StackRadar

CVE-2023-42365

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
603
of 17,787 indexed, latest versions
Container images
635
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 635 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.35.0-r29, 1.36.0-r9, 1.36.1-r0, 1.36.1-r1+7 more1.35.0-r31, 1.36.1-r7, 1.36.1-r19, 1.36.1-r29632
busyboxdeb1:1.35.0-4+b3, 1:1.35.0-4+b41:1.35.0-4+deb12u13
OSV records
ALPINE-CVE-2023-42365DEBIAN-CVE-2023-42365

Charts affected

603 by stars
ChartLatestAffected imagesRadar Score
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42365.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
busybox@1.36.1-r0
1.36.1-r7

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42365.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
busybox@1.35.0-r29
1.35.0-r31
zahoriaut/zahori-server:0.1.17b2de13916f3e
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42365.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

1,588

Container images carrying it

635 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
haproxytech/kubernetes-ingress:1.11.4c5f8a41ef0d4
busybox@1.36.1-r5
1.36.1-r7
1
hashicorp/boundary:0.15.3339b78b61750
busybox@1.36.1-r5
1.36.1-r7
1
hashicorp/consul:1.17.0712fe02d2f84
busybox@1.36.1-r2
1.36.1-r7
1
hashicorp/consul:1.15.3ddff34041c5c
busybox@1.35.0-r29
1.35.0-r31
1
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
busybox@1.36.1-r2
1.36.1-r7
1
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
busybox@1.35.0-r29
1.35.0-r31
1
hashicorp/terraform:1.44dcb45513699
busybox@1.36.1-r2
1.36.1-r7
1
hashicorp/vault:1.15.40b01ed3924e6
busybox@1.36.1-r5
1.36.1-r7
1
hashicorp/vault-k8s:1.2.14500e988b7ce
busybox@1.35.0-r29
1.35.0-r31
1
hashicorp/waypoint:0.11.397d521a27498
busybox@1.35.0-r29
1.35.0-r31
1
hazelcast/hazelcast:5.3.18fe26efde8e1
busybox@1.36.1-r2
1.36.1-r7
1
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
busybox@1.36.1-r0
1.36.1-r7
1
hiett/serverless-redis-http:0.0.1065128347949b
busybox@1.35.0-r29
1.35.0-r31
1
hngtech11/hello-world:v1f0112dc12cfb
busybox@1.36.1-r5
1.36.1-r7
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
busybox@1.36.1-r2
1.36.1-r7
1
homeassistant/home-assistant:2023.12.48d000332b09b
busybox@1.36.1-r2
1.36.1-r7
1
huajuan6848/sys-info-web:0.0.2-SNAPSHOT-HEALTH0a9f0a692dc4
busybox@1.36.1-r2
1.36.1-r7
1
hyperized/pgbouncer:v1.21.06f64ca124fb5
busybox@1.36.1-r2
1.36.1-r7
1
i4trust/activation-service:2.2.09f3719176893
busybox@1.36.1-r0
1.36.1-r7
1
imroc/logrotate:3.21.0135c769e659f
busybox@1.36.1-r15
1.36.1-r19
1
invoiceninja/invoiceninja:5.6.241437916dee01
busybox@1.36.1-r0
1.36.1-r7
1
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
busybox@1.35.0-r29
1.35.0-r31
1
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
busybox@1.35.0-r29
1.35.0-r31
1
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
busybox@1.35.0-r29
1.35.0-r31
1
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
busybox@1.35.0-r29
1.35.0-r31
1
iomesh/deck:v0.1.0a31e26b6ae22
busybox@1.36.1-r15
1.36.1-r19
1
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
busybox@1.36.1-r15
1.36.1-r19
1
iomesh/prepare-csi:v1.0.3-rc0063b18afb6a1
busybox@1.36.1-r0
1.36.1-r7
1
iomesh/prepare-csi:v1.0.24206d42b92f1
busybox@1.36.1-r0
1.36.1-r7
1
jlesage/handbrake:v24.01.20752dcb72bd1
busybox@1.35.0-r29
1.35.0-r31
1
josepht05/nodejs-feb24:latest36cb0c618c94
busybox@1.35.0-r29
1.35.0-r31
1
josepht05/titajo-docker:v1.0.0d94024965d78
busybox@1.35.0-r29
1.35.0-r31
1
juicedata/csi-dashboard:v0.23.03e4daf9626d5
busybox@1.36.1-r2
1.36.1-r7
1
jupyterhub/configurable-http-proxy:4.5.67adeeed34a36
busybox@1.36.1-r2
1.36.1-r7
1
jupyterhub/k8s-network-tools:3.0.1-0.dev.git.6287.hbfb05cd691f8f833fc1d
busybox@1.36.1-r2
1.36.1-r7
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
busybox@1.36.1-r5
1.36.1-r7
1
kfirfer/king:latestc05d9fc7ae77
busybox@1.35.0-r29
1.35.0-r31
1
kfirfer/mysql-client:0.0.4d23d173f333f
busybox@1.36.1-r15
1.36.1-r19
1
kfirfer/slackgpt:0.0.15461331bd838e
busybox@1.36.1-r2
1.36.1-r7
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
busybox@1.36.1-r15
1.36.1-r19
1
ktitilayo2/nodejswebapp:latest8bac28058688
busybox@1.35.0-r29
1.35.0-r31
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
busybox@1.36.1-r0
1.36.1-r7
1
kubebb/component-store:latestfd8ecbd73213
busybox@1.36.1-r0
1.36.1-r7
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
busybox@1.36.1-r0
1.36.1-r7
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
busybox@1.36.1-r2
1.36.1-r7
1
kubegems/chatgpt-api-feishubot:latest7c93c84b2055
busybox@1.35.0-r29
1.35.0-r31
1
kubegems/chatgpt-api-proxy:latest8905c9dbbb5d
busybox@1.35.0-r29
1.35.0-r31
1
kubegems/kubectl:latestc3b4be9a54f5
busybox@1.35.0-r29
1.35.0-r31
1
kubesec/kubesec:v2.13.0c0f3b0673578
busybox@1.35.0-r29
1.35.0-r31
1
kubeshop/testkube-dashboard:1.16.748958b4126a4
busybox@1.36.1-r5
1.36.1-r7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.