StackRadar

CVE-2023-38545

Critical

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.785
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
308
of 17,781 indexed, latest versions
Container images
266
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 266 images.

Affected packageAffected versionsFixed inImages
curlapk7.80.0-r0, 7.80.0-r1, 7.80.0-r2, 7.80.0-r3+23 more8.4.0-r0198
curldeb7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+6 more7.81.0-1ubuntu1.14, 7.88.1-10+deb12u468
OSV records
ALPINE-CVE-2023-38545DEBIAN-CVE-2023-38545UBUNTU-CVE-2023-38545
Also known as
USN-6429-1

Charts affected

308 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.14

Open the chart page →

6,556
solr-operatorapache-solrVerified publisher0.9.11 of 3See more

solr-operator apache-solr 0.9.1

1 of the 3 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.23.2e4d83478963b
curl@7.80.0-r0
8.4.0-r0

Open the chart page →

2,943
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14

Open the chart page →

9,145
zabbixcetic3.1.33 of 5See more

zabbix cetic 3.1.3

3 of the 5 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14

Open the chart page →

33,725
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
dependencytrack/frontend:4.6.124422d762e08
curl@7.83.1-r3
8.4.0-r0

Open the chart page →

2,503
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
curl@8.1.2-r0
8.4.0-r0

Open the chart page →

4,167
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.14

Open the chart page →

7,857
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
curl@8.1.1-r1
8.4.0-r0

Open the chart page →

4,285
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
curl@7.87.0-r1
8.4.0-r0

Open the chart page →

2,572
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
curl@7.80.0-r6
8.4.0-r0
quay.io/devtron/kubectl:latest2ad610626658
curl@7.83.1-r3
8.4.0-r0

Open the chart page →

32,902
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.14

Open the chart page →

5,630
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
curl@8.1.2-r0
8.4.0-r0

Open the chart page →

2,344
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.14

Open the chart page →

4,903
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
curl@8.1.2-r0
8.4.0-r0

Open the chart page →

2,709
filebrowserutkuozdemirVerified publisher1.0.01 of 1See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
curl@7.83.1-r4
8.4.0-r0

Open the chart page →

3,073
lndfold0.3.151 of 4See more

lnd fold 0.3.15

1 of the 4 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
curl@8.3.0-r0
8.4.0-r0

Open the chart page →

8,835
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u4

Open the chart page →

96,941
openspeedtestspeedtestVerified publisher0.1.21 of 1See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
openspeedtest/latest:v2.0.0d4d62f4b7d85
curl@8.1.2-r0
8.4.0-r0

Open the chart page →

2,040
phpipamstackhelmVerified publisher0.1.22 of 3See more

phpipam stackhelm 0.1.2

2 of the 3 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.5.2f770577cb946
curl@7.80.0-r6
8.4.0-r0
phpipam/phpipam-www:v1.5.23c6fd1332aeb
curl@7.80.0-r6
8.4.0-r0

Open the chart page →

1,874
eshoponabpabp-charts1.0.01 of 15See more

eshoponabp abp-charts 1.0.0

1 of the 15 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/volosoft/eshoponabp/app-web:1.0.0056bb4271626
curl@7.83.1-r2
8.4.0-r0

Open the chart page →

19,799
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
curl@7.81.0-1ubuntu1.8
7.81.0-1ubuntu1.14

Open the chart page →

8,212
k8upappuio2.0.51 of 1See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.3.257419b6d3830
curl@7.83.1-r1
8.4.0-r0

Open the chart page →

3,300
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
curl@7.83.1-r4
8.4.0-r0

Open the chart page →

30,816
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

3,675
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
curl@7.83.1-r4
8.4.0-r0

Open the chart page →

7,776
oesopsmxVerified publisher4.0.323 of 25See more

oes opsmx 4.0.32

3 of the 25 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
curl@7.80.0-r0
8.4.0-r0
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
curl@8.0.1-r0
8.4.0-r0
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
curl@7.83.1-r3
8.4.0-r0

Open the chart page →

107,811
wharf-helmwharf-helmOfficialVerified publisher3.2.61 of 5See more

wharf-helm wharf-helm 3.2.6

1 of the 5 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
quay.io/iver-wharf/wharf-web:v1.6.2dc5d1ed91c26
curl@7.80.0-r1
8.4.0-r0

Open the chart page →

10,032
ueransimadaptivenetlabVerified publisher1.0.31 of 2See more

ueransim adaptivenetlab 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
openverso/ueransim:3.2.6733f1232b7d3
curl@7.83.1-r3
8.4.0-r0

