StackRadar

CVE-2023-45287

High

Advisory

Published 5 Dec 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,600
of 17,803 indexed, latest versions
Container images
1,798
deployed by those charts
Fix available
2 of 3
affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 1,600 of 17,803 indexed charts deploy, on 1,798 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
skopeorpm2:1.11.2-0.1.el92:1.14.3-0.1.el91
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+98 more1.20.01,798
OSV records
DEBIAN-CVE-2023-45287RHSA-2024:2239GO-2023-2375
Also known as
BIT-golang-2023-45287

Charts affected

1,600 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

1,798 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
stdlib@go1.18.5
1.20.0
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
stdlib@go1.18.10
1.20.0
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
stdlib@go1.18.10
1.20.0
1
ghcr.io/tailscale/tailscale:v1.34.1ce1862e6b3a5
stdlib@go1.19.2-ts3fd24dee31
1.20.0
1
ghcr.io/tarampampam/error-pages:2.6.013e73da04ee4
stdlib@go1.17.6
1.20.0
1
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
stdlib@go1.18.2
1.20.0
1
ghcr.io/tikalk/resource-manager:latest7f21d50e69cb
stdlib@go1.19
1.20.0
1
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
stdlib@go1.18.3
1.20.0
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
stdlib@go1.19.3
1.20.0
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
stdlib@go1.17.8
1.20.0
1
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
stdlib@go1.18.1
1.20.0
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
stdlib@go1.16.15
1.20.0
1
ghcr.io/yasn77/pgbouncer:v0.0.6cc8c13550e44
stdlib@go1.18.6
1.20.0
1
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
stdlib@go1.19.4
1.20.0
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
stdlib@go1.17.3
1.20.0
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
stdlib@go1.15.4
1.20.0
1
mcr.microsoft.com/oss/azure/aad-pod-identity/mic:v1.8.173004b93fcb74
stdlib@go1.19.10
1.20.0
1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
stdlib@go1.19.10
1.20.0
1
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
stdlib@go1.14
1.20.0
1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar:v2.0.1fc5d14e9f26f
stdlib@go1.15
1.20.0
1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner:v1.6.1667b1b1ea1e4
stdlib@go1.15.2
1.20.0
1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v1.1.07997e0f236bc
stdlib@go1.15.2
1.20.0
1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe:v2.2.0b7d82802cca8
stdlib@go1.15.6
1.20.0
1
public.ecr.aws/aws-ec2/amazon-ec2-metadata-mock:v1.11.2dd02d3569da0
stdlib@go1.17.13
1.20.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.20.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller:v2.0.0-beta9637c80dd23f
stdlib@go1.19.3
1.20.0
1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook:v2.0.0-beta86b0f7243250
stdlib@go1.19.3
1.20.0
1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller:1.067b89ae52240
stdlib@go1.15.3
1.20.0
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-2021.08.13.20.34-linux-amd6402aed3370fce
stdlib@go1.15.12
1.20.0
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r2-35-g41dc61e-2022.12.16.20.38363bd65cd707
stdlib@go1.18.8
1.20.0
1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64b32c99e7bc45
stdlib@go1.15.8
1.20.0
1
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
stdlib@go1.17.13
1.20.0
1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
stdlib@go1.15.15
1.20.0
1
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
stdlib@go1.14.9
1.20.0
1
public.ecr.aws/karpenter/controller:v0.19.3f0e5ab60b2df
stdlib@go1.19.3
1.20.0
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
stdlib@go1.16.5
1.20.0
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
stdlib@go1.18.1
1.20.0
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
stdlib@go1.16.5
1.20.0
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
stdlib@go1.18.1
1.20.0
1
quay.io/argoprojlabs/argocd-operator:v0.4.0cf8faa986789
stdlib@go1.18.4
1.20.0
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
stdlib@go1.15.12
1.20.0
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
stdlib@go1.18.4
1.20.0
1
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
stdlib@go1.19.13
1.20.0
1
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
stdlib@go1.17.5
1.20.0
1
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
stdlib@go1.15.7
1.20.0
1
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
stdlib@go1.19.2
1.20.0
1
quay.io/cilium/tetragon-operator:v0.8.34ab8e6604204
stdlib@go1.18.3
1.20.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
stdlib@go1.18.1
1.20.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
stdlib@go1.19.10
1.20.0
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
stdlib@go1.16.3
1.20.0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.