StackRadarChart IndexLive demo

CVE-2023-44270

Medium

Advisory

Published 29 Sept 2023In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 115; of 17,781 indexed, latest versions
Container images: 108; deployed by those charts
Fix available: 1 of 2; affected packages

PostCSS line return parsing error

Carried by container images the latest versions of 115 of 17,781 indexed charts deploy, on 108 images.

Affected package	Affected versions	Fixed in	Images
postcssnpm	4.1.16, 5.2.18, 6.0.17, 6.0.22+31 more	8.4.31	107
node-postcssdeb	8.4.31+~cs8.0.26-1	no fix listed	1

OSV records: GHSA-7fh5-64p2-3v2j UBUNTU-CVE-2023-44270

Charts affected

115 by stars

Chart

Latest

Affected images

Radar Score

wekanschmitzis

1 of 1 See more

wekan schmitzis 1.1.1

1 of the 1 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
quay.io/wekan/wekan :v5.65	cb17600883a3	postcss@7.0.35	8.4.31

Open the chart page →

3,638

secret-managersecret-manager

1 of 4 See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
leonardomulticloud/svc-vault-frontend :v1.0.0	e42a341e0299	postcss@7.0.39	8.4.31

Open the chart page →

5,497

dashysergiotocalini

1 of 1 See more

dashy sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
ghcr.io/lissy93/dashy :2.1.1	acb40032ad4b	postcss@7.0.39	8.4.31

Open the chart page →

3,143

counter-dhlsikademo

1 of 3 See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
ghcr.io/ondrejsika/counter-frontend :latest	c4166d2eb8eb	postcss@8.4.14	8.4.31

Open the chart page →

4,820

parkingsikalabs

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	postcss@7.0.21	8.4.31

Open the chart page →

3,696

sneakerssneakers

1 of 4 See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
helga09/shoes_ukr :v1.1.1	7999bc8b77c0	postcss@8.4.23	8.4.31

Open the chart page →

7,574

speedtest-trackersoblivionscall

1 of 1 See more

speedtest-tracker soblivionscall 3.0.4

1 of the 1 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
henrywhitaker3/speedtest-tracker :latest	47159a940229	postcss@6.0.23	8.4.31

Open the chart page →

2,460

nordmart-reviewstakater

1 of 3 See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	postcss@8.3.0	8.4.31

Open the chart page →

11,554

nordmart-review-instancestakater

1 of 3 See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
stakater/stakater-nordmart-review-ui :1.0.14	3f4926eedc74	postcss@8.3.0	8.4.31

Open the chart page →

11,554

fdi-dotstatsuite-dlmstatcan

1 of 1 See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
siscc/dotstatsuite-data-lifecycle-manager :v14.0.0	b6f9a7c888fc	postcss@6.0.23	8.4.31

Open the chart page →

3,881

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	postcss@8.4.6	8.4.31

Open the chart page →

4,017

vehicle-dashboardtest-vehi-dash

1 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
samajh/alprfrontend :latest	05ef4fddbb75	postcss@7.0.39	8.4.31

Open the chart page →

20,270

thanhvt27-lab-k8sthanh-vt

1 of 5 See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
pysga1996/python-redis-web :latest	fdeec30ad482	postcss@7.0.35	8.4.31

Open the chart page →

4,661

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
ubercadence/web :v3.29.5	8564a5b44a6d	postcss@6.0.23	8.4.31

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2023-44270.

Container image	Digest	Package	Fixed in
temporalio/web :1.14.0	33cfa863d8ce	postcss@6.0.23	8.4.31

Open the chart page →

22,665

Container images carrying it

108 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/sct/overseerr :1.26.1	254d16af8f71	postcss@8.2.13	8.4.31	1
ghcr.io/sct/overseerr :1.35.0	6197516c9d7b	postcss@8.4.14	8.4.31	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	postcss@7.0.39	8.4.31	1
ghcr.io/vincenttaglia/indexer-tools :v3.4.4	5bae30456ddb	postcss@8.4.21	8.4.31	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	postcss@7.0.38	8.4.31	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	postcss@7.0.17	8.4.31	1
quay.io/mongodb/farm-intro-frontend :0.1	99ccdfd543e1	postcss@7.0.21	8.4.31	1
quay.io/wekan/wekan :v5.65	cb17600883a3	postcss@7.0.35	8.4.31	1