CVE-2023-43804

High

Advisory

Published 2 Oct 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.1; base score, highest
EPSS: 0.012; 67th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 504; of 17,781 indexed, latest versions
Container images: 531; deployed by those charts
Fix available: 4 of 4; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 504 of 17,781 indexed charts deploy, on 531 images.

Affected package	Affected versions	Fixed in	Images
urllib3pypi	1.7.1, 1.10.2, 1.13.1, 1.19.1+35 more	2.0.6	514
python-urllib3deb	1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2+6 more	1.13.1-2ubuntu0.16.04.4+esm1, 1.22-1ubuntu0.18.04.2+esm1, 1.25.8-2ubuntu0.3, 1.26.5-1~exp1ubuntu0.1+1 more	33
py3-urllib3apk	1.26.7-r0, 1.26.9-r0, 1.26.12-r0, 1.26.15-r1	1.26.17-r0	12
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+13 more	8.1.1-2ubuntu0.6+esm6, 9.0.1-2.3~ubuntu1.18.04.8+esm2, 20.0.2-5ubuntu1.10, 22.0.2+dfsg-1ubuntu0.4	63

OSV records: ALPINE-CVE-2023-43804 DEBIAN-CVE-2023-43804 PYSEC-2023-192 UBUNTU-CVE-2023-43804
Also known as: GHSA-v845-jxx5-vc9f, USN-6473-1, USN-6473-2

Charts affected

504 by stars

Chart

Latest

Affected images

Radar Score

docker-hub-rate-limit-exporterwiremind

0.3.0

1 of 1 See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-43804.

Container image	Digest	Package	Fixed in
viadee/docker-hub-rate-limit-exporter :version-1.5	2e27e3b3ee56	urllib3@1.26.3	2.0.6

Open the chart page →

1,843

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2023-43804.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	urllib3@2.0.4	2.0.6

Open the chart page →

5,542

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-43804.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	urllib3@1.25.11	2.0.6

Open the chart page →

2,643

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-43804.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	urllib3@1.26.15	2.0.6

Open the chart page →

1,838

Container images carrying it

531 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
alexvm6/generator :latest	fb99ee4f760a	urllib3@2.0.2	2.0.6	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	urllib3@1.26.9 python-pip@9.0.1-2.3~ubuntu1.18.04.5	2.0.6 9.0.1-2.3~ubuntu1.18.04.8+esm2	1
allegroai/clearml-serving-inference :1.3.0	fca885e8cfc6	urllib3@1.26.15	2.0.6	1
allegroai/clearml-serving-statistics :1.3.0	c58d9da7bdf8	urllib3@1.26.15	2.0.6	1
alpine/k8s :1.22.6	00ac10bcb759	urllib3@1.26.9	2.0.6	1
alpine/k8s :1.27.3	21b24e6bf801	urllib3@1.26.16	2.0.6	1
alpine/k8s :1.18.16	a41efe02a041	urllib3@1.26.6	2.0.6	1
amancevice/superset :0.28.1	c8c04bfe3d66	urllib3@1.22	2.0.6	1
amundsendev/amundsen-frontend :2.1.1	69e7915e61c1	urllib3@1.24.3	2.0.6	1
amundsendev/amundsen-metadata :2.5.4	4d98eb21f5f9	urllib3@1.25.10	2.0.6	1
amundsendev/amundsen-search :2.4.0	99dda9502c3e	urllib3@1.22	2.0.6	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	urllib3@1.25.9	2.0.6	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	urllib3@1.25.8	2.0.6	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	python-pip@22.0.2+dfsg-1ubuntu0.3	22.0.2+dfsg-1ubuntu0.4	1
andrianrf/backoffice :latest	047a7837651e	urllib3@1.24.2	2.0.6	1
apache/couchdb :2.3	9f895c8ae371	urllib3@1.19.1	2.0.6	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	python-pip@22.0.2+dfsg-1ubuntu0.3	22.0.2+dfsg-1ubuntu0.4	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	urllib3@1.26.9 python-pip@20.0.2-5ubuntu1.6	2.0.6 20.0.2-5ubuntu1.10	1
apachepulsar/pulsar :2.6.1	4db6ff0b4045	urllib3@1.25.10	2.0.6	1
apachepulsar/pulsar :2.9.0	d056c89b7131	urllib3@1.26.7	2.0.6	1
apachepulsar/pulsar :2.8.2	d538416d5afe	urllib3@1.26.7	2.0.6	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	urllib3@1.26.6	2.0.6	1
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	urllib3@1.26.5	2.0.6	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	urllib3@1.24.2	2.0.6	1
apsl/thumbor :6.7.0	51e2de5c2c70	urllib3@1.25.7	2.0.6	1
aquasec/kube-hunter :195	0bf607ce9308	urllib3@1.24.1	2.0.6	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	urllib3@1.26.5	2.0.6	1
assistiot/fl_local_operations_inference :latest	0518b63a2e69	urllib3@1.26.16	2.0.6	1
assistiot/fl_repository :latest	0fce3ea719a5	urllib3@1.26.12	2.0.6	1
assistiot/fl_training_collector :latest	792715dd3084	urllib3@1.26.7	2.0.6	1
assistiot/resource-provisioning_prc :1.0.0	8b5d118bdf0e	urllib3@1.26.16	2.0.6	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	urllib3@1.25.8 python-pip@20.0.2-5ubuntu1.8 python-urllib3@1.25.8-2ubuntu0.2	2.0.6 20.0.2-5ubuntu1.10 1.25.8-2ubuntu0.3	1
balihb/pod-pvc-mapping :0.2.4	ee48e79f5d76	urllib3@1.26.8	2.0.6	1
bbvalabs/sensitive-data :1.0.1	3ea299ae63c0	urllib3@1.26.4	2.0.6	1
benbusby/whoogle-search :0.5.4	f77f7e6e4ad2	urllib3@1.26.5	2.0.6	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	python-pip@20.0.2-5ubuntu1.6	20.0.2-5ubuntu1.10	1
billimek/comcastusage-for-influxdb :latest	801bba1228ac	urllib3@1.24	2.0.6	1
billimek/prometheus-uptimerobot-exporter :0.0.1	f14ccd7aad0e	urllib3@1.25.9	2.0.6	1
billimek/sb6183-for-influxdb :latest	bf8158556035	urllib3@1.22	2.0.6	1
blacktop/httpie :latest	fc5e68e2f5ab	urllib3@1.22	2.0.6	1
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python-pip@20.0.2-5ubuntu1.6	20.0.2-5ubuntu1.10	1
bootc/puppetboard :1.1.0	f1383295e7be	urllib3@1.25.8	2.0.6	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	urllib3@1.25.8 python-urllib3@1.25.8-2ubuntu0.1	2.0.6 1.25.8-2ubuntu0.3	1
buildkite/agent :3.25.0	aec38cfaae0e	urllib3@1.24.3	2.0.6	1
buntha/mlflow :2.1.1	154542cc3083	urllib3@1.26.13	2.0.6	1
camerahub/camerahub :0.36.23	a5af37dd6e1b	urllib3@1.26.15	2.0.6	1
camptocamp/bucket-cloner :latest	acfafc308d88	urllib3@1.26.6	2.0.6	1
camptocamp/ekorre :0.1.0	35c91d5fda04	urllib3@1.25.8	2.0.6	1
camptocamp/pghoard :10	bff736b15623	urllib3@1.24.1	2.0.6	1
camptocamp/snow-webhook :latest	2924b43dbf40	urllib3@1.24.1	2.0.6	1