StackRadar

CVE-2023-48795

Medium

Advisory

Published 18 Dec 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.933
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,640
of 17,790 indexed, latest versions
Container images
1,764
deployed by those charts
Fix available
8 of 10
affected packages

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Carried by container images the latest versions of 1,640 of 17,790 indexed charts deploy, on 1,764 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+120 more0.0.0-20231218163308-9d2ee975ef9f, 0.17.01,388
libsshdeb0.9.3-2ubuntu2.1, 0.9.3-2ubuntu2.2, 0.9.3-2ubuntu2.3, 0.9.6-2build1+2 more0.9.3-2ubuntu2.4, 0.9.6-2ubuntu0.22.04.2, 0.10.6-0+deb12u1243
libsshrpm0.8.5-2.el8, 0.9.0-4.el8, 0.9.4-2.el8, 0.9.4-3.el8+4 more0:0.9.6-13.el8_8, 0:0.9.6-13.el8_9156
opensshdeb1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+20 more1:7.2p2-4ubuntu2.10+esm5, 1:7.6p1-4ubuntu0.7+esm3, 1:8.2p1-4ubuntu0.10, 1:8.2p1-4ubuntu0.fips.0.10+2 more101
paramikopypi2.6.0, 2.7.1, 2.7.2, 2.8.0+9 more3.4.058
opensshapk9.0_p1-r1, 9.0_p1-r2, 9.0_p1-r4, 9.1_p1-r1+3 more9.0_p1-r5, 9.1_p1-r5, 9.3_p2-r122
libssh2apk1.10.0-r2, 1.10.0-r3, 1.10.0-r41.11.0-r010
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
dropbeardeb2022.83-4no fix listed1
php-phpseclibdeb2.0.14-1, 2.0.30-22.0.30-2+deb11u1, 2.0.30-2~deb10u22
OSV records
ALPINE-CVE-2023-48795DEBIAN-CVE-2023-48795GHSA-45x7-px36-x8w8RHSA-2024:0625RHSA-2024:0628UBUNTU-CVE-2023-48795DLA-3718-1DSA-5600-1
Also known as
GO-2023-2402, PYSEC-2026-1758, USN-6560-1, USN-6560-2, USN-6561-1

Charts affected

1,640 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stackromholdings19.3.02 of 6See more

kube-prometheus-stack romholdings 19.3.0

2 of the 6 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

8,659
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,441
zincromholdings0.1.21 of 1See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/zinc:latestfefa9ee7256a
golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,514
pagesronan-pages1.0.01 of 3See more

pages ronan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libssh@0.9.3-2ubuntu2.1
0.9.3-2ubuntu2.4

Open the chart page →

20,242
controllerrookout0.2.561 of 1See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rookout/controller:latest4451a6f6b8ec
golang.org/x/crypto@v0.11.0
0.17.0

Open the chart page →

1,967
datastorerookout0.1.481 of 1See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rookout/data-on-prem:latest51c0fce64467
golang.org/x/crypto@v0.11.0
0.17.0

Open the chart page →

1,948
operatorrookout0.0.201 of 2See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rookout/k8s-operator:latest0d083f3ef1a7
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,209
rookout-hybridrookout0.3.12 of 2See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rookout/controller:latest4451a6f6b8ec
golang.org/x/crypto@v0.11.0
0.17.0
rookout/data-on-prem:latest51c0fce64467
golang.org/x/crypto@v0.11.0
0.17.0

Open the chart page →

3,915
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
libssh@0.9.3-2ubuntu2.3
0.9.3-2ubuntu2.4

Open the chart page →

6,954
chainrss30.1.284 of 8See more

chain rss3 0.1.28

4 of the 8 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rss3/op-batcher:d2c5ced00901227473fc196fda838191f0cb4e02e8adc09d9c07
golang.org/x/crypto@v0.16.0
0.17.0
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
golang.org/x/crypto@v0.16.0
0.17.0
rss3/op-proposer:d2c5ced00901227473fc196fda838191f0cb4e0296672897ba9e
golang.org/x/crypto@v0.16.0
0.17.0
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
golang.org/x/crypto@v0.14.0
0.17.0

Open the chart page →

8,532
op-batcherrss30.1.01 of 2See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
golang.org/x/crypto@v0.16.0
0.17.0

Open the chart page →

1,251
op-proposerrss30.1.01 of 2See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
golang.org/x/crypto@v0.16.0
0.17.0

Open the chart page →

1,251
vsl-chainrss30.1.03 of 7See more

vsl-chain rss3 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
golang.org/x/crypto@v0.16.0
0.17.0
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
golang.org/x/crypto@v0.16.0
0.17.0
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
golang.org/x/crypto@v0.16.0
0.17.0

Open the chart page →

6,048
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
golang.org/x/crypto@v0.16.0
0.17.0

Open the chart page →

4,615
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
golang.org/x/crypto@v0.16.0
0.17.0

Open the chart page →

4,615
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
openssh@1:9.2p1-2
1:9.2p1-2+deb12u2

Open the chart page →

19,707
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
openssh@1:9.2p1-2
1:9.2p1-2+deb12u2

