StackRadar

CVE-2023-4641

Medium

Advisory

Published 10 Oct 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,077
of 17,787 indexed, latest versions
Container images
1,121
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: shadow-utils security and bug fix update

Carried by container images the latest versions of 1,077 of 17,787 indexed charts deploy, on 1,121 images.

Affected packageAffected versionsFixed inImages
shadowdeb1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+14 more1:4.1.5.1-1ubuntu9.5+esm4, 1:4.2-3.1ubuntu5.5+esm4, 1:4.5-1ubuntu2.5+esm1, 1:4.8.1-1ubuntu5.20.04.5+2 more999
shadow-utilsrpm2:4.6-8.el8, 2:4.6-11.el8, 2:4.6-12.el8, 2:4.6-14.el8+6 more2:4.6-19.el8, 2:4.9-8.el9112
shadowrpm4.6-3.5.6, 4.6-lp151.2.3.24.6-150100.3.11.1, 4.19.2-2.110
OSV records
DEBIAN-CVE-2023-4641RHSA-2023:6632RHSA-2023:7112UBUNTU-CVE-2023-4641openSUSE-SU-2026:10081-1SUSE-SU-2023:4025-1
Also known as
RHSA-2024:0417, RHSA-2024:2577, USN-6640-1

Charts affected

1,077 by stars
ChartLatestAffected imagesRadar Score
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

8,760
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

24,549
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

7,064
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

28,579
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

10,355
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

18,149
wasmcloud-chartwasmcloud-chartVerified publisher0.7.21 of 2See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,178
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
shadow-utils@2:4.6-14.el8
2:4.6-19.el8

Open the chart page →

6,085
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

19,769
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

13,683
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
shadow@1:4.5-1ubuntu2.2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

12,061
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

8,384
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,378
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

22,233
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

17,946
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

77,802
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

13,199
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

2,908
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

84,678
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

84,678
cert-vaultcert-vaultOfficialVerified publisher2.12.04 of 7See more

cert-vault cert-vault 2.12.0

4 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/redis-exporter:1.69.0-debian-12-r1a006df1fd47e
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

15,995
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

36,132
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

9,736
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
shadow-utils@2:4.6-12.el8
2:4.6-19.el8

Open the chart page →

6,473
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

12,924
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

5,298
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

38,424
dbrepodbrepo1.13.313 of 25See more

dbrepo dbrepo 1.13.3

13 of the 25 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

50,281
calicodevtron0.1.11 of 4See more

calico devtron 0.1.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
shadow-utils@2:4.6-8.el8
2:4.6-19.el8

Open the chart page →

10,073
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

6,978
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

8,842
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

18,402
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

15,501
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

31,572
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

11,483
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
shadow@1:4.5-1ubuntu2.3
1:4.5-1ubuntu2.5+esm1

Open the chart page →

6,515
federidfederidOfficialVerified publisher0.1.21 of 1See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
federid/webhook:0.1.0fbfb7c6510a7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

2,076
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

12,914
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

17,438
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

35,464
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

15,717
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

11,684
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1

Open the chart page →

11,579
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

5,175
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

8,035
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

11,606
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

10,279
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

13,071
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

15,917

Container images carrying it

1,121 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
shadow@1:4.5-1ubuntu2.3
1:4.5-1ubuntu2.5+esm1
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
shadow@1:4.5-1ubuntu2.3
1:4.5-1ubuntu2.5+esm1
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
shadow-utils@2:4.6-16.el8
2:4.6-19.el8
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
shadow-utils@2:4.6-14.el8
2:4.6-19.el8
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
shadow-utils@2:4.6-16.el8
2:4.6-19.el8
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
shadow-utils@2:4.6-16.el8
2:4.6-19.el8
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/osm-edge-crds-ubi8:1.2.1c3bc5e7a70e6
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/osm-edge-preinstall-ubi8:1.2.1f94282a9cfec
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
shadow-utils@2:4.6-8.el8
2:4.6-19.el8
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
shadow-utils@2:4.6-14.el8
2:4.6-19.el8
1
quay.io/minio/directpv:v4.0.84560083eb77d
shadow-utils@2:4.6-18.el8
2:4.6-19.el8
1
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
shadow-utils@2:4.6-16.el8
2:4.6-19.el8
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.