StackRadar

CVE-2023-42363

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
588
of 17,787 indexed, latest versions
Container images
617
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 588 of 17,787 indexed charts deploy, on 617 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.35.0-r29, 1.36.0-r9, 1.36.1-r0, 1.36.1-r1+5 more1.35.0-r31, 1.36.1-r7, 1.36.1-r17, 1.36.1-r27614
busyboxdeb1:1.35.0-4+b3, 1:1.35.0-4+b41:1.35.0-4+deb12u13
OSV records
ALPINE-CVE-2023-42363DEBIAN-CVE-2023-42363

Charts affected

588 by stars
ChartLatestAffected imagesRadar Score
vault-helm-chartnotesprojectchart0.1.01 of 1See more

vault-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
library/vault:1.13.3f98ac9dd97b0
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

2,246
nottieawesomeappnottieawesomeapp0.1.01 of 1See more

nottieawesomeapp nottieawesomeapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
nottiey/mynodejswebapp:latest9c35a24c9eb3
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

1,164
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.02 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

2 of the 7 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
busybox@1.36.1-r4
1.36.1-r7
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
busybox@1.36.1-r0
1.36.1-r7

Open the chart page →

4,989
object-clonerobject-clonerVerified publisher2.0.01 of 1See more

object-cloner object-cloner 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
busybox@1.36.1-r0
1.36.1-r7

Open the chart page →

1,587
kuttleokgoloveVerified publisher2.0.01 of 1See more

kuttle okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
library/python:3.7-alpinef3d31c8677d0
busybox@1.36.1-r2
1.36.1-r7

Open the chart page →

797
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

9,736
federated-gatewayopenfaas0.1.01 of 1See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/federated-gateway:0.2.39066d7b3e6a1
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,240
sns-connectoropenfaas0.1.31 of 1See more

sns-connector openfaas 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/sns-connector:0.2.0e9ab76a4ec77
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

849
kruise-state-metricsopenkruise0.2.01 of 1See more

kruise-state-metrics openkruise 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
openkruise/kruise-state-metrics:v0.2.0a8108f771287
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

1,928
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

4,284
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
library/bash:5.2.21a422913be6a4
busybox@1.36.1-r15
1.36.1-r17
library/nginx:1.25.5-alpine-slim22414422d1ba
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

72,154
lokiot-container-kit1.0.13 of 5See more

loki ot-container-kit 1.0.1

3 of the 5 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
grafana/loki:3.1.0d947e68a84d9
busybox@1.36.1-r5
1.36.1-r7
library/memcached:1.6.23-alpine41d19476c100
busybox@1.36.1-r15
1.36.1-r17
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

4,831
pgaot-container-kit1.0.32 of 6See more

pga ot-container-kit 1.0.3

2 of the 6 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
busybox@1.36.1-r15
1.36.1-r17
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

5,136
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

5,410
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

3,660
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
busybox@1.36.1-r2
1.36.1-r7

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
busybox@1.36.1-r2
1.36.1-r7

Open the chart page →

1,978
hammondpascaliskeVerified publisher2.0.01 of 2See more

hammond pascaliske 2.0.0

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
alfhou/hammond:v0.0.24c85dc0293aa1
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,806
container-agentphntom100.0.11 of 1See more

container-agent phntom 100.0.1

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
circleci/container-agent:34d8d0ae5efc3
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

1,974
postgresql-backupphntom0.1.91 of 1See more

postgresql-backup phntom 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
phntom/postgresql-backup-s3:1.0.2249b6488f618b
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

2,556
blockmeta-servicepinaxVerified publisher0.0.31 of 1See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
busybox@1.36.1-r17
1.36.1-r27

Open the chart page →

1,681
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.3.3.102-alpinef226fe41f057
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,337
pgbouncerpmint930.10.01 of 1See more

pgbouncer pmint93 0.10.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
hyperized/pgbouncer:v1.21.06f64ca124fb5
busybox@1.36.1-r2
1.36.1-r7

Open the chart page →

358
k8s-node-image-1-21pnnl-miscscripts0.2.1491 of 2See more

k8s-node-image-1-21 pnnl-miscscripts 0.2.149

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.21.14-nginx-36c19a40d7435d
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,403
k8s-node-image-1-22pnnl-miscscripts0.2.1171 of 2See more

k8s-node-image-1-22 pnnl-miscscripts 0.2.117

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.22.17-nginx-362b3ae9b5ec25
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,403
k8s-node-image-1-23pnnl-miscscripts0.2.1231 of 2See more

k8s-node-image-1-23 pnnl-miscscripts 0.2.123

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.23.17-nginx-36a5ee1dea30e4
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,403
k8s-node-image-1-24pnnl-miscscripts0.2.1281 of 2See more

k8s-node-image-1-24 pnnl-miscscripts 0.2.128

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
pnnlmiscscripts/k8s-node-image:1.24.17-nginx-23952d87cca3d2
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,403
k8s-node-image9-1-21pnnl-miscscripts0.2.382 of 2See more

k8s-node-image9-1-21 pnnl-miscscripts 0.2.38

2 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1683907016.7470503-nginx-19a2fe06a1472
busybox@1.35.0-r29
1.35.0-r31
pnnlmiscscripts/k8s-node-image9:1.21.14-nginx-33fa8f5906d36a
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

