StackRadar

CVE-2023-44483

Medium

Advisory

Published 20 Oct 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
58
of 17,781 indexed, latest versions
Container images
51
deployed by those charts
Fix available
1 of 1
affected package

Apache Santuario - XML Security for Java are vulnerable to private key disclosure

Carried by container images the latest versions of 58 of 17,781 indexed charts deploy, on 51 images.

Affected packageAffected versionsFixed inImages
xmlsecmaven1.5.6, 1.5.8, 2.0.7, 2.0.8+11 more2.2.6, 2.3.4, 3.0.351
OSV records
GHSA-xfrj-6vvc-3xm2

Charts affected

58 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
xmlsec@2.1.4
2.2.6

Open the chart page →

6,556
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
xmlsec@2.2.3
2.2.6

Open the chart page →

7,713
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
xmlsec@2.1.4
2.2.6

Open the chart page →

4,099
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
xmlsec@2.3.0
2.3.4

Open the chart page →

2,572
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
xmlsec@2.3.2
2.3.4

Open the chart page →

8,636
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
xmlsec@3.0.0
3.0.3

Open the chart page →

27,267
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.10.0c8f3ebd2a934
xmlsec@2.3.3
2.3.4

Open the chart page →

10,530
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
xmlsec@2.1.4
2.2.6
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
xmlsec@2.1.4
2.2.6

Open the chart page →

8,698
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
xmlsec@3.0.2
3.0.3

Open the chart page →

107,811
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
xmlsec@2.1.4
2.2.6

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
xmlsec@2.2.0
2.2.6

Open the chart page →

10,730
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
xmlsec@2.1.4
2.2.6

Open the chart page →

38,346
elasticsearch-dataempathyco0.2.01 of 2See more

elasticsearch-data empathyco 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
xmlsec@2.0.8
2.2.6

Open the chart page →

3,703
elasticsearch-masterempathyco0.3.01 of 2See more

elasticsearch-master empathyco 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
xmlsec@2.0.8
2.2.6

Open the chart page →

3,703
amgraviteeioVerified publisher4.12.62 of 3See more

am graviteeio 4.12.6

2 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
graviteeio/am-gateway:4.12.607b7f6dc267a
xmlsec@2.1.4
2.2.6
graviteeio/am-management-api:4.12.6a8eb04ee0c70
xmlsec@2.1.4
2.2.6

Open the chart page →

2,088
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
xmlsec@2.1.4
2.2.6

Open the chart page →

17,284
magentomagento3.2.31 of 12See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
magento/magento-cloud-docker-opensearch:2.5-1.4.059fb6f0f1461
xmlsec@2.2.3
2.2.6

Open the chart page →

13,479
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
xmlsec@3.0.1
3.0.3

Open the chart page →

2,221
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
xmlsec@2.2.3
2.2.6

Open the chart page →

37,373
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
xmlsec@2.1.4
2.2.6

Open the chart page →

31,844
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
xmlsec@1.5.8
2.2.6

Open the chart page →

3,958
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
xmlsec@2.1.4
2.2.6

Open the chart page →

6,045
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
xmlsec@2.2.3
2.2.6

Open the chart page →

7,713
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-dashboard:latestb53a854bd7c1
xmlsec@2.2.3
2.2.6

Open the chart page →

13,613
akto-central-setupakto1.1.101 of 5See more

akto-central-setup akto 1.1.10

1 of the 5 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-dashboard:1.69.2b53a854bd7c1
xmlsec@2.2.3
2.2.6

Open the chart page →

4,905
akto-dashboardakto0.1.71 of 1See more

akto-dashboard akto 0.1.7

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
xmlsec@2.2.3
2.2.6

Open the chart page →

1,162
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
hazelcast/management-center:5.3.2f9d34300d330
xmlsec@2.3.0
2.3.4

Open the chart page →

28,131
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
xmlsec@2.2.3
2.2.6

Open the chart page →

15,573
james-komposeappscodeVerified publisher0.1.01 of 4See more

james-kompose appscode 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.1.04254021a8c71
xmlsec@2.2.3
2.2.6

Open the chart page →

16,975
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
xmlsec@2.2.3
2.2.6

Open the chart page →

13,352
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
xmlsec@3.0.2
3.0.3

Open the chart page →

9,722
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
xmlsec@2.2.0
2.2.6

Open the chart page →

5,806
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
xmlsec@2.2.3
2.2.6

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
xmlsec@2.2.3
2.2.6

Open the chart page →

6,915
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
xmlsec@2.1.4
2.2.6

Open the chart page →

10,564
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.1588c2ec10c7f2
xmlsec@2.1.4
2.2.6

Open the chart page →

34,754
metabasehelm-charts-nr0.14.41 of 1See more

metabase helm-charts-nr 0.14.4

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
xmlsec@2.3.0
2.3.4

Open the chart page →

2,572
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
xmlsec@2.0.7
2.2.6

Open the chart page →

39,349
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
xmlsec@2.1.4
2.2.6

Open the chart page →

12,856
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
xmlsec@2.2.3
2.2.6

Open the chart page →

2,273
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
xmlsec@2.0.7
2.2.6

Open the chart page →

7,929
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
xmlsec@2.2.0
2.2.6

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
opensearchproject/opensearch:1.1.0967d7f57f72f
xmlsec@2.2.0
2.2.6

Open the chart page →

10,603
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
xmlsec@2.1.4
2.2.6

Open the chart page →

9,300
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
xmlsec@2.1.5
2.2.6

Open the chart page →

6,237
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
xmlsec@2.2.3
2.2.6

Open the chart page →

4,203
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
reportportal/service-authorization:5.7.09e73114dbd15
xmlsec@2.1.5
2.2.6

Open the chart page →

25,737
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
xmlsec@2.2.3
2.2.6

Open the chart page →

6,443
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
xmlsec@2.3.0
2.3.4

Open the chart page →

4,946
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2023-44483.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
xmlsec@2.0.7
2.2.6

Open the chart page →

13,605

Container images carrying it

51 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
xmlsec@3.0.2
3.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.