StackRadar

CVE-2023-37920

Critical

Advisory

Published 25 Jul 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
604
of 17,781 indexed, latest versions
Container images
645
deployed by those charts
Fix available
3 of 5
affected packages

Red Hat Bug Fix Advisory: ca-certificates bug fix and enhancement update

Carried by container images the latest versions of 604 of 17,781 indexed charts deploy, on 645 images.

Affected packageAffected versionsFixed inImages
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+19 moreno fix listed83
python-certifideb2018.1.18-2, 2019.11.28-1, 2020.6.20-1, 2022.9.24-1no fix listed57
py3-certifiapk2023.5.7-r02023.7.22-r01
ca-certificatesrpm2018.2.24-6.el8, 2019.2.32-80.0.el8_1, 2020.2.41-80.0.el8_2, 2021.2.50-80.0.el8_4+8 more0:2024.2.69_v8.0.303-80.0.el8_10, 0:2024.2.69_v8.0.303-91.4.el9_4202
certifipypi2017.11.05, 2017.11.5, 2018.1.18, 2018.4.16+21 more2023.7.22422
OSV records
ALPINE-CVE-2023-37920DEBIAN-CVE-2023-37920RHBA-2024:5691RHBA-2024:5736UBUNTU-CVE-2023-37920GHSA-xqr8-7jwr-rhp7
Also known as
PYSEC-2023-135

Charts affected

604 by stars
ChartLatestAffected imagesRadar Score
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
python-certifi@2018.1.18-2
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
no fix listed
2023.7.22

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python-pip@9.0.1-2.3~ubuntu1.18.04.2
certifi@2020.6.20
no fix listed
2023.7.22

Open the chart page →

18,863
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
2023.7.22

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
python-certifi@2018.1.18-2
python-pip@9.0.1-2.3~ubuntu1
certifi@2018.1.18
no fix listed
no fix listed
2023.7.22

Open the chart page →

24,335
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

7,486
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
certifi@2020.6.20
2023.7.22

Open the chart page →

2,264
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
python-pip@22.0.2+dfsg-1ubuntu0.3
no fix listed

Open the chart page →

4,798
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
certifi@2020.6.20
2023.7.22

Open the chart page →

4,422
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
python-certifi@2019.11.28-1
python-pip@20.0.2-5ubuntu1.9
certifi@2022.12.7
no fix listed
no fix listed
2023.7.22

Open the chart page →

14,856
kube-openid-connectdevopstalesVerified publisher1.1.01 of 1See more

kube-openid-connect devopstales 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
devopstales/kube-openid-connector:1.042c40a0e9f1b
certifi@2021.10.8
2023.7.22

Open the chart page →

1,333
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
certifi@2021.5.30
2023.7.22

Open the chart page →

8,645
calicodevtron-labs0.1.11 of 4See more

calico devtron-labs 0.1.1

1 of the 4 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

10,071
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

6,237
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
certifi@2021.5.30
2023.7.22

Open the chart page →

8,645
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
certifi@2018.8.24
2023.7.22

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

21,641
vmware-exporterdniel0.0.11 of 1See more

vmware-exporter dniel 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
certifi@2021.10.8
2023.7.22

Open the chart page →

1,351
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
python-certifi@2020.6.20-1
certifi@2020.6.20
no fix listed
2023.7.22

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
certifi@2022.6.15
2023.7.22

Open the chart page →

4,550
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
ca-certificates@2022.2.54-90.2.el9_0
0:2024.2.69_v8.0.303-91.4.el9_4
quay.io/keycloak/keycloak:20.0054ef67eb7da
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

55,666
drogue-cloud-examplesdrogue-iotVerified publisher0.7.114 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

4 of the 6 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
python-certifi@2020.6.20-1
certifi@2020.6.20
no fix listed
2023.7.22
ghcr.io/ctron/kubectl:1.25e37d61b5277c
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
certifi@2022.5.18.1
2023.7.22

Open the chart page →

13,558
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

6,915
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
certifi@2023.5.7
2023.7.22

Open the chart page →

1,990
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
certifi@2020.4.5.1
2023.7.22
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
certifi@2020.6.20
2023.7.22
amundsendev/amundsen-search:2.4.099dda9502c3e
certifi@2020.6.20
2023.7.22

Open the chart page →

11,174
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.10.718feb3906286
certifi@2020.12.5
2023.7.22

Open the chart page →

5,161
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
certifi@2020.4.5.1
2023.7.22

Open the chart page →

5,055
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

11,482
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22

Open the chart page →

30,159
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

4,033
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
python-certifi@2019.11.28-1
python-pip@20.0.2-5ubuntu1.6
certifi@2019.11.28
no fix listed
no fix listed
2023.7.22

Open the chart page →

25,122
eoloPlanteolo-plannerVerified publisher0.1.02 of 7See more

eoloPlant eolo-planner 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.02 of 7See more

eoloplanner eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.02 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.02 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,096
eoloplanteoloplant1.0.02 of 7See more

eoloplant eoloplant 1.0.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.02 of 7See more

eoloplants eoloplants-urjc 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

27,721
servereoloserverVerified publisher0.1.02 of 7See more

server eoloserver 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10

Open the chart page →

32,205
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
python-pip@20.0.2-5ubuntu1.8
no fix listed

Open the chart page →

9,334
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
certifi@2022.12.7
2023.7.22

