StackRadar

CVE-2023-40403

Medium

Advisory

Published 27 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
224
of 17,781 indexed, latest versions
Container images
218
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libxslt security update

Carried by container images the latest versions of 224 of 17,781 indexed charts deploy, on 218 images.

Affected packageAffected versionsFixed inImages
libxsltdeb1.1.28-2.1ubuntu0.3, 1.1.28-2ubuntu0.1, 1.1.29-5ubuntu0.2, 1.1.34-4+7 more1.1.28-2.1ubuntu0.3+esm2, 1.1.28-2ubuntu0.2+esm3, 1.1.29-5ubuntu0.3+esm1, 1.1.34-4ubuntu0.20.04.3+esm1+3 more205
libxsltrpm1.1.32-4.el8, 1.1.32-6.el8, 1.1.34-9.el9, 1.1.34-13.el9_60:1.1.32-6.2.el8_10, 0:1.1.34-14.el9_4, 0:1.1.34-14.el9_7.113
OSV records
DEBIAN-CVE-2023-40403RHSA-2025:8676RHSA-2025:9016RHSA-2026:6266RLSA-2026:6266UBUNTU-CVE-2023-40403
Also known as
USN-7600-1

Charts affected

224 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

11,367
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

6,699
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

19,391
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

19,926
zabbixcetic3.1.32 of 5See more

zabbix cetic 3.1.3

2 of the 5 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
libxslt@1.1.34-4ubuntu0.22.04.1
1.1.34-4ubuntu0.22.04.4
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
libxslt@1.1.34-4ubuntu0.22.04.1
1.1.34-4ubuntu0.22.04.4

Open the chart page →

33,725
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

6,543
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

5,987
litellm-helmlitellm1.100.11 of 2See more

litellm-helm litellm 1.100.1

1 of the 2 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,003
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,786
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
libxslt@1.1.34-4ubuntu0.20.04.1
1.1.34-4ubuntu0.20.04.3+esm1

Open the chart page →

18,509
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
quay.io/devtron/postgres:14.91b594392f7cb
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

32,902
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

23,228
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

17,245
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
libxslt@1.1.34-4
1.1.34-4ubuntu0.20.04.3+esm1

Open the chart page →

30,668
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
coderenvs/timescale:1.44.676fd37fe6830
libxslt@1.1.32-6.el8
0:1.1.32-6.2.el8_10

Open the chart page →

6,849
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

17,263
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

10,428
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

96,941
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,779
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
libxslt@1.1.34-9.el9
0:1.1.34-14.el9_4

Open the chart page →

7,450
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

28,839
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
libxslt@1.1.34-4
1.1.34-4ubuntu0.20.04.3+esm1

Open the chart page →

9,627
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

10,530
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

4,060
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
libxslt@1.1.32-6.el8
0:1.1.32-6.2.el8_10

Open the chart page →

107,811
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

5,435
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
library/postgres:16.24aea012537ed
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

13,521
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

8,690
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

7,052
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

22,202
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
libxslt@1.1.34-4
1.1.34-4ubuntu0.20.04.3+esm1

Open the chart page →

13,145
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

15,863
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

9,724
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

13,761
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
libxslt@1.1.34-4ubuntu0.22.04.1
1.1.34-4ubuntu0.22.04.4

Open the chart page →

5,398
dbrepodbrepo1.13.32 of 25See more

dbrepo dbrepo 1.13.3

2 of the 25 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
libxslt@1.1.35-1
1.1.35-1+deb12u2
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

52,635
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
libxslt@1.1.34-4build2
1.1.34-4ubuntu0.22.04.4

Open the chart page →

13,025
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
library/postgres:15.38775adb39f0d
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

15,562
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

13,610
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
library/postgres:17.5-bookwormfbcea1bd13b6
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

8,716
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

15,712
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
libxslt@1.1.34-4
1.1.34-4ubuntu0.20.04.3+esm1

Open the chart page →

12,422
opennebulakvaps2.1.12 of 9See more

opennebula kvaps 2.1.1

2 of the 9 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
libxslt@1.1.34-4
1.1.34-4ubuntu0.20.04.3+esm1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
libxslt@1.1.34-4
1.1.34-4ubuntu0.20.04.3+esm1

Open the chart page →

113,791
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
libxslt@1.1.35-1+deb12u1
1.1.35-1+deb12u2

Open the chart page →

13,738
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,039
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libxslt@1.1.35-1
1.1.35-1+deb12u2
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

14,838
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

5,779
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
libxslt@1.1.35-1
1.1.35-1+deb12u2

Open the chart page →

31,844
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2023-40403.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
libxslt@1.1.34-4ubuntu0.22.04.1
1.1.34-4ubuntu0.22.04.4

Open the chart page →

7,432

Container images carrying it

218 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
libxslt@1.1.34-4
1.1.34-4ubuntu0.20.04.3+esm1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
libxslt@1.1.35-1
1.1.35-1+deb12u2
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
libxslt@1.1.34-9.el9
0:1.1.34-14.el9_4
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
libxslt@1.1.32-6.el8
0:1.1.32-6.2.el8_10
1
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
libxslt@1.1.34-9.el9
0:1.1.34-14.el9_7.1
1
quay.io/galexrt/dellhw_exporter:v2.0.0b3a5806d73b5
libxslt@1.1.34-13.el9_6
0:1.1.34-14.el9_7.1
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
libxslt@1.1.32-4.el8
0:1.1.32-6.2.el8_10
1
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
libxslt@1.1.34-13.el9_6
0:1.1.34-14.el9_7.1
1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
libxslt@1.1.34-13.el9_6
0:1.1.34-14.el9_7.1
1
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
libxslt@1.1.34-13.el9_6
0:1.1.34-14.el9_7.1
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
libxslt@1.1.32-6.el8
0:1.1.32-6.2.el8_10
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
libxslt@1.1.34-9.el9
0:1.1.34-14.el9_4
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
libxslt@1.1.35-1
1.1.35-1+deb12u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.