StackRadar

CVE-2023-45853

Critical

Advisory

Published 14 Oct 2023In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
785
of 17,787 indexed, latest versions
Container images
855
deployed by those charts
Fix available
2 of 3
affected packages

pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency

Carried by container images the latest versions of 785 of 17,787 indexed charts deploy, on 855 images.

Affected packageAffected versionsFixed inImages
zlibdeb1:1.2.8.dfsg-1ubuntu1, 1:1.2.8.dfsg-1ubuntu1.1, 1:1.2.13.dfsg-1, 1:1.3.dfsg+really1.3.1-1+b11:1.2.8.dfsg-1ubuntu1.1+esm3852
pyminizippypi0.2.6no fix listed2
minizipdeb1.1-8+b11.1-8+deb10u12
OSV records
DEBIAN-CVE-2023-45853GHSA-mq29-j5xf-cjwrUBUNTU-CVE-2023-45853DLA-3670-1
Also known as
PYSEC-2026-501, USN-7107-1

Charts affected

785 by stars
ChartLatestAffected imagesRadar Score
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,112
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

25,202
joplintobiassackmann0.1.72 of 2See more

joplin tobiassackmann 0.1.7

2 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
joplin/server:latest3f7b852959aa
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,489
saleor-appstrieb-work0.6.01 of 5See more

saleor-apps trieb-work 0.6.0

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,940
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

17,348
altinnendata-apptumogroup0.1.171 of 1See more

altinnendata-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,755
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,230
nstuning-apptumogroup0.1.181 of 1See more

nstuning-app tumogroup 0.1.18

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.113a6795bf36da
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,755
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
zlib@1:1.2.13.dfsg-1
no fix listed
hassroutyyoussef/orderservice:latest2fc3d1617928
zlib@1:1.2.13.dfsg-1
no fix listed
hassroutyyoussef/userservice:lateste0392e2b4a90
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,191
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,370
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,234
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
zlib@1:1.2.13.dfsg-1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

45,392
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,383
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
zlib@1:1.2.13.dfsg-1
no fix listed
vcnngr/telegram-rebot:latest30f1f05e57a6
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,830
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

4,394
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

10,801
api-gatewaywallarmVerified publisher0.2.01 of 1See more

api-gateway wallarm 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
wallarm/api-gateway:0.2.0a3d4d2f780e8
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,300
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,774
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

6,540
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,858
welcome-elos-webappwelcome-elos-webappVerified publisher2.0.01 of 1See more

welcome-elos-webapp welcome-elos-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
pococze/python-hello-elos:2.0.07a1aab425e51
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,538
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

3,096
apisix-ingress-controllerwenerme1.3.11 of 2See more

apisix-ingress-controller wenerme 1.3.1

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/api7/adc:0.27.1f65f53dd9668
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,634
giteawenerme12.7.03 of 4See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
zlib@1:1.2.13.dfsg-1
no fix listed
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,842
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

8,824
mesherywenerme1.0.701 of 1See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

1,356
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.7.45f2a56b95266
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

14,618
keycloakwiremindVerified publisher25.3.12 of 2See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
zlib@1:1.2.13.dfsg-1
no fix listed
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,643
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

5,548
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,383
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,063
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

11,592
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

7,685
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
zlib@1:1.2.13.dfsg-1
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
zlib@1:1.2.13.dfsg-1
no fix listed
murtazashah46/helmfile:latest4d11726cf803
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

13,197
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45853.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
zlib@1:1.2.13.dfsg-1
no fix listed

Open the chart page →

2,674

Container images carrying it

855 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
langgenius/dify-api:1.16.1dcefa5f7c47c
zlib@1:1.2.13.dfsg-1
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
zlib@1:1.2.13.dfsg-1
no fix listed
1
lib42/jackett:latesta55596cda383
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/cassandra:4.0093ee8ee5eb2
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/couchdb:3.4.22817ad50b5c5
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/debian:12.5-slim67f3931ad8cb
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/debian:bookworm6ebd97fa83de
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/debian:12.12-slimd5d3f9c23164
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/ghost:6.37.01ef2e532ca4d
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/ghost:6.25.12654b1e90413
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/ghost:6.41.129773d6be407
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/ghost:5.79.083f7bf209844
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/ghost:6.62.0a7a268bbfb7f
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/haproxy:3.1-bookworm49a0a0d6f0b8
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/haproxy:2.9.6fc5748ff7c72
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/httpd:2.4.631ae8051591a5
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/influxdb:2.8571eb4514977
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/influxdb:1.12.3-meta8812029260b5
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/influxdb:1.12.3-datab0f9fc41ed79
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/influxdb:latestf75e48af0598
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/mysql:8.0-debian9382e4f6f7f0
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/nginx:1.27.409369da6b103
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/nginx:1.276784fb0834aa
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/nginx:1.25.49ff236ed47fe
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/node:22-bookworm-slim83f487e0a634
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/node:208f693eaa7e0a
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/postgres:17.4304ab8135187
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/postgres:16.6557fea37a744
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/postgres:15.38775adb39f0d
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/postgres:13.12ced3ba927f4c
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/postgres:15.18-bookworme8db9bd3e9e1
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/postgres:17.5-bookwormfbcea1bd13b6
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/python:3.8d41127070014
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.4.03906b477e4b6
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.2.24521b581dbdd
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.2.15fa2edb1e408
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis83edc2b8e9ff
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:7.4.9a8f08480e1f8
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.0.2b43d2dcbbdb1
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:7.4.1bb142a9c18ac
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.0.3be0a135f1955
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/redis:8.2.3d31852005202
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/telegraf:1.27507a3eecf809
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/varnish:7.5.04d0bb287d87b
zlib@1:1.2.13.dfsg-1
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
zlib@1:1.2.13.dfsg-1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.