CVE-2023-43786

Medium

Advisory

Published 3 Oct 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 205; of 17,781 indexed, latest versions
Container images: 195; deployed by those charts
Fix available: 3 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 205 of 17,781 indexed charts deploy, on 195 images.

Affected package	Affected versions	Fixed in	Images
libx11deb	2:1.6.2-1ubuntu2, 2:1.6.2-1ubuntu2.1, 2:1.6.3-1ubuntu2, 2:1.6.3-1ubuntu2.1+11 more	2:1.6.2-1ubuntu2.1+esm5, 2:1.6.3-1ubuntu2.2+esm4, 2:1.6.4-3ubuntu0.4+esm2, 2:1.6.9-2ubuntu1.6+2 more	149
libx11apk	1.8-r0, 1.8-r1, 1.8.3-r0, 1.8.3-r1+4 more	1.8.7-r0	46
libxpmdeb	1:3.5.10-1ubuntu0.1, 1:3.5.11-1ubuntu0.16.04.1, 1:3.5.12-1, 1:3.5.12-1build2+2 more	1:3.5.10-1ubuntu0.1+esm2, 1:3.5.11-1ubuntu0.16.04.1+esm2, 1:3.5.12-1ubuntu0.18.04.2+esm1, 1:3.5.12-1ubuntu0.20.04.2+1 more	46

OSV records: ALPINE-CVE-2023-43786 DEBIAN-CVE-2023-43786 UBUNTU-CVE-2023-43786
Also known as: USN-6407-1, USN-6407-2, USN-6408-1, USN-6408-2

Charts affected

205 by stars

Chart

Latest

Affected images

Radar Score

stakefishstakefish

0.1.0

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2

Open the chart page →

20,223

unifistartechnica

0.1.3

1 of 2 See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.1.66	4a3616625dda	libx11@2:1.6.4-3ubuntu0.4	2:1.6.4-3ubuntu0.4+esm2

Open the chart page →

14,493

tensor_apptensor-app

0.2.2

2 of 3 See more

tensor_app tensor-app 0.2.2

2 of the 3 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2
xeladock/nginx2 :latest	c259a67b1dff	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2

Open the chart page →

17,461

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2

Open the chart page →

14,358

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-43786.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6

