StackRadarChart IndexLive demo

CVE-2023-46233

Critical

Advisory

Published 25 Oct 2023In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 24; of 17,781 indexed, latest versions
Container images: 22; deployed by those charts
Fix available: 1 of 1; affected package

crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 22 images.

Affected package	Affected versions	Fixed in	Images
crypto-jsnpm	3.1.4, 3.1.6, 3.1.9-1, 3.3.0+2 more	4.2.0	22

OSV records: GHSA-xwcq-pm8m-c4vf

Charts affected

24 by stars

Chart

Latest

Affected images

Radar Score

outlineoutline

1 of 4 See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	crypto-js@4.1.1	4.2.0

Open the chart page →

4,431

microcksmicrocks

0.8.0-helm-3.kube-1.17

1 of 5 See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	crypto-js@3.1.6	4.2.0

Open the chart page →

10,732

n8none-acre-fund

1 of 3 See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
n8nio/n8n :0.212.0	a9195bc499a3	crypto-js@4.1.1	4.2.0

Open the chart page →

7,776

soarv113assist-iot-cybersecurity-monitoring-soar

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-kbn :latest	0570b27bb7c2	crypto-js@3.3.0	4.2.0

Open the chart page →

17,896

siemassist-iot-cybersecurity-monitroting-siem

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-kbn :latest	2297b4350211	crypto-js@3.3.0	4.2.0

Open the chart page →

10,730

magic-mirrorgeek-cookbook

1 of 1 See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	crypto-js@3.3.0	4.2.0

Open the chart page →

4,405

elasticinseefrlab

1 of 2 See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
library/kibana :7.17.3	e2e2031c15be	crypto-js@4.0.0	4.2.0

Open the chart page →

17,284

kibanaromanow-helm-charts

1 of 1 See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
library/kibana :7.17.8	c5781ba340ef	crypto-js@4.0.0	4.2.0

Open the chart page →

6,879

mx-apibicarus-labs

1 of 4 See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	crypto-js@4.1.1	4.2.0

Open the chart page →

4,455

ethereumcloudnativeapp

1 of 3 See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	crypto-js@3.1.4	4.2.0

Open the chart page →

27,417

conduction-uiconduction-ui

1 of 6 See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
conduction/conduction-ui-app :dev	d591f5e6f2a9	crypto-js@4.0.0	4.2.0

Open the chart page →

12,907

quickchartcowboysysop

1 of 1 See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
ianw/quickchart :v1.7.1	dc49dd460c37	crypto-js@3.3.0	4.2.0

Open the chart page →

5,488

wazuhcsic-charts

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
wazuh/wazuh-dashboard :4.4.1	1787550d2358	crypto-js@4.1.1	4.2.0

Open the chart page →

13,852

rtlgaloymoney

1 of 2 See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
shahanafarooqui/rtl :0.13.3	e2195188a451	crypto-js@4.1.1	4.2.0

Open the chart page →

2,090

rtlgaloymoney2

1 of 2 See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
shahanafarooqui/rtl :0.13.3	e2195188a451	crypto-js@4.1.1	4.2.0

Open the chart page →

2,090

dtlinfradao

1 of 1 See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
ethereumoptimism/data-transport-layer :0.5.56	e07968a0e686	crypto-js@3.3.0	4.2.0

Open the chart page →

4,944

yapijoelee2012

1 of 1 See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
jayfong/yapi :1.10.2	163e5d621910	crypto-js@3.1.9-1	4.2.0

Open the chart page →

6,454

tooljetkrzwiatrzyk

1 of 2 See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
tooljet/tooljet-ce :v1.18.0	c85a4720e42e	crypto-js@4.1.1	4.2.0

Open the chart page →

5,410

dashynas-helm-charts

1 of 1 See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
lissy93/dashy :2.0.5	1991f7be5ed0	crypto-js@4.1.1	4.2.0

Open the chart page →

3,269

powerdnspuckpuck

1 of 4 See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	crypto-js@4.1.1	4.2.0

Open the chart page →

4,616

unifi-protectschichtel

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	crypto-js@4.0.0	4.2.0

Open the chart page →

5,582

outlineschmitzis

1 of 4 See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.69.1	d060dcd8f9aa	crypto-js@4.1.1	4.2.0

Open the chart page →

4,431

fdi-dotstatsuite-dlmstatcan

1 of 1 See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
siscc/dotstatsuite-data-lifecycle-manager :v14.0.0	b6f9a7c888fc	crypto-js@4.1.1	4.2.0

Open the chart page →

3,881

trudesktechpreta

1 of 3 See more

trudesk techpreta 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-46233.

Container image	Digest	Package	Fixed in
polonel/trudesk :1.2.6	0cf6513f6fe3	crypto-js@4.1.1	4.2.0

Open the chart page →

4,017

Container images carrying it

22 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
outlinewiki/outline :0.69.1	d060dcd8f9aa	crypto-js@4.1.1	4.2.0	2
shahanafarooqui/rtl :0.13.3	e2195188a451	crypto-js@4.1.1	4.2.0	2
assistiot/cybersecurity-monitoring_id-kbn :latest	2297b4350211	crypto-js@3.3.0	4.2.0	1
assistiot/cybersecurity-monitoring_ir-kbn :latest	0570b27bb7c2	crypto-js@3.3.0	4.2.0	1
bastilimbach/docker-magicmirror :v2.15.0	41b0835ab31e	crypto-js@3.3.0	4.2.0	1
bicarus/mx-api-service :1.0.2-hf1	dab88659ae3b	crypto-js@4.1.1	4.2.0	1
conduction/conduction-ui-app :dev	d591f5e6f2a9	crypto-js@4.0.0	4.2.0	1
ethereumex/eth-stats-dashboard :v0.0.1	a7603aa8df4c	crypto-js@3.1.4	4.2.0	1
ethereumoptimism/data-transport-layer :0.5.56	e07968a0e686	crypto-js@3.3.0	4.2.0	1
ianw/quickchart :v1.7.1	dc49dd460c37	crypto-js@3.3.0	4.2.0	1
jayfong/yapi :1.10.2	163e5d621910	crypto-js@3.1.9-1	4.2.0	1
library/kibana :7.17.8	c5781ba340ef	crypto-js@4.0.0	4.2.0	1
library/kibana :7.17.3	e2e2031c15be	crypto-js@4.0.0	4.2.0	1
lissy93/dashy :2.0.5	1991f7be5ed0	crypto-js@4.1.1	4.2.0	1
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	crypto-js@4.0.0	4.2.0	1
microcks/microcks-postman-runtime :latest	cb72e46a1b3c	crypto-js@3.1.6	4.2.0	1
n8nio/n8n :0.212.0	a9195bc499a3	crypto-js@4.1.1	4.2.0	1
polonel/trudesk :1.2.6	0cf6513f6fe3	crypto-js@4.1.1	4.2.0	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	crypto-js@4.1.1	4.2.0	1
siscc/dotstatsuite-data-lifecycle-manager :v14.0.0	b6f9a7c888fc	crypto-js@4.1.1	4.2.0	1
tooljet/tooljet-ce :v1.18.0	c85a4720e42e	crypto-js@4.1.1	4.2.0	1
wazuh/wazuh-dashboard :4.4.1	1787550d2358	crypto-js@4.1.1	4.2.0	1