CVE-2023-48795

Medium

Advisory

Published 18 Dec 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.933; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,640; of 17,790 indexed, latest versions
Container images: 1,764; deployed by those charts
Fix available: 8 of 10; affected packages

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Carried by container images the latest versions of 1,640 of 17,790 indexed charts deploy, on 1,764 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+120 more	0.0.0-20231218163308-9d2ee975ef9f, 0.17.0	1,388
libsshdeb	0.9.3-2ubuntu2.1, 0.9.3-2ubuntu2.2, 0.9.3-2ubuntu2.3, 0.9.6-2build1+2 more	0.9.3-2ubuntu2.4, 0.9.6-2ubuntu0.22.04.2, 0.10.6-0+deb12u1	243
libsshrpm	0.8.5-2.el8, 0.9.0-4.el8, 0.9.4-2.el8, 0.9.4-3.el8+4 more	0:0.9.6-13.el8_8, 0:0.9.6-13.el8_9	156
opensshdeb	1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+20 more	1:7.2p2-4ubuntu2.10+esm5, 1:7.6p1-4ubuntu0.7+esm3, 1:8.2p1-4ubuntu0.10, 1:8.2p1-4ubuntu0.fips.0.10+2 more	101
paramikopypi	2.6.0, 2.7.1, 2.7.2, 2.8.0+9 more	3.4.0	58
opensshapk	9.0_p1-r1, 9.0_p1-r2, 9.0_p1-r4, 9.1_p1-r1+3 more	9.0_p1-r5, 9.1_p1-r5, 9.3_p2-r1	22
libssh2apk	1.10.0-r2, 1.10.0-r3, 1.10.0-r4	1.11.0-r0	10
paramikodeb	1.10.1-1git1ubuntu0.1	no fix listed	2
dropbeardeb	2022.83-4	no fix listed	1
php-phpseclibdeb	2.0.14-1, 2.0.30-2	2.0.30-2+deb11u1, 2.0.30-2~deb10u2	2

OSV records: ALPINE-CVE-2023-48795 DEBIAN-CVE-2023-48795 GHSA-45x7-px36-x8w8 RHSA-2024:0625 RHSA-2024:0628 UBUNTU-CVE-2023-48795 DLA-3718-1 DSA-5600-1
Also known as: GO-2023-2402, PYSEC-2026-1758, USN-6560-1, USN-6560-2, USN-6561-1

Charts affected

1,640 by stars

Chart

Latest

Affected images

Radar Score

temporaltemporal

0.28.9

7 of 13 See more

temporal temporal 0.28.9

7 of the 13 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20231218163308-9d2ee975ef9f
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f
temporalio/admin-tools :1.22.0	836af062af30	golang.org/x/crypto@v0.10.0	0.17.0
temporalio/server :1.22.0	ddeebf8bad8f	golang.org/x/crypto@v0.12.0	0.17.0
temporalio/ui :2.16.2	af9c9349708f	golang.org/x/crypto@v0.1.0	0.17.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

21,040

tensor_apptensor-app

0.2.2

1 of 3 See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	paramiko@2.11.0	3.4.0

Open the chart page →

17,590

teredixteredix

0.0.2

1 of 1 See more

teredix teredix 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/shaharia-lab/teredix :0.0.2	ec727be4417a	openssh@9.0_p1-r4	9.0_p1-r5

Open the chart page →

1,077

pagestest4322

1.0.0

1 of 3 See more

pages test4322 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

vehicle-dashboardtest-vehi-dash

0.1.0

2 of 7 See more

vehicle-dashboard test-vehi-dash 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dblaci/ubuntu-ssh-rsync :20231020	eea697611af4	libssh@0.9.6-2ubuntu0.22.04.1 openssh@1:8.9p1-3ubuntu0.4	0.9.6-2ubuntu0.22.04.2 1:8.9p1-3ubuntu0.5
library/mongo :5.0.21	7c81758cb295	golang.org/x/crypto@v0.12.0 libssh@0.9.3-2ubuntu2.3	0.17.0 0.9.3-2ubuntu2.4

Open the chart page →

20,378

trafficlight-apithecampagnards

0.1.1

1 of 1 See more

trafficlight-api thecampagnards 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
thecampagnards/trafficlight-api :main	7dca9d973837	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,398

pagesthiru-pages

1.0.0

1 of 3 See more

pages thiru-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

mc-routerthl-charts

0.1.0

1 of 1 See more

mc-router thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
itzg/mc-router :1.16.1	bb552b59fb53	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,855

monitoringthl-charts

0.1.1

7 of 10 See more

monitoring thl-charts 0.1.1

7 of the 10 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.0	42d3e6bc1865	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20231218163308-9d2ee975ef9f
grafana/loki :2.5.0	f9ef133793af	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.0.0-20231218163308-9d2ee975ef9f
grafana/promtail :2.4.2	626900031c4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20231218163308-9d2ee975ef9f
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/prometheus :v2.34.0	b37103e03399	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

