CVE-2023-44487

HighKEV

Advisory

Published 10 Oct 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 1.000; 100th percentile
CISA KEV: Listed; since 10 Oct 2023
Charts affected: 2,095; of 17,787 indexed, latest versions
Container images: 2,450; deployed by those charts
Fix available: 19 of 21; affected packages

Red Hat Enhancement Advisory: nginx:1.22 bug fix and enhancement update

Carried by container images the latest versions of 2,095 of 17,787 indexed charts deploy, on 2,450 images.

Affected package	Affected versions	Fixed in	Images
nghttp2deb	1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.43.0-1+2 more	1.30.0-1ubuntu1+esm2, 1.40.0-1ubuntu0.2, 1.43.0-1+deb11u1, 1.43.0-1ubuntu0.1+1 more	549
nghttp2apk	1.46.0-r0, 1.46.0-r1, 1.47.0-r0, 1.47.0-r1+5 more	1.46.0-r2, 1.47.0-r2, 1.51.0-r2, 1.57.0-r0	212
nghttp2rpm	1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+7 more	0:1.33.0-3.el8_1.2, 0:1.33.0-3.el8_2.2, 0:1.33.0-4.el8_4.1, 0:1.33.0-4.el8_6.1+6 more	177
nginxdeb	1.22.1-9, 1.22.1-9+deb12u2, 1.22.1-9+deb12u3, 1.22.1-9+deb12u4+14 more	no fix listed	53
nginxapk	1.20.2-r0, 1.22.0-r1, 1.22.1-r0, 1.24.0-r1+1 more	1.20.2-r2, 1.22.1-r1, 1.24.0-r7	13
nodejsrpm	1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762	1:16.20.2-3.module+el8.8.0+20386+0b1f3093	8
nodejs-packagingrpm	23-3.module+el8.3.0+6519+9f98ed83	0:26-1.module+el8.8.0+19857+6d2a104d	6
nodejsdeb	8.10.0~dfsg-2ubuntu0.4, 10.19.0~dfsg-3ubuntu1, 10.19.0~dfsg-3ubuntu1.3	8.10.0~dfsg-2ubuntu0.4+esm6, 10.19.0~dfsg-3ubuntu1.6+esm2	4
nginxrpm	1:1.14.1-9.module+el8.0.0+4108+af250afe, 1:1.20.1-1.module+el8.8.0+20359+9bd89172.1, 1:1.20.1-13.el9	1:1.20.1-1.module+el8.8.0+20359+9bd89172.1, 1:1.22.1-1.module+el8.8.0+20355+6d9c8a63.1, 1:1.22.1-5.module+el9.3.0.z+20438+032561a0	3
nodejs-nodemonrpm	1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034	0:3.0.1-1.module+el8.8.0+19764+7eed1ca3	3
lighttpdapk	1.4.64-r0	1.4.73-r0	2
varnishdeb	7.5.0, 7.6.3-1~bookworm	no fix listed	2
Apache Tomcatbitnami	9.0.80	8.5.94	1
tomcatbitnami	9.0.80-1	8.5.94	1
varnishapk	7.3.1-r1	7.4.2-r0	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+182 more	0.17.0	1,552
tomcat-embed-coremaven	8.5.4, 8.5.11, 8.5.14, 8.5.15+50 more	8.5.94, 9.0.81, 10.1.14	162
http2-commonmaven	9.4.8.v20171121, 9.4.11.v20180605, 9.4.20.v20190813, 9.4.27.v20200227+10 more	9.4.53, 11.0.17	20
http2-servermaven	9.4.8.v20171121, 9.4.11.v20180605, 9.4.20.v20190813, 9.4.27.v20200227+9 more	9.4.53, 11.0.17	16
tomcat-coyotemaven	8.5.38, 8.5.41, 8.5.43, 8.5.57+7 more	8.5.94, 9.0.81	12
akka-http-core_2.12maven	10.1.11	10.5.3	1

