StackRadar

CVE-2023-39328

Medium

Advisory

Published 9 Jul 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
278
of 17,781 indexed, latest versions
Container images
271
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 278 of 17,781 indexed charts deploy, on 271 images.

Affected packageAffected versionsFixed inImages
openjpeg2deb2.3.0-1, 2.3.0-2build0.18.04.1, 2.3.1-1ubuntu4, 2.3.1-1ubuntu4.20.04.1+20 moreno fix listed268
ghostscriptdeb9.18~dfsg~0-0ubuntu2.7, 9.26~dfsg+0-0ubuntu0.18.04.14no fix listed2
openjpegdeb1:1.5.2-3.1no fix listed2
OSV records
DEBIAN-CVE-2023-39328UBUNTU-CVE-2023-39328

Charts affected

278 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.2.61 of 1See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3-apacheb97df9e0e1ee
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

4,507
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
openjpeg2@2.5.0-2+deb12u3
no fix listed

Open the chart page →

30,159
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
openjpeg2@2.5.0-2ubuntu0.4
no fix listed

Open the chart page →

13,664
zammadzammadOfficialVerified publisher18.0.51 of 5See more

zammad zammad 18.0.5

1 of the 5 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

6,887
penpotpenpotOfficialVerified publisher1.9.01 of 4See more

penpot penpot 1.9.0

1 of the 4 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
penpotapp/exporter:2.17.272a8061e8806
openjpeg2@2.5.4-1ubuntu0.1
no fix listed

Open the chart page →

4,314
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
openjpeg2@2.5.0-2ubuntu0.4
no fix listed

Open the chart page →

19,391
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
openjpeg2@2.5.0-2ubuntu0.5
no fix listed

Open the chart page →

22,002
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.02 of 5See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
openjpeg2@2.5.0-2+deb12u1
no fix listed
openproject/openproject:17.8.0-slim48952034215d
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

19,926
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
openjpeg2@2.4.0-6
no fix listed

Open the chart page →

33,725
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

9,683
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
oneuptime/runner:release4accc516d800
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

11,192
wordpressgroundhog2k0.16.41 of 1See more

wordpress groundhog2k 0.16.4

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

3,685
minecraft-proxyminecraft-server-chartsVerified publisher3.10.01 of 1See more

minecraft-proxy minecraft-server-charts 3.10.0

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
itzg/bungeecord:latest1c59f9631f3b
openjpeg2@2.5.4-1ubuntu0.1
no fix listed

Open the chart page →

3,074
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

4,507
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

8,489
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
library/wordpress:7.1.0-apache5a93c470ae82
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

4,148
selenium-gridselenium-grid0.59.12 of 4See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
openjpeg2@2.5.0-2ubuntu0.5
no fix listed
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
openjpeg2@2.5.0-2ubuntu0.5
no fix listed

Open the chart page →

7,028
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
openjpeg2@2.5.4-1ubuntu0.1
no fix listed

Open the chart page →

8,825
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
openjpeg2@2.4.0-6ubuntu0.3
no fix listed

Open the chart page →

27,267
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
openjpeg2@2.5.0-2+deb12u3
no fix listed

Open the chart page →

9,460
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
openjpeg2@2.5.0-2
no fix listed

Open the chart page →

96,941
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
openjpeg2@2.5.0-2ubuntu0.5
no fix listed

Open the chart page →

3,997
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
openjpeg2@2.4.0-6
no fix listed

Open the chart page →

8,722
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
openjpeg2@2.5.0-2
no fix listed

Open the chart page →

9,746
changedetectionalekcVerified publisher0.14.21 of 1See more

changedetection alekc 0.14.2

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
openjpeg2@2.5.0-2+deb12u3
no fix listed

Open the chart page →

2,595
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
openjpeg2@2.5.3-2.1~deb13u1
no fix listed

Open the chart page →

9,316
defectdojodefectdojo1.9.511 of 4See more

defectdojo defectdojo 1.9.51

1 of the 4 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
defectdojo/defectdojo-django:3.3.1b140a89a34e2
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

2,408
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
openjpeg2@2.5.3-2.1~deb13u1
no fix listed

Open the chart page →

30,816
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
openjpeg2@2.5.0-2ubuntu0.5
no fix listed

Open the chart page →

4,477
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
openjpeg2@2.5.0-2ubuntu0.5
no fix listed

Open the chart page →

8,690
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
openjpeg2@2.3.1-1ubuntu4.20.04.1
no fix listed

Open the chart page →

24,488
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

9,770
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
openjpeg2@2.5.3-2.1~deb13u2
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

19,691
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
openjpeg2@2.5.3-2.1~deb13u1
no fix listed

Open the chart page →

12,037
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

5,880
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

3,657
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
openjpeg2@2.3.1-1ubuntu4.20.04.1
no fix listed

Open the chart page →

13,145
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
openjpeg2@2.5.3-2.1~deb13u1
no fix listed

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
openjpeg2@2.5.0-2
no fix listed

Open the chart page →

13,761
datacube-explorerdatacube-charts0.5.321 of 1See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
opendatacube/explorer:latest120457ffcd69
openjpeg2@2.5.0-2ubuntu0.4
no fix listed

Open the chart page →

4,854
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

4,028
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
openjpeg2@2.5.0-2+deb12u3
no fix listed

Open the chart page →

31,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
openjpeg2@2.5.3-2.1~deb13u2
no fix listed

Open the chart page →

5,584
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
openjpeg2@2.3.1-1ubuntu4.20.04.1
no fix listed

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
openjpeg2@2.3.1-1ubuntu4.20.04.1
no fix listed

Open the chart page →

35,305
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
ghostscript@9.26~dfsg+0-0ubuntu0.18.04.14
no fix listed

Open the chart page →

11,662
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
openjpeg2@2.3.1-1ubuntu4.20.04.1
no fix listed

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
openjpeg2@2.3.1-1ubuntu4.20.04.1
no fix listed
haveagitgat/tdarr_node:2.00.101e3f9328327d
openjpeg2@2.3.1-1ubuntu4
no fix listed

Open the chart page →

31,000
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2023-39328.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
openjpeg2@2.5.0-2
no fix listed

Open the chart page →

10,072

Container images carrying it

271 by charts deploying them

A fixed version is listed for 0 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
openjpeg2@2.5.3-2.1~deb13u1
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
openjpeg2@2.5.0-2
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
openjpeg2@2.5.3-2.1~deb13u2
no fix listed
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
openjpeg2@2.3.1-1ubuntu4.20.04.1
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
openjpeg2@2.3.1-1ubuntu4.20.04.1
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
openjpeg2@2.5.0-2ubuntu0.4
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
openjpeg2@2.5.0-2+deb12u2
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
openjpeg2@2.5.0-2
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
openjpeg2@2.5.0-2+deb12u3
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
openjpeg2@2.5.0-2
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
openjpeg2@2.5.0-2+deb12u2
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
openjpeg2@2.5.3-2.1~deb13u2
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
openjpeg2@2.5.0-2
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
openjpeg2@2.5.0-2
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
openjpeg2@2.5.0-2
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
openjpeg2@2.5.0-2
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
openjpeg2@2.5.0-2
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
openjpeg2@2.5.0-2
no fix listed
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
openjpeg2@2.5.0-2ubuntu0.5
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
openjpeg2@2.5.0-2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
openjpeg2@2.5.0-2+deb12u3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.