18,940

pagesthuy-pages

1.0.0

1 of 3 See more

pages thuy-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

pock-helm-charttinote-chart

0.1.0

1 of 3 See more

pock-helm-chart tinote-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
nginx/nginx-ingress :1.11.1	eb5b4fd73325	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

6,888

grafanatnh

5.3.0

1 of 1 See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,198

prometheustnh

11.6.0

3 of 6 See more

prometheus tnh 11.6.0

3 of the 6 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56	0.0.0-20231218163308-9d2ee975ef9f
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

8,491

todolist-charttodolist-chart

0.1.7

1 of 10 See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
erenozcan17/go_backend :v4.2	50b4f23422b6	golang.org/x/crypto@v0.9.0	0.17.0

Open the chart page →

7,019

hermestouk

0.6.0

1 of 3 See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9

Open the chart page →

12,724

traefik-jwt-decodetraefik-jwt-decode

0.1.0

1 of 1 See more

traefik-jwt-decode traefik-jwt-decode 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
simonschneider/traefik-jwt-decode :latest	d674ac370f80	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,310

treenitytreenity

0.1.3

1 of 4 See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
library/nats :2.9.6-alpine3.16	f576cdc17cc3	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,365

posteetrivy-operator

2.14.0

2 of 3 See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
aquasec/postee :2.12.0-amd64	0795cba777e7	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.0.0-20231218163308-9d2ee975ef9f
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,816

trouw-servicetrouw-service

1.0.0

1 of 3 See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/trouw-service-php :latest	f745e2870692	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,519

monitorortrozz

0.0.1

1 of 1 See more

monitoror trozz 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,109

tfy-cloudflaredtruefoundry

0.5.0

1 of 2 See more

tfy-cloudflared truefoundry 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/crypto@v0.5.0	0.17.0

Open the chart page →

2,022

tfy-distributortruefoundry

0.0.1

2 of 4 See more

tfy-distributor truefoundry 0.0.1

2 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	golang.org/x/crypto@v0.16.0	0.17.0
natsio/prometheus-nats-exporter :0.13.0	2adf791d9f9f	golang.org/x/crypto@v0.13.0	0.17.0

Open the chart page →

17,396

twitter-apptwitter-helm

0.1.12

3 of 8 See more

twitter-app twitter-helm 0.1.12

3 of the 8 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

6,146

kafkatwomartens

0.2.1

1 of 2 See more

kafka twomartens 0.2.1

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
danielqsj/kafka-exporter :v1.7.0	e90b7ba06d97	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,569

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	golang.org/x/crypto@v0.1.0 libssh@0.9.6-3.el8	0.17.0 0:0.9.6-13.el8_9

Open the chart page →

4,967

phonebook-chartusuladams2

0.2.1

1 of 3 See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	paramiko@2.11.0	3.4.0

Open the chart page →

3,176

kiamuswitch

6.1.2

1 of 1 See more

kiam uswitch 6.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
quay.io/uswitch/kiam :v4.0	be3a5846922d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,971

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssh@1:9.2p1-2	1:9.2p1-2+deb12u2

Open the chart page →

14,431

openldap-havcnngr

1.0.0

1 of 3 See more

openldap-ha vcnngr 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,515

verhuis-serviceverhuis-service

1.0.0

1 of 3 See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verhuis-service-php :latest	66bbaf95a123	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,519

verzoekconversieserviceverzoekconversieservice

1.0.0

1 of 3 See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekconversieservice-php :latest	e918014fb8d3	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,537

verzoekregistratiecomponentverzoekregistratiecomponent

1.1.0

1 of 4 See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php :latest	c4f6c03af5d3	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,438

verzoektypecatalogusverzoektypecatalogus

1.1.0

1 of 4 See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/verzoektypecatalogus-php :latest	64f5eb7a398b	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,438

scrutinyvhdirk

0.1.3

1 of 1 See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	golang.org/x/crypto@v0.1.0	0.17.0

