StackRadar

CVE-2023-44487

HighKEV

Advisory

Published 10 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
1.000
100th percentile
CISA KEV
Listed
since 10 Oct 2023
Charts affected
2,106
of 17,787 indexed, latest versions
Container images
2,470
deployed by those charts
Fix available
19 of 21
affected packages

Red Hat Enhancement Advisory: nginx:1.22 bug fix and enhancement update

Carried by container images the latest versions of 2,106 of 17,787 indexed charts deploy, on 2,470 images.

Affected packageAffected versionsFixed inImages
nghttp2deb1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.43.0-1+2 more1.30.0-1ubuntu1+esm2, 1.40.0-1ubuntu0.2, 1.43.0-1+deb11u1, 1.43.0-1ubuntu0.1+1 more551
nghttp2apk1.46.0-r0, 1.46.0-r1, 1.47.0-r0, 1.47.0-r1+5 more1.46.0-r2, 1.47.0-r2, 1.51.0-r2, 1.57.0-r0213
nghttp2rpm1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+7 more0:1.33.0-3.el8_1.2, 0:1.33.0-3.el8_2.2, 0:1.33.0-4.el8_4.1, 0:1.33.0-4.el8_6.1+6 more177
nginxdeb1.22.1-9, 1.22.1-9+deb12u2, 1.22.1-9+deb12u3, 1.22.1-9+deb12u4+14 moreno fix listed53
nginxapk1.20.2-r0, 1.22.0-r1, 1.22.1-r0, 1.24.0-r1+1 more1.20.2-r2, 1.22.1-r1, 1.24.0-r713
nodejsrpm1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd427621:16.20.2-3.module+el8.8.0+20386+0b1f30938
nodejs-packagingrpm23-3.module+el8.3.0+6519+9f98ed830:26-1.module+el8.8.0+19857+6d2a104d6
nodejsdeb8.10.0~dfsg-2ubuntu0.4, 10.19.0~dfsg-3ubuntu1, 10.19.0~dfsg-3ubuntu1.38.10.0~dfsg-2ubuntu0.4+esm6, 10.19.0~dfsg-3ubuntu1.6+esm24
nginxrpm1:1.14.1-9.module+el8.0.0+4108+af250afe, 1:1.20.1-1.module+el8.8.0+20359+9bd89172.1, 1:1.20.1-13.el91:1.20.1-1.module+el8.8.0+20359+9bd89172.1, 1:1.22.1-1.module+el8.8.0+20355+6d9c8a63.1, 1:1.22.1-5.module+el9.3.0.z+20438+032561a03
nodejs-nodemonrpm1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca870340:3.0.1-1.module+el8.8.0+19764+7eed1ca33
lighttpdapk1.4.64-r01.4.73-r02
Apache Tomcatbitnami9.0.808.5.941
tomcatbitnami9.0.80-18.5.941
varnishapk7.3.1-r17.4.2-r01
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+183 more0.17.01,571
tomcat-embed-coremaven8.5.4, 8.5.11, 8.5.14, 8.5.15+50 more8.5.94, 9.0.81, 10.1.14162
http2-commonmaven9.4.8.v20171121, 9.4.11.v20180605, 9.4.20.v20190813, 9.4.27.v20200227+10 more9.4.53, 11.0.1720
http2-servermaven9.4.8.v20171121, 9.4.11.v20180605, 9.4.20.v20190813, 9.4.27.v20200227+9 more9.4.53, 11.0.1716
tomcat-coyotemaven8.5.38, 8.5.41, 8.5.43, 8.5.57+7 more8.5.94, 9.0.8112
akka-http-core_2.12maven10.1.1110.5.31
varnishdeb7.5.0, 7.6.3-1~bookwormno fix listed2
OSV records
ALPINE-CVE-2023-44487BIT-tomcat-2023-44487DEBIAN-CVE-2023-44487RHEA-2023:6562RHSA-2023:5712RHSA-2023:5713RHSA-2023:5766RHSA-2023:5767RHSA-2023:5768RHSA-2023:5769RHSA-2023:5837RHSA-2023:5838RHSA-2023:5850RHSA-2023:6746RLSA-2023:5837UBUNTU-CVE-2023-44487GHSA-qppj-fm5r-hxr3DSA-5570-1openSUSE-SU-2024:13336-1SUSE-SU-2023:4200-1SUSE-SU-2023:4492-1
Also known as
BIT-apisix-2023-44487, BIT-aspnet-core-2023-44487, BIT-contour-2023-44487, BIT-dotnet-2023-44487, BIT-dotnet-sdk-2023-44487, BIT-envoy-2023-44487, BIT-golang-2023-44487, BIT-jenkins-2023-44487, BIT-kong-2023-44487, BIT-nginx-2023-44487, BIT-nginx-gateway-2023-44487, BIT-node-2023-44487, BIT-node-min-2023-44487, BIT-solr-2023-44487, BIT-varnish-2023-44487, RHSA-2023:5711, RHSA-2023:6120, USN-6505-1, USN-6754-1, USN-7469-3

