | fc6bedc99355 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| minio/ | 170b154d2c61 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| minio/ | 2adc5be088f5 | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |
| mintproject/ | 67d2f2103085 | certifi | 2023.7.22 | 1 |
| mintproject/ | 02260d20a21f | certifi | 2023.7.22 | 1 |
| mondata/ | 6f94c6caf8bf | certifi | 2023.7.22 | 1 |
| moreillon/ | bacb2ddd8394 | certifi | 2023.7.22 | 1 |
| mozilla/ | 016162bf39d8 | certifi | 2023.7.22 | 1 |
| mshanley80/ | 5b189a70c0fb | python-pip certifi | no fix listed 2023.7.22 | 1 |
| mvitale1989/ | 1504ccda06df | certifi | 2023.7.22 | 1 |
| mysql/ | e4ea36622cdd | certifi | 2023.7.22 | 1 |
| neilpeterson/ | 64fd8dab075f | certifi | 2023.7.22 | 1 |
| neilpeterson/ | 8b645ac1a23e | certifi | 2023.7.22 | 1 |
| neilpeterson/ | 6527b05d5d03 | certifi | 2023.7.22 | 1 |
| neilpeterson/ | 29d229ab446e | certifi | 2023.7.22 | 1 |
| neilpeterson/ | 969af3cb8466 | certifi | 2023.7.22 | 1 |
| neilpeterson/ | 39ce9f92e899 | certifi | 2023.7.22 | 1 |
| netbirdio/ | 15a3aab9a345 | certifi | 2023.7.22 | 1 |
| netbirdio/ | 1b59e1c905c9 | certifi | 2023.7.22 | 1 |
| netbirdio/ | 332cc31f5f35 | certifi | 2023.7.22 | 1 |
| netbirdio/ | 88b5fb704a8c | certifi | 2023.7.22 | 1 |
| netboxcommunity/ | 3d652dca5351 | certifi | 2023.7.22 | 1 |
| ngoduykhanh/ | 099371dd9ba6 | certifi | 2023.7.22 | 1 |
| ngoduykhanh/ | 9898a7cf37d2 | certifi | 2023.7.22 | 1 |
| nlmacamp/ | 5dbb8589f824 | certifi | 2023.7.22 | 1 |
| nyurik/ | e0553236e3eb | certifi | 2023.7.22 | 1 |
| octoprint/ | 106c26efcd8a | certifi | 2023.7.22 | 1 |
| octoprint/ | ea3bffae2470 | certifi | 2023.7.22 | 1 |
| omecproject/ | bcc5f19fd676 | python-pip | no fix listed | 1 |
| omecproject/ | d109a8e57e71 | python-pip certifi | no fix listed 2023.7.22 | 1 |
| opendatacube/ | 5d810e8504b8 | python-pip certifi | no fix listed 2023.7.22 | 1 |
| opendatacube/ | 91870111837c | python-certifi python-pip certifi | no fix listed no fix listed 2023.7.22 | 1 |
| opendatacube/ | 1b90cdf68831 | python-certifi python-pip certifi | no fix listed no fix listed 2023.7.22 | 1 |
| openelevation/ | 82fb21612e86 | python-pip | no fix listed | 1 |
| openemr/ | 89eaa6d9a4e3 | certifi | 2023.7.22 | 1 |
| openspeedtest/ | d4d62f4b7d85 | certifi | 2023.7.22 | 1 |
| openstackhelm/ | f728510bab3c | certifi | 2023.7.22 | 1 |
| openstackhelm/ | e07d75953d2e | certifi | 2023.7.22 | 1 |
| openwhisk/ | c80dba0de3aa | python-pip certifi | no fix listed 2023.7.22 | 1 |
| openzaak/ | 2e65313b9b10 | certifi | 2023.7.22 | 1 |
| openzaak/ | 2ca2ea6e0ae9 | certifi | 2023.7.22 | 1 |
| oxheadalpha/ | d9faed45bf1c | certifi | 2023.7.22 | 1 |
| pecan/ | 73b2074f3fec | certifi | 2023.7.22 | 1 |
| percona/ | 1f978ab8912e | ca-certificates | 0:2024.2.69_v8.0.303-80.0.el8_10 | 1 |