StackRadar

CVE-2023-45853

Critical

Advisory

Published 14 Oct 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
785
of 17,787 indexed, latest versions
Container images
855
deployed by those charts
Fix available
2 of 3
affected packages

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

Carried by container images the latest versions of 785 of 17,787 indexed charts deploy, on 855 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.13.dfsg-1, 1:1.3.dfsg+really1.3.1-1+b11:1.2.8.dfsg-1ubuntu1.1+esm3852
pyminizippypi0.2.6no fix listed2
minizipdeb1.1-8+b11.1-8+deb10u12
OSV records
DEBIAN-CVE-2023-45853GHSA-mq29-j5xf-cjwrUBUNTU-CVE-2023-45853DLA-3670-1
Also known as
PYSEC-2026-501, USN-7107-1

Charts affected

785 by stars
ChartLatestAffected imagesRadar Score
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,112
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

25,202
joplintobiassackmann0.1.72 of 2See more

joplin tobiassackmann 0.1.7

2 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
joplin/server:latest3f7b852959aa
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,489
saleor-appstrieb-work0.6.01 of 5See more

saleor-apps trieb-work 0.6.0

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,940
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

17,348
altinnendata-apptumogroup0.1.171 of 1See more

altinnendata-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,755
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,230
nstuning-apptumogroup0.1.181 of 1See more

nstuning-app tumogroup 0.1.18

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.113a6795bf36da
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,755
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
zlib@1:1.2.13.dfsg-1
no fix listed
hassroutyyoussef/orderservice:latest2fc3d1617928
zlib@1:1.2.13.dfsg-1
no fix listed
hassroutyyoussef/userservice:lateste0392e2b4a90
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,191
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,370
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,234
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

45,392
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,383
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
zlib@1:1.2.13.dfsg-1
no fix listed
vcnngr/telegram-rebot:latest30f1f05e57a6
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,830
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,394
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,801
api-gatewaywallarmVerified publisher0.2.01 of 1See more

api-gateway wallarm 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
wallarm/api-gateway:0.2.0a3d4d2f780e8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,300
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,774
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,540
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,858
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,538
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,096
apisix-ingress-controllerwenerme1.3.11 of 2See more

apisix-ingress-controller wenerme 1.3.1

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/api7/adc:0.27.1f65f53dd9668
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,634
giteawenerme12.7.03 of 4See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,842
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,824
mesherywenerme1.0.701 of 1See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,356
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.7.45f2a56b95266
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,618
keycloakwiremindVerified publisher25.3.12 of 2See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,643
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,548
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,383
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,063
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

11,592
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,685
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
zlib@1:1.2.13.dfsg-1
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
zlib@1:1.2.13.dfsg-1
no fix listed
murtazashah46/helmfile:latest4d11726cf803
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