2,612
k8s-node-image9-1-22pnnl-miscscripts0.2.312 of 2See more

k8s-node-image9-1-22 pnnl-miscscripts 0.2.31

2 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1683907016.7470503-nginx-19a2fe06a1472
busybox@1.35.0-r29
1.35.0-r31
pnnlmiscscripts/k8s-node-image9:1.22.17-nginx-34b85e437ae261
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

2,612
k8s-node-image9-1-23pnnl-miscscripts0.2.272 of 2See more

k8s-node-image9-1-23 pnnl-miscscripts 0.2.27

2 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
pnnlmiscscripts/anaconda9:1683907016.7470503-nginx-19a2fe06a1472
busybox@1.35.0-r29
1.35.0-r31
pnnlmiscscripts/k8s-node-image9:1.23.17-nginx-3479ada675515f
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

2,612
podnat-controllerpodnat-controller0.5.21 of 1See more

podnat-controller podnat-controller 0.5.2

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
gutmensch/podnat-controller:0.5.2566979793fc4
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

984
postgres-controllerpostgres-controller1.3.61 of 1See more

postgres-controller postgres-controller 1.3.6

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
evgkrsk/postgres-controller:0.6.237f0e1f435c3
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

1,782
primeprime1.0.01 of 1See more

prime prime 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
udhos/prime:1.0.0e432012dd34a
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

1,682
seashellpuckpuck1.2.01 of 1See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/puckpuck/seashell:1.2ef5e31333821
busybox@1.36.1-r2
1.36.1-r7

Open the chart page →

4,214
radio-dixitalpvillaverdeVerified publisher1.6.01 of 1See more

radio-dixital pvillaverde 1.6.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
pvillaverde/radio_dixital:1.5.0326a793e509f
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

415
rabbitmq-producer-randomizerrabbitmq-producer-randomizer0.0.81 of 1See more

rabbitmq-producer-randomizer rabbitmq-producer-randomizer 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
genseb/rabbitmq-producer-randomizer:0.0.6cb7599641099
busybox@1.36.1-r2
1.36.1-r7

Open the chart page →

878
rada-platformrada-platform0.1.02 of 7See more

rada-platform rada-platform 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
busybox@1.36.1-r15
1.36.1-r17
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

20,812
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

1,524
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

1,776
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

2,969
radar-s3-connectorradar-baseVerified publisher0.7.21 of 2See more

radar-s3-connector radar-base 0.7.2

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
linuxserver/yq:3.2.26f5b9586a93e
busybox@1.36.1-r2
1.36.1-r7

Open the chart page →

1,415
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

1,884
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-nginx:1.6.1f376b96b82cc
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

6,026
ntfyrm3lVerified publisher0.1.11 of 1See more

ntfy rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.11.04a7d0f0adc6d
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,276
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

4,039
mailserverrock8sVerified publisher0.1.21 of 1See more

mailserver rock8s 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

1,946
devtron-enterpriseromholdings48.0.02 of 28See more

devtron-enterprise romholdings 48.0.0

2 of the 28 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:geni-v1.1.4f6269309455a
busybox@1.36.1-r15
1.36.1-r17
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
busybox@1.36.0-r9
1.36.1-r7

Open the chart page →

66,542
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
busybox@1.36.1-r2
1.36.1-r7

Open the chart page →

5,041
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
busybox@1.36.0-r9
1.36.1-r7

Open the chart page →

31,447
jcmhproxy-ingressromholdings0.14.61 of 1See more

jcmhproxy-ingress romholdings 0.14.6

1 of the 1 container images this version deploys carry CVE-2023-42363.

Container imageDigestPackageFixed in
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
busybox@1.36.1-r15
1.36.1-r17

Open the chart page →

1,379

Container images carrying it

617 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
busybox@1.36.1-r2
1.36.1-r7
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
busybox@1.35.0-r29
1.35.0-r31
1
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
busybox@1.35.0-r29
1.35.0-r31
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
busybox@1.36.1-r15
1.36.1-r17
1
quay.io/metallb/controller:v0.14.4bbef1ee3e7d3
busybox@1.36.1-r15
1.36.1-r17
1
quay.io/metallb/speaker:v0.14.437611bde45a2
busybox@1.36.1-r15
1.36.1-r17
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
busybox@1.35.0-r29
1.35.0-r31
1
quay.io/spotahome/redis-operator:latest8c772955184e
busybox@1.36.1-r2
1.36.1-r7
1
quay.io/wi_stefan/dsba-db-migrations:0.0.125b986cd14a08
busybox@1.35.0-r29
1.35.0-r31
1
quay.io/yushiwho/sys-stats:e1f9d778c8d08b95c0b
busybox@1.36.1-r5
1.36.1-r7
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
busybox@1.36.1-r5
1.36.1-r7
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
busybox@1.36.1-r2
1.36.1-r7
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
busybox@1.35.0-r29
1.35.0-r31
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
busybox@1.36.1-r15
1.36.1-r17
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
busybox@1.36.0-r9
1.36.1-r7
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
busybox@1.35.0-r29
1.35.0-r31
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
busybox@1.36.1-r15
1.36.1-r17
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.