CVE-2023-44487

HighKEV

Advisory

Published 10 Oct 2023In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 1.000; 100th percentile
CISA KEV: Listed; since 10 Oct 2023
Charts affected: 2,107; of 17,790 indexed, latest versions
Container images: 2,471; deployed by those charts
Fix available: 19 of 21; affected packages

Red Hat Enhancement Advisory: nginx:1.22 bug fix and enhancement update

Carried by container images the latest versions of 2,107 of 17,790 indexed charts deploy, on 2,471 images.

Affected package	Affected versions	Fixed in	Images
nghttp2deb	1.30.0-1ubuntu1, 1.40.0-1build1, 1.40.0-1ubuntu0.1, 1.43.0-1+2 more	1.30.0-1ubuntu1+esm2, 1.40.0-1ubuntu0.2, 1.43.0-1+deb11u1, 1.43.0-1ubuntu0.1+1 more	551
nghttp2apk	1.46.0-r0, 1.46.0-r1, 1.47.0-r0, 1.47.0-r1+5 more	1.46.0-r2, 1.47.0-r2, 1.51.0-r2, 1.57.0-r0	213
nghttp2rpm	1.33.0-1.el8, 1.33.0-1.el8_0.1, 1.33.0-3.el8_2.1, 1.33.0-3.el8_2.2+7 more	0:1.33.0-3.el8_1.2, 0:1.33.0-3.el8_2.2, 0:1.33.0-4.el8_4.1, 0:1.33.0-4.el8_6.1+6 more	177
nginxdeb	1.22.1-9, 1.22.1-9+deb12u2, 1.22.1-9+deb12u3, 1.22.1-9+deb12u4+14 more	no fix listed	53
nginxapk	1.20.2-r0, 1.22.0-r1, 1.22.1-r0, 1.24.0-r1+1 more	1.20.2-r2, 1.22.1-r1, 1.24.0-r7	13
nodejsrpm	1:12.18.2-1.module+el8.2.0+7233+61d664c1, 1:14.16.0-2.module+el8.3.0+10180+b92e1eb6, 1:14.17.3-2.module+el8.4.0+11738+3bd42762	1:16.20.2-3.module+el8.8.0+20386+0b1f3093	8
nodejs-packagingrpm	23-3.module+el8.3.0+6519+9f98ed83	0:26-1.module+el8.8.0+19857+6d2a104d	6
nodejsdeb	8.10.0~dfsg-2ubuntu0.4, 10.19.0~dfsg-3ubuntu1, 10.19.0~dfsg-3ubuntu1.3	8.10.0~dfsg-2ubuntu0.4+esm6, 10.19.0~dfsg-3ubuntu1.6+esm2	4
nginxrpm	1:1.14.1-9.module+el8.0.0+4108+af250afe, 1:1.20.1-1.module+el8.8.0+20359+9bd89172.1, 1:1.20.1-13.el9	1:1.20.1-1.module+el8.8.0+20359+9bd89172.1, 1:1.22.1-1.module+el8.8.0+20355+6d9c8a63.1, 1:1.22.1-5.module+el9.3.0.z+20438+032561a0	3
nodejs-nodemonrpm	1.18.3-1.module+el8.1.0+3369+37ae6a45, 2.0.3-1.module+el8.3.0+6519+9f98ed83, 3.0.1-1.module+el8.8.0+19757+8ca87034	0:3.0.1-1.module+el8.8.0+19764+7eed1ca3	3
lighttpdapk	1.4.64-r0	1.4.73-r0	2
varnishdeb	7.5.0, 7.6.3-1~bookworm	no fix listed	2
Apache Tomcatbitnami	9.0.80	8.5.94	1
tomcatbitnami	9.0.80-1	8.5.94	1
varnishapk	7.3.1-r1	7.4.2-r0	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+183 more	0.17.0	1,572
tomcat-embed-coremaven	8.5.4, 8.5.11, 8.5.14, 8.5.15+50 more	8.5.94, 9.0.81, 10.1.14	162
http2-commonmaven	9.4.8.v20171121, 9.4.11.v20180605, 9.4.20.v20190813, 9.4.27.v20200227+10 more	9.4.53, 11.0.17	20
http2-servermaven	9.4.8.v20171121, 9.4.11.v20180605, 9.4.20.v20190813, 9.4.27.v20200227+9 more	9.4.53, 11.0.17	16
tomcat-coyotemaven	8.5.38, 8.5.41, 8.5.43, 8.5.57+7 more	8.5.94, 9.0.81	12
akka-http-core_2.12maven	10.1.11	10.5.3	1