OSV records: ALPINE-CVE-2023-44487 BIT-tomcat-2023-44487 DEBIAN-CVE-2023-44487 RHEA-2023:6562 RHSA-2023:5712 RHSA-2023:5713 RHSA-2023:5766 RHSA-2023:5767 RHSA-2023:5768 RHSA-2023:5769 RHSA-2023:5837 RHSA-2023:5838 RHSA-2023:5850 RHSA-2023:6746 RLSA-2023:5837 UBUNTU-CVE-2023-44487 GHSA-qppj-fm5r-hxr3 DSA-5570-1 openSUSE-SU-2024:13336-1 SUSE-SU-2023:4200-1 SUSE-SU-2023:4492-1
Also known as: BIT-apisix-2023-44487, BIT-aspnet-core-2023-44487, BIT-contour-2023-44487, BIT-dotnet-2023-44487, BIT-dotnet-sdk-2023-44487, BIT-envoy-2023-44487, BIT-golang-2023-44487, BIT-jenkins-2023-44487, BIT-kong-2023-44487, BIT-nginx-2023-44487, BIT-nginx-gateway-2023-44487, BIT-node-2023-44487, BIT-node-min-2023-44487, BIT-solr-2023-44487, BIT-varnish-2023-44487, RHSA-2023:5711, RHSA-2023:6120, USN-6505-1, USN-6754-1, USN-7469-3

Charts affected

2,095 by stars

Chart

Latest

Affected images

Radar Score

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-4.el8_6.1

Open the chart page →

4,957

permission-managerkfirfer

1.0.7

1 of 1 See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0

Open the chart page →

2,266

kubeflowkubeflow

1.6.2

27 of 45 See more

kubeflow kubeflow 1.6.2

27 of the 45 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	nghttp2@1.30.0-1ubuntu1 golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	1.30.0-1ubuntu1+esm2 0.17.0
istio/proxyv2 :1.14.1	df69c1a7af7c	nghttp2@1.40.0-1build1 golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	1.40.0-1ubuntu0.2 0.17.0
kserve/kserve-controller :v0.8.0	f0692a9ea09f	golang.org/x/net@v0.0.0-20211205041911-012df41ee64c	0.17.0
kubeflow/training-operator :v1-e1434f6	ff847e2b6af0	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.17.0
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.17.0
kubeflownotebookswg/notebook-controller :v1.6.1	85e2e685abd6	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.17.0
kubeflownotebookswg/poddefaults-webhook :v1.6.1	7d42600e1524	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0
kubeflownotebookswg/profile-controller :v1.6.1	9f01767a460f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
kubeflownotebookswg/tensorboard-controller :v1.6.1	82ffdd2da285	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.17.0
library/python :3.7	eedf63967cdb	nghttp2@1.52.0-1	1.52.0-1+deb12u1
metacontrollerio/metacontroller :v2.0.4	897c9601d2cc	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.17.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.2.0	f253b82941c2	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.2.0	a705c1ea8e9e	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.2.5	93ff6e693577	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	nghttp2@1.43.0-1	1.43.0-1+deb11u1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/viewer-crd-controller :2.0.0-alpha.5	34403f9f94be	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.17.0

Open the chart page →

96,941

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	nghttp2@1.40.0-1ubuntu0.1	1.40.0-1ubuntu0.2

Open the chart page →

10,530

openelbkubesphere-stable

0.5.0

2 of 2 See more

openelb kubesphere-stable 0.5.0

2 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.5.0	b5b665c4672c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.17.0
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.17.0

Open the chart page →

4,329

vclustermain

0.17.0

6 of 10 See more

vcluster main 0.17.0

6 of the 10 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/net@v0.8.0	0.17.0
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/net@v0.9.0	0.17.0
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	golang.org/x/net@v0.7.0	0.17.0
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.17.0
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.17.0
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.17.0

