StackRadar

CVE-2023-43646

High

Advisory

Published 27 Sept 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
64th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
24
deployed by those charts
Fix available
1 of 1
affected package

Chaijs/get-func-name vulnerable to ReDoS

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 24 images.

Affected packageAffected versionsFixed inImages
get-func-namenpm2.0.02.0.124
OSV records
GHSA-4q6p-r6v2-jvc5

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
get-func-name@2.0.0
2.0.1

Open the chart page →

2,828
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
get-func-name@2.0.0
2.0.1

Open the chart page →

3,476
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
get-func-name@2.0.0
2.0.1

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
get-func-name@2.0.0
2.0.1

Open the chart page →

18,517
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
get-func-name@2.0.0
2.0.1

Open the chart page →

2,519
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
get-func-name@2.0.0
2.0.1

Open the chart page →

2,154
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
get-func-name@2.0.0
2.0.1

Open the chart page →

3,437
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
get-func-name@2.0.0
2.0.1

Open the chart page →

7,152
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
get-func-name@2.0.0
2.0.1

Open the chart page →

25,456
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
get-func-name@2.0.0
2.0.1

Open the chart page →

3,260
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
get-func-name@2.0.0
2.0.1

Open the chart page →

24,319
h2ph2pVerified publisher1.0.11 of 1See more

h2p h2p 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
dacinfomotion/h2p:latest68fa393b472c
get-func-name@2.0.0
2.0.1

Open the chart page →

1,713
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
ibmcom/app-nav-ui:1.0.1e2a86997b36b
get-func-name@2.0.0
2.0.1

Open the chart page →

32,915
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
get-func-name@2.0.0
2.0.1

Open the chart page →

57,669
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
get-func-name@2.0.0
2.0.1

Open the chart page →

4,944
keyoxide-webittrident-oss0.2.31 of 1See more

keyoxide-web ittrident-oss 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
keyoxide/keyoxide:stable96f27a71269d
get-func-name@2.0.0
2.0.1

Open the chart page →

2,363
annotation-tooljtektVerified publisher0.1.51 of 2See more

annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
get-func-name@2.0.0
2.0.1

Open the chart page →

2,315
polygonal-annotation-tooljtektVerified publisher0.1.51 of 2See more

polygonal-annotation-tool jtekt 0.1.5

1 of the 2 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
moreillon/api-proxy:a3e8b41e9e578c9653b6
get-func-name@2.0.0
2.0.1

Open the chart page →

2,231
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
get-func-name@2.0.0
2.0.1

Open the chart page →

5,287
api-proxymoreillonVerified publisher0.1.41 of 1See more

api-proxy moreillon 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
moreillon/api-proxy:2373c1953739ef6956b5
get-func-name@2.0.0
2.0.1

Open the chart page →

1,712
face-recognitionmoreillonVerified publisher0.2.41 of 3See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
get-func-name@2.0.0
2.0.1

Open the chart page →

8,556
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
get-func-name@2.0.0
2.0.1

Open the chart page →

9,835
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
get-func-name@2.0.0
2.0.1

Open the chart page →

30,363
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
get-func-name@2.0.0
2.0.1

Open the chart page →

5,215
queryservice-gatewaywbstack0.2.01 of 1See more

queryservice-gateway wbstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
get-func-name@2.0.0
2.0.1

Open the chart page →

2,559
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2023-43646.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
get-func-name@2.0.0
2.0.1

Open the chart page →

16,083

Container images carrying it

24 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
moreillon/api-proxy:a3e8b41e9e578c9653b6
get-func-name@2.0.0
2.0.1
2
moreillon/group-manager:v4.9.0d5a0ec8394c0
get-func-name@2.0.0
2.0.1
2
dacinfomotion/h2p:latest68fa393b472c
get-func-name@2.0.0
2.0.1
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
get-func-name@2.0.0
2.0.1
1
ethersphere/bzz-token-service:latest7624f11a72ad
get-func-name@2.0.0
2.0.1
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
get-func-name@2.0.0
2.0.1
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
get-func-name@2.0.0
2.0.1
1
gristlabs/grist:0.7.96e71b1914a7e
get-func-name@2.0.0
2.0.1
1
heywood8/redisinsight:2.28.00bc9ab313d37
get-func-name@2.0.0
2.0.1
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
get-func-name@2.0.0
2.0.1
1
ibmcom/microclimate-portal:latested5505e5c7ec
get-func-name@2.0.0
2.0.1
1
keyoxide/keyoxide:stable96f27a71269d
get-func-name@2.0.0
2.0.1
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
get-func-name@2.0.0
2.0.1
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
get-func-name@2.0.0
2.0.1
1
moreillon/api-proxy:2373c1953739ef6956b5
get-func-name@2.0.0
2.0.1
1
moreillon/face-recognition-fastapi-front:latestc1072f4ab6aa
get-func-name@2.0.0
2.0.1
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
get-func-name@2.0.0
2.0.1
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
get-func-name@2.0.0
2.0.1
1
wiremind/scrapoxy:lateste7048929a676
get-func-name@2.0.0
2.0.1
1
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
get-func-name@2.0.0
2.0.1
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
get-func-name@2.0.0
2.0.1
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
get-func-name@2.0.0
2.0.1
1
ghcr.io/wbstack/queryservice-gateway:2.2ab8e2f583e56
get-func-name@2.0.0
2.0.1
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
get-func-name@2.0.0
2.0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.