Open the chart page →

1,389
soft-servealphani-helm-chartsVerified publisher0.4.01 of 1See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
charmcli/soft-serve:v0.4.039523c1a6ba8
curl@7.83.1-r2
8.4.0-r0

Open the chart page →

3,119
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
curl@7.88.1-r1
8.4.0-r0

Open the chart page →

22,202
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
hyperledger/fabric-tools:2.4b1194f509085
curl@7.83.1-r6
8.4.0-r0

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
hyperledger/fabric-tools:2.4b1194f509085
curl@7.83.1-r6
8.4.0-r0

Open the chart page →

77,687
swaggeruichrisfuVerified publisher0.3.71 of 1See more

swaggerui chrisfu 0.3.7

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v5.6.2342808e22de4
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

1,309
commonground-gatewaycommonground-gateway1.5.42 of 7See more

commonground-gateway commonground-gateway 1.5.4

2 of the 7 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-php:latest947882bf2c37
curl@7.83.1-r4
8.4.0-r0
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
curl@7.88.1-10
7.88.1-10+deb12u4

Open the chart page →

9,724
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
curl@7.80.0-r0
8.4.0-r0

Open the chart page →

7,303
dao-2048dao-20481.4.11 of 1See more

dao-2048 dao-2048 1.4.1

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
curl@7.87.0-r1
8.4.0-r0

Open the chart page →

1,883
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/data-fair/metrics:0a8d40779eeae
curl@8.1.2-r0
8.4.0-r0

Open the chart page →

38,346
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
curl@7.87.0-r1
8.4.0-r0

Open the chart page →

5,598
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
curl@7.86.0-r1
8.4.0-r0

Open the chart page →

4,614
akauntingf3k-techVerified publisher1.3121.01 of 4See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
akaunting/akaunting:3.1.21-fpm-alpine-nginxe7d5c245b1a0
curl@7.80.0-r3
8.4.0-r0

Open the chart page →

4,333
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.22.1638b7962cd016
curl@7.86.0-r1
8.4.0-r0

Open the chart page →

5,291
mainfancywhale-stable0.15.121 of 1See more

main fancywhale-stable 0.15.12

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
gcarrarom/landing:0.0.0769d19e441d9
curl@7.83.1-r3
8.4.0-r0

Open the chart page →

1,032
fedodo.chartfedodo0.5.112 of 4See more

fedodo.chart fedodo 0.5.11

2 of the 4 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
fedodo/fedodo.ui.home:3c69413c4d690
curl@8.1.2-r0
8.4.0-r0
fedodo/fedodo.ui.micro:12b2b540081c21
curl@8.1.2-r0
8.4.0-r0

Open the chart page →

4,399
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
taigaio/taiga-front:latest570c8792ce80
curl@7.88.1-r1
8.4.0-r0

Open the chart page →

8,496
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14

Open the chart page →

5,136
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14

Open the chart page →

13,025
jmeterjmeterVerified publisher1.2.51 of 1See more

jmeter jmeter 1.2.5

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
liukunup/jmeter:5.59c079617a81b
curl@7.83.1-r3
8.4.0-r0

Open the chart page →

2,067
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
curl@7.83.1-r5
8.4.0-r0

Open the chart page →

3,136
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

5,940
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
curl@7.88.1-r1
8.4.0-r0

Open the chart page →

2,221

Container images carrying it

266 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
curl@7.81.0-1ubuntu1.3
7.81.0-1ubuntu1.14
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
curl@7.83.1-r1
8.4.0-r0
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.14
1
quay.io/fairwinds/docker-demo:1.4.0d53cb940196c
curl@8.1.0-r0
8.4.0-r0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.14
1
quay.io/k8start/http-headers:1.2.0c7a9987f2ac5
curl@7.83.1-r4
8.4.0-r0
1
quay.io/netwarps/blockscoutbecd3e39360a
curl@7.80.0-r0
8.4.0-r0
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
curl@7.80.0-r0
8.4.0-r0
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
curl@8.0.1-r0
8.4.0-r0
1
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
curl@7.83.1-r3
8.4.0-r0
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u4
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
curl@7.87.0-r1
8.4.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
curl@7.83.1-r3
8.4.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
curl@8.1.1-r1
8.4.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
curl@7.88.1-r1
8.4.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
curl@7.83.1-r2
8.4.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.