StackRadar

CVE-2023-42365

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
603
of 17,787 indexed, latest versions
Container images
635
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 603 of 17,787 indexed charts deploy, on 635 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.35.0-r29, 1.36.0-r9, 1.36.1-r0, 1.36.1-r1+7 more1.35.0-r31, 1.36.1-r7, 1.36.1-r19, 1.36.1-r29632
busyboxdeb1:1.35.0-4+b3, 1:1.35.0-4+b41:1.35.0-4+deb12u13
OSV records
ALPINE-CVE-2023-42365DEBIAN-CVE-2023-42365

Charts affected

603 by stars
ChartLatestAffected imagesRadar Score
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42365.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
busybox@1.36.1-r0
1.36.1-r7

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42365.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
busybox@1.35.0-r29
1.35.0-r31
zahoriaut/zahori-server:0.1.17b2de13916f3e
busybox@1.35.0-r29
1.35.0-r31

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42365.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
busybox@1.36.1-r5
1.36.1-r7

Open the chart page →

1,588

Container images carrying it

635 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
openruntimes/executor:0.11.42228f186dcbb
busybox@1.36.1-r15
1.36.1-r19
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
busybox@1.35.0-r29
1.35.0-r31
1
openzipkin/zipkin:2.24197a9692f6a9
busybox@1.36.1-r15
1.36.1-r19
1
oranhack7/solidproject:77c6453942223f
busybox@1.36.1-r15
1.36.1-r19
1
oryd/kratos:v1.1.08f15006a080d
busybox@1.36.1-r5
1.36.1-r7
1
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
busybox@1.35.0-r29
1.35.0-r31
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
busybox@1.35.0-r29
1.35.0-r31
1
pgpool/pgpool:latest3782cbf9bb0c
busybox@1.35.0-r29
1.35.0-r31
1
phntom/chartmuseum:v0.16.053883b65d9b7
busybox@1.36.1-r0
1.36.1-r7
1
phntom/postgresql-backup-s3:1.0.2249b6488f618b
busybox@1.35.0-r29
1.35.0-r31
1
phsmith/rundeck-exporter:2.6.10265a7616ae8
busybox@1.36.0-r9
1.36.1-r7
1
pinclr/v2ray-proxy:latestf37f250b7091
busybox@1.36.0-r9
1.36.1-r7
1
pnnlmiscscripts/k8s-node-image:1.22.17-nginx-362b3ae9b5ec25
busybox@1.36.1-r15
1.36.1-r19
1
pnnlmiscscripts/k8s-node-image:1.24.17-nginx-23952d87cca3d2
busybox@1.36.1-r15
1.36.1-r19
1
pnnlmiscscripts/k8s-node-image:1.23.17-nginx-36a5ee1dea30e4
busybox@1.36.1-r15
1.36.1-r19
1
pnnlmiscscripts/k8s-node-image:1.21.14-nginx-36c19a40d7435d
busybox@1.36.1-r15
1.36.1-r19
1
pnnlmiscscripts/k8s-node-image9:1.23.17-nginx-3479ada675515f
busybox@1.35.0-r29
1.35.0-r31
1
pnnlmiscscripts/k8s-node-image9:1.22.17-nginx-34b85e437ae261
busybox@1.35.0-r29
1.35.0-r31
1
pnnlmiscscripts/k8s-node-image9:1.21.14-nginx-33fa8f5906d36a
busybox@1.35.0-r29
1.35.0-r31
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
busybox@1.36.1-r0
1.36.1-r7
1
postgis/postgis:15-3.3-alpine4738bee21eb6
busybox@1.36.1-r2
1.36.1-r7
1
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
busybox@1.35.0-r29
1.35.0-r31
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
busybox@1.36.1-r15
1.36.1-r19
1
pumejlab/nodejs-webapp:latestf563eabcb819
busybox@1.35.0-r29
1.35.0-r31
1
pvillaverde/radio_dixital:1.5.0326a793e509f
busybox@1.36.1-r15
1.36.1-r19
1
pyaephyohein/mysql2s3bk:alphafdee05f2d441
busybox@1.36.1-r2
1.36.1-r7
1
pysga1996/python-redis-web:latestfdeec30ad482
busybox@1.35.0-r29
1.35.0-r31
1
qbittorrentofficial/qbittorrent-nox:4.6.3-12b86d9c356ae
busybox@1.36.1-r15
1.36.1-r19
1
rapidfort/curl:8.7.18483c9f4490f
busybox@1.36.1-r15
1.36.1-r19
1
rclone/rclone:1.63.008e1af3c8814
busybox@1.36.1-r0
1.36.1-r7
1
redis/redisinsight:2.46699d341bd329
busybox@1.36.1-r5
1.36.1-r7
1
restic/restic:0.15.2579e4e6a4931
busybox@1.35.0-r29
1.35.0-r31
1
rss3/op-batcher:d2c5ced00901227473fc196fda838191f0cb4e02e8adc09d9c07
busybox@1.36.1-r5
1.36.1-r7
1
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
busybox@1.36.1-r5
1.36.1-r7
1
rss3/op-proposer:d2c5ced00901227473fc196fda838191f0cb4e0296672897ba9e
busybox@1.36.1-r5
1.36.1-r7
1
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
busybox@1.36.1-r5
1.36.1-r7
1
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
busybox@1.36.1-r5
1.36.1-r7
1
sealio/hermitcrab:v0.1.4a326a2f03660
busybox@1.36.1-r15
1.36.1-r19
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
busybox@1.36.1-r2
1.36.1-r7
1
semaphoreui/semaphore:v2.9.645b50bc11833f
busybox@1.36.1-r5
1.36.1-r7
1
semitechnologies/weaviate:1.19.17a00d226f063
busybox@1.36.0-r9
1.36.1-r7
1
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
busybox@1.36.1-r2
1.36.1-r7
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
busybox@1.36.1-r15
1.36.1-r19
1
sky5367/locust-plugins-timescale:latestd3150f201471
busybox@1.36.1-r5
1.36.1-r7
1
skylenet/ethereum-testnet-homepage:latest8698903e379f
busybox@1.35.0-r29
1.35.0-r31
1
solidproject/community-server:6.0.2ccc4acb7e9a1
busybox@1.36.1-r2
1.36.1-r7
1
srini78/nodejswebappeks:latest5d1cbdc6833a
busybox@1.35.0-r29
1.35.0-r31
1
su541/cert-manager-desec-webhook:latest371ee33f83c1
busybox@1.36.1-r0
1.36.1-r7
1
subsquid/substrate-explorer:firesquid0889a857f192
busybox@1.35.0-r29
1.35.0-r31
1
subsquid/substrate-ingest:firesquidfa549779e9b1
busybox@1.35.0-r29
1.35.0-r31
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.