StackRadarChart IndexLive demo

CVE-2023-42366

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.004; 35th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 813; of 17,787 indexed, latest versions
Container images: 851; deployed by those charts
Fix available: 1 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 813 of 17,787 indexed charts deploy, on 851 images.

Affected package	Affected versions	Fixed in	Images
busyboxapk	1.35.0-r10, 1.35.0-r13, 1.35.0-r14, 1.35.0-r15+10 more	1.35.0-r18, 1.35.0-r30, 1.36.1-r6, 1.36.1-r16+1 more	825
busyboxdeb	1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 more	no fix listed	26

OSV records: ALPINE-CVE-2023-42366 DEBIAN-CVE-2023-42366 UBUNTU-CVE-2023-42366

Charts affected

813 by stars

Chart

Latest

Affected images

Radar Score

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	busybox@1.35.0-r29	1.35.0-r30
lishimeng/owl-messager :v0.11.2	3d00485e64dc	busybox@1.35.0-r29	1.35.0-r30

Open the chart page →

3,880

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	busybox@1.35.0-r29	1.35.0-r30
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	busybox@1.35.0-r29	1.35.0-r30

Open the chart page →

3,974

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
lishimeng/tabby :v1.0.4	8145c3dc83c8	busybox@1.35.0-r29	1.35.0-r30

Open the chart page →

7,685

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	busybox@1.35.0-r29	1.35.0-r30

Open the chart page →

1,997

1 of 1 See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
lishimeng/zoo :v0.4.0	e0b8d2d8ca28	busybox@1.35.0-r29	1.35.0-r30

Open the chart page →

1,955

pgbounceryasn77-pgbouncer

1 of 1 See more

pgbouncer yasn77-pgbouncer 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
ghcr.io/yasn77/pgbouncer :v0.0.6	cc8c13550e44	busybox@1.35.0-r17	1.35.0-r18

Open the chart page →

1,152

prometheusalertygqygq2

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	busybox@1.36.1-r5	1.36.1-r6

Open the chart page →

1,610

rawfile-csiymatrix

1 of 4 See more

rawfile-csi ymatrix 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	busybox@1.35.0-r10	1.35.0-r18

Open the chart page →

7,972

zahori-consulzahori

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	busybox@1.35.0-r29	1.35.0-r30
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	busybox@1.35.0-r29	1.35.0-r30

Open the chart page →

5,033

zahori-postgresqlzahori

1 of 1 See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
library/postgres :12.15-alpine	73ea9cdd4a9d	busybox@1.36.1-r2	1.36.1-r6

Open the chart page →

448

zahori-processzahori

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	busybox@1.36.1-r0	1.36.1-r6

Open the chart page →

3,480

zahori-serverzahori

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	busybox@1.35.0-r29	1.35.0-r30
zahoriaut/zahori-server :0.1.17	b2de13916f3e	busybox@1.35.0-r29	1.35.0-r30

Open the chart page →

5,847

sockpuppetbrowserzekker6

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	busybox@1.36.1-r5	1.36.1-r6

Open the chart page →

1,588

Container images carrying it

851 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/hostpathplugin :v1.9.0	92257881c1d6	busybox@1.35.0-r14	1.35.0-r18	1