StackRadar

CVE-2023-4641

Medium

Advisory

Published 10 Oct 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,077
of 17,787 indexed, latest versions
Container images
1,121
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: shadow-utils security and bug fix update

Carried by container images the latest versions of 1,077 of 17,787 indexed charts deploy, on 1,121 images.

Affected packageAffected versionsFixed inImages
shadowdeb1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+14 more1:4.1.5.1-1ubuntu9.5+esm4, 1:4.2-3.1ubuntu5.5+esm4, 1:4.5-1ubuntu2.5+esm1, 1:4.8.1-1ubuntu5.20.04.5+2 more999
shadow-utilsrpm2:4.6-8.el8, 2:4.6-11.el8, 2:4.6-12.el8, 2:4.6-14.el8+6 more2:4.6-19.el8, 2:4.9-8.el9112
shadowrpm4.6-3.5.6, 4.6-lp151.2.3.24.6-150100.3.11.1, 4.19.2-2.110
OSV records
DEBIAN-CVE-2023-4641RHSA-2023:6632RHSA-2023:7112UBUNTU-CVE-2023-4641openSUSE-SU-2026:10081-1SUSE-SU-2023:4025-1
Also known as
RHSA-2024:0417, RHSA-2024:2577, USN-6640-1

Charts affected

1,077 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

6,597
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

11,372
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1

Open the chart page →

5,557
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
jpgouin/openldap:2.6.9-fixbfdd0088c776
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

5,948
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

9,194
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
milvusdb/milvus:v2.2.13a3a55e1c1497
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
shadow-utils@2:4.6-17.el8
2:4.6-19.el8

Open the chart page →

32,353
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

10,648
signozsignoz0.141.11 of 5See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

7,582
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

2,660
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

4,808
difydoubanVerified publisher0.10.02 of 6See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

19,497
vertical-pod-autoscalercowboysysopVerified publisher11.1.11 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

6,949
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
shadow@1:4.2-3.1ubuntu5.4
1:4.2-3.1ubuntu5.5+esm4
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
shadow@1:4.2-3.1ubuntu5.4
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

23,992
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

4,159
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

19,998
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

11,402
zabbixcetic3.1.34 of 5See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

33,907
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,700
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

6,550
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

12,830
litellm-helmlitellm1.101.01 of 2See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

4,574
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

15,607
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

7,917
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
shadow-utils@2:4.6-12.el8
2:4.6-19.el8

Open the chart page →

6,853
glasskube-operatorglasskubeOfficialVerified publisher0.12.23 of 3See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
shadow-utils@2:4.6-17.el8
2:4.6-19.el8

Open the chart page →

11,971
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

5,364
prefect-serverprefectVerified publisher2026.9.141419101 of 2See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

5,448
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

18,570
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

14,615
stackstorm-hastackstormVerified publisher1.1.012 of 17See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2api:3.86f56d239d280
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2auth:3.833ecfda16608
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2notifier:3.8f190a6212195
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2rulesengine:3.8259503496ff9
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2scheduler:3.8b1de2055c362
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2sensorcontainer:3.8b1a338f64773
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2stream:3.81c8904a3bf67
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2timersengine:3.81bf35bfaf00c
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2web:3.809989a26c8b7
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
stackstorm/st2workflowengine:3.819fdfffdbba8
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

96,984
supabasetokens-studioVerified publisher1.0.04 of 14See more

supabase tokens-studio 1.0.0

4 of the 14 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
supabase/edge-runtime:v1.59.0eff9c554d649
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
supabase/postgres-meta:v0.84.2d0a96973e9f1
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
supabase/realtime:v2.33.8d207e6e23ad3
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
supabase/studio:20241021-9f9b08326d8070c55e9
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

23,263
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

8,530
bitcoindfold0.3.21 of 2See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
thesisrobot/bitcoind:v23.016b368e4d52c
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

3,493
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

7,896
quickwitquickwit0.8.161 of 1See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,492
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

11,453
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

4,281
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
quay.io/devtron/postgres:14.91b594392f7cb
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

31,447
ilumilumOfficialVerified publisher6.7.32 of 19See more

ilum ilum 6.7.3

2 of the 19 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgresql:16233f361c5819
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

23,289
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
netrisai/controller-web-session-generator:0.2.0a030a31289f4
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

30,481
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

17,306
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1
platform9community/api-gateway:latest40a4970de568
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1
platform9community/customers-service:latest2089811e5cc6
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1
platform9community/vets-service:latestd1165c94dfb3
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1
platform9community/visits-service:latest8d11b50368c6
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

41,902
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

11,831
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

6,386
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

5,669
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

30,811
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

12,163
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,039
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

4,951
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

16,161

Container images carrying it

1,121 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
shadow-utils@2:4.9-5.el9
2:4.9-8.el9
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
shadow-utils@2:4.6-8.el8
2:4.6-19.el8
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.