Charts affected

2,106 by stars
ChartLatestAffected imagesRadar Score
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
nghttp2@1.51.0-r0
1.51.0-r2

Open the chart page →

4,285
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2

Open the chart page →

11,453
kubeviewcowboysysopVerified publisher6.0.01 of 1See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:0.1.31f8e7cd7325a3
golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023
0.17.0

Open the chart page →

1,513
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
nghttp2@1.51.0-r0
1.51.0-r2

Open the chart page →

2,572
devtron-operatordevtron0.23.36 of 11See more

devtron-operator devtron 0.23.3

6 of the 11 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
nghttp2@1.46.0-r0
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
1.46.0-r2
0.17.0
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
nghttp2@1.52.0-1
1.52.0-1+deb12u1
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420
0.17.0
quay.io/devtron/kubectl:latest2ad610626658
nghttp2@1.47.0-r0
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
1.47.0-r2
0.17.0
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
golang.org/x/net@v0.10.0
0.17.0
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
0.17.0

Open the chart page →

31,447
drone-runner-kubedroneVerified publisher0.1.101 of 1See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
0.17.0

Open the chart page →

2,067
ilumilumOfficialVerified publisher6.7.32 of 19See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:11-debian-11-r722cb5982dcbf4
nghttp2@1.43.0-1
1.43.0-1+deb11u1
ilum/mongodb:6.0.542b6d774c37d
golang.org/x/net@v0.8.0
0.17.0

Open the chart page →

23,289
temporallemontechVerified publisher0.37.05 of 13See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
0.17.0
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/net@v0.0.0-20210525063256-abc453219eb5
0.17.0
temporalio/server:1.22.4c0a44c26397b
golang.org/x/net@v0.7.0
0.17.0
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985
0.17.0
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
golang.org/x/net@v0.0.0-20211020060615-d418f374d309
0.17.0

Open the chart page →

14,893
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
microcks/microcks:0.8.0e3a3e0c67b09
tomcat-embed-core@8.5.34
8.5.94

Open the chart page →

10,732
netris-controllernetrisai2.8.22 of 14See more

netris-controller netrisai 2.8.2

2 of the 14 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7
0.17.0
haproxytech/haproxy-alpine:2.8.08951be4b4e1c
golang.org/x/net@v0.11.0
0.17.0

Open the chart page →

30,481
nfs-server-provisionernfs-ganesha-server-and-external-provisioner1.8.01 of 1See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/net@v0.0.0-20190923162816-aa69164e4478
0.17.0

Open the chart page →

2,315
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
0.17.0
platform9community/api-gateway:latest40a4970de568
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
0.17.0
platform9community/customers-service:latest2089811e5cc6
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
tomcat-embed-core@9.0.36
0.17.0
9.0.81
platform9community/vets-service:latestd1165c94dfb3
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
tomcat-embed-core@9.0.36
0.17.0
9.0.81
platform9community/visits-service:latest8d11b50368c6
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
tomcat-embed-core@9.0.36
0.17.0
9.0.81

Open the chart page →

41,902
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
http2-common@9.4.27.v20200227
http2-server@9.4.27.v20200227
nghttp2@1.43.0-1
9.4.53
9.4.53
1.43.0-1+deb11u1

