StackRadar

CVE-2023-42364

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
603
of 17,787 indexed, latest versions
Container images
635
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 635 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.35.0-r29, 1.36.0-r9, 1.36.1-r0, 1.36.1-r1+7 more1.35.0-r31, 1.36.1-r7, 1.36.1-r19, 1.36.1-r29632
busyboxdeb1:1.35.0-4+b3, 1:1.35.0-4+b41:1.35.0-4+deb12u13
OSV records
ALPINE-CVE-2023-42364DEBIAN-CVE-2023-42364

Charts affected

603 by stars
ChartLatestAffected imagesRadar Score
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42364.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
busybox@1.36.1-r0
1.36.1-r7

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42364.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
busybox@1.35.0-r29
1.35.0-r31
zahoriaut/zahori-server:0.1.17b2de13916f3e
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42364.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

1,588

Container images carrying it

635 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
codecov/self-hosted-gateway:24.4.1de483faad6e5
busybox@1.36.1-r5
1.36.1-r7
1
codecov/self-hosted-worker:24.4.1837f546b479b
busybox@1.36.1-r5
1.36.1-r7
1
coldatom/containers-security-api:latesteae9e82da080
busybox@1.35.0-r29
1.35.0-r31
1
coldatom/containers-security-front:latest7c2fbbb41bcf
busybox@1.35.0-r29
1.35.0-r31
1
commerceexperts/smartquery-service:2.2.09e33ad89baf6
busybox@1.36.1-r15
1.36.1-r19
1
crazymax/rrdcached:1.8.0841b10cdae76
busybox@1.36.0-r9
1.36.1-r7
1
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
busybox@1.35.0-r29
1.35.0-r31
1
cryptexlabs/authf:0.12.11189c07411d7c
busybox@1.36.1-r15
1.36.1-r19
1
cryptexlabs/swagger-combine-ui:0.2.1ed0bc94fd412
busybox@1.36.1-r15
1.36.1-r19
1
curlimages/curl:8.7.125d29daeb9b1
busybox@1.36.1-r15
1.36.1-r19
1
curlimages/curl:8.1.15af13420d29b
busybox@1.35.0-r29
1.35.0-r31
1
czerwonk/ping_exporter:v1.1.394f51e1ef1e2
busybox@1.36.1-r15
1.36.1-r19
1
daledavies/jump:v1.4.10a0c8ad93902
busybox@1.36.1-r15
1.36.1-r19
1
danny1dockerhub/nodejswebapp:lateste434683fcc89
busybox@1.35.0-r29
1.35.0-r31
1
davdiv/musicociel:deva85f99be882c
busybox@1.36.1-r15
1.36.1-r19
1
ddefrancesco/scoperunner-server:0.2.1daaac6657600
busybox@1.36.1-r15
1.36.1-r19
1
ddosify/selfhosted_frontend:2.7.456dbd7cf0776
busybox@1.36.1-r5
1.36.1-r7
1
ddosify/selfhosted_frontend:4.1.5bf454ab99d89
busybox@1.36.1-r5
1.36.1-r7
1
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
busybox@1.36.0-r9
1.36.1-r7
1
defactops/defactops-ui:1.0.16825cdf9ba706
busybox@1.36.1-r15
1.36.1-r19
1
deluan/navidrome:0.49.311a24da08977
busybox@1.35.0-r29
1.35.0-r31
1
deluan/navidrome:0.50.02cf4442b0099
busybox@1.36.1-r2
1.36.1-r7
1
devopsfaith/krakend:2.6.34c678c224f67
busybox@1.36.1-r5
1.36.1-r7
1
devopstales/trivy-operator:2.575136aa7a26e
busybox@1.35.0-r29
1.35.0-r31
1
dgtlmoon/sockpuppetbrowser:latestf166a963b550
busybox@1.36.1-r5
1.36.1-r7
1
dinutac/jinja2docker:2.1.89340dde8a8a4
busybox@1.36.1-r15
1.36.1-r19
1
distribution/distribution:2.8.3f84b2078238f
busybox@1.36.1-r2
1.36.1-r7
1
djjudas21/autonodelabel:0.0.6f17233350c4f
busybox@1.36.1-r0
1.36.1-r7
1
djjudas21/dbdump:0.0.917fc245e29bd
busybox@1.36.1-r15
1.36.1-r19
1
dnsforge/xteve:latest4d9a685c8c28
busybox@1.35.0-r29
1.35.0-r31
1
dockurr/strfry:1.1.0545555da5dd2
busybox@1.36.1-r2
1.36.1-r7
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
busybox@1.36.1-r2
1.36.1-r7
1
dongjiang1989/cpusets-controller:v1.1.1dc5bd483874c
busybox@1.36.1-r0
1.36.1-r7
1
dongjiang1989/cpusets-device-plugin:v1.1.1923085c65123
busybox@1.36.1-r0
1.36.1-r7
1
dongjiang1989/crane-scheduler-controller:mainf0055c05dbee
busybox@1.36.0-r9
1.36.1-r7
1
dongjiang1989/ns-node-affinity:latest451f7823723c
busybox@1.35.0-r29
1.35.0-r31
1
dpage/pgadmin4:8.418cd5711fc9a
busybox@1.36.1-r15
1.36.1-r19
1
dpage/pgadmin4:7.537946e4f3e7b
busybox@1.36.1-r0
1.36.1-r7
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
busybox@1.35.0-r29
1.35.0-r31
1
dragonflyoss/scheduler:v2.1.49523785c77787
busybox@1.35.0-r29
1.35.0-r31
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
busybox@1.36.1-r15
1.36.1-r19
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
busybox@1.35.0-r29
1.35.0-r31
1
durellirsd/security-smells-api:v17398aca4fc2e
busybox@1.36.1-r28
1.36.1-r29
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
busybox@1.36.1-r28
1.36.1-r29
1
envsubst/envsubst:latest90963c70db69
busybox@1.36.1-r2
1.36.1-r7
1
epamedp/jenkins-operator:2.15.328ef56bc0ca3
busybox@1.36.1-r2
1.36.1-r7
1
eqalpha/keydb:alpine_x86_64_v6.3.4f1d60f12cb3c
busybox@1.36.1-r2
1.36.1-r7
1
ethersphere/etherproxy:1.0.056029b0985f4
busybox@1.36.1-r2
1.36.1-r7
1
ethpandaops/blob-me-baby:latestad26158420dd
busybox@1.36.1-r2
1.36.1-r7
1
ethpandaops/blobscan-indexer:latestc58eb9ffe446
busybox@1.35.0-r29
1.35.0-r31
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.