StackRadar

CVE-2023-38546

Low

Advisory

Published 11 Oct 2023In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.062
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
678
of 17,787 indexed, latest versions
Container images
568
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security and bug fix update

Carried by container images the latest versions of 678 of 17,787 indexed charts deploy, on 568 images.

Affected packageAffected versionsFixed inImages
curldeb7.35.0-1ubuntu2.1, 7.35.0-1ubuntu2.3, 7.35.0-1ubuntu2.16, 7.35.0-1ubuntu2.19+55 more7.35.0-1ubuntu2.20+esm17, 7.47.0-1ubuntu2.19+esm10, 7.58.0-2ubuntu3.24+esm2, 7.68.0-1ubuntu2.20+2 more345
curlapk7.80.0-r0, 7.80.0-r1, 7.80.0-r2, 7.80.0-r3+23 more8.4.0-r0199
curlrpm7.61.1-30.el8_8.2, 7.61.1-30.el8_8.30:7.61.1-30.el8_8.624
OSV records
ALPINE-CVE-2023-38546DEBIAN-CVE-2023-38546RHSA-2023:7540UBUNTU-CVE-2023-38546
Also known as
USN-6429-1, USN-6429-2

Charts affected

678 by stars
ChartLatestAffected imagesRadar Score
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
curl@7.80.0-r0
8.4.0-r0

Open the chart page →

14,833
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.20

Open the chart page →

7,292
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
curl@7.68.0-1ubuntu2.15
7.68.0-1ubuntu2.20

Open the chart page →

16,464
helm-mongodb-operatorkeyporttech0.1.01 of 1See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
curl@7.47.0-1ubuntu2.16
7.47.0-1ubuntu2.19+esm10

Open the chart page →

8,816
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm2

Open the chart page →

12,541
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
curl@8.3.0-r0
8.4.0-r0

Open the chart page →

6,446
kingkfirfer0.1.01 of 1See more

king kfirfer 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
kfirfer/king:latestc05d9fc7ae77
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

1,172
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
curl@7.68.0-1ubuntu2.14
7.68.0-1ubuntu2.20

Open the chart page →

10,303
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
curl@7.80.0-r5
8.4.0-r0

Open the chart page →

2,320
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
curl@7.81.0-1ubuntu1.4
7.81.0-1ubuntu1.14

Open the chart page →

19,208
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u4

Open the chart page →

68,994
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.20

Open the chart page →

8,922
kron-aapm-sidecarkron-aapm-sidecar1.1.01 of 1See more

kron-aapm-sidecar kron-aapm-sidecar 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
krontechnology/aapm-sidecar-injector:1.1.0e078d54c1711
curl@7.80.0-r6
8.4.0-r0

Open the chart page →

2,111
fileserverkronkltdVerified publisher0.3.101 of 1See more

fileserver kronkltd 0.3.10

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
duck1123/lnd-fileserver:latest9d6fb247b714
curl@7.81.0-1ubuntu1.13
7.81.0-1ubuntu1.14

Open the chart page →

3,769
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
duck1123/cert-downloader:latest0e29f19fa67c
curl@7.81.0-1ubuntu1.13
7.81.0-1ubuntu1.14

Open the chart page →

5,644
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
curl@7.87.0-r1
8.4.0-r0

Open the chart page →

3,649
cluster-componentkubebb0.2.21 of 4See more

cluster-component kubebb 0.2.2

1 of the 4 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
curl@7.83.1-r2
8.4.0-r0

Open the chart page →

8,160
ingress-nginxkubebb4.7.01 of 2See more

ingress-nginx kubebb 4.7.0

1 of the 2 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
curl@8.1.1-r1
8.4.0-r0

Open the chart page →

3,099
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

3,561
jupyterhubkubeblocksVerified publisher0.1.01 of 7See more

jupyterhub kubeblocks 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:4.5.67adeeed34a36
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

7,356
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
curl@7.61.1-30.el8_8.3
0:7.61.1-30.el8_8.6

Open the chart page →

9,249
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.20

Open the chart page →

7,196
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
curl@7.61.1-30.el8_8.3
0:7.61.1-30.el8_8.6

Open the chart page →

3,622
kusk-gateway-dashboardkubeshop0.1.191 of 1See more

kusk-gateway-dashboard kubeshop 0.1.19

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-dashboard:v1.2.6ff9b5aa1258d
curl@7.83.1-r3
8.4.0-r0

Open the chart page →

1,216
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
grafana/grafana:9.5.239c849cebccc
curl@8.0.1-r0
8.4.0-r0

Open the chart page →

18,394
iomeshkubesphere-stable1.1.02 of 25See more

iomesh kubesphere-stable 1.1.0

2 of the 25 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
iomesh/prepare-csi:v1.0.24206d42b92f1
curl@8.1.2-r0
8.4.0-r0
lachlanevenson/k8s-kubectl:v1.23.2e4d83478963b
curl@7.80.0-r0
8.4.0-r0