Open the chart page →

4,678
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
python-certifi@2019.11.28-1
certifi@2019.11.28
no fix listed
2023.7.22

Open the chart page →

20,933
argocd-version-exporterevilmartians0.0.11 of 1See more

argocd-version-exporter evilmartians 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/evl.ms/argocd-exporter:0.0.136ea8f34aa6b
certifi@2021.5.30
2023.7.22

Open the chart page →

2,401
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
certifi@2023.5.7
2023.7.22

Open the chart page →

2,885
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
certifi@2022.12.7
2023.7.22

Open the chart page →

4,085
fediblockholefedihost0.1.01 of 1See more

fediblockhole fedihost 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
certifi@2022.12.7
2023.7.22

Open the chart page →

815
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-37920.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
certifi@2019.6.16
2023.7.22

Open the chart page →

14,673

Container images carrying it

645 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
python-pip@8.1.1-2ubuntu0.4
certifi@2019.3.9
no fix listed
2023.7.22
11
codeurjc/weatherservice:v1.0b9e2f7234349
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
10
codeurjc/server:v1.0310bea5b1ee7
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
8
oomk8s/readiness-check:2.0.07daa08b81954
python-pip@8.1.1-2ubuntu0.4
certifi@2018.1.18
no fix listed
2023.7.22
6
mastercloudapps/server:v2.23f3d24dfe2686
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
4
mastercloudapps/weatherservice:v1.23de859d29c116
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
4
quay.io/strimzi/operator:0.37.052f376e64b9b
ca-certificates@2022.2.54-80.2.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
4
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python-pip@20.0.2-5ubuntu1.6
certifi@2021.10.8
no fix listed
2023.7.22
3
dpage/pgadmin4:6.12781369df9994
certifi@2020.12.5
2023.7.22
3
kiwigrid/k8s-sidecar:0.1.193170069ff0976
certifi@2020.6.20
2023.7.22
3
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
certifi@2020.4.5.1
2023.7.22
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10
3
mysql/mysql-server:latestd6c8301b7834
certifi@2022.9.24
2023.7.22
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
ca-certificates@2020.2.41-80.0.el8_2
0:2024.2.69_v8.0.303-80.0.el8_10
3
quay.io/devtron/clair:4.3.675fb847ac045
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
3
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
certifi@2021.5.30
2023.7.22
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
ca-certificates@2023.2.60_v7.0.306-80.0.el8_6
0:2024.2.69_v8.0.303-80.0.el8_10
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
3
amancevice/superset:0.35.212a0a9e66550
certifi@2019.11.28
2023.7.22
2
aquasec/kube-hunter:0.6.8e64fe49f059f
certifi@2021.10.8
2023.7.22
2
blakeblackshear/frigate:0.11.18330b0a265b8
certifi@2022.9.24
2023.7.22
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
ca-certificates@2022.2.54-80.2.el8_6
certifi@2023.5.7
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
ca-certificates@2022.2.54-80.2.el8_6
certifi@2023.5.7
0:2024.2.69_v8.0.303-80.0.el8_10
2023.7.22
2
cs3org/wopiserver:v9.4.202a9e78757b4
certifi@2022.12.7
2023.7.22
2
datawire/aes:1.14.48588eafe6862
certifi@2020.6.20
2023.7.22
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
certifi@2023.5.7
2023.7.22
2
hjacobs/kube-ops-view:20.4.058221b57d4d2
certifi@2020.4.5.1
2023.7.22
2
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
certifi@2019.3.9
2023.7.22
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
certifi@2019.3.9
2023.7.22
2
kiwigrid/k8s-sidecar:1.24.44138bea678f0
certifi@2023.5.7
2023.7.22
2
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
certifi@2023.5.7
2023.7.22
2
larribas/mlflow:1.9.105ccb0b46bfb
certifi@2020.6.20
2023.7.22
2
lncm/specter-desktop:v1.10.536eaa06f99f4
certifi@2021.10.8
2023.7.22
2
louislam/uptime-kuma:2.5.4917318f9d7be
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22
2
louislam/uptime-kuma:2.3.29aeb4e51d038
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
python-certifi@2022.9.24-1
certifi@2022.9.24
no fix listed
2023.7.22
2
minio/operator:v4.3.754393e03f3b2
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
2
neuvector/manager:3.2.1f1b7d666eae0
certifi@2019.11.28
2023.7.22
2
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
certifi@2021.10.8
2023.7.22
2
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
certifi@2019.6.16
2023.7.22
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
python-pip@8.1.1-2ubuntu0.4
certifi@2018.8.24
no fix listed
2023.7.22
2
sealife/fritzbox-exporter:1.0f5cc2f0f4c9b
certifi@2020.12.5
2023.7.22
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python-pip@20.0.2-5ubuntu1.6
no fix listed
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
ca-certificates@2021.2.50-80.0.el8_4
0:2024.2.69_v8.0.303-80.0.el8_10
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
python-pip@20.0.2-5ubuntu1.10
no fix listed
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
python-pip@22.0.2+dfsg-1ubuntu0.2
no fix listed
2
weblate/weblate:4.2.2-169c160d37a3c
certifi@2020.6.20
2023.7.22
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
certifi@2023.5.7
2023.7.22
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
certifi@2018.10.15
2023.7.22
2
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
ca-certificates@2023.2.60_v7.0.306-80.0.el8_8
0:2024.2.69_v8.0.303-80.0.el8_10
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.