Open the chart page →

16,739
caddysagikazarmarkVerified publisher0.0.141 of 1See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/caddy:2.4.5874405536b3e
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,967
fmtok8s-conference-chartsalaboy0.1.41 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

1 of the 6 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2

Open the chart page →

16,193
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2

Open the chart page →

8,100
pagessamanvithkaranth1.0.01 of 3See more

pages samanvithkaranth 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libssh@0.9.3-2ubuntu2.1
0.9.3-2ubuntu2.4

Open the chart page →

20,242
hellowsamarthya2.0.01 of 1See more

hellow samarthya 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
samarthya/spinnaker:v1.0ef06d81036af
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,121
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
golang.org/x/crypto@v0.8.0
0.17.0

Open the chart page →

4,750
pagessarubits-pages1.0.01 of 3See more

pages sarubits-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libssh@0.9.3-2ubuntu2.1
0.9.3-2ubuntu2.4

Open the chart page →

20,242
pushgatewaysb-helm-charts0.3.01 of 1See more

pushgateway sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/prometheus/pushgateway:v1.6.2979a69ab4a40
golang.org/x/crypto@v0.8.0
0.17.0

Open the chart page →

1,173
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,140
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,168
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
golang.org/x/crypto@v0.4.0
0.17.0

Open the chart page →

5,582
cert-manager-desec-webhookschmitzis0.0.11 of 1See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
su541/cert-manager-desec-webhook:latest371ee33f83c1
golang.org/x/crypto@v0.5.0
0.17.0

Open the chart page →

1,777
cert-manager-webhook-bunnyschmitzis0.1.11 of 1See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
golang.org/x/crypto@v0.5.0
0.17.0

Open the chart page →

1,505
icinga2-masterschmitzis0.2.01 of 6See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
grafana/grafana:8.0.3696823fbc561
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,738
version-checkerschmitzis0.2.21 of 1See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,024
openldapschoolguys-helmcharts0.1.31 of 1See more

openldap schoolguys-helmcharts 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,314
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,337
ldap-instance-configsciencebox0.0.11 of 1See more

ldap-instance-config sciencebox 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,314
centralbrainsciencemeshVerified publisher0.0.33 of 5See more

centralbrain sciencemesh 0.0.3

3 of the 5 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
grafana/grafana:7.3.315b977f5207d
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37
0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

9,769
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
golang.org/x/crypto@v0.6.0
0.17.0

Open the chart page →

4,723
hermitcrabseal-ioVerified publisher0.1.41 of 2See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
golang.org/x/crypto@v0.1.0
openssh@9.3_p2-r0
0.17.0
9.3_p2-r1

Open the chart page →

4,890
aws-secretssecretsprovider0.1.01 of 1See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64b32c99e7bc45
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,220
cloudflaredsectionmeVerified publisher2022.3.41 of 1See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,414
pagessekharpkube1.0.01 of 3See more

pages sekharpkube 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libssh@0.9.3-2ubuntu2.1
0.9.3-2ubuntu2.4

Open the chart page →

20,242
seldon-core-analyticsseldon1.17.13 of 8See more

seldon-core-analytics seldon 1.17.1

3 of the 8 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71
0.0.0-20231218163308-9d2ee975ef9f
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56
0.0.0-20231218163308-9d2ee975ef9f
prom/prometheus:v2.18.15880ec936055
golang.org/x/crypto@v0.0.0-20200422194213-44a606286825
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

10,747
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
openssh@1:7.2p2-4ubuntu2.8
1:7.2p2-4ubuntu2.10+esm5

Open the chart page →

23,041
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
libssh@0.9.4-2.el8
0:0.9.6-13.el8_9

Open the chart page →

22,349
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
paramiko@3.1.0
3.4.0

Open the chart page →

3,336
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
golang.org/x/crypto@v0.9.0
libssh@0.9.6-10.el8_8
0.17.0
0:0.9.6-13.el8_8

Open the chart page →

4,210
serviceexampleserviceexample0.1.02 of 5See more

serviceexample serviceexample 0.1.0

2 of the 5 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/nats:2.9.20-alpined6c6ae7df4a0
golang.org/x/crypto@v0.9.0
0.17.0
natsio/nats-box:0.13.559cf2e949181
golang.org/x/crypto@v0.5.0
0.17.0

Open the chart page →

5,449
service-exampleservice-example-10.1.03 of 7See more

service-example service-example-1 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/nats:2.9.11-alpineccbe811b8575
golang.org/x/crypto@v0.5.0
0.17.0
natsio/nats-box:0.13.3c507bd7e3831
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.0.0-20231218163308-9d2ee975ef9f
natsio/prometheus-nats-exporter:0.10.1bce728062c4f
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

9,091
ccx-monitoringseveralnines0.6.212 of 7See more

ccx-monitoring severalnines 0.6.21

2 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.26.0361db356b330
golang.org/x/crypto@v0.8.0
0.17.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.1af8220f53493
golang.org/x/crypto@v0.14.0
0.17.0

Open the chart page →

7,719
apache-shardingsphere-operator-chartsshardingsphere0.3.01 of 2See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
apache/shardingsphere-operator:0.3.0ffe68d6b99c0
golang.org/x/crypto@v0.6.0
0.17.0