13,197
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,674

Container images carrying it

855 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
esphome/esphome:2024.12.2b2c6322700ac
zlib@1:1.2.13.dfsg-1
no fix listed
1
esphome/esphome:2025.3.0def8b6e4f517
zlib@1:1.2.13.dfsg-1
no fix listed
1
ethersphere/bee:2.2.0a884fd84b72f
zlib@1:1.2.13.dfsg-1
no fix listed
1
ethersphere/beekeeper:lateste4cda693ed63
zlib@1:1.2.13.dfsg-1
no fix listed
1
ethpandaops/observoor:masterc7e5055defcb
zlib@1:1.2.13.dfsg-1
no fix listed
1
falcosecurity/event-generator:latest932956d86c99
zlib@1:1.2.13.dfsg-1
no fix listed
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
zlib@1:1.2.13.dfsg-1
no fix listed
1
federid/webhook:0.1.0fbfb7c6510a7
zlib@1:1.2.13.dfsg-1
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
zlib@1:1.2.13.dfsg-1
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
zlib@1:1.2.13.dfsg-1
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
zlib@1:1.2.13.dfsg-1
no fix listed
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
zlib@1:1.2.13.dfsg-1
no fix listed
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
zlib@1:1.2.13.dfsg-1
no fix listed
1
fluent/fluent-bit:4.0.4ca08b7d2df5b
zlib@1:1.2.13.dfsg-1
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
zlib@1:1.2.13.dfsg-1
no fix listed
1
fosrl/pangolin:latest83a55f933b4d
zlib@1:1.2.13.dfsg-1
no fix listed
1
freedom98/flask:k3.0d7ce1533f297
zlib@1:1.2.13.dfsg-1
no fix listed
1
galaxy/galaxy-init:v18.010267bad550e6
zlib@1:1.2.8.dfsg-1ubuntu1
1:1.2.8.dfsg-1ubuntu1.1+esm3
1
galaxy/galaxy-stable:v18.018e577a626dfd
zlib@1:1.2.8.dfsg-1ubuntu1
1:1.2.8.dfsg-1ubuntu1.1+esm3
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
zlib@1:1.2.13.dfsg-1
no fix listed
1
geopython/pycsw:3.0.0-beta284662ea6b78b
zlib@1:1.2.13.dfsg-1
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
zlib@1:1.2.13.dfsg-1
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
zlib@1:1.2.13.dfsg-1
no fix listed
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
zlib@1:1.2.13.dfsg-1
no fix listed
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
zlib@1:1.2.13.dfsg-1
no fix listed
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
zlib@1:1.2.13.dfsg-1
no fix listed
1
grafana/beyla:1.3.336d07f8d276e
zlib@1:1.2.13.dfsg-1
no fix listed
1
grafana/fluent-plugin-loki:latest8a3882e8c28b
zlib@1:1.2.13.dfsg-1
no fix listed
1
grafana/mcp-grafana:0.14.042f541f22063
zlib@1:1.2.13.dfsg-1
no fix listed
1
grafana/mcp-grafana:1.4.2f87fa67a561f
zlib@1:1.2.13.dfsg-1
no fix listed
1
graphprotocol/graph-node:latestb0436347fb24
zlib@1:1.2.13.dfsg-1
no fix listed
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
zlib@1:1.2.13.dfsg-1
no fix listed
1
greenkube/greenkube:0.3.00c01932282a4
zlib@1:1.2.13.dfsg-1
no fix listed
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
zlib@1:1.2.13.dfsg-1
no fix listed
1
gulacedia/web-dvwa-new:v367b467d961ca
zlib@1:1.2.13.dfsg-1
no fix listed
1
hamidyousefi93/saam-test:latestc34f071f6ed0
zlib@1:1.2.13.dfsg-1
no fix listed
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
zlib@1:1.2.13.dfsg-1
no fix listed
1
hamzaarshad10/querypodpy:1.7154f38e8668e
zlib@1:1.2.13.dfsg-1
no fix listed
1
hansehe/locust:1.1.0bc8e45262bc4
zlib@1:1.2.13.dfsg-1
no fix listed
1
haohanyang/compass-web:0.5.054f2112602ee
zlib@1:1.2.13.dfsg-1
no fix listed
1
haohanyang/compass-web:0.5.1f4f8fe4e21f1
zlib@1:1.2.13.dfsg-1
no fix listed
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
zlib@1:1.2.13.dfsg-1
no fix listed
1
hassroutyyoussef/orderservice:latest2fc3d1617928
zlib@1:1.2.13.dfsg-1
no fix listed
1
hassroutyyoussef/userservice:lateste0392e2b4a90
zlib@1:1.2.13.dfsg-1
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
zlib@1:1.2.13.dfsg-1
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
zlib@1:1.2.13.dfsg-1
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
zlib@1:1.2.13.dfsg-1
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiboxsystems/marge-bot:0.14.0dcffb926e563
zlib@1:1.2.13.dfsg-1
no fix listed
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.