Open the chart page →

11,552

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0

Open the chart page →

1,588

unifi-controllerqonstrukt

2.6.1

1 of 1 See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :8.0.24	0ae315a3a456	tomcat-embed-core@9.0.65	9.0.81

Open the chart page →

10,469

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.17.0

Open the chart page →

4,519

piholesavepointsam

0.2.0

1 of 1 See more

pihole savepointsam 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
pihole/pihole :2023.05.0	b83258064f54	nghttp2@1.43.0-1	1.43.0-1+deb11u1

Open the chart page →

1,048

openspeedtestspeedtest

0.1.2

1 of 1 See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
openspeedtest/latest :v2.0.0	d4d62f4b7d85	nghttp2@1.51.0-r0	1.51.0-r2

Open the chart page →

2,040

phpipamstackhelm

0.1.2

2 of 3 See more

phpipam stackhelm 0.1.2

2 of the 3 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
phpipam/phpipam-cron :v1.5.2	f770577cb946	nghttp2@1.46.0-r0	1.46.0-r2
phpipam/phpipam-www :v1.5.2	3c6fd1332aeb	nghttp2@1.46.0-r0	1.46.0-r2

Open the chart page →

1,874

k8s-telegram-sendertelegram-sender

0.0.1

1 of 1 See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
danuk/telegram-sender :0.0.1	026560388070	nghttp2@1.43.0-1	1.43.0-1+deb11u1

Open the chart page →

3,048

uffizzi-appuffizzi-app

1.3.0

3 of 14 See more

uffizzi-app uffizzi-app 1.3.0

3 of the 14 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/net@v0.12.0	0.17.0
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	golang.org/x/net@v0.8.0	0.17.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.17.0

Open the chart page →

19,337

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.17.0

Open the chart page →

13,562

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	nghttp2@1.52.0-1	1.52.0-1+deb12u1

Open the chart page →

9,746

eshoponabpabp-charts

1.0.0

2 of 15 See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
library/mongo :4.2	699d652ed674	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
ghcr.io/volosoft/eshoponabp/app-web :1.0.0	056bb4271626	nghttp2@1.47.0-r0	1.47.0-r2

Open the chart page →

19,799

code-serveralekc

0.1.1

1 of 1 See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
linuxserver/code-server :4.10.1	a5e43a05ae79	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.1

Open the chart page →

8,212

aperture-controlleraperture

2.34.0

1 of 5 See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.17.0

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	nghttp2@1.47.0-r0 golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	1.47.0-r2 0.17.0

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	nghttp2@1.33.0-3.el8_2.2 golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0:1.33.0-5.el8_8 0.17.0

Open the chart page →

9,052

prometheusavesha

19.3.0

3 of 4 See more

prometheus avesha 19.3.0

3 of the 4 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0	0.17.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.17.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b	0.17.0

Open the chart page →

5,484

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.17.0

Open the chart page →

2,250

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0	0.17.0

Open the chart page →

1,915

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	nghttp2@1.40.0-1ubuntu0.1	1.40.0-1ubuntu0.2

Open the chart page →

7,960

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0

Open the chart page →

7,775

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/net@v0.7.0	0.17.0

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

4 of 21 See more

coder-observability coder-observability 0.7.3

4 of the 21 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
curlimages/curl :7.85.0	9fab1b73f45e	nghttp2@1.46.0-r0	1.46.0-r2
nginxinc/nginx-unprivileged :1.24-alpine	be76a26e238d	nginx@1.24.0-r1	1.24.0-r7
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	nghttp2@1.33.0-3.el8_2.1 golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0:1.33.0-4.el8_6.1 0.17.0
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	nghttp2@1.33.0-3.el8_2.1 golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0:1.33.0-4.el8_6.1 0.17.0

Open the chart page →

24,700

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.17.0

Open the chart page →

3,080

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0

Open the chart page →

2,537

hdfsdmwm-bigdata

1.0.1

1 of 2 See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
gradiant/hdfs :3.2.2	e3bf364fe713	nghttp2@1.43.0-1	1.43.0-1+deb11u1

