StackRadar

CVE-2023-46234

High

Advisory

Published 26 Oct 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 17,781 indexed, latest versions
Container images
56
deployed by those charts
Fix available
1 of 1
affected package

browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 56 images.

Affected packageAffected versionsFixed inImages
browserify-signnpm4.0.4, 4.1.0, 4.2.14.2.256
OSV records
GHSA-x9w5-v3q2-3rhw

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v4.15.167ebc751c171
browserify-sign@4.2.1
4.2.2

Open the chart page →

9,203
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-director:2.5.1110228ecd353b
browserify-sign@4.2.1
4.2.2

Open the chart page →

4,285
microcksmicrocksOfficialVerified publisher0.8.0-helm-3.kube-1.171 of 5See more

microcks microcks 0.8.0-helm-3.kube-1.17

1 of the 5 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
microcks/microcks-postman-runtime:latestcb72e46a1b3c
browserify-sign@4.0.4
4.2.2

Open the chart page →

10,732
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
browserify-sign@4.2.1
4.2.2

Open the chart page →

5,251
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
browserify-sign@4.0.4
4.2.2

Open the chart page →

9,261
nightscoutgabe565Verified publisher0.13.01 of 2See more

nightscout gabe565 0.13.0

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
browserify-sign@4.2.1
4.2.2

Open the chart page →

2,521
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
browserify-sign@4.2.1
4.2.2

Open the chart page →

7,579
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
browserify-sign@4.0.4
4.2.2

Open the chart page →

6,868
data-fairdata354-helmVerified publisher1.1.22 of 12See more

data-fair data354-helm 1.1.2

2 of the 12 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ghcr.io/data-fair/metrics:0a8d40779eeae
browserify-sign@4.2.1
4.2.2
ghcr.io/data-fair/simple-directory:438a4f32fad82
browserify-sign@4.2.1
4.2.2

Open the chart page →

38,346
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
browserify-sign@4.2.1
4.2.2

Open the chart page →

5,056
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
browserify-sign@4.2.1
4.2.2

Open the chart page →

3,925
overseerrgeek-cookbookVerified publisher5.4.21 of 1See more

overseerr geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.26.1254d16af8f71
browserify-sign@4.2.1
4.2.2

Open the chart page →

3,444
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
browserify-sign@4.2.1
4.2.2

Open the chart page →

7,801
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
browserify-sign@4.2.1
4.2.2

Open the chart page →

5,940
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
browserify-sign@4.0.4
4.2.2

Open the chart page →

5,300
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
browserify-sign@4.0.4
4.2.2

Open the chart page →

7,517
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
browserify-sign@4.0.4
4.2.2

Open the chart page →

25,443
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
browserify-sign@4.2.1
4.2.2

Open the chart page →

3,237
angular-node-chartangular-webapp2.0.01 of 1See more

angular-node-chart angular-webapp 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
rakii8585/angular-node-webapp:latest026082a515ac
browserify-sign@4.0.4
4.2.2

Open the chart page →

2,616
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
browserify-sign@4.0.4
4.2.2

Open the chart page →

29,901
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
browserify-sign@4.0.4
4.2.2

Open the chart page →

25,456
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
browserify-sign@4.2.1
4.2.2

Open the chart page →

12,907
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
browserify-sign@4.0.4
4.2.2

Open the chart page →

11,174
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
browserify-sign@4.2.1
4.2.2

Open the chart page →

3,744
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
browserify-sign@4.0.4
4.2.2

Open the chart page →

3,005
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
browserify-sign@4.2.1
4.2.2

Open the chart page →

3,260
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
browserify-sign@4.0.4
4.2.2

Open the chart page →

5,941
rtlgaloymoney0.4.31 of 2See more

rtl galoymoney 0.4.3

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
browserify-sign@4.2.1
4.2.2

Open the chart page →

2,090
rtlgaloymoney20.4.31 of 2See more

rtl galoymoney2 0.4.3

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
shahanafarooqui/rtl:0.13.3e2195188a451
browserify-sign@4.2.1
4.2.2

Open the chart page →

2,090
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
browserify-sign@4.2.1
4.2.2

Open the chart page →

4,043
ibm-app-navigatoribm-charts1.0.11 of 5See more

ibm-app-navigator ibm-charts 1.0.1

1 of the 5 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ibmcom/app-nav-ui:1.0.1e2a86997b36b
browserify-sign@4.0.4
4.2.2

Open the chart page →

32,915
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
browserify-sign@4.2.1
4.2.2

Open the chart page →

4,944
yapijoelee2012Verified publisher0.2.01 of 1See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
jayfong/yapi:1.10.2163e5d621910
browserify-sign@4.2.1
4.2.2

Open the chart page →

6,454
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
browserify-sign@4.2.1
4.2.2

Open the chart page →

5,410
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
browserify-sign@4.0.4
4.2.2

Open the chart page →

7,929
squareonelsst-sqre0.4.11 of 1See more

squareone lsst-sqre 0.4.1

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
lsstsqre/squareone:0.4.09ded78e7fe03
browserify-sign@4.2.1
4.2.2

Open the chart page →

2,247
frontendluiscajl0.1.71 of 1See more

frontend luiscajl 0.1.7

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
lavandadelpatio/frontend:latest501c3f31e0bc
browserify-sign@4.1.0
4.2.2

Open the chart page →

3,651
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
browserify-sign@4.2.1
4.2.2

Open the chart page →

5,287
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
browserify-sign@4.2.1
4.2.2

