CVE-2023-45853
CriticalAdvisory
Published 14 Oct 2023In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.032
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 782
- of 17,781 indexed, latest versions
- Container images
- 851
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency
Carried by container images the latest versions of 782 of 17,781 indexed charts deploy, on 851 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| zlibdeb | 1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.13.dfsg-1, 1:1.3.dfsg+really1.3.1-1+b1 | 1:1.2.8.dfsg-1ubuntu1.1+esm3 | 848 |
| pyminizippypi | 0.2.6 | no fix listed | 2 |
| minizipdeb | 1.1-8+b1 | 1.1-8+deb10u1 | 2 |
- OSV records
- DEBIAN-CVE-2023-45853GHSA-mq29-j5xf-cjwrUBUNTU-CVE-2023-45853DLA-3670-1
- Also known as
- PYSEC-2026-501, USN-7107-1
Charts affected
782 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| changedetection-iogabe565Verified publisher | 0.12.0 | 1 of 2See more | 2,595 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 13,241 |
| garge-appgargeVerified publisher | 0.1.46 | 1 of 1See more | 1,842 |
| icinga2geek-cookbookVerified publisher | 4.2.0 | 1 of 1See more | 9,077 |
| mopidygeek-cookbookVerified publisher | 0.1.2 | 1 of 1See more | 12,958 |
| chproxygeneral-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 3,712 |
| genieacsgenieacsVerified publisher | 0.5.1 | 1 of 2See more | 4,259 |
| ghostghostVerified publisher | 0.1.0 | 1 of 4See more | 9,019 |
| qryn-helmgigapipeVerified publisher | 0.1.9 | 1 of 1See more | 2,973 |
| redis-uigin | 0.0.1 | 1 of 1See more | 1,053 |
| pgbouncerglassflowVerified publisher | 0.1.0 | 1 of 1See more | 3,246 |
| glpiglpi-chart | 0.1.1 | 1 of 3See more | 12,170 |
| platformgoofy-chart | 0.1.0 | 1 of 1See more | 2,789 |
| opentelemetry-demogpg-dev | 0.33.8 | 7 of 27See more | 49,025 |
| gridgain9gridgainVerified publisher | 1.1.10 | 1 of 2See more | 3,199 |
| h2ph2pVerified publisher | 1.0.1 | 1 of 1See more | 1,713 |
| librechat-exporterhajowielandVerified publisher | 1.0.0 | 1 of 1See more | 2,284 |
| web-checkhajowielandVerified publisher | 1.0.1 | 1 of 1See more | 9,047 |
| hatchet-hahatchetOfficialVerified publisher | 0.18.0 | 2 of 8See more | 7,344 |
| hatchet-stackhatchetOfficialVerified publisher | 0.18.0 | 2 of 8See more | 7,344 |
| heliconehelicone | 0.1.42 | 1 of 14See more | 24,995 |
| helixhelix | 1.4.3 | 1 of 2See more | 5,568 |
| hello-worldhello-world-pponyVerified publisher | 0.3.0 | 1 of 1See more | 5,839 |
| esphomehelm-chart-roeiVerified publisher | 2025.3.0 | 1 of 1See more | 6,008 |
| home-assistant-matter-hubhelm-chart-roeiVerified publisher | 3.0.2 | 1 of 1See more | 3,806 |
| kube-downscalerhelm-charts-nr | 0.7.6 | 1 of 1See more | 4,293 |
| locusthelm-charts-nr | 0.32.4 | 1 of 1See more | 2,800 |
| node-problem-detectorhelm-charts-nr | 2.3.17 | 1 of 1See more | 2,434 |
| supersethelm-charts-nr | 1.1.3 | 1 of 1See more | 2,305 |
| chart-bookhelm-deploy-book | 0.1.0 | 1 of 3See more | 9,122 |
| affinehelmforgeVerified publisher | 1.0.0 | 2 of 3See more | 4,018 |
| archiveboxhelmforgeVerified publisher | 1.1.12 | 1 of 1See more | 7,633 |
| changedetectionhelmforgeVerified publisher | 1.1.15 | 1 of 1See more | 2,595 |
| ckanhelmforgeVerified publisher | 1.3.8 | 1 of 6See more | 9,920 |
| druidhelmforgeVerified publisher | 1.3.6 | 1 of 4See more | 8,541 |
| drupalhelmforgeVerified publisher | 1.2.13 | 1 of 2See more | 3,802 |
| ghosthelmforgeVerified publisher | 1.2.6 | 1 of 3See more | 2,463 |
| immichhelmforgeVerified publisher | 1.2.8 | 2 of 5See more | 11,042 |
| jupyterhubhelmforgeVerified publisher | 1.0.6 | 1 of 3See more | 5,341 |
| medikeephelmforgeVerified publisher | 2.0.0 | 1 of 3See more | 6,022 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 1 of 4See more | 9,653 |
