StackRadar

CVE-2023-42366

Medium

Advisory

Published 27 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
813
of 17,787 indexed, latest versions
Container images
851
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 813 of 17,787 indexed charts deploy, on 851 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.35.0-r10, 1.35.0-r13, 1.35.0-r14, 1.35.0-r15+10 more1.35.0-r18, 1.35.0-r30, 1.36.1-r6, 1.36.1-r16+1 more825
busyboxdeb1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 moreno fix listed26
OSV records
ALPINE-CVE-2023-42366DEBIAN-CVE-2023-42366UBUNTU-CVE-2023-42366

Charts affected

813 by stars
ChartLatestAffected imagesRadar Score
webhookswebhooks0.1.51 of 1See more

webhooks webhooks 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

2,031
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
busybox@1:1.21.0-1ubuntu1
no fix listed

Open the chart page →

41,455
plausible-analyticszekker6Verified publisher1.4.01 of 2See more

plausible-analytics zekker6 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.3.3.102-alpinef226fe41f057
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

1,170
acuteacuteVerified publisher1.2.01 of 1See more

acute acute 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
library/nginx:1.25-alpine516475cc129d
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

686
airports-frontendairports-frontend0.1.01 of 1See more

airports-frontend airports-frontend 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
daniacobext/airports-frontend:latest9eae4d39fc33
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

1,271
amorphieamorphie0.1.23 of 18See more

amorphie amorphie 0.1.2

3 of the 18 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
busybox@1.36.1-r2
1.36.1-r6
hashicorp/vault-k8s:1.3.15d74a885ae3e
busybox@1.36.1-r2
1.36.1-r6
hazelcast/hazelcast:5.3.18fe26efde8e1
busybox@1.36.1-r2
1.36.1-r6

Open the chart page →

28,212
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

3,437
ddosifyanteonVerified publisher1.7.56 of 13See more

ddosify anteon 1.7.5

6 of the 13 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.56ed80f00fde46
busybox@1.36.1-r2
1.36.1-r6
ddosify/selfhosted_frontend:2.7.456dbd7cf0776
busybox@1.36.1-r5
1.36.1-r6
library/influxdb:2.6.1-alpine44a366dd7724
busybox@1.35.0-r29
1.35.0-r30
library/nginx:1.25.4-alpine31bad00311cb
busybox@1.36.1-r5
1.36.1-r6
library/rabbitmq:3.13.0-alpineb4abd8d41c68
busybox@1.36.1-r15
1.36.1-r16
library/redis:7.2.4-alpinec8bb255c3559
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

25,720
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

4,615
ingress-nginxantmediaVerified publisher4.4.01 of 2See more

ingress-nginx antmedia 4.4.0

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

3,322
d.vazquezm.2021_helmapphelmVerified publisher1.0.01 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

1 of the 6 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-rabbitmq:1.0.0e9ce2608f799
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

19,784
test-chartapplication-chart0.2.01 of 1See more

test-chart application-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ahmedinfraplus/simple-app:STAGINGc50e6e81a637
busybox@1.35.0-r15
1.35.0-r18

Open the chart page →

1,197
app-movies-seriesapp-movies-seriesVerified publisher0.1.01 of 2See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
felipecs8/app-movies-series:v14e51693fcdf5
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

3,166
capa-vpc-peering-operatorappscodeVerified publisher2023.12.111 of 1See more

capa-vpc-peering-operator appscode 2023.12.11

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

1,433
falco-ui-serverappscodeVerified publisher2026.1.151 of 2See more

falco-ui-server appscode 2026.1.15

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
rancher/kine:v0.11.412889bbcd1e8
busybox@1.36.1-r5
1.36.1-r6

Open the chart page →

2,873
fluxcd-addon-managerappscodeVerified publisher2024.2.251 of 1See more

fluxcd-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/fluxcd-addon:v0.0.23acba3df8827
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

1,304
kube-auth-managerappscodeVerified publisher2023.11.141 of 1See more

kube-auth-manager appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

1,945
kube-auth-proxyappscodeVerified publisher2023.11.141 of 1See more

kube-auth-proxy appscode 2023.11.14

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

1,945
kubedb-provider-awsappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

2,527
kubedb-provider-azureappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-azure appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

2,705
kubedb-provider-gcpappscodeVerified publisher2026.7.101 of 2See more

kubedb-provider-gcp appscode 2026.7.10

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

3,033
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

2,796
kubeform-provider-azureappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

2,716
kubeform-provider-gcpappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

2,743
license-proxyserver-addon-managerappscodeVerified publisher2024.2.251 of 1See more

license-proxyserver-addon-manager appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

1,384
stardog-userrole-operatorappuio0.4.01 of 1See more

stardog-userrole-operator appuio 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/vshn/stardog-userrole-operator:v0.3.04774237c9e86
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

1,204
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
openruntimes/executor:0.11.42228f186dcbb
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

9,847
arcadearcadeVerified publisher1.10.11 of 10See more

arcade arcade 1.10.1

1 of the 10 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
curlimages/curl:8.5.008e466006f08
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

991
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.19.26a8671702d6f
busybox@1.35.0-r13
1.35.0-r18

