StackRadar

CVE-2023-39616

High

Advisory

Published 29 Aug 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
157
of 17,781 indexed, latest versions
Container images
166
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 157 of 17,781 indexed charts deploy, on 166 images.

Affected packageAffected versionsFixed inImages
aomdeb3.6.0-1, 3.6.0-1+deb12u1, 3.6.0-1+deb12u2, 3.6.0-1+deb12u3no fix listed166
OSV records
DEBIAN-CVE-2023-39616

Charts affected

157 by stars
ChartLatestAffected imagesRadar Score
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

10,086
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
aom@3.6.0-1
no fix listed

Open the chart page →

17,323
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
aom@3.6.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
aom@3.6.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
aom@3.6.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
aom@3.6.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
aom@3.6.0-1+deb12u1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

45,239
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
aom@3.6.0-1
no fix listed

Open the chart page →

14,358
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

10,795
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

9,117
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
aom@3.6.0-1
no fix listed

Open the chart page →

7,673

Container images carrying it

166 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
sashafefler/spacecapybara_app:latestf96d7804c0ca
aom@3.6.0-1+deb12u1
no fix listed
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
aom@3.6.0-1
no fix listed
1
shamimkuet/nginx:1.0.2b82902a76a04
aom@3.6.0-1
no fix listed
1
signalen/backend:2.50.14760256000738
aom@3.6.0-1+deb12u2
no fix listed
1
sissbruecker/linkding:1.35.00c5dddf0b37c
aom@3.6.0-1+deb12u1
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
aom@3.6.0-1+deb12u1
no fix listed
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
aom@3.6.0-1
no fix listed
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
aom@3.6.0-1
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
aom@3.6.0-1
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
aom@3.6.0-1
no fix listed
1
somnathmore/custom-nginx:v2bdfc06cad4ec
aom@3.6.0-1
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
aom@3.6.0-1
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
aom@3.6.0-1
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
aom@3.6.0-1+deb12u1
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
aom@3.6.0-1+deb12u1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
aom@3.6.0-1
no fix listed
1
theradius/loggia:0.463ba348546ec
aom@3.6.0-1
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
aom@3.6.0-1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
aom@3.6.0-1+deb12u1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
aom@3.6.0-1+deb12u1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
aom@3.6.0-1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
aom@3.6.0-1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
aom@3.6.0-1
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
aom@3.6.0-1+deb12u2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
aom@3.6.0-1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
aom@3.6.0-1
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/caninehq/canine:latesta058034ca006
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
aom@3.6.0-1
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
aom@3.6.0-1
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
aom@3.6.0-1
no fix listed
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
aom@3.6.0-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
aom@3.6.0-1
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
aom@3.6.0-1+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.