Open the chart page →

11,405

Container images carrying it

195 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	libx11@2:1.6.3-1ubuntu2.1	2:1.6.3-1ubuntu2.2+esm4	1
onosproject/onos :2.2.1	44914a8d4b3f	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4+esm2	1
opendatacube/wms :latest	1b90cdf68831	libx11@2:1.6.4-3ubuntu0.2	2:1.6.4-3ubuntu0.4+esm2	1
openkm/openkm-ce :6.3.11	3bc465a7461b	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
openspeedtest/latest :v2.0.0	d4d62f4b7d85	libx11@1.8.4-r1	1.8.7-r0	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	libx11@2:1.6.4-3ubuntu0.3	2:1.6.4-3ubuntu0.4+esm2	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	libx11@2:1.6.2-1ubuntu2	2:1.6.2-1ubuntu2.1+esm5	1
photoprism/photoprism :220629-jammy	2954334adbda	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2	1
plexinc/pms-docker :1.25.4.5487-648a8f9f9	46ea59b96f2b	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
pnnlmiscscripts/k8s-node-image9 :1.23.17-nginx-34	79ada675515f	libx11@1.8.4-r1	1.8.7-r0	1
pnnlmiscscripts/k8s-node-image9 :1.22.17-nginx-34	b85e437ae261	libx11@1.8.4-r1	1.8.7-r0	1
pnnlmiscscripts/k8s-node-image9 :1.21.14-nginx-33	fa8f5906d36a	libx11@1.8.4-r1	1.8.7-r0	1
postgis/postgis :15-3.3-alpine	4738bee21eb6	libx11@1.8.4-r4	1.8.7-r0	1
postgis/postgis :10-3.2-alpine	7e3e68a36d53	libx11@1.8-r0	1.8.7-r0	1
project2team4/react :latest	3ff031a08887	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
psorab/elibrary :latest	53b68896c4ce	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
reportportal/service-api :5.7.2	9df41f8fb320	libx11@1.8-r0	1.8.7-r0	1
reportportal/service-jobs :5.7.2	dc166c58485a	libx11@1.8-r0	1.8.7-r0	1
resouer/redis-slave :v2	e2f198b49ba7	libx11@2:1.6.2-1ubuntu2	2:1.6.2-1ubuntu2.1+esm5	1
rundeck/rundeck :3.2.7	4d64fe56f767	libx11@2:1.6.3-1ubuntu2.1	2:1.6.3-1ubuntu2.2+esm4	1
rundeck/rundeck :3.0.16	b13e8059ad72	libx11@2:1.6.3-1ubuntu2.1	2:1.6.3-1ubuntu2.2+esm4	1
santisbon/evwatcher :latest	c4e994ca4540	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
santisbon/evworker :latest	e807283f8d69	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
santisbon/speedtest :latest	8ee3a1697227	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
scrapinghub/splash :3.4.1	a5f89bc84606	libx11@2:1.6.4-3ubuntu0.2 libxpm@1:3.5.12-1	2:1.6.4-3ubuntu0.4+esm2 1:3.5.12-1ubuntu0.18.04.2+esm1	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
seldonio/locust-core :0.8	1d0da98a2d76	libx11@2:1.6.3-1ubuntu2.1	2:1.6.3-1ubuntu2.2+esm4	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	libx11@2:1.6.4-3ubuntu0.4	2:1.6.4-3ubuntu0.4+esm2	1
shyim/shopware :6.4.6.0	a951c0e6b836	libx11@1.8-r1	1.8.7-r0	1
sismics/docs :v1.10	f4b0ef019cf1	libx11@2:1.6.4-3ubuntu0.3 libxpm@1:3.5.12-1	2:1.6.4-3ubuntu0.4+esm2 1:3.5.12-1ubuntu0.18.04.2+esm1	1
snipe/snipe-it :v6.0.14	55fb7636a98c	libx11@2:1.6.9-2ubuntu1.2 libxpm@1:3.5.12-1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	libx11@2:1.6.9-2ubuntu1.5 libxpm@1:3.5.12-1ubuntu0.20.04.1	2:1.6.9-2ubuntu1.6 1:3.5.12-1ubuntu0.20.04.2	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
stashapp/stash :latest	24dbd7607174	libx11@2:1.6.9-2ubuntu1.1	2:1.6.9-2ubuntu1.6	1
statcan/ckan :2.9	3921305425b8	libx11@2:1.6.9-2ubuntu1.2	2:1.6.9-2ubuntu1.6	1
swaggerapi/swagger-ui :v5.6.2	342808e22de4	libx11@1.8.4-r4	1.8.7-r0	1
tdeutsch/podsync :v2.4.2	b67186f4c9a5	libx11@1.8-r0	1.8.7-r0	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	libx11@2:1.6.3-1ubuntu2	2:1.6.3-1ubuntu2.2+esm4	1
thirtythreeforty/neolink :latest	f564c4f538de	libx11@1.8.4-r3	1.8.7-r0	1
thongngo3301/stakefish :latest	a341af5976e3	libx11@2:1.8.4-2+deb12u1	2:1.8.4-2+deb12u2	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	libx11@2:1.7.5-1 libxpm@1:3.5.12-1ubuntu0.22.04.1	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	libx11@2:1.7.5-1 libxpm@1:3.5.12-1build2	2:1.7.5-1ubuntu0.3 1:3.5.12-1ubuntu0.22.04.2	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	libx11@2:1.6.3-1ubuntu2 libxpm@1:3.5.11-1ubuntu0.16.04.1	2:1.6.3-1ubuntu2.2+esm4 1:3.5.11-1ubuntu0.16.04.1+esm2	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	libx11@2:1.6.4-3ubuntu0.4	2:1.6.4-3ubuntu0.4+esm2	1