StackRadar

CVE-2023-45853

Critical

Advisory

Published 14 Oct 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
785
of 17,787 indexed, latest versions
Container images
855
deployed by those charts
Fix available
2 of 3
affected packages

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

Carried by container images the latest versions of 785 of 17,787 indexed charts deploy, on 855 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.13.dfsg-1, 1:1.3.dfsg+really1.3.1-1+b11:1.2.8.dfsg-1ubuntu1.1+esm3852
pyminizippypi0.2.6no fix listed2
minizipdeb1.1-8+b11.1-8+deb10u12
OSV records
DEBIAN-CVE-2023-45853GHSA-mq29-j5xf-cjwrUBUNTU-CVE-2023-45853DLA-3670-1
Also known as
PYSEC-2026-501, USN-7107-1

Charts affected

785 by stars
ChartLatestAffected imagesRadar Score
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,112
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

25,202
joplintobiassackmann0.1.72 of 2See more

joplin tobiassackmann 0.1.7

2 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
joplin/server:latest3f7b852959aa
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,489
saleor-appstrieb-work0.6.01 of 5See more

saleor-apps trieb-work 0.6.0

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,940
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

17,348
altinnendata-apptumogroup0.1.171 of 1See more

altinnendata-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,755
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,230
nstuning-apptumogroup0.1.181 of 1See more

nstuning-app tumogroup 0.1.18

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.113a6795bf36da
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,755
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
zlib@1:1.2.13.dfsg-1
no fix listed
hassroutyyoussef/orderservice:latest2fc3d1617928
zlib@1:1.2.13.dfsg-1
no fix listed
hassroutyyoussef/userservice:lateste0392e2b4a90
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,191
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,370
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,234
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

45,392
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,383
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
zlib@1:1.2.13.dfsg-1
no fix listed
vcnngr/telegram-rebot:latest30f1f05e57a6
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,830
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,394
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,801
api-gatewaywallarmVerified publisher0.2.01 of 1See more

api-gateway wallarm 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
wallarm/api-gateway:0.2.0a3d4d2f780e8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,300
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,774
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,540
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,858
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,538
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,096
apisix-ingress-controllerwenerme1.3.11 of 2See more

apisix-ingress-controller wenerme 1.3.1

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/api7/adc:0.27.1f65f53dd9668
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,634
giteawenerme12.7.03 of 4See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,842
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,824
mesherywenerme1.0.701 of 1See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,356
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.7.45f2a56b95266
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,618
keycloakwiremindVerified publisher25.3.12 of 2See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,643
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,548
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,383
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,063
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

11,592
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,685
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
zlib@1:1.2.13.dfsg-1
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
zlib@1:1.2.13.dfsg-1
no fix listed
murtazashah46/helmfile:latest4d11726cf803
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

13,197
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,674

Container images carrying it

855 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
zlib@1:1.2.13.dfsg-1
no fix listed
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
zlib@1:1.2.13.dfsg-1
no fix listed
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
zlib@1:1.2.13.dfsg-1
no fix listed
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
zlib@1:1.2.13.dfsg-1
no fix listed
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
zlib@1:1.2.13.dfsg-1
no fix listed
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
zlib@1:1.2.13.dfsg-1
no fix listed
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
zlib@1:1.2.13.dfsg-1
no fix listed
1
statusim/nimbus-eth2:multiarch-latest6ccd9d382885
zlib@1:1.2.13.dfsg-1
no fix listed
1
strangebee/thehive:5.7.6-1e77b713124dd
zlib@1:1.2.13.dfsg-1
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/edge-runtime:v1.74.02781daf92394
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/edge-runtime:v1.59.0eff9c554d649
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/postgres-meta:v0.96.6a84cc713585e
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/realtime:v2.102.3aa1c92c0cf32
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/realtime:v2.33.8d207e6e23ad3
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
zlib@1:1.2.13.dfsg-1
no fix listed
1
supabase/studio:latest94a2a9d2906e
zlib@1:1.2.13.dfsg-1
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
zlib@1:1.2.13.dfsg-1
no fix listed
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
zlib@1:1.2.13.dfsg-1
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
zlib@1:1.2.13.dfsg-1
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
zlib@1:1.2.13.dfsg-1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
zlib@1:1.2.13.dfsg-1
no fix listed
1
testinprod/op-erigon:latest0a125bd77a2d
zlib@1:1.2.13.dfsg-1
no fix listed
1
theradius/loggia:0.463ba348546ec
zlib@1:1.2.13.dfsg-1
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
zlib@1:1.2.13.dfsg-1
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
zlib@1:1.2.13.dfsg-1
no fix listed
1
tibyandocker/serviceexample:latesta4ad592cea84
zlib@1:1.2.13.dfsg-1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
zlib@1:1.2.13.dfsg-1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
zlib@1:1.2.13.dfsg-1
no fix listed
1
v3xl/kubesend:0.1.06f62ca96be82
zlib@1:1.2.13.dfsg-1
no fix listed
1
valkey/valkey:8.0.1c5d4f082b76d
zlib@1:1.2.13.dfsg-1
no fix listed
1
vaultwarden/server:1.34.384fd8a47f58d
zlib@1:1.2.13.dfsg-1
no fix listed
1
vcnngr/telegram-login:latest1a849a997b6d
zlib@1:1.2.13.dfsg-1
no fix listed
1
vcnngr/telegram-rebot:latest30f1f05e57a6
zlib@1:1.2.13.dfsg-1
no fix listed
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
zlib@1:1.2.13.dfsg-1
no fix listed
1
venturenox/redis:latest83b471c193ba
zlib@1:1.2.13.dfsg-1
no fix listed
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
zlib@1:1.2.13.dfsg-1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
zlib@1:1.2.13.dfsg-1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
zlib@1:1.2.13.dfsg-1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
zlib@1:1.2.13.dfsg-1
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
zlib@1:1.2.8.dfsg-1ubuntu1
1:1.2.8.dfsg-1ubuntu1.1+esm3
1
wallarm/api-gateway:0.2.0a3d4d2f780e8
zlib@1:1.2.13.dfsg-1
no fix listed
1
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
zlib@1:1.2.13.dfsg-1
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
zlib@1:1.2.13.dfsg-1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
zlib@1:1.2.13.dfsg-1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
zlib@1:1.2.13.dfsg-1
no fix listed
1
youkadev/api-snap:0.1.14db0f9428e67
zlib@1:1.2.13.dfsg-1
no fix listed
1
zenmldocker/zenml-server:0.96.409027a6312ee
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.