Open the chart page →

6,047
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2

Open the chart page →

11,831
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271
0.17.0

Open the chart page →

4,154
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2

Open the chart page →

6,386
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
nghttp2@1.43.0-1build3
golang.org/x/net@v0.10.0
1.43.0-1ubuntu0.1
0.17.0

Open the chart page →

5,669
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2

Open the chart page →

30,811
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
http2-common@9.4.34.v20201102
9.4.53

Open the chart page →

12,163
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
nghttp2@1.43.0-1
1.43.0-1+deb11u1

Open the chart page →

3,544
dronecommunity-chartsVerified publisher0.1.51 of 2See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
golang.org/x/net@v0.0.0-20211209124913-491a49abca63
0.17.0

Open the chart page →

2,728
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
golang.org/x/net@v0.0.0-20220812174116-3211cb980234
0.17.0

Open the chart page →

4,515
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
golang.org/x/net@v0.12.0
0.17.0

Open the chart page →

4,532
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
nghttp2@1.51.0-r0
golang.org/x/net@v0.4.0
1.51.0-r2
0.17.0

Open the chart page →

2,344
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
nghttp2@1.43.0-1build3
1.43.0-1ubuntu0.1

Open the chart page →

4,951
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
nghttp2@1.53.0-r0
1.57.0-r0

Open the chart page →

2,709
logging-operatorkube-loggingVerified publisher4.2.31 of 1See more

logging-operator kube-logging 4.2.3

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/logging-operator:4.2.20dd85dcb1f73
golang.org/x/net@v0.10.0
0.17.0

Open the chart page →

880
missing-container-metricsmissing-container-metrics0.1.11 of 1See more

missing-container-metrics missing-container-metrics 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
0.17.0

Open the chart page →

2,409
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
tomcat-coyote@9.0.73
9.0.81

Open the chart page →

8,685
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1305a9734d7e83
nghttp2@1.43.0-1
1.43.0-1+deb11u1

Open the chart page →

14,231
rekorsigstoreVerified publisher1.8.51 of 9See more

rekor sigstore 1.8.5

1 of the 9 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
nghttp2@1.43.0-1
1.43.0-1+deb11u1

Open the chart page →

5,416
uffizzi-controlleruffizzi-controller2.4.62 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
golang.org/x/net@v0.12.0
0.17.0
uffizzi/uffizzi-cluster-operator:v1.6.55ca448a08783
golang.org/x/net@v0.8.0
0.17.0

Open the chart page →

14,266
filebrowserutkuozdemirVerified publisher1.0.01 of 1See more

filebrowser utkuozdemir 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.23.086e8449ff8ff
nghttp2@1.47.0-r0
golang.org/x/net@v0.0.0-20220412020605-290c469a71a5
1.47.0-r2
0.17.0

Open the chart page →

3,073
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
0.17.0

Open the chart page →

6,168
aad-pod-identityaad-pod-identity4.1.182 of 2See more

aad-pod-identity aad-pod-identity 4.1.18

2 of the 2 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.173004b93fcb74
golang.org/x/net@v0.7.0
0.17.0
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
golang.org/x/net@v0.7.0
0.17.0

Open the chart page →

2,858
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
mide/minecraft-overviewer:latest4eee0dcb715f
nghttp2@1.43.0-1
1.43.0-1+deb11u1

Open the chart page →

3,392
mysql-operatorbitpokeVerified publisher0.6.32 of 2See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
golang.org/x/net@v0.8.0
0.17.0
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
golang.org/x/net@v0.8.0
0.17.0

Open the chart page →

3,354
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
golang.org/x/net@v0.8.0
0.17.0

Open the chart page →

1,698
cert-manager-webhook-hetznercert-manager-webhook-hetznerVerified publisher0.2.11 of 1See more

cert-manager-webhook-hetzner cert-manager-webhook-hetzner 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
deyaeddin/cert-manager-webhook-hetzner:latest797b0d06210a
golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110
0.17.0