Open the chart page →

7,948

edgelessdbedgelesssys

0.3.2

1 of 1 See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2

Open the chart page →

4,830

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0

Open the chart page →

2,271

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-5.el8_8

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-5.el8_8

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-5.el8_8

Open the chart page →

13,874

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	nghttp2@1.40.0-1ubuntu0.1	1.40.0-1ubuntu0.2

Open the chart page →

5,264

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0

Open the chart page →

3,030

calibregeek-cookbook

5.4.2

1 of 1 See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
linuxserver/calibre :version-v5.21.0	a847b5b2d860	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2

Open the chart page →

22,773

mealiegeek-cookbook

5.1.2

2 of 2 See more

mealie geek-cookbook 5.1.2

2 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e	0.17.0
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	nghttp2@1.43.0-1	1.43.0-1+deb11u1

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

1 of 3 See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.17.0

Open the chart page →

4,906

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2

Open the chart page →

13,950

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2

Open the chart page →

9,627

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	nghttp2@1.40.0-1build1 golang.org/x/net@v0.0.0-20200625001655-4c5254603344	1.40.0-1ubuntu0.2 0.17.0

Open the chart page →

10,154

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.17.0

Open the chart page →

2,330

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.17.0

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff	0.17.0

Open the chart page →

2,610

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2

Open the chart page →

10,628

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3	0.17.0

Open the chart page →

2,234

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	nghttp2@1.30.0-1ubuntu1 tomcat-embed-core@9.0.65	1.30.0-1ubuntu1+esm2 9.0.81

Open the chart page →

11,839

Container images carrying it

2,450 by charts deploying them

A fixed version is listed for 19 of the 21 affected packages.

