StackRadar

CVE-2023-46129

High

Advisory

Published 31 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
24
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
2 of 2
affected packages

xkeys seal encryption used fixed key for all encryption

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
github.com/nats-io/nkeysgolangv0.4.4, v0.4.50.4.617
github.com/nats-io/nats-server/v2golangv2.10.0, v2.10.32.10.43
OSV records
GHSA-mr45-rx8q-wcm9
Also known as
BIT-nats-2023-46129, GO-2023-2163

Charts affected

24 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.12 of 35See more

openebs openebs 4.6.1

2 of the 35 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
library/nats:2.9.17-alpine1a7b320b2942
github.com/nats-io/nkeys@v0.4.4
0.4.6
natsio/prometheus-nats-exporter:0.11.031c02aac089a
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

23,894
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

32,259
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/nats-io/nkeys@v0.4.5
0.4.6

Open the chart page →

11,933
nginx-service-meshnginxVerified publisher2.0.01 of 9See more

nginx-service-mesh nginx 2.0.0

1 of the 9 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
library/nats:2.9-alpined402af4147fc
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

1,166
featurehubfeaturehub4.1.61 of 7See more

featurehub featurehub 4.1.6

1 of the 7 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.10.0
github.com/nats-io/nkeys@v0.4.4
2.10.4
0.4.6

Open the chart page →

8,240
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

10,090
stable-hacalltelemetry0.11.41 of 7See more

stable-ha calltelemetry 0.11.4

1 of the 7 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.2e808e0644ce1
github.com/nats-io/nats-server/v2@v2.10.0
github.com/nats-io/nkeys@v0.4.5
2.10.4
0.4.6

Open the chart page →

4,705
stigatroncarbide-charts0.4.11 of 10See more

stigatron carbide-charts 0.4.1

1 of the 10 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.10.0
github.com/nats-io/nkeys@v0.4.4
2.10.4
0.4.6

Open the chart page →

4,423
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

5,039
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

5,039
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.5ced93c701875
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

6,678
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

23,685
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

5,684
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.10.0
github.com/nats-io/nkeys@v0.4.4
2.10.4
0.4.6

Open the chart page →

1,970
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.31cc420186664
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

24,400
mayastormayastorVerified publisher2.12.12 of 31See more

mayastor mayastor 2.12.1

2 of the 31 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
library/nats:2.9.17-alpine1a7b320b2942
github.com/nats-io/nkeys@v0.4.4
0.4.6
natsio/prometheus-nats-exporter:0.11.031c02aac089a
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

21,064
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.01 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

1 of the 7 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.10.0
github.com/nats-io/nkeys@v0.4.4
2.10.4
0.4.6

Open the chart page →

4,988
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

5,039
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

4,203
serviceexampleserviceexample0.1.01 of 5See more

serviceexample serviceexample 0.1.0

1 of the 5 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
library/nats:2.9.20-alpined6c6ae7df4a0
github.com/nats-io/nkeys@v0.4.4
0.4.6

Open the chart page →

5,449
mimirskyloud-helm-chartsVerified publisher5.5.11 of 5See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/nats-io/nkeys@v0.4.5
0.4.6

Open the chart page →

10,651
synadia-serversynadiaVerified publisher1.1.101 of 2See more

synadia-server synadia 1.1.10

1 of the 2 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.10.0
github.com/nats-io/nkeys@v0.4.4
2.10.4
0.4.6

Open the chart page →

1,970
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.13.02adf791d9f9f
github.com/nats-io/nats-server/v2@v2.10.3
github.com/nats-io/nkeys@v0.4.5
2.10.4
0.4.6

Open the chart page →

17,323
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-46129.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/nats-io/nkeys@v0.4.5
0.4.6
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/nats-io/nkeys@v0.4.5
0.4.6

Open the chart page →

3,880

Container images carrying it

17 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
natsio/nats-box:0.14.1a67913df95f1
github.com/nats-io/nats-server/v2@v2.10.0
github.com/nats-io/nkeys@v0.4.4
2.10.4
0.4.6
5
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/nats-io/nkeys@v0.4.4
0.4.6
3
library/nats:2.9.17-alpine1a7b320b2942
github.com/nats-io/nkeys@v0.4.4
0.4.6
2
natsio/prometheus-nats-exporter:0.11.031c02aac089a
github.com/nats-io/nkeys@v0.4.4
0.4.6
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/nats-io/nkeys@v0.4.5
0.4.6
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/nats-io/nkeys@v0.4.4
0.4.6
2
library/nats:2.9-alpined402af4147fc
github.com/nats-io/nkeys@v0.4.4
0.4.6
1
library/nats:2.9.20-alpined6c6ae7df4a0
github.com/nats-io/nkeys@v0.4.4
0.4.6
1
library/nats-streaming:0.25.5ced93c701875
github.com/nats-io/nkeys@v0.4.4
0.4.6
1
library/telegraf:1.27507a3eecf809
github.com/nats-io/nkeys@v0.4.4
0.4.6
1
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/nats-io/nkeys@v0.4.5
0.4.6
1
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/nats-io/nkeys@v0.4.5
0.4.6
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
github.com/nats-io/nkeys@v0.4.4
0.4.6
1
natsio/nats-box:0.14.31cc420186664
github.com/nats-io/nkeys@v0.4.4
0.4.6
1
natsio/nats-box:0.14.2e808e0644ce1
github.com/nats-io/nats-server/v2@v2.10.0
github.com/nats-io/nkeys@v0.4.5
2.10.4
0.4.6
1
natsio/prometheus-nats-exporter:0.13.02adf791d9f9f
github.com/nats-io/nats-server/v2@v2.10.3
github.com/nats-io/nkeys@v0.4.5
2.10.4
0.4.6
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/nats-io/nkeys@v0.4.4
0.4.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.