StackRadar

CVE-2023-42364

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
603
of 17,787 indexed, latest versions
Container images
635
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 635 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.35.0-r29, 1.36.0-r9, 1.36.1-r0, 1.36.1-r1+7 more1.35.0-r31, 1.36.1-r7, 1.36.1-r19, 1.36.1-r29632
busyboxdeb1:1.35.0-4+b3, 1:1.35.0-4+b41:1.35.0-4+deb12u13
OSV records
ALPINE-CVE-2023-42364DEBIAN-CVE-2023-42364

Charts affected

603 by stars
ChartLatestAffected imagesRadar Score
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42364.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
busybox@1.36.1-r0
1.36.1-r7

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42364.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
busybox@1.35.0-r29
1.35.0-r31
zahoriaut/zahori-server:0.1.17b2de13916f3e
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42364.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

1,588

Container images carrying it

635 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
busybox@1.35.0-r29
1.35.0-r31
2
library/influxdb:2.6.1-alpine44a366dd7724
busybox@1.35.0-r29
1.35.0-r31
2
library/memcached:1.6.23-alpine41d19476c100
busybox@1.36.1-r15
1.36.1-r19
2
library/mongo-express:1.0.2:latest1b23d7976f02
busybox@1.36.1-r5
1.36.1-r7
2
library/nats:2.9.17-alpine1a7b320b2942
busybox@1.36.0-r9
1.36.1-r7
2
library/nats:2.10.7-alpine1bcddab51b80
busybox@1.36.1-r5
1.36.1-r7
2
library/nats:2.10.5-alpine85319e5e541b
busybox@1.36.1-r5
1.36.1-r7
2
library/nginx:1.24-alpine77e5d4a6ad90
busybox@1.35.0-r29
1.35.0-r31
2
library/postgres:15.2-alpined9c304353c03
busybox@1.35.0-r29
1.35.0-r31
2
library/postgres:11-alpineea50b9fd617b
busybox@1.36.1-r15
1.36.1-r19
2
library/python:3.7-alpinef3d31c8677d0
busybox@1.36.1-r2
1.36.1-r7
2
lncm/bitcoind:v27.0324fec72192e
busybox@1.36.1-r15
1.36.1-r19
2
metabase/metabase:v0.45.21fb334ce4820
busybox@1.35.0-r29
1.35.0-r31
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
busybox@1.36.1-r15
1.36.1-r19
2
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
busybox@1.35.0-r29
1.35.0-r31
2
natsio/prometheus-nats-exporter:0.11.031c02aac089a
busybox@1.35.0-r29
1.35.0-r31
2
organizr/organizr:latest1ce319d73cdf
busybox@1.36.1-r2
1.36.1-r7
2
oryd/kratos:v1.0.0d06fc5845f63
busybox@1.36.1-r1
1.36.1-r7
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
busybox@1.36.1-r0
1.36.1-r7
2
outlinewiki/outline:0.69.1d060dcd8f9aa
busybox@1.35.0-r29
1.35.0-r31
2
rancher/kine:v0.11.412889bbcd1e8
busybox@1.36.1-r5
1.36.1-r7
2
rookout/controller:latest4451a6f6b8ec
busybox@1.35.0-r29
1.35.0-r31
2
rookout/data-on-prem:latest51c0fce64467
busybox@1.35.0-r29
1.35.0-r31
2
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
busybox@1.36.1-r5
1.36.1-r7
2
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
busybox@1.36.1-r5
1.36.1-r7
2
shahanafarooqui/rtl:0.13.3e2195188a451
busybox@1.35.0-r29
1.35.0-r31
2
taigaio/taiga-events:latest92fc0822564f
busybox@1.36.1-r2
1.36.1-r7
2
taigaio/taiga-front:latest570c8792ce80
busybox@1.35.0-r29
1.35.0-r31
2
temporalio/server:1.22.4c0a44c26397b
busybox@1.36.1-r2
1.36.1-r7
2
temporalio/ui:2.16.2af9c9349708f
busybox@1.36.1-r0
1.36.1-r7
2
victoriametrics/vmalert:v1.95.1a83e5db0897a
busybox@1.36.1-r2
1.36.1-r7
2
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
busybox@1.36.1-r15
1.36.1-r19
2
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
busybox@1.36.1-r15
1.36.1-r19
2
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
busybox@1.35.0-r29
1.35.0-r31
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
busybox@1.35.0-r29
1.35.0-r31
2
ghcr.io/eosc-lot-1/curl-jq:8156beafae7ca
busybox@1.36.1-r15
1.36.1-r19
2
ghcr.io/eosc-lot-1/s3cmd:2-alpine49bce0dd876d
busybox@1.36.1-r15
1.36.1-r19
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
busybox@1.36.1-r2
1.36.1-r7
2
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
busybox@1.36.1-r15
1.36.1-r19
2
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
busybox@1.35.0-r29
1.35.0-r31
2
quay.io/kiwigrid/k8s-sidecar:1.26.1b8d5067137fe
busybox@1.36.1-r15
1.36.1-r19
2
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
busybox@1.36.1-r28
1.36.1-r29
2
quay.io/metallb/speaker:v0.13.1000406ccb1fa0
busybox@1.36.0-r9
1.36.1-r7
2
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
busybox@1.36.1-r4
1.36.1-r7
2
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
busybox@1.36.1-r15
1.36.1-r19
2
0hlov3/semaphore:v1.0.050f874ec096b
busybox@1.35.0-r29
1.35.0-r31
1
abdullahkhabir/radio:latest56526d0cc929
busybox@1.35.0-r29
1.35.0-r31
1
adguard/adguardhome:v0.107.513a143e6c071c
busybox@1.36.1-r5
1.36.1-r7
1
adguard/adguardhome:v0.107.3843ec119419a9
busybox@1.36.1-r2
1.36.1-r7
1
ahmetgrbzz/result_server:1.008e10f9c0f53
busybox@1.36.1-r15
1.36.1-r19
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.