CVE-2023-38545

Critical

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.785; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 308; of 17,781 indexed, latest versions
Container images: 266; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 308 of 17,781 indexed charts deploy, on 266 images.

Affected package	Affected versions	Fixed in	Images
curlapk	7.80.0-r0, 7.80.0-r1, 7.80.0-r2, 7.80.0-r3+23 more	8.4.0-r0	198
curldeb	7.81.0-1ubuntu1.2, 7.81.0-1ubuntu1.3, 7.81.0-1ubuntu1.4, 7.81.0-1ubuntu1.6+6 more	7.81.0-1ubuntu1.14, 7.88.1-10+deb12u4	68

OSV records: ALPINE-CVE-2023-38545 DEBIAN-CVE-2023-38545 UBUNTU-CVE-2023-38545
Also known as: USN-6429-1

Charts affected

308 by stars

Chart

Latest

Affected images

Radar Score

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	curl@7.81.0-1ubuntu1.7	7.81.0-1ubuntu1.14

Open the chart page →

6,232

queryservice-uiwbstack

0.2.0

1 of 1 See more

queryservice-ui wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice-ui :1.4	bc79fbb50230	curl@7.80.0-r0	8.4.0-r0

Open the chart page →

1,996

uiwbstack

0.4.0

1 of 1 See more

ui wbstack 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/ui :3.94	b01f67faadf1	curl@7.80.0-r1	8.4.0-r0

Open the chart page →

1,523

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2023-38545.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	curl@7.88.1-10	7.88.1-10+deb12u4

Open the chart page →

10,001

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-38545.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	curl@7.87.0-r2	8.4.0-r0

Open the chart page →

2,030

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-38545.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	curl@7.80.0-r0	8.4.0-r0

Open the chart page →

7,552

workadventureworkadventure

1.1.0

2 of 9 See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-38545.

Container image	Digest	Package	Fixed in
thecodingmachine/workadventure-chat :v1.17.7	da12f37e6795	curl@7.80.0-r1	8.4.0-r0
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	curl@7.80.0-r5	8.4.0-r0

Open the chart page →

16,083

zahori-consulzahori

1.0.1

1 of 2 See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-38545.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	curl@8.1.2-r0	8.4.0-r0

Open the chart page →

5,033

Container images carrying it

266 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	curl@7.81.0-1ubuntu1.3	7.81.0-1ubuntu1.14	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	curl@7.83.1-r1	8.4.0-r0	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.14	1
quay.io/fairwinds/docker-demo :1.4.0	d53cb940196c	curl@8.1.0-r0	8.4.0-r0	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	curl@7.81.0-1ubuntu1.6	7.81.0-1ubuntu1.14	1
quay.io/k8start/http-headers :1.2.0	c7a9987f2ac5	curl@7.83.1-r4	8.4.0-r0	1
quay.io/netwarps/blockscout	becd3e39360a	curl@7.80.0-r0	8.4.0-r0	1
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	curl@7.80.0-r0	8.4.0-r0	1
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	curl@8.0.1-r0	8.4.0-r0	1
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	curl@7.83.1-r3	8.4.0-r0	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	curl@7.88.1-10+deb12u1	7.88.1-10+deb12u4	1
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	curl@7.87.0-r1	8.4.0-r0	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	curl@7.83.1-r3	8.4.0-r0	1
registry.k8s.io/ingress-nginx/controller :v1.8.0	744ae2afd433	curl@8.1.1-r1	8.4.0-r0	1
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	curl@7.88.1-r1	8.4.0-r0	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	curl@7.83.1-r2	8.4.0-r0	1