Open the chart page →

1,698

Container images carrying it

1,764 by charts deploying them

A fixed version is listed for 8 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/promtail:2.6.1072527b12cdf
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20231218163308-9d2ee975ef9f
1
grafana/promtail:2.0.05fd12edcc694
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20231218163308-9d2ee975ef9f
1
grafana/promtail:2.7.0c16c710f7333
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.0.0-20231218163308-9d2ee975ef9f
1
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_9
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_9
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_9
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_9
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_9
1
gurolakman/ussigw-core:1.0.48739565c3ea2
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_9
1
hashicorp/boundary:0.8.1fb70bd9210ff
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.0.0-20231218163308-9d2ee975ef9f
1
hashicorp/consul:1.17.0712fe02d2f84
golang.org/x/crypto@v0.14.0
0.17.0
1
hashicorp/consul:1.15.3ddff34041c5c
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.0.0-20231218163308-9d2ee975ef9f
1
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f
1
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20231218163308-9d2ee975ef9f
1
hashicorp/terraform:1.44dcb45513699
golang.org/x/crypto@v0.1.0
openssh@9.3_p2-r0
0.17.0
9.3_p2-r1
1
hashicorp/terraform-k8s:1.1.2b19857bab620
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.0.0-20231218163308-9d2ee975ef9f
1
hashicorp/vault:1.15.40b01ed3924e6
golang.org/x/crypto@v0.15.0
0.17.0
1
hashicorp/vault:1.14.0b2177a8bfe85
golang.org/x/crypto@v0.9.0
0.17.0
1
hashicorp/vault:1.8.4dfc3500beb0e
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.0.0-20231218163308-9d2ee975ef9f
1
hashicorp/vault-k8s:1.2.14500e988b7ce
golang.org/x/crypto@v0.5.0
0.17.0
1
hashicorp/vault-k8s:0.6.05697b85bc69a
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20231218163308-9d2ee975ef9f
1
hashicorp/waypoint:0.11.397d521a27498
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.0.0-20231218163308-9d2ee975ef9f
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
libssh@0.9.6-2ubuntu0.22.04.1
0.9.6-2ubuntu0.22.04.2
1
haugene/transmission-openvpn:4.0059216cfae4b
libssh@0.9.3-2ubuntu2.2
openssh@1:8.2p1-4ubuntu0.3
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
1
haveagitgat/tdarr:2.00.181256348872ce
libssh@0.9.3-2ubuntu2.2
openssh@1:8.2p1-4ubuntu0.4
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
libssh@0.9.3-2ubuntu2.1
0.9.3-2ubuntu2.4
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
libssh@0.9.3-2ubuntu2.3
0.9.3-2ubuntu2.4
1
hazelcast/management-center:5.3.2f9d34300d330
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_8
1
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f
1
helga09/my_sql_shoes:v1.1.1a03657d97897
paramiko@2.11.0
3.4.0
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
openssh@1:8.2p1-4ubuntu0.11
1:8.2p1-4ubuntu0.fips.0.10
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
openssh@1:9.2p1-2
1:9.2p1-2+deb12u2
1
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
golang.org/x/crypto@v0.10.0
0.17.0
1
hetznercloud/hcloud-cloud-controller-manager:v1.13.0ed5ee5f83973
golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90
0.0.0-20231218163308-9d2ee975ef9f
1
hhaluk/mocktail:2.0.3350d19360038
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20231218163308-9d2ee975ef9f
1
hhyo/archery:v1.9.11aa41843419e
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
paramiko@2.11.0
0.0.0-20231218163308-9d2ee975ef9f
3.4.0
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272
0.0.0-20231218163308-9d2ee975ef9f
1
holiman/nodemonitor:latest5cd609761065
golang.org/x/crypto@v0.8.0
0.17.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
libssh2@1.10.0-r4
openssh@9.3_p2-r0
paramiko@3.3.1
0.0.0-20231218163308-9d2ee975ef9f
1.11.0-r0
9.3_p2-r1
3.4.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
libssh2@1.10.0-r4
openssh@9.3_p2-r0
0.0.0-20231218163308-9d2ee975ef9f
1.11.0-r0
9.3_p2-r1
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
golang.org/x/crypto@v0.14.0
0.17.0
1
housewrecker/gaps:latestf417dd0a7547
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4
1
huacnlee/gobackup:v3.1.1560be93229a5
golang.org/x/crypto@v0.14.0
0.17.0
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.0.0-20231218163308-9d2ee975ef9f
1
hugohg34/toposervice:0.0.2812a03b3f274
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4
1
hyperledger/fabric-ca:1.5.1c7f3422ec1d5
golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9
0.0.0-20231218163308-9d2ee975ef9f
1
hyperledger/fabric-ca:1.5.0f270dfeee91d
golang.org/x/crypto@v0.0.0-20201117144127-c1f2f97bffc9
0.0.0-20231218163308-9d2ee975ef9f
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
openssh@1:7.2p2-4ubuntu2.4
1:7.2p2-4ubuntu2.10+esm5
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.