CVE-2023-3978
MediumAdvisory
Published 2 Aug 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.1
- base score, highest
- EPSS
- 0.008
- 56th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,254
- of 17,790 indexed, latest versions
- Container images
- 1,508
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper rendering of text nodes in golang.org/x/net/html
Carried by container images the latest versions of 1,254 of 17,790 indexed charts deploy, on 1,508 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+179 more | 0.13.0 | 1,508 |
- OSV records
- GHSA-2wrh-6pvc-2jm9
- Also known as
- GO-2023-1988
Charts affected
1,254 by stars
Container images carrying it
1,508 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 22f84e3615c8 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 91fca773a63f | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 89969b78fb07 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | bf816072380e | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | d7bdfa7b41da | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | f681e0343a31 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 3491a0f31c4a | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 81a9ebc899a4 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 2f1408c94168 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 416c1c5aeb86 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 5e0a3dfa9f96 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | ce1862e6b3a5 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 7f21d50e69cb | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | a2523c532c0c | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | a8a144f14889 | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | a3c27ee3fb2f | golang.org/ | 0.13.0 | 1 |
| ghcr.io/ | 31060be60bec | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | bccaa701e2df | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | ec1803037ed9 | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | 3004b93fcb74 | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | 77788bf38938 | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | f55f30876129 | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | fc5d14e9f26f | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | 667b1b1ea1e4 | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | 7997e0f236bc | golang.org/ | 0.13.0 | 1 |
| mcr.microsoft.com/ | b7d82802cca8 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 844478ebd5b8 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 9637c80dd23f | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 86b0f7243250 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 67b89ae52240 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 02aed3370fce | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 363bd65cd707 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | b32c99e7bc45 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 87cbd356af2e | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 783d550ad813 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | cac3ed9a9826 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | ae59d222fd87 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | f0e5ab60b2df | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | efcecf98b912 | golang.org/ | 0.13.0 | 1 |
| public.ecr.aws/ | 573779e57fae | golang.org/ | 0.13.0 | 1 |
| quay.io/ | 578934444f04 | golang.org/ | 0.13.0 | 1 |
| quay.io/ | a8837b00ba1c | golang.org/ | 0.13.0 | 1 |
| quay.io/ | 9ca307b30080 | golang.org/ | 0.13.0 | 1 |
| quay.io/ | 89990b146824 | golang.org/ | 0.13.0 | 1 |
| quay.io/ | 5b6701d8fb31 | golang.org/ | 0.13.0 | 1 |
| quay.io/ | acaf37352569 | golang.org/ | 0.13.0 | 1 |
| quay.io/ | 0d614816c4b7 | golang.org/ | 0.13.0 | 1 |
| quay.io/ | cf8faa986789 | golang.org/ | 0.13.0 | 1 |
| quay.io/ | cdefc81c6b2e | golang.org/ | 0.13.0 | 1 |
| quay.io/ | 14b482c1f1b8 | golang.org/ | 0.13.0 | 1 |