OSV records: ALPINE-CVE-2023-44487 BIT-tomcat-2023-44487 DEBIAN-CVE-2023-44487 RHEA-2023:6562 RHSA-2023:5712 RHSA-2023:5713 RHSA-2023:5766 RHSA-2023:5767 RHSA-2023:5768 RHSA-2023:5769 RHSA-2023:5837 RHSA-2023:5838 RHSA-2023:5850 RHSA-2023:6746 RLSA-2023:5837 UBUNTU-CVE-2023-44487 GHSA-qppj-fm5r-hxr3 DSA-5570-1 openSUSE-SU-2024:13336-1 SUSE-SU-2023:4200-1 SUSE-SU-2023:4492-1
Also known as: BIT-apisix-2023-44487, BIT-aspnet-core-2023-44487, BIT-contour-2023-44487, BIT-dotnet-2023-44487, BIT-dotnet-sdk-2023-44487, BIT-envoy-2023-44487, BIT-golang-2023-44487, BIT-jenkins-2023-44487, BIT-kong-2023-44487, BIT-nginx-2023-44487, BIT-nginx-gateway-2023-44487, BIT-node-2023-44487, BIT-node-min-2023-44487, BIT-solr-2023-44487, BIT-varnish-2023-44487, RHSA-2023:5711, RHSA-2023:6120, USN-6505-1, USN-6754-1, USN-7469-3

Charts affected

2,107 by stars

Chart

Latest

Affected images

Radar Score

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	nghttp2@1.33.0-3.el8_2.1	0:1.33.0-4.el8_6.1

Open the chart page →

4,956

permission-managerkfirfer

1.0.7

1 of 1 See more

permission-manager kfirfer 1.0.7

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0

Open the chart page →

2,266

kubeflowkubeflow

1.6.2

27 of 45 See more

kubeflow kubeflow 1.6.2

27 of the 45 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	nghttp2@1.30.0-1ubuntu1 golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	1.30.0-1ubuntu1+esm2 0.17.0
istio/proxyv2 :1.14.1	df69c1a7af7c	nghttp2@1.40.0-1build1 golang.org/x/net@v0.0.0-20220412020605-290c469a71a5	1.40.0-1ubuntu0.2 0.17.0
kserve/kserve-controller :v0.8.0	f0692a9ea09f	golang.org/x/net@v0.0.0-20211205041911-012df41ee64c	0.17.0
kubeflow/training-operator :v1-e1434f6	ff847e2b6af0	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d	0.17.0
kubeflownotebookswg/kfam :v1.6.1	f226fb44db57	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.17.0
kubeflownotebookswg/notebook-controller :v1.6.1	85e2e685abd6	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.17.0
kubeflownotebookswg/poddefaults-webhook :v1.6.1	7d42600e1524	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0
kubeflownotebookswg/profile-controller :v1.6.1	9f01767a460f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
kubeflownotebookswg/tensorboard-controller :v1.6.1	82ffdd2da285	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.17.0
library/python :3.7	eedf63967cdb	nghttp2@1.52.0-1	1.52.0-1+deb12u1
metacontrollerio/metacontroller :v2.0.4	897c9601d2cc	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.17.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller :v1.2.0	f253b82941c2	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook :v1.2.0	a705c1ea8e9e	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/activator :v1.2.5	93ff6e693577	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler :v1.2.5	007820fdb75b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping :v1.2.5	23baa1932232	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook :v1.2.5	847bb97e3844	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook :v1.2.5	9084ea8498ea	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	nghttp2@1.43.0-1	1.43.0-1+deb11u1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/viewer-crd-controller :2.0.0-alpha.5	34403f9f94be	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.17.0

Open the chart page →

97,217

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	nghttp2@1.40.0-1ubuntu0.1	1.40.0-1ubuntu0.2

Open the chart page →

10,573

openelbkubesphere-stable

0.5.0

2 of 2 See more

openelb kubesphere-stable 0.5.0

2 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.5.0	b5b665c4672c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.17.0
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.17.0

Open the chart page →

4,336

vclustermain

0.17.0

6 of 10 See more

vcluster main 0.17.0

6 of the 10 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/net@v0.8.0	0.17.0
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/net@v0.9.0	0.17.0
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	golang.org/x/net@v0.7.0	0.17.0
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.17.0
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.17.0
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.17.0

Open the chart page →

11,598

netris-operatornetrisai

3.0.2

1 of 2 See more

netris-operator netrisai 3.0.2

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
netrisai/netris-operator :v4.0.2	44f60aa0d898	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.17.0