Open the chart page →

8,608
agenthttpmqttassist-iot-composite-services1.0.01 of 1See more

agenthttpmqtt assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-http-mqtt:latest16d21bc5e42e
busybox@1.36.1-r2
1.36.1-r6

Open the chart page →

1,158
agentmqtthttpassist-iot-composite-services1.0.01 of 1See more

agentmqtthttp assist-iot-composite-services 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/composite-services-manager_agent-mqtt-http:latest27d58b8911cd
busybox@1.36.1-r2
1.36.1-r6

Open the chart page →

1,158
dltkvassist-iot-data-integrity-verification0.2.03 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

3 of the 9 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.46ec3fe59ea55
busybox@1.35.0-r17
1.35.0-r18
hyperledger/fabric-peer:2.46ff36af21eb1
busybox@1.35.0-r17
1.35.0-r18
hyperledger/fabric-tools:2.4b1194f509085
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

77,821
dltflassist-iot-dlt-based-fl0.2.03 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

3 of the 9 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
hyperledger/fabric-orderer:2.46ec3fe59ea55
busybox@1.35.0-r17
1.35.0-r18
hyperledger/fabric-peer:2.46ff36af21eb1
busybox@1.35.0-r17
1.35.0-r18
hyperledger/fabric-tools:2.4b1194f509085
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

77,821
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:ui-latest20338b353aaf
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

9,407
monitoring-notifyingassist-iot-monitoring-notifying0.1.01 of 1See more

monitoring-notifying assist-iot-monitoring-notifying 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/monitoring_notifying:2.0.068324d0fa5bb
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

1,677
multilink-clientassist-iot-multi-link-client-app1.0.01 of 2See more

multilink-client assist-iot-multi-link-client-app 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
curlimages/curl:8.4.04a3396ae573c
busybox@1.36.1-r4
1.36.1-r6

Open the chart page →

1,446
multilink-serverassist-iot-multi-link-server-app1.0.01 of 2See more

multilink-server assist-iot-multi-link-server-app 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
curlimages/curl:8.4.04a3396ae573c
busybox@1.36.1-r4
1.36.1-r6

Open the chart page →

973
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/open_api_kong:1.0.03fe850384689
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

18,331
resource-provisioningassist-iot-resource-provisioning1.0.03 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

3 of the 7 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
busybox@1.36.1-r2
1.36.1-r6
assistiot/resource-provisioning_im:1.0.0a942dc14030a
busybox@1.36.1-r15
1.36.1-r16
curlimages/curl:8.00.0d1658d9c8ef9
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

8,042
semantic-translationassist-iot-semantic-translation1.0.11 of 1See more

semantic-translation assist-iot-semantic-translation 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/semantic_translation:latest2a2587804717
busybox@1.36.1-r2
1.36.1-r6

Open the chart page →

505
smartorchestratorassist-iot-smart-orchestrator4.0.04 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

4 of the 14 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
busybox@1.35.0-r29
1.35.0-r30
assistiot/smart-orchestrator_enabler:latest89f37e88c871
busybox@1.35.0-r29
1.35.0-r30
assistiot/smart-orchestrator_helm:latest9bb46ea14e8e
busybox@1.36.1-r15
1.36.1-r16
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

42,460
dashboard-pui9assist-iot-tactile-dashboard0.2.02 of 3See more

dashboard-pui9 assist-iot-tactile-dashboard 0.2.0

2 of the 3 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/tacticle_dashboard:db-latest02bc92348156
busybox@1.35.0-r17
1.35.0-r18
assistiot/tacticle_dashboard:web-latest25fc9f373524
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

4,145
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
busybox@1.36.1-r15
1.36.1-r16

Open the chart page →

1,165
evm-faucetastria0.1.51 of 1See more

evm-faucet astria 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
busybox@1.36.1-r0
1.36.1-r6

Open the chart page →

1,764
phonebook-chartasumankamberoglu0.1.52 of 3See more

phonebook-chart asumankamberoglu 0.1.5

2 of the 3 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
paulkellerman/resultserver-app:1.0381eeccb0618
busybox@1.35.0-r17
1.35.0-r18
paulkellerman/webserver-app:latest5a37b74f61b9
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

3,176
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/k8s-sidecar:ignore-initial-events7f583a36a764
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

5,074
awesomeblessingappawesomeblessingapp1.1.01 of 1See more

awesomeblessingapp awesomeblessingapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
bnwokoye/nodejswebapp:latest74de7dc7ebfb
busybox@1.35.0-r29
1.35.0-r30

Open the chart page →

1,267
aws-secrets-synchronizeraws-secrets-synchronizer0.2.11 of 1See more

aws-secrets-synchronizer aws-secrets-synchronizer 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
busybox@1.36.1-r5
1.36.1-r6

Open the chart page →

955
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
prefapp/nginx-proxified:latestf4d026fd9a26
busybox@1.35.0-r17
1.35.0-r18

Open the chart page →

3,021
axosyslog-collectoraxosyslogVerified publisher0.8.11 of 1See more

axosyslog-collector axosyslog 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-42366.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
busybox@1.36.1-r2
1.36.1-r6

Open the chart page →

1,515

Container images carrying it

851 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
busybox@1.35.0-r14
1.35.0-r18
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.