StackRadar

CVE-2023-45853

Critical

Advisory

Published 14 Oct 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
785
of 17,787 indexed, latest versions
Container images
855
deployed by those charts
Fix available
2 of 3
affected packages

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

Carried by container images the latest versions of 785 of 17,787 indexed charts deploy, on 855 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.13.dfsg-1, 1:1.3.dfsg+really1.3.1-1+b11:1.2.8.dfsg-1ubuntu1.1+esm3852
pyminizippypi0.2.6no fix listed2
minizipdeb1.1-8+b11.1-8+deb10u12
OSV records
DEBIAN-CVE-2023-45853GHSA-mq29-j5xf-cjwrUBUNTU-CVE-2023-45853DLA-3670-1
Also known as
PYSEC-2026-501, USN-7107-1

Charts affected

785 by stars
ChartLatestAffected imagesRadar Score
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,112
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

25,202
joplintobiassackmann0.1.72 of 2See more

joplin tobiassackmann 0.1.7

2 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
joplin/server:latest3f7b852959aa
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,489
saleor-appstrieb-work0.6.01 of 5See more

saleor-apps trieb-work 0.6.0

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,940
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

17,348
altinnendata-apptumogroup0.1.171 of 1See more

altinnendata-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,755
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,230
nstuning-apptumogroup0.1.181 of 1See more

nstuning-app tumogroup 0.1.18

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.113a6795bf36da
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,755
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
zlib@1:1.2.13.dfsg-1
no fix listed
hassroutyyoussef/orderservice:latest2fc3d1617928
zlib@1:1.2.13.dfsg-1
no fix listed
hassroutyyoussef/userservice:lateste0392e2b4a90
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,191
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,370
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,234
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

45,392
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,383
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
zlib@1:1.2.13.dfsg-1
no fix listed
vcnngr/telegram-rebot:latest30f1f05e57a6
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,830
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,394
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,801
api-gatewaywallarmVerified publisher0.2.01 of 1See more

api-gateway wallarm 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
wallarm/api-gateway:0.2.0a3d4d2f780e8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,300
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,774
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,540
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,858
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,538
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,096
apisix-ingress-controllerwenerme1.3.11 of 2See more

apisix-ingress-controller wenerme 1.3.1

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/api7/adc:0.27.1f65f53dd9668
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,634
giteawenerme12.7.03 of 4See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,842
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,824
mesherywenerme1.0.701 of 1See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,356
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.7.45f2a56b95266
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,618
keycloakwiremindVerified publisher25.3.12 of 2See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,643
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,548
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,383
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,063
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

11,592
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,685
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
zlib@1:1.2.13.dfsg-1
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
zlib@1:1.2.13.dfsg-1
no fix listed
murtazashah46/helmfile:latest4d11726cf803
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

13,197
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,674

Container images carrying it

855 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
hiversh/antigravity:0.1.45-microvm0e36d98402bc
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiversh/browser:0.1.45-microvmb5048c6342ce
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiversh/claude:0.1.45-microvm2fbf9f264498
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiversh/codex:0.1.45-microvm4f43130f51e5
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiversh/controller:0.1.45b0b85f8942c7
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiversh/copilot:0.1.45-microvm50c07b84f298
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiversh/node:0.1.45-alpine-microvm836a37641941
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
zlib@1:1.2.13.dfsg-1
no fix listed
1
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
zlib@1:1.2.13.dfsg-1
no fix listed
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
zlib@1:1.2.13.dfsg-1
no fix listed
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
zlib@1:1.2.13.dfsg-1
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
zlib@1:1.2.13.dfsg-1
no fix listed
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
zlib@1:1.2.13.dfsg-1
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
zlib@1:1.2.13.dfsg-1
no fix listed
1
istio/examples-helloworld-v1:latest328b237e4fb1
zlib@1:1.2.13.dfsg-1
no fix listed
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
zlib@1:1.2.13.dfsg-1
no fix listed
1
jaedb/iris:latest048cfbf58d57
zlib@1:1.2.13.dfsg-1
no fix listed
1
janzo83/serviceexample:latestfb3c4ac36f3e
zlib@1:1.2.13.dfsg-1
no fix listed
1
jbtronics/part-db1:latest5db71f6db59d
zlib@1:1.2.13.dfsg-1
no fix listed
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
zlib@1:1.2.13.dfsg-1
no fix listed
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
zlib@1:1.2.13.dfsg-1
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
zlib@1:1.2.13.dfsg-1
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
zlib@1:1.2.13.dfsg-1
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
zlib@1:1.2.13.dfsg-1
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
zlib@1:1.2.13.dfsg-1
no fix listed
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
zlib@1:1.2.13.dfsg-1
no fix listed
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
zlib@1:1.2.13.dfsg-1
no fix listed
1
johly/airtrail:v3.11.19f702b91e0e7
zlib@1:1.2.13.dfsg-1
no fix listed
1
joplin/server:latest3f7b852959aa
zlib@1:1.2.13.dfsg-1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
zlib@1:1.2.13.dfsg-1
no fix listed
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
zlib@1:1.2.13.dfsg-1
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
zlib@1:1.2.13.dfsg-1
no fix listed
1
kimai/kimai2:2.67.03084f1e5ecdc
zlib@1:1.2.13.dfsg-1
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
zlib@1:1.2.13.dfsg-1
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
zlib@1:1.2.13.dfsg-1
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
zlib@1:1.2.13.dfsg-1
no fix listed
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
zlib@1:1.2.13.dfsg-1
no fix listed
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
zlib@1:1.2.13.dfsg-1
no fix listed
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
zlib@1:1.2.13.dfsg-1
no fix listed
1
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
zlib@1:1.2.13.dfsg-1
no fix listed
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
zlib@1:1.2.13.dfsg-1
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
zlib@1:1.2.13.dfsg-1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
zlib@1:1.2.13.dfsg-1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
zlib@1:1.2.13.dfsg-1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
zlib@1:1.2.13.dfsg-1
no fix listed
1
laly9999/node-app:1dd0e503913e1
zlib@1:1.2.13.dfsg-1
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
zlib@1:1.2.13.dfsg-1
no fix listed
1
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
zlib@1:1.2.13.dfsg-1
no fix listed
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
zlib@1:1.2.13.dfsg-1
no fix listed
1
langgenius/dify-api:1.0.0066035f93856
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.