StackRadar

CVE-2023-39319

Medium

Advisory

Published 7 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,858
of 17,805 indexed, latest versions
Container images
2,117
deployed by those charts
Fix available
1 of 2
affected packages

Improper handling of special tags within script contexts in html/template

Carried by container images the latest versions of 1,858 of 17,805 indexed charts deploy, on 2,117 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+107 more1.20.82,117
OSV records
DEBIAN-CVE-2023-39319GO-2023-2043
Also known as
BIT-golang-2023-39319

Charts affected

1,858 by stars
ChartLatestAffected imagesRadar Score
cost-analyzerstatcan1.82.24 of 9See more

cost-analyzer statcan 1.82.2

4 of the 9 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
grafana/grafana:7.5.609bb407e26ab
stdlib@go1.16.1
1.20.8
prom/prometheus:v2.22.2f7ffebdd428b
stdlib@go1.15.5
1.20.8
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
stdlib@go1.16.5
1.20.8
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
stdlib@go1.16.5
1.20.8

Open the chart page →

16,542
ingress-istio-controllerstatcan1.4.01 of 1See more

ingress-istio-controller statcan 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
statcan/ingress-istio-controller:1.4.0d7d6bd180c46
stdlib@go1.18.10
1.20.8

Open the chart page →

1,584
minio-operatorstatcan4.1.01 of 2See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
minio/operator:v4.1.02adc5be088f5
stdlib@go1.16.3
1.20.8

Open the chart page →

6,598
prometheus-operatorstatcan0.2.24 of 7See more

prometheus-operator statcan 0.2.2

4 of the 7 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.20.8
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
stdlib@go1.13.11
1.20.8
squareup/ghostunnel:v1.5.270f4cf270425
stdlib@go1.13.4
1.20.8
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
stdlib@go1.14.3
1.20.8

Open the chart page →

12,254
sidecar-terminatorstatcan1.3.51 of 1See more

sidecar-terminator statcan 1.3.5

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
statcan/kubernetes-sidecar-terminator:2.0.2bc361ee7748f
stdlib@go1.19.10
1.20.8

Open the chart page →

1,316
starboard-operatorstatcan0.10.41 of 1See more

starboard-operator statcan 0.10.4

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
aquasec/starboard-operator:0.15.4be34f709e1ce
stdlib@go1.17.8
1.20.8

Open the chart page →

1,828
vaultstatcan0.1.81 of 2See more

vault statcan 0.1.8

1 of the 2 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:0.6.05697b85bc69a
stdlib@go1.13.5
1.20.8

Open the chart page →

4,224
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
stdlib@go1.17.10
1.20.8

Open the chart page →

13,678
sn-platform-slimstreamnative1.11.443 of 6See more

sn-platform-slim streamnative 1.11.44

3 of the 6 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.8.05af9d3041d12
stdlib@go1.19.2
1.20.8
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
stdlib@go1.20.4
1.20.8
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
stdlib@go1.19.7
1.20.8

Open the chart page →

66,712
scaleway-webhooksudaVerified publisher0.0.21 of 1See more

scaleway-webhook suda 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
stdlib@go1.15.2
1.20.8

Open the chart page →

2,354
nocodbsudermanjr0.1.01 of 1See more

nocodb sudermanjr 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
nocodb/nocodb:0.84.15f9b799933aa8
stdlib@go1.17.8
1.20.8

Open the chart page →

2,071
qbittorrentsudo-kraken-qbittorrentVerified publisher5.1.51 of 2See more

qbittorrent sudo-kraken-qbittorrent 5.1.5

1 of the 2 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
ghcr.io/squat/generic-device-plugin:36bfc606bba2064de6ede0ff2764cbb52edff70dba6f0b4cf6c8
stdlib@go1.20.2
1.20.8

Open the chart page →

2,132
slack-emoji-makersuminhong0.1.01 of 1See more

slack-emoji-maker suminhong 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
stdlib@go1.20.7
1.20.8

Open the chart page →

1,804
hello-worldsumudu-repo1.0.01 of 1See more

hello-world sumudu-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
sumuduliya/hello-world:latestb7788a2984a3
stdlib@go1.19.13
1.20.8