Open the chart page →

1,588

unifi-controllerqonstrukt

2.6.1

1 of 1 See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :8.0.24	0ae315a3a456	tomcat-embed-core@9.0.65	9.0.81

Open the chart page →

10,563

rke2-multusrke2-charts

3.7.1-build2021041601

1 of 2 See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
rancher/hardened-multus-cni :v3.7.1-build20210416	8eb8092f0728	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.17.0

Open the chart page →

4,526

piholesavepointsam

0.2.0

1 of 1 See more

pihole savepointsam 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
pihole/pihole :2023.05.0	b83258064f54	nghttp2@1.43.0-1	1.43.0-1+deb11u1

Open the chart page →

1,048

openspeedtestspeedtest

0.1.2

1 of 1 See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
openspeedtest/latest :v2.0.0	d4d62f4b7d85	nghttp2@1.51.0-r0	1.51.0-r2

Open the chart page →

2,040

phpipamstackhelm

0.1.2

2 of 3 See more

phpipam stackhelm 0.1.2

2 of the 3 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
phpipam/phpipam-cron :v1.5.2	f770577cb946	nghttp2@1.46.0-r0	1.46.0-r2
phpipam/phpipam-www :v1.5.2	3c6fd1332aeb	nghttp2@1.46.0-r0	1.46.0-r2

Open the chart page →

1,874

k8s-telegram-sendertelegram-sender

0.0.1

1 of 1 See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
danuk/telegram-sender :0.0.1	026560388070	nghttp2@1.43.0-1	1.43.0-1+deb11u1

Open the chart page →

3,048

uffizzi-appuffizzi-app

1.3.0

3 of 14 See more

uffizzi-app uffizzi-app 1.3.0

3 of the 14 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	golang.org/x/net@v0.12.0	0.17.0
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	golang.org/x/net@v0.8.0	0.17.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0	0.17.0

Open the chart page →

19,434

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.17.0

Open the chart page →

13,578

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	nghttp2@1.52.0-1	1.52.0-1+deb12u1

Open the chart page →

9,775

eshoponabpabp-charts

1.0.0

2 of 15 See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
library/mongo :4.2	699d652ed674	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2
ghcr.io/volosoft/eshoponabp/app-web :1.0.0	056bb4271626	nghttp2@1.47.0-r0	1.47.0-r2

Open the chart page →

19,812

code-serveralekc

0.1.1

1 of 1 See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
linuxserver/code-server :4.10.1	a5e43a05ae79	nghttp2@1.43.0-1build3	1.43.0-1ubuntu0.1

Open the chart page →

8,254

aperture-controlleraperture

2.34.0

1 of 5 See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98	0.17.0

Open the chart page →

4,679

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	nghttp2@1.47.0-r0 golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	1.47.0-r2 0.17.0

Open the chart page →

3,307

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	nghttp2@1.33.0-3.el8_2.2 golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0:1.33.0-5.el8_8 0.17.0

Open the chart page →

9,060

prometheusavesha

19.3.0

3 of 4 See more

prometheus avesha 19.3.0

3 of the 4 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0	0.17.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.17.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	golang.org/x/net@v0.0.0-20221014081412-f15817d10f9b	0.17.0

Open the chart page →

5,491

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.17.0

Open the chart page →

2,250

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0	0.17.0

Open the chart page →

1,917

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	nghttp2@1.40.0-1ubuntu0.1	1.40.0-1ubuntu0.2

Open the chart page →

8,026

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.17.0

Open the chart page →

7,797

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/net@v0.7.0	0.17.0

Open the chart page →

1,707

coder-observabilitycoder-observability

0.7.3

4 of 21 See more

coder-observability coder-observability 0.7.3

4 of the 21 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
curlimages/curl :7.85.0	9fab1b73f45e	nghttp2@1.46.0-r0	1.46.0-r2
nginxinc/nginx-unprivileged :1.24-alpine	be76a26e238d	nginx@1.24.0-r1	1.24.0-r7
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	nghttp2@1.33.0-3.el8_2.1 golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0:1.33.0-4.el8_6.1 0.17.0
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	nghttp2@1.33.0-3.el8_2.1 golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0:1.33.0-4.el8_6.1 0.17.0

Open the chart page →

24,753

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.17.0

Open the chart page →

3,088

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0

Open the chart page →

2,537

hdfsdmwm-bigdata

1.0.1

1 of 2 See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
gradiant/hdfs :3.2.2	e3bf364fe713	nghttp2@1.43.0-1	1.43.0-1+deb11u1