Open the chart page →

48,833
IOMeshkubesphere-stable1.2.02 of 25See more

IOMesh kubesphere-stable 1.2.0

2 of the 25 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
iomesh/prepare-csi:v1.0.3-rc0063b18afb6a1
curl@8.1.2-r0
8.4.0-r0
lachlanevenson/k8s-kubectl:v1.23.2e4d83478963b
curl@7.80.0-r0
8.4.0-r0

Open the chart page →

46,507
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.20

Open the chart page →

14,368
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
curl@7.47.0-1ubuntu2.19
7.47.0-1ubuntu2.19+esm10

Open the chart page →

18,482
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm2

Open the chart page →

9,628
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.20

Open the chart page →

7,381
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
curl@7.68.0-1ubuntu2.5
7.68.0-1ubuntu2.20

Open the chart page →

7,381
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm2

Open the chart page →

16,537
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
kvalitetsit/stakit-frontend:0.2.5fd5c4f60ef80
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

7,842
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
curl@7.61.1-30.el8_8.2
0:7.61.1-30.el8_8.6

Open the chart page →

4,097
jupyter-diffkyso1.0.01 of 1See more

jupyter-diff kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
kyso/jupyter-diff:latest82299a9e5a86
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

1,172
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm2

Open the chart page →

26,371
laravel-chartlaravel-application0.2.01 of 1See more

laravel-chart laravel-application 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
ibarreche/cloud-back-ci:lateste16a469c5791
curl@7.80.0-r0
8.4.0-r0

Open the chart page →

1,835
pageslatif-pages1.0.02 of 3See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.20
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm2

Open the chart page →

20,233
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.20
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm2

Open the chart page →

20,233
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
curl@7.83.1-r3
8.4.0-r0

Open the chart page →

4,271
owntracks-reporterleprechaun-charts0.2.131 of 1See more

owntracks-reporter leprechaun-charts 0.2.13

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
owntracks/recorder:0.9.370105145f719
curl@7.83.1-r4
8.4.0-r0

Open the chart page →

875
qbittorrentlib42Verified publisher1.0.01 of 1See more

qbittorrent lib42 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
curl@8.0.1-r2
8.4.0-r0

Open the chart page →

2,166
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
curl@7.81.0-1ubuntu1.13
7.81.0-1ubuntu1.14

Open the chart page →

10,773
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.20
flyway/flyway:6.4.422d97ceb0c47
curl@7.58.0-2ubuntu3.8
7.58.0-2ubuntu3.24+esm2

Open the chart page →

20,233
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
curl@7.83.1-r5
8.4.0-r0

Open the chart page →

5,770
nublado2lsst-sqre0.8.52 of 2See more

nublado2 lsst-sqre 0.8.5

2 of the 2 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
jupyterhub/configurable-http-proxy:4.5.1723028bf9b3c
curl@7.80.0-r0
8.4.0-r0
lsstsqre/nublado2:2.0.1b75bf8aaafa4
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.20

Open the chart page →

17,836
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm2
elastictranscoder/media-storage:f6d861a026208b8c2359
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm2
elastictranscoder/transcoder:627e21dcb4a0327029e6
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.24+esm2
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
curl@7.58.0-2ubuntu3.9
7.58.0-2ubuntu3.24+esm2

Open the chart page →

58,225
xteveluiscajl0.1.61 of 1See more

xteve luiscajl 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
dnsforge/xteve:latest4d9a685c8c28
curl@7.87.0-r1
8.4.0-r0

Open the chart page →

4,314
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2023-38546.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
curl@8.2.1-r0
8.4.0-r0

Open the chart page →

5,941

Container images carrying it

568 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
curl@7.81.0-1ubuntu1.6
7.81.0-1ubuntu1.14
1
quay.io/k8start/http-headers:1.2.0c7a9987f2ac5
curl@7.83.1-r4
8.4.0-r0
1
quay.io/minio/directpv:v4.0.84560083eb77d
curl@7.61.1-30.el8_8.3
0:7.61.1-30.el8_8.6
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
curl@7.61.1-30.el8_8.3
0:7.61.1-30.el8_8.6
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
curl@7.47.0-1ubuntu2.16
7.47.0-1ubuntu2.19+esm10
1
quay.io/netwarps/blockscoutbecd3e39360a
curl@7.80.0-r0
8.4.0-r0
1
quay.io/opsmxpublic/awsgit:v2-openssh0d21ba756f44
curl@7.80.0-r0
8.4.0-r0
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
curl@8.0.1-r0
8.4.0-r0
1
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
curl@7.83.1-r3
8.4.0-r0
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
curl@7.47.0-1ubuntu2.18
7.47.0-1ubuntu2.19+esm10
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
curl@7.61.1-30.el8_8.2
0:7.61.1-30.el8_8.6
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
curl@7.88.1-10+deb12u1
7.88.1-10+deb12u4
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
curl@7.68.0-1ubuntu2.4
7.68.0-1ubuntu2.20
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
curl@7.87.0-r1
8.4.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
curl@7.83.1-r3
8.4.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
curl@8.1.1-r1
8.4.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
curl@7.88.1-r1
8.4.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
curl@7.83.1-r2
8.4.0-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.