Open the chart page →

940
cludodsuperorbitalVerified publisher0.0.51 of 1See more

cludod superorbital 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
superorbital/cludod:0.0.2-alphad59732f61d6e
stdlib@go1.17.6
1.20.8

Open the chart page →

2,371
do-operatorsupporttools0.1.71 of 2See more

do-operator supporttools 0.1.7

1 of the 2 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
digitalocean/do-operator:v0.1.65e5deb4db76e
stdlib@go1.18.10
1.20.8

Open the chart page →

1,063
nfs-provisionersupporttools0.11.01 of 1See more

nfs-provisioner supporttools 0.11.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
openebs/provisioner-nfs:0.11.04f41dd782761
stdlib@go1.19.13
1.20.8

Open the chart page →

2,680
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
stdlib@go1.18.2
1.20.8

Open the chart page →

12,748
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
stdlib@go1.20.4
1.20.8

Open the chart page →

11,008
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
stdlib@go1.18.2
1.20.8

Open the chart page →

5,565
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
stdlib@go1.18.2
1.20.8

Open the chart page →

75,735
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
stdlib@go1.20.5
1.20.8

Open the chart page →

76,098
agentssynapse0.1.303 of 9See more

agents synapse 0.1.30

3 of the 9 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.42.07d32a4eddec7
stdlib@go1.19.5
1.20.8
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
stdlib@go1.20.3
1.20.8
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
stdlib@go1.20.3
1.20.8

Open the chart page →

7,288
cctpsynapse0.3.01 of 4See more

cctp synapse 0.3.0

1 of the 4 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
stdlib@go1.20.5
1.20.8

Open the chart page →

1,826
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
stdlib@go1.16.7
1.20.8

Open the chart page →

8,615
promexportersynapse0.1.11 of 1See more

promexporter synapse 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
stdlib@go1.20.6
1.20.8

Open the chart page →

1,722
ccm-hcloudsyself1.0.111 of 1See more

ccm-hcloud syself 1.0.11

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.13.0ed5ee5f83973
stdlib@go1.19
1.20.8

Open the chart page →

1,713
hcloud-csisyself0.1.11 of 6See more

hcloud-csi syself 0.1.1

1 of the 6 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:1.6.01475d525f9a4
stdlib@go1.17
1.20.8

Open the chart page →

2,918
lokit3n1.0.01 of 1See more

loki t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
stdlib@go1.13.11
1.20.8

Open the chart page →

2,877
promtailt3n1.0.01 of 1See more

promtail t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
stdlib@go1.13.11
1.20.8

Open the chart page →

2,829
tidewayst3n2.0.11 of 1See more

tideways t3n 2.0.1

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
t3nde/tideways:1.7.2777e008f764db
stdlib@go1.16.4
1.20.8

Open the chart page →

2,207
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
stdlib@go1.13.10
1.20.8

Open the chart page →

7,492
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
stdlib@go1.19.9
1.20.8

Open the chart page →

4,230
telegraf-ds-k3stelegraf-ds-k3s1.0.01 of 1See more

telegraf-ds-k3s telegraf-ds-k3s 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/telegraf:1.19.0-alpine794079a7f241
stdlib@go1.16.5
1.20.8

Open the chart page →

3,773
clickhousetemp-charts0.7.12 of 3See more

clickhouse temp-charts 0.7.1

2 of the 3 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.16.1db7dde971407
stdlib@go1.13.15
1.20.8
altinity/metrics-exporter:0.16.185b4fdbae053
stdlib@go1.13.15
1.20.8

Open the chart page →

8,709
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
stdlib@go1.16.4
1.20.8

Open the chart page →

75,271
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
stdlib@go1.16.4
1.20.8

Open the chart page →

75,217
temporaltemporal0.28.98 of 13See more

temporal temporal 0.28.9

8 of the 13 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.20.8
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.20.8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.20.8
temporalio/admin-tools:1.22.0836af062af30
stdlib@go1.19.11
1.20.8
temporalio/server:1.22.0ddeebf8bad8f
stdlib@go1.19.11
1.20.8
temporalio/ui:2.16.2af9c9349708f
stdlib@go1.20.5
1.20.8
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
stdlib@go1.16.7
1.20.8
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
stdlib@go1.17.3
1.20.8