Open the chart page →

7,949

edgelessdbedgelesssys

0.3.2

1 of 1 See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2

Open the chart page →

4,871

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0

Open the chart page →

2,271

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-5.el8_8

Open the chart page →

12,049

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-5.el8_8

Open the chart page →

14,552

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	nghttp2@1.33.0-4.el8_6.1	0:1.33.0-5.el8_8

Open the chart page →

13,881

keydbfinkinfridom

0.48.3

1 of 1 See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	nghttp2@1.40.0-1ubuntu0.1	1.40.0-1ubuntu0.2

Open the chart page →

5,305

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0

Open the chart page →

3,030

calibregeek-cookbook

5.4.2

1 of 1 See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
linuxserver/calibre :version-v5.21.0	a847b5b2d860	nghttp2@1.30.0-1ubuntu1	1.30.0-1ubuntu1+esm2

Open the chart page →

22,792

mealiegeek-cookbook

5.1.2

2 of 2 See more

mealie geek-cookbook 5.1.2

2 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e	0.17.0
hkotel/mealie :api-v1.0.0beta-2	a7e6b6abe087	nghttp2@1.43.0-1	1.43.0-1+deb11u1

Open the chart page →

7,587

multusgeek-cookbook

3.5.2

1 of 3 See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.17.0

Open the chart page →

4,915

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2

Open the chart page →

14,004

plexgeek-cookbook

6.4.3

1 of 1 See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2

Open the chart page →

9,669

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	nghttp2@1.40.0-1build1 golang.org/x/net@v0.0.0-20200625001655-4c5254603344	1.40.0-1ubuntu0.2 0.17.0

Open the chart page →

10,221

smarter-device-managergeek-cookbook

6.5.2

1 of 1 See more

smarter-device-manager geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.17.0

Open the chart page →

2,336

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/net@v0.0.0-20200904194848-62affa334b73	0.17.0

Open the chart page →

3,378

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff	0.17.0

Open the chart page →

2,610

tautulligeek-cookbook

11.4.2

1 of 1 See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	nghttp2@1.40.0-1build1	1.40.0-1ubuntu0.2

Open the chart page →

10,671

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3	0.17.0

Open the chart page →

2,234

unifigeek-cookbook

5.1.3

1 of 1 See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2023-44487.

Container image	Digest	Package	Fixed in
jacobalberty/unifi :v7.4.162	b3edc809a3ff	nghttp2@1.30.0-1ubuntu1 tomcat-embed-core@9.0.65	1.30.0-1ubuntu1+esm2 9.0.81

Open the chart page →

11,900

Container images carrying it

2,471 by charts deploying them

A fixed version is listed for 19 of the 21 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/csi-attacher :v3.5.0	dd245051317e	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.17.0	1
registry.k8s.io/sig-storage/csi-external-health-monitor-controller :v0.7.0	80b9ba94aa2a	golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b	0.17.0	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	golang.org/x/net@v0.4.0	0.17.0	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.2	a13bff2ed69a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.17.0	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.0	cd21e19cd8bb	golang.org/x/net@v0.13.0	0.17.0	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.0.1	e07f914c32f0	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.17.0	1
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	golang.org/x/net@v0.4.0	0.17.0	1
registry.k8s.io/sig-storage/csi-provisioner :v3.3.0	ee3b525d5b89	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.17.0	1
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	golang.org/x/net@v0.4.0	0.17.0	1
registry.k8s.io/sig-storage/csi-resizer :v1.6.0	425d8f1b7693	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.17.0	1
registry.k8s.io/sig-storage/csi-resizer :v1.3.0	6e0546563b18	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.17.0	1
registry.k8s.io/sig-storage/csi-snapshotter :v6.1.0	291334908ddf	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.17.0	1
registry.k8s.io/sig-storage/csi-snapshotter :v4.2.1	818f35653f2e	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.17.0	1
registry.k8s.io/sig-storage/csi-snapshotter :v5.0.1	89e900a160a9	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.17.0	1
registry.k8s.io/sig-storage/hostpathplugin :v1.9.0	92257881c1d6	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.17.0	1
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	golang.org/x/net@v0.4.0	0.17.0	1
registry.k8s.io/sig-storage/livenessprobe :v2.11.0	82adbebdf5d5	golang.org/x/net@v0.13.0	0.17.0	1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.0	3ce0fdba4d8e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.17.0	1
registry.k8s.io/sig-storage/snapshot-controller :v4.2.1	95587f8777d7	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.17.0	1
registry.k8s.io/sig-storage/snapshot-controller :v6.2.1	98bab4eaf23c	golang.org/x/net@v0.4.0	0.17.0	1
registry.k8s.io/sig-storage/volume-data-source-validator :v1.0.0	d35884236461	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.17.0	1