Open the chart page →

3,080
fadicetic0.3.14 of 25See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
golang.org/x/net@v0.0.0-20201022231255-08b38378de70
0.17.0
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2
library/traefik:2.5.47d0228d19042
golang.org/x/net@v0.0.0-20210614182718-04defd469f4e
0.17.0

Open the chart page →

53,012
csi-wekafsplugincsi-wekafsOfficialVerified publisher0.6.2-01 of 6See more

csi-wekafsplugin csi-wekafs 0.6.2-0

1 of the 6 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/net@v0.0.0-20180301190904-22ae77b79946
0.17.0

Open the chart page →

2,824
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
nghttp2@1.43.0-1
1.43.0-1+deb11u1

Open the chart page →

14,134
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781
0.17.0

Open the chart page →

27,358
drone-runner-dockerdroneVerified publisher0.7.02 of 3See more

drone-runner-docker drone 0.7.0

2 of the 3 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
golang.org/x/net@v0.0.0-20190404232315-eb5bcb51f2a3
0.17.0
library/docker:20-dindaf96c680a7e1
golang.org/x/net@v0.4.0
0.17.0

Open the chart page →

5,674
loadtesterflagger0.39.01 of 1See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f
0.17.0

Open the chart page →

1,760
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/net@v0.0.0-20201224014010-6772e930b67b
0.17.0

Open the chart page →

3,282
lndfold0.3.153 of 4See more

lnd fold 0.3.15

3 of the 4 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
nghttp2@1.55.1-r0
golang.org/x/net@v0.8.0
1.57.0-r0
0.17.0
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/net@v0.0.0-20191002035440-2ec189313ef0
0.17.0
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/net@v0.0.0-20191112182307-2180aed22343
0.17.0

Open the chart page →

8,834
intel-gpu-plugingeek-cookbookVerified publisher4.4.21 of 1See more

intel-gpu-plugin geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
intel/intel-gpu-plugin:0.20.0143f0a45e174
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.17.0

Open the chart page →

1,738
guacamolehalkeye0.2.11 of 3See more

guacamole halkeye 0.2.1

1 of the 3 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
guacamole/guacamole:1.1.0333a7f40c145
tomcat-coyote@8.5.41
8.5.94

Open the chart page →

4,839
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-5.el8_8

Open the chart page →

4,662

Container images carrying it

2,470 by charts deploying them

A fixed version is listed for 19 of the 21 affected packages.

