StackRadar

CVE-2023-48713

Medium

Advisory

Published 27 Nov 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.009
57th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
9
of 17,781 indexed, latest versions
Container images
18
deployed by those charts
Fix available
1 of 1
affected package

Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 18 images.

Affected packageAffected versionsFixed inImages
knative.dev/servinggolangv0.0.0-20230124185538-484e848e4453, v0.0.0-20230601162137-500756c0f325, v0.0.0-20240203022331-41769de2a9b7, v0.18.0+5 more0.39.018
OSV records
GHSA-qmvj-4qr9-v547
Also known as
GO-2023-2355

Charts affected

9 by stars
ChartLatestAffected imagesRadar Score
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
kserve/kserve-controller:v0.8.0f0692a9ea09f
knative.dev/serving@v0.28.0
0.39.0

Open the chart page →

96,941
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
knative.dev/serving@v0.31.0
0.39.0

Open the chart page →

3,793
oscargrycapOfficialVerified publisher4.1.31 of 2See more

oscar grycap 4.1.3

1 of the 2 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
ghcr.io/grycap/oscar:latest0c58ff972451
knative.dev/serving@v0.36.0
0.39.0

Open the chart page →

425
jetic-operatorjetic-operatorVerified publisher2.0.21 of 1See more

jetic-operator jetic-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
apache/camel-k:1.10.43bb13d14f64a
knative.dev/serving@v0.33.0
0.39.0

Open the chart page →

9,318
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
kfserving/kfserving-controller:v0.6.163d79d04c2e3
knative.dev/serving@v0.18.0
0.39.0

Open the chart page →

3,830
knativemesosphere-stable1.10.87 of 7See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0

Open the chart page →

7,479
nai-knative-servingnutanix-helm-releasesVerified publisher1.13.14 of 4See more

nai-knative-serving nutanix-helm-releases 1.13.1

4 of the 4 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.13.121f8e11a44bf
knative.dev/serving@v0.0.0-20240203022331-41769de2a9b7
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.13.134796e9f760b
knative.dev/serving@v0.0.0-20240203022331-41769de2a9b7
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
knative.dev/serving@v0.0.0-20240203022331-41769de2a9b7
0.39.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.13.1700c69915dc7
knative.dev/serving@v0.0.0-20240203022331-41769de2a9b7
0.39.0

Open the chart page →

3,738
knative-helm-operatorsalaboy1.9.01 of 2See more

knative-helm-operator salaboy 1.9.0

1 of the 2 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/default-domaindigest-pinned5e0429b70299
knative.dev/serving@v0.0.0-20230124185538-484e848e4453
0.39.0

Open the chart page →

2,339
tfy-kservetruefoundryVerified publisher0.1.11 of 2See more

tfy-kserve truefoundry 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-48713.

Container imageDigestPackageFixed in
kserve/kserve-controller:v0.10.022ff858b57c1
knative.dev/serving@v0.34.0
0.39.0

Open the chart page →

1,171

Container images carrying it

18 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/camel-k:1.10.43bb13d14f64a
knative.dev/serving@v0.33.0
0.39.0
1
kfserving/kfserving-controller:v0.6.163d79d04c2e3
knative.dev/serving@v0.18.0
0.39.0
1
kserve/kserve-controller:v0.10.022ff858b57c1
knative.dev/serving@v0.34.0
0.39.0
1
kserve/kserve-controller:v0.8.0f0692a9ea09f
knative.dev/serving@v0.28.0
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.13.121f8e11a44bf
knative.dev/serving@v0.0.0-20240203022331-41769de2a9b7
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.13.134796e9f760b
knative.dev/serving@v0.0.0-20240203022331-41769de2a9b7
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
knative.dev/serving@v0.0.0-20240203022331-41769de2a9b7
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/default-domain5e0429b70299
knative.dev/serving@v0.0.0-20230124185538-484e848e4453
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
knative.dev/serving@v0.0.0-20230601162137-500756c0f325
0.39.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.13.1700c69915dc7
knative.dev/serving@v0.0.0-20240203022331-41769de2a9b7
0.39.0
1
ghcr.io/grycap/oscar:latest0c58ff972451
knative.dev/serving@v0.36.0
0.39.0
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
knative.dev/serving@v0.31.0
0.39.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.