StackRadar

CVE-2023-46218

Medium

Advisory

Published 6 Dec 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
904
of 17,787 indexed, latest versions
Container images
826
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: curl security update

Carried by container images the latest versions of 904 of 17,787 indexed charts deploy, on 826 images.

Affected packageAffected versionsFixed inImages
curldeb7.47.0-1ubuntu2.2, 7.47.0-1ubuntu2.5, 7.47.0-1ubuntu2.6, 7.47.0-1ubuntu2.7+61 more7.47.0-1ubuntu2.19+esm11, 7.58.0-2ubuntu3.24+esm3, 7.68.0-1ubuntu2.21, 7.74.0-1.3+deb11u11+2 more588
curlapk7.80.0-r0, 7.80.0-r1, 7.80.0-r2, 7.80.0-r3+24 more8.5.0-r0215
curlrpm7.76.1-19.el9, 7.76.1-23.el9_2.1, 7.76.1-23.el9_2.2, 7.76.1-23.el9_2.4+1 more0:7.76.1-23.el9_2.6, 0:7.76.1-26.el9_3.323
OSV records
ALPINE-CVE-2023-46218DEBIAN-CVE-2023-46218RHSA-2024:0452RHSA-2024:1129UBUNTU-CVE-2023-46218DSA-5587-1
Also known as
USN-6535-1, USN-6641-1

Charts affected

904 by stars
ChartLatestAffected imagesRadar Score
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-46218.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u11

Open the chart page →

2,021
workadventureworkadventure1.1.02 of 9See more

workadventure workadventure 1.1.0

2 of the 9 container images this version deploys carry CVE-2023-46218.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-chat:v1.17.7da12f37e6795
curl@7.80.0-r1
8.5.0-r0
thecodingmachine/workadventure-ejabberd:v1.17.701df99622ad3
curl@7.80.0-r5
8.5.0-r0

Open the chart page →

16,083
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-46218.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
curl@8.1.2-r0
8.5.0-r0

Open the chart page →

5,033
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2023-46218.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
curl@7.74.0-1.3+deb11u7
7.74.0-1.3+deb11u11

Open the chart page →

1,838

Container images carrying it

826 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
curl@7.74.0-1.3+deb11u3
7.74.0-1.3+deb11u11
1
factly/mande-studio:0.34.19db4bee30e63
curl@8.2.1-r0
8.5.0-r0
1
fanzynoodle/smeejas:0.0.15f9916c1a287
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u11
1
farberg/apache-knox-docker:1.6.14b4a22487394
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u11
1
fedodo/fedodo.ui.home:3c69413c4d690
curl@8.1.2-r0
8.5.0-r0
1
fedodo/fedodo.ui.micro:12b2b540081c21
curl@8.1.2-r0
8.5.0-r0
1
felipecs8/qrcode-generator:v1d5f4f17cb066
curl@7.87.0-r1
8.5.0-r0
1
firefart/requesttracker:5.0.40d6249906d8c
curl@7.88.1-10+deb12u4
7.88.1-10+deb12u5
1
firefart/requesttracker:nginx-nightly-202307101028236b42a0
curl@8.1.2-r0
8.5.0-r0
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
curl@7.83.1-r3
8.5.0-r0
1
flomesh/pipy-repo:0.90.3-3874975c50e3d9
curl@8.3.0-r0
8.5.0-r0
1
flyway/flyway:9.1545b5d7cdc75a
curl@7.68.0-1ubuntu2.16
7.68.0-1ubuntu2.21
1
folioci/mod-aes:latest6d67e9564270
curl@7.83.1-r2
8.5.0-r0
1
folioci/mod-codex-ekb:latest235a3fa4adc9
curl@7.83.1-r3
8.5.0-r0
1
folioci/mod-codex-inventory:latest6d53ed758fd1
curl@7.83.1-r3
8.5.0-r0
1
folioci/mod-codex-mux:latestd4138abfd30d
curl@7.83.1-r3
8.5.0-r0
1
folioci/mod-data-import-converter-storage:latest3028f333778f
curl@7.87.0-r0
8.5.0-r0
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm3
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm3
1
free5gmano/nextepc-mongodb:latest36f806935519
curl@7.47.0-1ubuntu2.11
7.47.0-1ubuntu2.19+esm11
1
galaxy/cloudman-server:lateste5c265fe9fcd
curl@7.68.0-1ubuntu2.13
7.68.0-1ubuntu2.21
1
gcarrarom/landing:0.0.0769d19e441d9
curl@7.83.1-r3
8.5.0-r0
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm3
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.21
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.21
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.21
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.21
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.21
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
curl@7.68.0-1ubuntu2.7
7.68.0-1ubuntu2.21
1
gethue/hue:4.11.011b649636e68
curl@7.68.0-1ubuntu2.15
7.68.0-1ubuntu2.21
1
gethue/hue:4.10.05702b2c37ff9
curl@7.58.0-2ubuntu3.13
7.58.0-2ubuntu3.24+esm3
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
curl@7.68.0-1ubuntu2.12
7.68.0-1ubuntu2.21
1
glenndehaan/sunflare-tools:latesta5b3f1dd865d
curl@8.2.1-r0
8.5.0-r0
1
gotify/server:2.1.409c79bc1e403
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u11
1
gotson/komga:0.99.49b15ea6bfc30
curl@7.58.0-2ubuntu3.10
7.58.0-2ubuntu3.24+esm3
1
gradiant/hdfs:3.2.2e3bf364fe713
curl@7.74.0-1.3+b1
7.74.0-1.3+deb11u11
1
grafana/grafana:10.1.50679e877ba20
curl@8.4.0-r0
8.5.0-r0
1
grafana/grafana:10.1.11b9ca4bbc4a2
curl@8.2.1-r0
8.5.0-r0
1
grafana/grafana:9.5.239c849cebccc
curl@8.0.1-r0
8.5.0-r0
1
gresearchdev/siembol-config-editor-ui:latest071e7109a981
curl@7.83.1-r4
8.5.0-r0
1
groundnuty/k8s-wait-for:v1.684edcf796267
curl@7.80.0-r1
8.5.0-r0
1
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
curl@7.83.1-r4
8.5.0-r0
1
gulacedia/web-dvwa-new:v367b467d961ca
curl@7.88.1-10
7.88.1-10+deb12u5
1
ha33ona/python:test6affdfc644d0
curl@7.74.0-1.3+deb11u1
7.74.0-1.3+deb11u11
1
hashicorp/consul:1.17.0712fe02d2f84
curl@8.4.0-r0
8.5.0-r0
1
hashicorp/consul:1.15.3ddff34041c5c
curl@8.1.2-r0
8.5.0-r0
1
hashicorp/terraform:1.44dcb45513699
curl@8.2.1-r0
8.5.0-r0
1
hashicorp/waypoint:0.11.397d521a27498
curl@8.1.2-r0
8.5.0-r0
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
curl@7.81.0-1ubuntu1.10
7.81.0-1ubuntu1.15
1
haugene/transmission-openvpn:4.0059216cfae4b
curl@7.68.0-1ubuntu2.6
7.68.0-1ubuntu2.21
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.