Open the chart page →

5,940
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
browserify-sign@4.2.1
4.2.2

Open the chart page →

6,438
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
browserify-sign@4.0.4
4.2.2

Open the chart page →

6,684
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
browserify-sign@4.2.1
4.2.2

Open the chart page →

6,608
cloudcmdmy0nVerified publisher0.0.31 of 1See more

cloudcmd my0n 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
coderaiser/cloudcmd:16.6.1b34a9775c7ce
browserify-sign@4.2.1
4.2.2

Open the chart page →

3,128
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
browserify-sign@4.2.1
4.2.2

Open the chart page →

3,269
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
browserify-sign@4.2.1
4.2.2

Open the chart page →

27,465
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
browserify-sign@4.2.1
4.2.2

Open the chart page →

9,968
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
browserify-sign@4.0.4
4.2.2

Open the chart page →

6,524
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
browserify-sign@4.2.1
4.2.2

Open the chart page →

6,026
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
browserify-sign@4.1.0
4.2.2

Open the chart page →

5,215
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2023-46234.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
browserify-sign@4.2.1
4.2.2

Open the chart page →

7,413

Container images carrying it

56 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
agoldis/sorry-cypress-director:2.5.1110228ecd353b
browserify-sign@4.2.1
4.2.2
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
browserify-sign@4.2.1
4.2.2
2
gradiant/open5gs-webui:2.7.5fbd10c017541
browserify-sign@4.0.4
4.2.2
2
shahanafarooqui/rtl:0.13.3e2195188a451
browserify-sign@4.2.1
4.2.2
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
browserify-sign@4.2.1
4.2.2
2
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
browserify-sign@4.0.4
4.2.2
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
browserify-sign@4.0.4
4.2.2
1
arfath29/3-tier-app-frontend:latest384b3e377f47
browserify-sign@4.2.1
4.2.2
1
chatwoot/chatwoot:v4.15.167ebc751c171
browserify-sign@4.2.1
4.2.2
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
browserify-sign@4.2.1
4.2.2
1
conduction/conduction-ui-app:devd591f5e6f2a9
browserify-sign@4.2.1
4.2.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
browserify-sign@4.0.4
4.2.2
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
browserify-sign@4.2.1
4.2.2
1
ethersphere/bzz-token-service:latest7624f11a72ad
browserify-sign@4.2.1
4.2.2
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
browserify-sign@4.0.4
4.2.2
1
gristlabs/grist:0.7.96e71b1914a7e
browserify-sign@4.1.0
4.2.2
1
henrywhitaker3/speedtest-tracker:latest47159a940229
browserify-sign@4.2.1
4.2.2
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
browserify-sign@4.2.1
4.2.2
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
browserify-sign@4.2.1
4.2.2
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
browserify-sign@4.0.4
4.2.2
1
jayfong/yapi:1.10.2163e5d621910
browserify-sign@4.2.1
4.2.2
1
joplin/server:3.0-beta52af57880c0e
browserify-sign@4.2.1
4.2.2
1
joplin/server:2.14.2-betab87564ef34e9
browserify-sign@4.2.1
4.2.2
1
lavandadelpatio/frontend:latest501c3f31e0bc
browserify-sign@4.1.0
4.2.2
1
linuxserver/codimd:latestb801bbcf6386
browserify-sign@4.2.1
4.2.2
1
lissy93/dashy:2.0.51991f7be5ed0
browserify-sign@4.2.1
4.2.2
1
lsstsqre/squareone:0.4.09ded78e7fe03
browserify-sign@4.2.1
4.2.2
1
microcks/microcks-postman-runtime:latestcb72e46a1b3c
browserify-sign@4.0.4
4.2.2
1
misskey/misskey:12.110.1e08b7c478093
browserify-sign@4.2.1
4.2.2
1
mozilla/sentencecollector:2.0.91da6ff5c4895
browserify-sign@4.0.4
4.2.2
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
browserify-sign@4.2.1
4.2.2
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
browserify-sign@4.2.1
4.2.2
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
browserify-sign@4.2.1
4.2.2
1
ondrejsika/parking:latestb1fd497416c8
browserify-sign@4.0.4
4.2.2
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
browserify-sign@4.0.4
4.2.2
1
phntom/codimd:2.4.31b9aafbb62e6
browserify-sign@4.0.4
4.2.2
1
rakii8585/angular-node-webapp:latest026082a515ac
browserify-sign@4.0.4
4.2.2
1
samajh/alprfrontend:latest05ef4fddbb75
browserify-sign@4.2.1
4.2.2
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
browserify-sign@4.2.1
4.2.2
1
temporalio/web:1.14.033cfa863d8ce
browserify-sign@4.2.1
4.2.2
1
testhubio/testhub-frontend:on-preme86c2db53be8
browserify-sign@4.0.4
4.2.2
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
browserify-sign@4.2.1
4.2.2
1
ubercadence/web:v3.29.58564a5b44a6d
browserify-sign@4.2.1
4.2.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
browserify-sign@4.2.1
4.2.2
1
wekanteam/wekan:v4.2268a51f0327df
browserify-sign@4.0.4
4.2.2
1
ghcr.io/data-fair/metrics:0a8d40779eeae
browserify-sign@4.2.1
4.2.2
1
ghcr.io/data-fair/simple-directory:438a4f32fad82
browserify-sign@4.2.1
4.2.2
1
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
browserify-sign@4.2.1
4.2.2
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
browserify-sign@4.2.1
4.2.2
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
browserify-sign@4.2.1
4.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.