StackRadar

CVE-2023-42366

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
813
of 17,787 indexed, latest versions
Container images
851
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 813 of 17,787 indexed charts deploy, on 851 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.35.0-r10, 1.35.0-r13, 1.35.0-r14, 1.35.0-r15+10 more1.35.0-r18, 1.35.0-r30, 1.36.1-r6, 1.36.1-r16+1 more825
busyboxdeb1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 moreno fix listed26
OSV records
ALPINE-CVE-2023-42366DEBIAN-CVE-2023-42366UBUNTU-CVE-2023-42366

Charts affected

813 by stars
ChartLatestAffected imagesRadar Score
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
busybox@1.35.0-r29
1.35.0-r30
lishimeng/owl-messager:v0.11.23d00485e64dc
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
busybox@1.35.0-r29
1.35.0-r30
lishimeng/passport-profile:v0.2.160970dfe5dc8f
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

1,955
pgbounceryasn77-pgbouncer0.0.81 of 1See more

pgbouncer yasn77-pgbouncer 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

1,152
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
busybox@1.36.1-r5
1.36.1-r6

Open the chart page →

1,610
rawfile-csiymatrixVerified publisher0.2.11 of 4See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
matrixdb/rawfile-csi:v0.2.195b2e38e913d
busybox@1.35.0-r10
1.35.0-r18

Open the chart page →

7,972
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
busybox@1.35.0-r29
1.35.0-r30
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

5,033
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
busybox@1.36.1-r2
1.36.1-r6

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
busybox@1.36.1-r0
1.36.1-r6

Open the chart page →

3,480
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
busybox@1.35.0-r29
1.35.0-r30
zahoriaut/zahori-server:0.1.17b2de13916f3e
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

5,847
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
busybox@1.36.1-r5
1.36.1-r6

Open the chart page →

1,588

Container images carrying it

851 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
voidxmh/golang:1.19-alpine-dev423c6195fab2
busybox@1.35.0-r17
1.35.0-r18
1
volkerraschek/postfixadmin-fetchmail:0.3.0e4cf12c6249d
busybox@1.35.0-r29
1.35.0-r30
1
voltha/voltha-envoy:1.6.059ab2a00f712
busybox@1:1.21.0-1ubuntu1
no fix listed
1
vrijbrp/balie:developbc85c89530b9
busybox@1.36.1-r5
1.36.1-r6
1
vrijbrp/balie-ws:developc6603cb829ea
busybox@1.36.1-r5
1.36.1-r6
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
busybox@1.35.0-r29
1.35.0-r30
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
busybox@1.36.1-r4
1.36.1-r6
1
wallarm/ingress-tarantool:4.6.0-1ba00516618ea
busybox@1.35.0-r29
1.35.0-r30
1
wallarm/sysbindings:v0.9.9c527865df85d
busybox@1.35.0-r17
1.35.0-r18
1
wistefan/vcbackend:0.0.13bd436164b51
busybox@1.35.0-r13
1.35.0-r18
1
xvilo/php:8.2-composera138e57d3204
busybox@1.35.0-r29
1.35.0-r30
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
busybox@1.36.1-r0
1.36.1-r6
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
busybox@1.35.0-r29
1.35.0-r30
1
zedeus/nitter:bc219aa792cc0e4117888b2036a969559f4f26893dd3d5ea33be
busybox@1.35.0-r29
1.35.0-r30
1
zurdi15/romm:2.3.12db88fe44c89
busybox@1.35.0-r29
1.35.0-r30
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
busybox@1.35.0-r17
1.35.0-r18
1
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
busybox@1.36.1-r5
1.36.1-r6
1
gcr.io/ml-pipeline/viewer-crd-controller:2.0.0-alpha.534403f9f94be
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
busybox@1.36.1-r2
1.36.1-r6
1
ghcr.io/akhilrex/podgrab:1.0.0bce133f3f511
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
busybox@1.36.1-r15
1.36.1-r16
1
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
busybox@1.36.1-r15
1.36.1-r16
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
busybox@1.36.0-r9
1.36.1-r6
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/arpa-network/node-shell:latest6b359ace1408
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
busybox@1.36.1-r0
1.36.1-r6
1
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
busybox@1.36.1-r5
1.36.1-r6
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
busybox@1.36.1-r2
1.36.1-r6
1
ghcr.io/bakito/sealed-secrets-web:v3.0.574aff24d4b97
busybox@1.35.0-r29
1.35.0-r30
1
ghcr.io/beluga-cloud/actual/actualserver:23.12.1c8a0d5ec5a12
busybox@1.36.1-r15
1.36.1-r16
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
busybox@1.36.1-r4
1.36.1-r6
1
ghcr.io/bryopsida/redis:main5ef6bdb63604
busybox@1.36.1-r2
1.36.1-r6
1
ghcr.io/caarlos0/domain_exporter:v1.18.0-arm64c852606428cf
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
busybox@1.36.1-r5
1.36.1-r6
1
ghcr.io/clusterpedia-io/clusterpedia/apiserver:v0.6.03d089d9078f8
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/clusterpedia-io/clusterpedia/clustersynchro-manager:v0.6.082cc9a77f6d6
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/clusterpedia-io/clusterpedia/controller-manager:v0.6.081669df338e0
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/conductionnl/commonground-gateway-frontend:dev3b3fbb57cae8
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/cosmo-workspace/cosmo-traefik-plugins:v0.9.1435518f49e23
busybox@1.36.0-r9
1.36.1-r6
1
ghcr.io/cubeengine/sponge:1.20.2-11.0.0-RC13755c85f2b82064
busybox@1.36.1-r2
1.36.1-r6
1
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
busybox@1.36.1-r15
1.36.1-r16
1
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
busybox@1.36.1-r15
1.36.1-r16
1
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
busybox@1.35.0-r17
1.35.0-r18
1
ghcr.io/curium-rocks/mitre-siphon:main503c00321502
busybox@1.36.1-r0
1.36.1-r6
1
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
busybox@1.35.0-r29
1.35.0-r30
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
busybox@1.36.1-r2
1.36.1-r6
1
ghcr.io/data-fair/metrics:0a8d40779eeae
busybox@1.36.1-r0
1.36.1-r6
1
ghcr.io/data-fair/portals:18b621866ceb2
busybox@1.35.0-r29
1.35.0-r30
1
ghcr.io/data-fair/processings:15a9216989707
busybox@1.36.1-r2
1.36.1-r6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.