| moodlehelmforgeVerified publisher | 1.1.0 | 1 of 2See more | 6,103 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 1 of 4See more | 3,025 |
| ryothelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 6,012 |
| supersethelmforgeVerified publisher | 1.3.6 | 1 of 5See more | 5,714 |
| text-embeddings-inferencehelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 2,541 |
| uptime-kumahelmforgeVerified publisher | 1.5.12 | 1 of 1See more | 30,099 |
| myapphelmingapp | 0.1.0 | 1 of 1See more | 12,607 |
| openaevhelm-openbasVerified publisher | 2.0.5 | 2 of 7See more | 7,437 |
| openbashelm-openbasVerified publisher | 1.8.14 | 3 of 7See more | 25,017 |
Container images carrying it
851 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| esphome/ | 9ab8cc88b28c | zlib | no fix listed | 1 |
| esphome/ | b2c6322700ac | zlib | no fix listed | 1 |
| esphome/ | def8b6e4f517 | zlib | no fix listed | 1 |
| ethersphere/ | a884fd84b72f | zlib | no fix listed | 1 |
| ethersphere/ | e4cda693ed63 | zlib | no fix listed | 1 |
| ethpandaops/ | c7e5055defcb | zlib | no fix listed | 1 |
| falcosecurity/ | 932956d86c99 | zlib | no fix listed | 1 |
| falcosecurity/ | 7df783d5269a | zlib | no fix listed | 1 |
| federid/ | fbfb7c6510a7 | zlib | no fix listed | 1 |
| felipecs8/ | 29e06c9c6385 | zlib | no fix listed | 1 |
| firefart/ | 0d6249906d8c | zlib | no fix listed | 1 |
| fiware/ | d551a13e8278 | zlib | no fix listed | 1 |
| flanksource/ | 764c84e550db | zlib | no fix listed | 1 |
| flanksource/ | 891f21df54fb | zlib | no fix listed | 1 |
| fluent/ | ca08b7d2df5b | zlib | no fix listed | 1 |
| fluent/ | e76397ef3983 | zlib | no fix listed | 1 |
| fosrl/ | 83a55f933b4d | zlib | no fix listed | 1 |
| freedom98/ | d7ce1533f297 | zlib | no fix listed | 1 |
| galaxy/ | 0267bad550e6 | zlib | 1:1.2.8.dfsg-1ubuntu1.1+esm3 | 1 |
| galaxy/ | 8e577a626dfd | zlib | 1:1.2.8.dfsg-1ubuntu1.1+esm3 | 1 |
| galaxy/ | e50a890e24c9 | zlib | no fix listed | 1 |
| geopython/ | 84662ea6b78b | zlib | no fix listed | 1 |
| getsentry/ | ba7bf9163219 | zlib | no fix listed | 1 |
| ghostfolio/ | e3c6ab53e49b | zlib | no fix listed | 1 |
| golenski/ | c863dcb0c513 | zlib | no fix listed | 1 |
| golenski/ | 3a2b36df247b | zlib | no fix listed | 1 |
| golenski/ | 954caf4aaf6a | zlib | no fix listed | 1 |
| grafana/ | 36d07f8d276e | zlib | no fix listed | 1 |
| grafana/ | 8a3882e8c28b | zlib | no fix listed | 1 |
| grafana/ | 42f541f22063 | zlib | no fix listed | 1 |
| grafana/ | cfcf06863c23 | zlib | no fix listed | 1 |
| graphprotocol/ | b0436347fb24 | zlib | no fix listed | 1 |
| graphprotocol/ | f4452cdedd68 | zlib | no fix listed | 1 |
| greenkube/ | 0c01932282a4 | zlib | no fix listed | 1 |
| guillh/ | 4fb99dbc32b2 | zlib | no fix listed | 1 |
| gulacedia/ | 67b467d961ca | zlib | no fix listed | 1 |
| hamidyousefi93/ | c34f071f6ed0 | zlib | no fix listed | 1 |
| hamzaarshad10/ | 2c1c3b86a8e7 | zlib | no fix listed | 1 |
| hamzaarshad10/ | 154f38e8668e | zlib | no fix listed | 1 |
| hansehe/ | bc8e45262bc4 | zlib | no fix listed | 1 |
| haohanyang/ | 54f2112602ee | zlib | no fix listed | 1 |
| haohanyang/ | f4f8fe4e21f1 | zlib | no fix listed | 1 |
| hassroutyyoussef/ | 1f01edf1ee0c | zlib | no fix listed | 1 |
| hassroutyyoussef/ | 2fc3d1617928 | zlib | no fix listed | 1 |
| hassroutyyoussef/ | e0392e2b4a90 | zlib | no fix listed | 1 |
| hazegoodlife/ | 50f02d2d5d4d | zlib | no fix listed | 1 |
| hazegoodlife/ | 8d4c63169e14 | zlib | no fix listed | 1 |
| hecrom/ | bb0372939c19 | zlib | no fix listed | 1 |
| helicone/ | 4a913936c97b | zlib | no fix listed | 1 |
| hiboxsystems/ | dcffb926e563 | zlib | no fix listed | 1 |