CVE-2023-39742

Medium

Advisory

Published 25 Aug 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.003; 28th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 64; of 17,781 indexed, latest versions
Container images: 58; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 64 of 17,781 indexed charts deploy, on 58 images.

Affected package	Affected versions	Fixed in	Images
giflibdeb	5.1.4-0.3~16.04, 5.1.4-0.3~16.04.1, 5.1.4-2, 5.1.4-2ubuntu0.1+5 more	5.1.4-0.3~16.04.1+esm1, 5.1.4-2ubuntu0.1+esm1, 5.1.9-1ubuntu0.1	51
giflibapk	5.2.1-r2, 5.2.1-r4	5.2.2-r0	7

OSV records: ALPINE-CVE-2023-39742 DEBIAN-CVE-2023-39742 UBUNTU-CVE-2023-39742
Also known as: USN-6824-1

Charts affected

64 by stars

Chart

Latest

Affected images

Radar Score

deconzjanip81-helm-charts

0.1.1

1 of 1 See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
deconzcommunity/deconz :2.29.2	062de2362641	giflib@5.2.1-2.5	no fix listed

Open the chart page →

10,780

paperlessk8s-home-lab-repo

11.0.1

1 of 1 See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	giflib@5.2.2-1+b1	no fix listed

Open the chart page →

9,103

home-assistantkfirfer

0.5.4

1 of 1 See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.10.3	021e2afc6e57	giflib@5.2.1-r4	5.2.2-r0

Open the chart page →

6,447

chaos-meshkubeblocks

2.7.2

1 of 4 See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	giflib@5.2.1-2.5	no fix listed

Open the chart page →

13,497

tinymediamanagermedia-servarr

1.6.2

1 of 2 See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
tinymediamanager/tinymediamanager :5.3.2	2b34dc85099e	giflib@5.2.2-1+b1	no fix listed

Open the chart page →

7,944

paperless-ngxmt190502

7.6.14

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	giflib@5.2.2-1+b1	no fix listed

Open the chart page →

11,950

smilencsa

1.1.0

1 of 23 See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	giflib@5.1.9-1	5.1.9-1ubuntu0.1

Open the chart page →

109,294

nominatimnominatim-chart

1.3.0

1 of 3 See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
mediagis/nominatim :3.7	c15e941485ef	giflib@5.1.9-1	5.1.9-1ubuntu0.1

Open the chart page →

22,658

splashntppool

1.0.4

1 of 1 See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
scrapinghub/splash :3.4.1	a5f89bc84606	giflib@5.1.4-2ubuntu0.1	5.1.4-2ubuntu0.1+esm1

Open the chart page →

27,633

paperless-ngxoli-the-dev

1.1.1

1 of 1 See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :3.1.3	aa810a36942c	giflib@5.2.2-1+deb13u1	no fix listed

Open the chart page →

4,626

cdn-remoteopencord

0.2.4

1 of 3 See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	giflib@5.1.4-2	5.1.4-2ubuntu0.1+esm1

Open the chart page →

63,223

javareact-java

0.1.0

1 of 1 See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
project2team4/react :latest	3ff031a08887	giflib@5.1.9-1	5.1.9-1ubuntu0.1

Open the chart page →

15,520

paperless-ngxrtomik-helm-charts

0.0.5

1 of 1 See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	giflib@5.2.2-1+b1	no fix listed

Open the chart page →

10,605

backendsignalen

4.24.0

1 of 4 See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2023-39742.

Container image	Digest	Package	Fixed in
signalen/backend :2.50.14	760256000738	giflib@5.2.1-2.5+deb12u1	no fix listed

Open the chart page →

11,636

Container images carrying it

58 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	giflib@5.2.2-1+b1	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	giflib@5.2.1-2.5	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	giflib@5.2.2-1+b1	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	giflib@5.2.2-1+deb13u1	no fix listed	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	giflib@5.1.9-1	5.1.9-1ubuntu0.1	1
ghcr.io/zammad/zammad :7.1.3-0011	e65123a43ecc	giflib@5.2.2-1+deb13u1	no fix listed	1
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	giflib@5.2.1-r2	5.2.2-r0	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	giflib@5.1.4-0.3~16.04.1	5.1.4-0.3~16.04.1+esm1	1