Open the chart page →

21,061
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.20.8

Open the chart page →

109,619
echoserverteochenglim0.1.01 of 1See more

echoserver teochenglim 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
jmalloc/echo-server:0.3.1e4eaee2c7998
stdlib@go1.17
1.20.8

Open the chart page →

1,444
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
stdlib@go1.20.7
1.20.8

Open the chart page →

29,111
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
stdlib@go1.19.12
1.20.8

Open the chart page →

20,465
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
ecadlabs/tezos_exporter:latest4bcbe5d1cdd2
stdlib@go1.16.5
1.20.8

Open the chart page →

5,337
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
pysga1996/redis:latest3af6d0c7db19
stdlib@go1.18.2
1.20.8

Open the chart page →

4,677
trafficlight-apithecampagnards0.1.11 of 1See more

trafficlight-api thecampagnards 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
thecampagnards/trafficlight-api:main7dca9d973837
stdlib@go1.16.4
1.20.8

Open the chart page →

4,419
steamcmdthetredevVerified publisher1.0.91 of 1See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
stdlib@go1.18.2
1.20.8

Open the chart page →

1,076
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
stdlib@go1.18.2
1.20.8

Open the chart page →

25,562
mc-routerthl-chartsVerified publisher0.1.01 of 1See more

mc-router thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
itzg/mc-router:1.16.1bb552b59fb53
stdlib@go1.18.4
1.20.8

Open the chart page →

1,856
monitoringthl-chartsVerified publisher0.1.18 of 10See more

monitoring thl-charts 0.1.1

8 of the 10 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
stdlib@go1.17.9
1.20.8
grafana/loki:2.5.0f9ef133793af
stdlib@go1.17.8
1.20.8
grafana/promtail:2.4.2626900031c4e
stdlib@go1.17.2
1.20.8
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.20.8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.20.8
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
stdlib@go1.16.7
1.20.8
quay.io/prometheus/node-exporter:v1.3.023ff46c728b9
stdlib@go1.17.3
1.20.8
quay.io/prometheus/prometheus:v2.34.0b37103e03399
stdlib@go1.17.8
1.20.8

Open the chart page →

18,947
pock-helm-charttinote-chart0.1.01 of 3See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-39319.

Container imageDigestPackageFixed in
nginx/nginx-ingress:1.11.1eb5b4fd73325
stdlib@go1.15.11
1.20.8

Open the chart page →

6,891

Container images carrying it

2,117 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.0.1e07f914c32f0
stdlib@go1.15
1.20.8
1
registry.k8s.io/sig-storage/csi-provisioner:v3.4.0e468dddcd275
stdlib@go1.19
1.20.8
1
registry.k8s.io/sig-storage/csi-provisioner:v3.3.0ee3b525d5b89
stdlib@go1.18
1.20.8
1
registry.k8s.io/sig-storage/csi-resizer:v1.7.03a7bdf5d1057
stdlib@go1.19
1.20.8
1
registry.k8s.io/sig-storage/csi-resizer:v1.6.0425d8f1b7693
stdlib@go1.18
1.20.8
1
registry.k8s.io/sig-storage/csi-resizer:v1.3.06e0546563b18
stdlib@go1.16.2
1.20.8
1
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
stdlib@go1.18
1.20.8
1
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
stdlib@go1.16.2
1.20.8
1
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
stdlib@go1.17.3
1.20.8
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
stdlib@go1.18
1.20.8
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
stdlib@go1.19
1.20.8
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
stdlib@go1.20.5
1.20.8
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
stdlib@go1.15
1.20.8
1
registry.k8s.io/sig-storage/snapshot-controller:v4.2.195587f8777d7
stdlib@go1.16.2
1.20.8
1
registry.k8s.io/sig-storage/snapshot-controller:v6.2.198bab4eaf23c
stdlib@go1.19
1.20.8
1
registry.k8s.io/sig-storage/snapshot-controller:v6.3.1ce6ca3c0e30b
stdlib@go1.20.5
1.20.8
1
registry.k8s.io/sig-storage/volume-data-source-validator:v1.0.0d35884236461
stdlib@go1.17.3
1.20.8
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.