CVE-2023-45133
CriticalAdvisory
Published 12 Oct 2023In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.3
- base score, highest
- EPSS
- 0.005
- 43rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 134
- of 17,781 indexed, latest versions
- Container images
- 122
- deployed by those charts
- Fix available
- 1 of 3
- affected packages
Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 122 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| @babel/ | 7.0.0-beta.44, 7.4.3, 7.4.5, 7.5.5+41 more | 7.23.2 | 108 |
| babel-traversenpm | 6.21.0, 6.26.0 | no fix listed | 28 |
| node-babel7deb | 7.20.15+ds1+~cs214.269.168-6build1 | no fix listed | 1 |
- OSV records
- GHSA-67hx-6x53-jw92UBUNTU-CVE-2023-45133
Charts affected
134 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| mongo-expresscowboysysopVerified publisher | 7.0.0 | 1 of 1See more | 1,210 |
| chatwootchatwootVerified publisher | 2.0.24 | 1 of 3See more | 9,203 |
| outlineoutline | 0.0.9 | 1 of 4See more | 4,431 |
| outlinekubitodevVerified publisher | 1.2.2 | 1 of 4See more | 5,352 |
| netris-controllernetrisai | 2.8.2 | 1 of 14See more | 30,326 |
| redisinsightheywood8-helm-chartsVerified publisher | 0.4.5 | 1 of 1See more | 2,828 |
| servarrservarr | 1.0.2 | 1 of 10See more | 14,238 |
| misskeyalytiVerified publisher | 1.0.0 | 1 of 1See more | 5,251 |
| wikijsgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 5,946 |
| klusterviewklusterviewVerified publisher | 0.1.0 | 1 of 4See more | 3,795 |
| kubernetes-loggingkubernetes-logging | 4.8.0 | 1 of 6See more | 10,530 |
| open5gsopen5gsVerified publisher | 2.3.4 | 1 of 5See more | 9,261 |
| community-solid-servercommunity-solid-server | 3.0.0 | 1 of 1See more | 1,613 |
| nightscoutgabe565Verified publisher | 0.13.0 | 1 of 2See more | 2,521 |
| calibregeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 22,773 |
| mealiegeek-cookbookVerified publisher | 5.1.2 | 1 of 2See more | 7,579 |
| graphql-hivegraphql-hive | 1.0.0 | 1 of 17See more | 10,311 |
| flagsmithone-acre-fundVerified publisher | 0.1.5 | 1 of 6See more | 6,868 |
| kobotoolboxone-acre-fundVerified publisher | 0.7.4 | 1 of 9See more | 18,517 |
| overseerrpree-helm-chartsVerified publisher | 1.2.0 | 1 of 1See more | 2,702 |
| browserless-chromesagikazarmarkVerified publisher | 0.0.5 | 1 of 1See more | 24,488 |
| soarv113assist-iot-cybersecurity-monitoring-soar | 0.1.3 | 1 of 5See more | 17,896 |
| siemassist-iot-cybersecurity-monitroting-siem | 0.1.0 | 1 of 3See more | 10,730 |
| data-fairdata354-helmVerified publisher | 1.1.2 | 2 of 12See more | 38,346 |
| mastodondefault-ghVerified publisher | 0.3.1 | 1 of 3See more | 5,056 |
| joplin-serverdjjudas21Verified publisher | 5.5.8 | 1 of 1See more | 3,925 |
| overseerrgeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 3,444 |
| recipesgeek-cookbookVerified publisher | 6.6.2 | 1 of 2See more | 7,801 |
| todo-appjunktext-direct | 1.1.4 | 1 of 1See more | 3,369 |
| dashykrzwiatrzyk | 1.0.0 | 1 of 1See more | 3,143 |
| chatwootmaxcrm-chartsVerified publisher | 1.1.201 | 1 of 4See more | 5,940 |
| open5gs-webuiopen5gs-webuiVerified publisher | 2.3.1 | 1 of 2See more | 5,300 |
| pdf-editor-helmpdf-editor-web | 1.0.0 | 1 of 4See more | 4,206 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 31,844 |
| statsdstatsd-airflow-smd | 0.1.19 | 1 of 1See more | 4,185 |
| ackeesudaVerified publisher | 0.2.1 | 1 of 1See more | 1,602 |
| testhubteshubVerified publisher | 0.1.4 | 1 of 3See more | 7,517 |
| wikiwenerme | 2.2.0 | 1 of 2See more | 3,833 |
| open5gsadaptivenetlabVerified publisher | 1.0.3 | 1 of 3See more | 25,443 |
| openhab-cloudandibraeuVerified publisher | 1.2.6 | 1 of 1See more | 3,437 |
