StackRadar

CVE-2023-4641

Medium

Advisory

Published 10 Oct 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,077
of 17,787 indexed, latest versions
Container images
1,121
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: shadow-utils security and bug fix update

Carried by container images the latest versions of 1,077 of 17,787 indexed charts deploy, on 1,121 images.

Affected packageAffected versionsFixed inImages
shadowdeb1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+14 more1:4.1.5.1-1ubuntu9.5+esm4, 1:4.2-3.1ubuntu5.5+esm4, 1:4.5-1ubuntu2.5+esm1, 1:4.8.1-1ubuntu5.20.04.5+2 more999
shadow-utilsrpm2:4.6-8.el8, 2:4.6-11.el8, 2:4.6-12.el8, 2:4.6-14.el8+6 more2:4.6-19.el8, 2:4.9-8.el9112
shadowrpm4.6-3.5.6, 4.6-lp151.2.3.24.6-150100.3.11.1, 4.19.2-2.110
OSV records
DEBIAN-CVE-2023-4641RHSA-2023:6632RHSA-2023:7112UBUNTU-CVE-2023-4641openSUSE-SU-2026:10081-1SUSE-SU-2023:4025-1
Also known as
RHSA-2024:0417, RHSA-2024:2577, USN-6640-1

Charts affected

1,077 by stars
ChartLatestAffected imagesRadar Score
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

8,760
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

24,549
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

7,064
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

28,579
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

10,355
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

18,149
wasmcloud-chartwasmcloud-chartVerified publisher0.7.21 of 2See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,178
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
shadow-utils@2:4.6-14.el8
2:4.6-19.el8

Open the chart page →

6,085
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

19,769
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

13,683
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
shadow@1:4.5-1ubuntu2.2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

12,061
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

8,384
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,378
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

22,233
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

17,946
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

77,802
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

13,199
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

2,908
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

84,678
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

84,678
cert-vaultcert-vaultOfficialVerified publisher2.12.04 of 7See more

cert-vault cert-vault 2.12.0

4 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/redis-exporter:1.69.0-debian-12-r1a006df1fd47e
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

15,995
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

36,132
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

9,736
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
shadow-utils@2:4.6-12.el8
2:4.6-19.el8

Open the chart page →

6,473
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

12,924
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

5,298
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

38,424
dbrepodbrepo1.13.313 of 25See more

dbrepo dbrepo 1.13.3

13 of the 25 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

50,281
calicodevtron0.1.11 of 4See more

calico devtron 0.1.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
shadow-utils@2:4.6-8.el8
2:4.6-19.el8

Open the chart page →

10,073
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

6,978
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

8,842
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

18,402
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

15,501
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

31,572
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

11,483
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
shadow@1:4.5-1ubuntu2.3
1:4.5-1ubuntu2.5+esm1

Open the chart page →

6,515
federidfederidOfficialVerified publisher0.1.21 of 1See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
federid/webhook:0.1.0fbfb7c6510a7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

2,076
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

12,914
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

17,438
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

35,464
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

15,717
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

11,684
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1

Open the chart page →

11,579
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

5,175
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

8,035
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

11,606
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

10,279
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

13,071
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

15,917

Container images carrying it

1,121 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
shadow-utils@2:4.9-5.el9
2:4.9-8.el9
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
shadow-utils@2:4.6-8.el8
2:4.6-19.el8
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.