Container imageDigestPackageFixed inUsed by
remche/shinyproxy:2.6.18bcda8a04d3b
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
reportportal/migrations:5.7.0da5d8e1395fe
nghttp2@1.46.0-r0
golang.org/x/net@v0.0.0-20190424112056-4829fb13d2c6
1.46.0-r2
0.17.0
1
reportportal/service-api:5.7.29df41f8fb320
tomcat-embed-core@9.0.37
9.0.81
1
reportportal/service-authorization:5.7.09e73114dbd15
tomcat-embed-core@9.0.37
9.0.81
1
reportportal/service-auto-analyzer:5.7.295ada4a216ce
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
reportportal/service-index:5.0.112b27a2d7a87d
golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980
0.17.0
1
reportportal/service-jobs:5.7.2dc166c58485a
tomcat-embed-core@9.0.43
9.0.81
1
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
reportportal/service-ui:5.7.20a08784eb901
nghttp2@1.47.0-r0
1.47.0-r2
1
restic/restic:0.15.2579e4e6a4931
golang.org/x/net@v0.8.0
0.17.0
1
rezachalak/bzen-mongo:1.0.034f694325191
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.2
1
richardchesterwood/k8s-fleetman-api-gateway:release2518f946b9f05
tomcat-embed-core@8.5.11
8.5.94
1
richardchesterwood/k8s-fleetman-position-tracker:release336c43961214c
tomcat-embed-core@8.5.4
8.5.94
1
rm3l/dev-feed-api:latest9a7f732245a3
nghttp2@1.43.0-5.el9_2.1
tomcat-embed-core@9.0.68
0:1.43.0-5.el9_3.1
9.0.81
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
nghttp2@1.40.0-1build1
tomcat-embed-core@9.0.55
1.40.0-1ubuntu0.2
9.0.81
1
robmarkcole/deepstack-ui:latest410275726459
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
robotshop/rs-dispatch:latestde81f1d07b02
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
robotshop/rs-mongodb:latest119b545823cd
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2
1
robotshop/rs-payment:latest774b52c6180d
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
robotshop/rs-ratings:latest4899c686c249
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
robotshop/rs-shipping:latest89753ab48919
tomcat-embed-core@9.0.37
nghttp2@1.43.0-1
9.0.81
1.43.0-1+deb11u1
1
rocketadmin/rocketadmin:1.17.710955ef540b9
nginx@1.22.1-9+deb12u4
no fix listed
1
rodolpheche/wiremock:2.27.22328a9fce2bf
http2-common@9.4.30.v20200611
http2-server@9.4.30.v20200611
9.4.53
9.4.53
1
rookout/k8s-operator:latest0d083f3ef1a7
golang.org/x/net@v0.0.0-20200707034311-ab3426394381
0.17.0
1
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
royalwang/sentinel-dashboard:1.8.4df99e2499f91
tomcat-embed-core@9.0.60
9.0.81
1
runatlantis/atlantis:v0.16.145fbaf7e207c
golang.org/x/net@v0.0.0-20191027093000-83d349e8ac1a
0.17.0
1
samarthya/spinnaker:v1.0ef06d81036af
golang.org/x/net@v0.0.0-20210913180222-943fd674d43e
0.17.0
1
santisbon/speedtest:latest8ee3a1697227
nghttp2@1.52.0-1
1.52.0-1+deb12u1
1
sarwansharma/minio:v359d1da9385d1
nghttp2@1.33.0-3.el8_2.1
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
0:1.33.0-4.el8_6.1
0.17.0
1
savepointsam/unbound:1.15.09b9e0c057d23
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
nghttp2@1.52.0-1
1.52.0-1+deb12u1
1
scorpiobroker/scorpio:scorpio-aaio_2.1.0db55012043df
tomcat-embed-core@9.0.55
9.0.81
1
scrapinghub/splash:3.4.1a5f89bc84606
nghttp2@1.30.0-1ubuntu1
1.30.0-1ubuntu1+esm2
1
sdandey/dandey-apps:kanban-board-kanban-appbef0f599737b
tomcat-embed-core@9.0.21
9.0.81
1
seafileltd/seafile-mc:9.0.106693911bcc40
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2
1
seafileltd/seafile-mc:10.0.170628f29c663
nghttp2@1.40.0-1ubuntu0.1
1.40.0-1ubuntu0.2
1
seafileltd/seafile-mc:9.0.97ac833196f60
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
nghttp2@1.40.0-1build1
1.40.0-1ubuntu0.2
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
nghttp2@1.55.1-r0
golang.org/x/net@v0.7.0
1.57.0-r0
0.17.0
1
seataio/seata-server:latest703b5de7f1a6
nghttp2@1.43.0-1
1.43.0-1+deb11u1
1
seataio/seata-server:1.5.1ee1ed55f4144
tomcat-embed-core@9.0.55
9.0.81
1
seldonio/apife:0.2.7ba81b17f00eb
tomcat-embed-core@8.5.34
8.5.94
1
seldonio/apife:0.3.1eea0d3f578ca
tomcat-embed-core@8.5.34
8.5.94
1
seldonio/cluster-manager:0.2.729e362bb1ba2
tomcat-embed-core@8.5.34
8.5.94
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
nghttp2@1.33.0-3.el8_2.1
0:1.33.0-4.el8_4.1
1
selectdb/doris.k8s-operator:1.3.1919210765cb8
golang.org/x/net@v0.10.0
0.17.0
1
semitechnologies/weaviate:1.19.17a00d226f063
golang.org/x/net@v0.7.0
0.17.0
1
sentriz/gonic:v0.13.1a74012a6adf3
golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e
0.17.0
1
shamimkuet/nginx:1.0.2b82902a76a04
nginx@1.27.0-2~bookworm
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.