Container image	Digest	Package	Fixed in	Used by
helga09/php_shoes_ukr :v1.1.1	e283539bcb8c	nghttp2@1.43.0-1	1.43.0-1+deb11u1	1
helga09/shoes_ukr :v1.1.1	7999bc8b77c0	nghttp2@1.43.0-1	1.43.0-1+deb11u1	1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	nghttp2@1.52.0-1	1.52.0-1+deb12u1	1
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/net@v0.11.0	0.17.0	1
hetznercloud/hcloud-cloud-controller-manager :v1.13.0	ed5ee5f83973	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0	1
hetznercloud/hcloud-csi-driver :1.6.0	1475d525f9a4	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0	1
hetznercloud/hcloud-csi-driver :1.5.1	41dce5b33644	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb	0.17.0	1
hetznercloud/hcloud-csi-driver :v2.3.2	b7ed90d5fab2	golang.org/x/net@v0.7.0	0.17.0	1
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.17.0	1
hiboxsystems/marge-bot :0.11.0	7235809b43b3	nghttp2@1.43.0-1	1.43.0-1+deb11u1	1
hiboxsystems/marge-bot :0.12.1	a96c10b61a59	nghttp2@1.43.0-1	1.43.0-1+deb11u1	1
hivemq/hivemq4 :dns-4.5.14	4d194450d48e	nghttp2@1.43.0-1	1.43.0-1+deb11u1	1
hivemq/hivemq-operator :4.7.10	241d6a8e1963	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.1	1
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e	0.17.0	1
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	nghttp2@1.43.0-1	1.43.0-1+deb11u1	1
holiman/nodemonitor :latest	5cd609761065	golang.org/x/net@v0.9.0	0.17.0	1
homeassistant/home-assistant :2023.10.3	021e2afc6e57	nghttp2@1.55.1-r0	1.57.0-r0	1
housewrecker/gaps :latest	f417dd0a7547	nghttp2@1.40.0-1build1 tomcat-embed-core@9.0.60	1.40.0-1ubuntu0.2 9.0.81	1
huajuan6848/env-view-server :0.0.1-SNAPSHOT	a303f3d9f6e0	tomcat-embed-core@10.1.11	10.1.14	1
huangchengwu6904/hi-app :cac-1691047806	1b932f8221a9	nghttp2@1.46.0-r0 golang.org/x/net@v0.10.0	1.46.0-r2 0.17.0	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2	1
hugohg34/server :0.0.2	503e5d8960ff	nghttp2@1.43.0-1	1.43.0-1+deb11u1	1
hugohg34/toposervice :0.0.2	812a03b3f274	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2	1
huseyinbabal/demory :0.0.0-rc.20	ae8eb4053c60	golang.org/x/net@v0.0.0-20210907225631-ff17edfbf26d	0.17.0	1
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.17.0	1
hyperledger/fabric-ca :1.5.0	f270dfeee91d	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.17.0	1
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.17.0	1
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.17.0	1
hyperledgerk8s/bc-explorer :v20230504	1f1a06b61f18	golang.org/x/net@v0.8.0	0.17.0	1
hyperledgerk8s/bc-saas :v0.0.1-20230524	d8bc31176257	golang.org/x/net@v0.8.0	0.17.0	1
hyperledgerk8s/fabric-operator :7776e71	29a8af8be270	nghttp2@1.33.0-3.el8_2.1 golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0:1.33.0-5.el8_8 0.17.0	1
hyperledgerk8s/minio-mc :RELEASE.2023-01-28T20-29-38Z	729b3d128487	nghttp2@1.33.0-3.el8_2.1 golang.org/x/net@v0.4.0	0:1.33.0-5.el8_8 0.17.0	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	nghttp2@1.33.0-3.el8_2.1 golang.org/x/net@v0.5.0	0:1.33.0-5.el8_8 0.17.0	1
hyperledgerk8s/tektoncd-operator :v0.64.0	d0a3a35a138d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.17.0	1
hyperledgerk8s/tekton-operator-webhook :v0.64.0	2237cb80f52b	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.17.0	1
i4trust/activation-service :2.2.0	9f3719176893	nghttp2@1.53.0-r0	1.57.0-r0	1
iamdorsah/bastillion :v0.1	db83a0254d81	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 http2-common@9.4.45.v20220203 http2-server@9.4.45.v20220203	0.17.0 9.4.53 9.4.53	1
ianw/quickchart :v1.7.1	dc49dd460c37	nghttp2@1.46.0-r0	1.46.0-r2	1
ibarreche/cloud-back-ci :latest	e16a469c5791	nghttp2@1.46.0-r0	1.46.0-r2	1
ibmcom/ibmcloud-object-storage-driver :1.8.16	c796a4c693b4	nghttp2@1.33.0-1.el8_0.1	0:1.33.0-3.el8_2.2	1
ibmcom/ibmcloud-object-storage-plugin :1.8.16	9c73804b37a3	nghttp2@1.33.0-1.el8_0.1	0:1.33.0-3.el8_2.2	1
ibmcom/ibm-enterprise-mongodb-ppc64le :4.4	d28bf361327a	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-5.el8_8	1
ibmcom/microclimate-file-watcher :latest	ab3fd1fdfa18	tomcat-embed-core@8.5.15	8.5.94	1
ibmcom/microclimate-theia :latest	e17bdccc5030	tomcat-embed-core@8.5.15	8.5.94	1
ibmcom/opencontent-common-utils :1.1.2	cd5065df7304	nghttp2@1.33.0-1.el8	0:1.33.0-5.el8_8	1
ibmcom/skydive :0.22.0	395e60cc6e3d	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2	1
ildarmukhametzyanov/priceapp :0.1	15d23720a3ee	nghttp2@1.52.0-1	1.52.0-1+deb12u1	1
inbucket/inbucket :3.0.0	1f10a0efea69	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d	0.17.0	1
inseefrlab/shelly :cloudshell	31f04ca7436b	golang.org/x/net@v0.13.0	0.17.0	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2	1