StackRadar

CVE-2023-4641

Medium

Advisory

Published 10 Oct 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,075
of 17,781 indexed, latest versions
Container images
1,119
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: shadow-utils security and bug fix update

Carried by container images the latest versions of 1,075 of 17,781 indexed charts deploy, on 1,119 images.

Affected packageAffected versionsFixed inImages
shadowdeb1:4.1.5.1-1ubuntu9, 1:4.1.5.1-1ubuntu9.5, 1:4.2-3.1ubuntu5, 1:4.2-3.1ubuntu5.2+14 more1:4.1.5.1-1ubuntu9.5+esm4, 1:4.2-3.1ubuntu5.5+esm4, 1:4.5-1ubuntu2.5+esm1, 1:4.8.1-1ubuntu5.20.04.5+2 more997
shadow-utilsrpm2:4.6-8.el8, 2:4.6-11.el8, 2:4.6-12.el8, 2:4.6-14.el8+6 more2:4.6-19.el8, 2:4.9-8.el9112
shadowrpm4.6-3.5.6, 4.6-lp151.2.3.24.6-150100.3.11.1, 4.19.2-2.110
OSV records
DEBIAN-CVE-2023-4641RHSA-2023:6632RHSA-2023:7112UBUNTU-CVE-2023-4641openSUSE-SU-2026:10081-1SUSE-SU-2023:4025-1
Also known as
RHSA-2024:0417, RHSA-2024:2577, USN-6640-1

Charts affected

1,075 by stars
ChartLatestAffected imagesRadar Score
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

8,690
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

24,488
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

7,052
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

28,534
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

10,315
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

18,137
wasmcloud-chartwasmcloud-chartVerified publisher0.7.21 of 2See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,456
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
shadow-utils@2:4.6-14.el8
2:4.6-19.el8

Open the chart page →

6,085
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

19,691
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

13,635
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
shadow@1:4.5-1ubuntu2.2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

12,046
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

8,341
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

3,366
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

22,202
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

17,896
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

77,687
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

13,145
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

2,897
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

84,444
cert-vaultcert-vaultOfficialVerified publisher2.12.04 of 7See more

cert-vault cert-vault 2.12.0

4 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/redis-exporter:1.69.0-debian-12-r1a006df1fd47e
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

15,863
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4

Open the chart page →

36,094
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

9,724
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
shadow-utils@2:4.6-12.el8
2:4.6-19.el8

Open the chart page →

6,473
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

13,761
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

5,274
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

38,346
dbrepodbrepo1.13.313 of 25See more

dbrepo dbrepo 1.13.3

13 of the 25 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

52,635
calicodevtron0.1.11 of 4See more

calico devtron 0.1.1

1 of the 4 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
shadow-utils@2:4.6-8.el8
2:4.6-19.el8

Open the chart page →

10,071
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

6,940
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

8,823
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

18,376
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
library/mongo:6.0.12646902910d6a
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2

Open the chart page →

15,383
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

31,510
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

11,458
mcrouterevryfs-ossVerified publisher0.4.01 of 2See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
shadow@1:4.5-1ubuntu2.3
1:4.5-1ubuntu2.5+esm1

Open the chart page →

6,500
federidfederidOfficialVerified publisher0.1.21 of 1See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
federid/webhook:0.1.0fbfb7c6510a7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1

Open the chart page →

2,064
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

12,908
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

35,305
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

15,653
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

11,662
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
shadow@1:4.5-1ubuntu2.5
1:4.5-1ubuntu2.5+esm1

Open the chart page →

11,553
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

5,136
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
shadow@1:4.5-1ubuntu2
1:4.5-1ubuntu2.5+esm1

Open the chart page →

8,029
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

11,558
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

10,231
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2

Open the chart page →

13,025
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-4641.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5

Open the chart page →

15,856

Container images carrying it

1,119 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/openshift/origin-cli:4.7464a3af4dfe0
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
5200710/hadoop:3.2.3-java8092d3088a5fb
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
shadow@1:4.5-1ubuntu1
1:4.5-1ubuntu2.5+esm1
1
aboogie/login_test_backend:new9c41a4483ac8
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
actualbudget/actual-server:25.3.158fecd9088b7
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
aibrix/metadata-service:v0.7.063fb81a64377
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
airbyte/pod-sweeper:1.5.198d2c39d512e
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
shadow@1:4.8.1-1ubuntu5.20.04
1:4.8.1-1ubuntu5.20.04.5
1
akaunting/akaunting:3.0.1552811b36ec3a
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
allegroai/clearml:2.0.0-613713ae38f7daf
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
shadow@1:4.5-1ubuntu2.2
1:4.5-1ubuntu2.5+esm1
1
anchore/anchore-engine:v0.10.0bde9eedf639d
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
shadow-utils@2:4.6-8.el8
2:4.6-19.el8
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
andrianrf/backoffice-be:latest6036614803d4
shadow-utils@2:4.9-6.el9
2:4.9-8.el9
1
andrianrf/iso-server:latest7da47f525c7d
shadow-utils@2:4.9-6.el9
2:4.9-8.el9
1
anguda/ant-media:2.5c435285fc241
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
apache/airflow:2.8.4-python3.964e58748b6b9
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
apache/airflow:2.8.1e5560ad0b86e
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
apache/camel-k:1.10.43bb13d14f64a
shadow-utils@2:4.6-16.el8
2:4.6-19.el8
1
apache/iotdb:0.13.3-nodeafa47bf1692a
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
apachepulsar/pulsar:2.9.0d056c89b7131
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
apachepulsar/pulsar:2.8.2d538416d5afe
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
apache/rocketmq-exporter:0.0.2c8fb51195444
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
apache/skywalking-oap-server:9.2.0133d35d2c263
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
apache/skywalking-ui:9.2.0295f1dc87d98
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1
apache/skywalking-ui:8.9.180530f0308a5
shadow@1:4.8.1-1ubuntu5.20.04.1
1:4.8.1-1ubuntu5.20.04.5
1
apache/superset:4.0.1ab9467fd712c
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
apache/tika:2.9.0.092d055a84e9e
shadow@1:4.8.1-2ubuntu2.1
1:4.8.1-2ubuntu2.2
1
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
shadow-utils@2:4.6-12.el8
2:4.6-19.el8
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
shadow-utils@2:4.6-17.el8
2:4.6-19.el8
1
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
shadow@1:4.2-3.1ubuntu5.3
1:4.2-3.1ubuntu5.5+esm4
1
aristidetm/basic-notebook:3.6.5469dbc951224
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
shadow@1:4.8.1-1ubuntu5.20.04.4
1:4.8.1-1ubuntu5.20.04.5
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
shadow@1:4.8.1-1ubuntu5.20.04.2
1:4.8.1-1ubuntu5.20.04.5
1
assistiot/identity-manager_db:latest0d3e6d35f168
shadow@1:4.13+dfsg1-1+b1
1:4.13+dfsg1-1+deb12u1
1
assistiot/location_processing:lateste9bae124095f
shadow@1:4.8.1-2ubuntu2
1:4.8.1-2ubuntu2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.