| angular-chartangular-application | 0.1.0 | 1 of 1See more | 3,237 |
| apimap-developerapimapOfficialVerified publisher | 1.4.1 | 1 of 1See more | 2,353 |
| apimap-portalapimapOfficialVerified publisher | 2.4.0 | 1 of 1See more | 2,396 |
| trifidappuio | 2.0.2 | 1 of 1See more | 2,783 |
| openapiassist-iot-open-api-management | 0.2.2 | 1 of 6See more | 18,277 |
| nas-appsawesomeVerified publisher | 2.0.0 | 1 of 8See more | 7,152 |
| opendistro-esbeeinventor | 1.15.1 | 1 of 3See more | 5,806 |
| mx-apibicarus-labs | 0.1.0 | 1 of 4See more | 4,455 |
| overseerrbrandan-schmitz-helm-chartsVerified publisher | 1.4.0 | 1 of 1See more | 3,071 |
| developer-dashboardcloud-native-toolkit | 1.4.1 | 1 of 1See more | 25,456 |
Container images carrying it
122 by charts deploying them
A fixed version is listed for 1 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | a4a3639899f7 | @babel/ | 7.23.2 | 3 |
| amazon/ | c740d7a89475 | @babel/ | 7.23.2 | 2 |
| chatwoot/ | d530ab8c1753 | @babel/ | 7.23.2 | 2 |
| governify/ | 2987672448c7 | @babel/ | 7.23.2 | 2 |
| governify/ | d3f37f4f8168 | babel-traverse | no fix listed | 2 |
| gradiant/ | fbd10c017541 | babel-traverse | no fix listed | 2 |
| library/ | 1b23d7976f02 | @babel/ | 7.23.2 | 2 |
| moreillon/ | 9e578c9653b6 | @babel/ | 7.23.2 | 2 |
| moreillon/ | d5a0ec8394c0 | @babel/ | 7.23.2 | 2 |
| opensearchproject/ | 39695180364b | @babel/ | 7.23.2 | 2 |
| outlinewiki/ | d060dcd8f9aa | @babel/ babel-traverse | 7.23.2 no fix listed | 2 |
| requarks/ | 68f0d1848261 | @babel/ | 7.23.2 | 2 |
| stakater/ | 3f4926eedc74 | @babel/ | 7.23.2 | 2 |
| statsd/ | dab129e74c25 | @babel/ | 7.23.2 | 2 |
| ghcr.io/ | acb40032ad4b | @babel/ | 7.23.2 | 2 |
| amazon/ | 5126e2e79a1f | @babel/ | 7.23.2 | 1 |
| amundsendev/ | 69e7915e61c1 | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| apimap/ | 406d3858e20c | @babel/ | 7.23.2 | 1 |
| apimap/ | 041a4790c65c | @babel/ | 7.23.2 | 1 |
| arfath29/ | 384b3e377f47 | @babel/ | 7.23.2 | 1 |
| assistiot/ | 2297b4350211 | @babel/ | 7.23.2 | 1 |
| assistiot/ | 0570b27bb7c2 | @babel/ | 7.23.2 | 1 |
| assistiot/ | f11d82defc70 | @babel/ | 7.23.2 | 1 |
| bicarus/ | dab88659ae3b | @babel/ | 7.23.2 | 1 |
| browserless/ | c81ae5585b47 | @babel/ | 7.23.2 | 1 |
| catalysm/ | f003b35f54d9 | babel-traverse | no fix listed | 1 |
| ccjacobs14/ | 9a9b14a6f09e | @babel/ | 7.23.2 | 1 |
| chatwoot/ | 67ebc751c171 | @babel/ | 7.23.2 | 1 |
| coderaiser/ | b34a9775c7ce | @babel/ | 7.23.2 | 1 |
| coldatom/ | 7c2fbbb41bcf | @babel/ | 7.23.2 | 1 |
| conduction/ | d591f5e6f2a9 | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| dipugodocker/ | d431c37fe1cd | @babel/ | 7.23.2 | 1 |
| electerious/ | 5e7173fa321c | @babel/ | 7.23.2 | 1 |
| ethereumoptimism/ | e07968a0e686 | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| ethersphere/ | 7624f11a72ad | babel-traverse | no fix listed | 1 |
| ethersphere/ | 513154aab230 | @babel/ | 7.23.2 | 1 |
| ethpandaops/ | 7a9ab6370657 | @babel/ | 7.23.2 | 1 |
| fallenbagel/ | 6dcdb5ba5091 | @babel/ | 7.23.2 | 1 |
| fiware/ | d551a13e8278 | babel-traverse | no fix listed | 1 |
| flagsmith/ | df02a29e8b0c | @babel/ | 7.23.2 | 1 |
| graphiteapp/ | 04a0037cc2ae | @babel/ | 7.23.2 | 1 |
| hecrom/ | 5454b54d5b28 | @babel/ | 7.23.2 | 1 |
| helga09/ | 7999bc8b77c0 | @babel/ | 7.23.2 | 1 |
| henrywhitaker3/ | 47159a940229 | @babel/ | 7.23.2 | 1 |
| heywood8/ | 0bc9ab313d37 | @babel/ | 7.23.2 | 1 |
| hkotel/ | 3c04c0e85039 | @babel/ | 7.23.2 | 1 |
| ibarreche/ | c8970ac1c8dc | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| ibmcom/ | e2a86997b36b | @babel/ babel-traverse | 7.23.2 no fix listed | 1 |
| jayfong/ | 163e5d621910 | babel-traverse | no fix listed | 1 |
| joplin/ | 52af57880c0e | @babel/ | 7.23.2 | 1 |