Open the chart page →

4,411

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

13,575

pagesvictor-pages

1.0.0

1 of 3 See more

pages victor-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

vineyard-operatorvineyard

0.24.2

1 of 2 See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/v6d-io/v6d/kube-rbac-proxy :v0.13.0	a2523c532c0c	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,558

volantmqvolantmq

0.1.2

1 of 1 See more

volantmq volantmq 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
volantmq/volantmq :v0.4.0-rc.6	9bfe7857ebc3	golang.org/x/crypto@v0.0.0-20190927123631-a832865fa7ad	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,550

cert-manager-webhook-vultrvultr

1.0.0

1 of 1 See more

cert-manager-webhook-vultr vultr 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,507

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

11,448

pageswalter

1.0.0

1 of 3 See more

pages walter 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

consulwarjiang

1.3.0

2 of 2 See more

consul warjiang 1.3.0

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.17.0	712fe02d2f84	golang.org/x/crypto@v0.14.0	0.17.0
hashicorp/consul-k8s-control-plane :1.3.0	0e4452f0f265	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,072

wavefront-hpa-adapterwavefront

0.2.10

1 of 1 See more

wavefront-hpa-adapter wavefront 0.2.10

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
wavefronthq/wavefront-hpa-adapter :0.9.12	af5fef9a4768	golang.org/x/crypto@v0.14.0	0.17.0

Open the chart page →

1,691

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,492

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37 libssh@0.9.3-2ubuntu2.2	0.0.0-20231218163308-9d2ee975ef9f 0.9.3-2ubuntu2.4

Open the chart page →

11,171

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	golang.org/x/crypto@v0.5.0 libssh@0.9.6-2build1	0.17.0 0.9.6-2ubuntu0.22.04.2

Open the chart page →

6,282

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.4

Open the chart page →

9,252

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.4

Open the chart page →

9,252

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9

Open the chart page →

28,697

webresourcecataloguswebresourcecatalogus

1.1.0

1 of 4 See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/webresourcecatalogus-php :latest	8f1bbd5cda85	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,562

Container images carrying it

1,764 by charts deploying them

A fixed version is listed for 8 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97 libssh@0.9.3-2ubuntu2.2	0.0.0-20231218163308-9d2ee975ef9f 0.9.3-2ubuntu2.4	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	libssh@0.9.3-2ubuntu2.2 paramiko@2.8.0	0.9.3-2ubuntu2.4 3.4.0	3
codeurjc/planner :v1.0	800cf520c245	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.2	3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.0.0-20231218163308-9d2ee975ef9f	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a libssh@0.9.3-2ubuntu2.2	0.0.0-20231218163308-9d2ee975ef9f 0.9.3-2ubuntu2.4	3
dpage/pgadmin4 :6.12	781369df9994	paramiko@2.11.0	3.4.0	3
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f	3
grafana/promtail :2.4.2	626900031c4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20231218163308-9d2ee975ef9f	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20231218163308-9d2ee975ef9f	3
library/docker :20.10-dind :20-dind	af96c680a7e1	golang.org/x/crypto@v0.2.0 openssh@9.3_p1-r3	0.17.0 9.3_p2-r1	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392 libssh@0.9.4-2.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9	3
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20231218163308-9d2ee975ef9f	3
mysql/mysql-server :latest	d6c8301b7834	paramiko@2.11.0	3.4.0	3
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.0.0-20231218163308-9d2ee975ef9f	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/crypto@v0.16.0	0.17.0	3
selenium/hub :3.141.59	02f251d48d5f	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4	3
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20231218163308-9d2ee975ef9f	3
xenondb/percona :5.7.33	0e26872a2b67	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4	3
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.17.0	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd libssh@0.9.6-2build1 openssh@1:8.9p1-3ubuntu0.1	0.0.0-20231218163308-9d2ee975ef9f 0.9.6-2ubuntu0.22.04.2 1:8.9p1-3ubuntu0.5	3
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97 libssh@0.9.4-3.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9	3
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/crypto@v0.14.0	0.17.0	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.2	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/crypto@v0.7.0	0.17.0	3
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/crypto@v0.14.0 libssh@0.9.6-3.el8	0.17.0 0:0.9.6-13.el8_9	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/crypto@v0.8.0	0.17.0	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/crypto@v0.8.0	0.17.0	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/crypto@v0.1.0	0.17.0	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/crypto@v0.7.0	0.17.0	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9 libssh@0.9.4-3.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20231218163308-9d2ee975ef9f	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.0.0-20231218163308-9d2ee975ef9f	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838	0.0.0-20231218163308-9d2ee975ef9f	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/crypto@v0.9.0	0.17.0	2