StackRadar

CVE-2023-39616

High

Advisory

Published 29 Aug 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
157
of 17,781 indexed, latest versions
Container images
166
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 157 of 17,781 indexed charts deploy, on 166 images.

Affected packageAffected versionsFixed inImages
aomdeb3.6.0-1, 3.6.0-1+deb12u1, 3.6.0-1+deb12u2, 3.6.0-1+deb12u3no fix listed166
OSV records
DEBIAN-CVE-2023-39616

Charts affected

157 by stars
ChartLatestAffected imagesRadar Score
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

10,622
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

19,926
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

9,460
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
aom@3.6.0-1
no fix listed

Open the chart page →

96,941
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

3,327
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

5,435
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

7,052
typo3christianhuthVerified publisher7.7.01 of 2See more

typo3 christianhuth 7.7.0

1 of the 2 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
martinhelmich/typo3:12.4c83a4f3fd7ae
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

8,466
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
aom@3.6.0-1
no fix listed

Open the chart page →

9,724
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

13,761
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
aom@3.6.0-1
no fix listed

Open the chart page →

18,376
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

31,510
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

10,072
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

6,374
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
aom@3.6.0-1
no fix listed

Open the chart page →

20,403
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

3,544
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

3,980
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

7,201
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

13,738
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

5,039
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
aom@3.6.0-1
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

14,838
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

31,844
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

5,482
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

5,315
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
aom@3.6.0-1+deb12u1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

30,234
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

16,449
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
aom@3.6.0-1
no fix listed

Open the chart page →

5,676
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

12,581
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

5,817
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

7,239
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
aom@3.6.0-1
no fix listed

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

32,501
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
aom@3.6.0-1
no fix listed

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
aom@3.6.0-1+deb12u1
no fix listed
kuzwolka/aws9:news3e8880fbbb96
aom@3.6.0-1+deb12u1
no fix listed
kuzwolka/aws9:blog4a7707410bf1
aom@3.6.0-1+deb12u1
no fix listed
kuzwolka/aws9:shop84a9d9766345
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

18,344
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
aom@3.6.0-1
no fix listed

Open the chart page →

6,297
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
aom@3.6.0-1+deb12u1
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

26,996
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

14,352
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

5,039
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

10,776
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

14,130
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

4,911
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

8,009
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

9,128
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

14,559
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

58,897
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
aom@3.6.0-1
no fix listed

Open the chart page →

15,380
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
aom@3.6.0-1
no fix listed

Open the chart page →

7,503
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
aom@3.6.0-1+deb12u1
no fix listed

Open the chart page →

6,075
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2023-39616.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
aom@3.6.0-1+deb12u2
no fix listed

Open the chart page →

68,240

Container images carrying it

166 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
aom@3.6.0-1+deb12u2
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
aom@3.6.0-1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
aom@3.6.0-1+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
aom@3.6.0-1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
aom@3.6.0-1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
aom@3.6.0-1+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
aom@3.6.0-1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
aom@3.6.0-1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
aom@3.6.0-1
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
aom@3.6.0-1+deb12u1
no fix listed
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
aom@3.6.0-1
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
aom@3.6.0-1+deb12u1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
aom@3.6.0-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
aom@3.6.0-1+deb12u2
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
aom@3.6.0-1+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.