StackRadar

CVE-2023-38545

Critical

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.785
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
308
of 17,781 indexed, latest versions
Container images
266
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 266 images.

Affected packageAffected versionsFixed inImages
curlapk7.80.0-r0, 7.80.0-r1, 7.80.0-r2, 7.80.0-r3+23 more8.4.0-r0198
curldeb7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+6 more7.81.0-1ubuntu1.14, 7.88.1-10+deb12u468
OSV records
ALPINE-CVE-2023-38545DEBIAN-CVE-2023-38545UBUNTU-CVE-2023-38545
Also known as
USN-6429-1

Charts affected

308 by stars
ChartLatestAffected imagesRadar Score
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
curl@7.81.0-1ubuntu1.7
7.81.0-1ubuntu1.14

Open the chart page →

6,232
queryservice-uiwbstack0.2.01 of 1See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
curl@7.80.0-r0
8.4.0-r0

Open the chart page →

1,996
uiwbstack0.4.01 of 1See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/wbstack/ui:3.94b01f67faadf1
curl@7.80.0-r1
8.4.0-r0

Open the chart page →

1,523
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
curl@7.88.1-10
7.88.1-10+deb12u4

Open the chart page →

10,001
generic-webhookwebhooks0.1.11 of 1See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
curl@7.87.0-r2
8.4.0-r0

Open the chart page →

2,030
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
curl@7.80.0-r0
8.4.0-r0

Open the chart page →

7,552
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
curl@7.80.0-r1
8.4.0-r0
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
curl@7.80.0-r5
8.4.0-r0

Open the chart page →

16,083
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
curl@8.1.2-r0
8.4.0-r0

Open the chart page →

5,033

Container images carrying it

266 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.14
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
curl@7.81.0-1ubuntu1.7
7.81.0-1ubuntu1.14
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
curl@7.81.0-1ubuntu1.2
7.81.0-1ubuntu1.14
1
trinodb/trino:405ee80ab5eeab2
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.14
1
udhos/forward:1.1.312e120d39fdb
curl@8.1.2-r0
8.4.0-r0
1
udhos/prime:1.0.0e432012dd34a
curl@8.1.2-r0
8.4.0-r0
1
vaultwarden/server:1.27.0-alpine7cd450642c54
curl@7.87.0-r0
8.4.0-r0
1
vlebediantsev/notes-admin-front:latest007c6670ff48
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u4
1
vlebediantsev/notes-project-front:latest945675fd2636
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u4
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u4
1
wistefan/mvf:lateste0887302b2d8
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.14
1
xvilo/php:8.2-composera138e57d3204
curl@7.87.0-r1
8.4.0-r0
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
1
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
curl@7.83.1-r4
8.4.0-r0
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/conductionnl/commonground-gateway-frontend:dev3b3fbb57cae8
curl@7.83.1-r2
8.4.0-r0
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/cubeengine/sponge:1.20.2-11.0.0-RC13755c85f2b82064
curl@8.3.0-r0
8.4.0-r0
1
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
curl@7.87.0-r1
8.4.0-r0
1
ghcr.io/data-fair/metrics:0a8d40779eeae
curl@8.1.2-r0
8.4.0-r0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
curl@7.83.1-r2
8.4.0-r0
1
ghcr.io/dodevops/scalyr-k8snode-manager:latestfc39fcdd3968
curl@7.80.0-r1
8.4.0-r0
1
ghcr.io/eugenmayer/nist-data-mirror:0.1.1a2162df94729
curl@7.87.0-r1
8.4.0-r0
1
ghcr.io/k10app/businit:latest94c9a3e799c2
curl@7.86.0-r1
8.4.0-r0
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
1
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
curl@7.83.1-r1
8.4.0-r0
1
ghcr.io/leoquote/tencentcloud-exporter:masterca51b6bb15dd
curl@8.2.1-r0
8.4.0-r0
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
curl@8.2.1-r0
8.4.0-r0
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
curl@7.87.0-r2
8.4.0-r0
1
ghcr.io/mjohnson9/docker-pleroma:v0.1.44f08e2823756
curl@7.83.1-r4
8.4.0-r0
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
curl@8.0.1-r2
8.4.0-r0
1
ghcr.io/pascaliske/traefik-errors:1.1.00cf31753ce57
curl@8.1.2-r0
8.4.0-r0
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
curl@8.3.0-r0
8.4.0-r0
1
ghcr.io/reitermarkus/strongswan:v1.0.0e7a8afe6e6eb
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
curl@8.0.1-r0
8.4.0-r0
1
ghcr.io/volosoft/eshoponabp/app-web:1.0.0056bb4271626
curl@7.83.1-r2
8.4.0-r0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u4
1
ghcr.io/wbstack/queryservice-ui:1.4bc79fbb50230
curl@7.80.0-r0
8.4.0-r0
1
ghcr.io/wbstack/ui:3.94b01f67faadf1
curl@7.80.0-r1
8.4.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.