CVE-2023-48795

Medium

Advisory

Published 18 Dec 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.933; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,639; of 17,790 indexed, latest versions
Container images: 1,763; deployed by those charts
Fix available: 8 of 10; affected packages

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Carried by container images the latest versions of 1,639 of 17,790 indexed charts deploy, on 1,763 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+120 more	0.0.0-20231218163308-9d2ee975ef9f, 0.17.0	1,387
libsshdeb	0.9.3-2ubuntu2.1, 0.9.3-2ubuntu2.2, 0.9.3-2ubuntu2.3, 0.9.6-2build1+2 more	0.9.3-2ubuntu2.4, 0.9.6-2ubuntu0.22.04.2, 0.10.6-0+deb12u1	243
libsshrpm	0.8.5-2.el8, 0.9.0-4.el8, 0.9.4-2.el8, 0.9.4-3.el8+4 more	0:0.9.6-13.el8_8, 0:0.9.6-13.el8_9	156
opensshdeb	1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+20 more	1:7.2p2-4ubuntu2.10+esm5, 1:7.6p1-4ubuntu0.7+esm3, 1:8.2p1-4ubuntu0.10, 1:8.2p1-4ubuntu0.fips.0.10+2 more	101
paramikopypi	2.6.0, 2.7.1, 2.7.2, 2.8.0+9 more	3.4.0	58
opensshapk	9.0_p1-r1, 9.0_p1-r2, 9.0_p1-r4, 9.1_p1-r1+3 more	9.0_p1-r5, 9.1_p1-r5, 9.3_p2-r1	22
libssh2apk	1.10.0-r2, 1.10.0-r3, 1.10.0-r4	1.11.0-r0	10
paramikodeb	1.10.1-1git1ubuntu0.1	no fix listed	2
dropbeardeb	2022.83-4	no fix listed	1
php-phpseclibdeb	2.0.14-1, 2.0.30-2	2.0.30-2+deb11u1, 2.0.30-2~deb10u2	2

OSV records: ALPINE-CVE-2023-48795 DEBIAN-CVE-2023-48795 GHSA-45x7-px36-x8w8 RHSA-2024:0625 RHSA-2024:0628 UBUNTU-CVE-2023-48795 DLA-3718-1 DSA-5600-1
Also known as: GO-2023-2402, PYSEC-2026-1758, USN-6560-1, USN-6560-2, USN-6561-1

Charts affected

1,639 by stars

Chart

Latest

Affected images

Radar Score

aptlyg0dscookie

0.4.0

1 of 2 See more

aptly g0dscookie 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,481

borgmaticgabe565

0.10.1

1 of 1 See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	golang.org/x/crypto@v0.14.0	0.17.0

Open the chart page →

2,437

hammondgabe565

0.6.4

1 of 1 See more

hammond gabe565 0.6.4

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,806

limogabe565

0.8.0

1 of 1 See more

limo gabe565 0.8.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	golang.org/x/crypto@v0.6.0	0.17.0

Open the chart page →

1,330

podgrabgabe565

0.5.2

1 of 1 See more

podgrab gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,401

ldap-account-managergabibbo97

0.2.1

1 of 1 See more

ldap-account-manager gabibbo97 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :7.2	95533a96a4c1	php-phpseclib@2.0.14-1	2.0.30-2~deb10u2

Open the chart page →

2,404

galoygaloymoney

0.34.7

3 of 24 See more

galoy galoymoney 0.34.7

3 of the 24 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20231218163308-9d2ee975ef9f
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/crypto@v0.5.0	0.17.0
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/crypto@v0.1.0	0.17.0

Open the chart page →

8,679

galoygaloymoney2

0.34.7

3 of 24 See more

galoy galoymoney2 0.34.7

3 of the 24 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20231218163308-9d2ee975ef9f
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/crypto@v0.5.0	0.17.0
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/crypto@v0.1.0	0.17.0

Open the chart page →

8,679

pagesgary-pages

1.0.0

1 of 3 See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,233

airsonicgeek-cookbook

6.4.2

1 of 1 See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

18,217

apache-musicindexgeek-cookbook

2.4.2

1 of 1 See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

14,698

autobrrgeek-cookbook

1.1.3

1 of 1 See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,236

calibre-webgeek-cookbook

8.4.2

1 of 1 See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :version-0.6.12	938810eca3d3	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

16,178

dendritegeek-cookbook

6.4.0

1 of 1 See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/matrix-org/dendrite-monolith :v0.9.4	3267d27d392f	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,143

double-takegeek-cookbook

2.3.2

1 of 1 See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
jakowenko/double-take :1.6.0	b858bac9e32a	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

12,270

embygeek-cookbook

3.4.2

1 of 1 See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/emby :v4.6.1.0	5c6b8f91f1c4	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

8,584

gapsgeek-cookbook

5.4.2

1 of 1 See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
housewrecker/gaps :latest	f417dd0a7547	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

8,982

gatusgeek-cookbook

1.1.2

1 of 1 See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,881

gonicgeek-cookbook

6.4.2

1 of 1 See more

gonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
sentriz/gonic :v0.13.1	a74012a6adf3	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,525

gotifygeek-cookbook

1.2.2

1 of 1 See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
gotify/server :2.1.4	09c79bc1e403	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,131

haste-servergeek-cookbook

3.4.2

1 of 1 See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/haste-server :latest	827aa2f2389d	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

11,042

jackettgeek-cookbook

11.7.2

1 of 1 See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

9,736

lidarrgeek-cookbook

14.2.2

1 of 1 See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

14,328

maddygeek-cookbook

3.2.0

1 of 1 See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
foxcpp/maddy :v0.5.2	8fa2bd8f6830	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,630

minifluxgeek-cookbook

5.2.0

1 of 2 See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,430

navidromegeek-cookbook

6.4.2

1 of 1 See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.43.0	4e9ae3bff6aa	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,597

nzbgetgeek-cookbook

12.4.2

1 of 1 See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.2

Open the chart page →

12,124

nzbhydra2geek-cookbook

10.4.2

1 of 1 See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

17,758

openkmgeek-cookbook

4.2.0

1 of 1 See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
openkm/openkm-ce :6.3.11	3bc465a7461b	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

28,039

owncloud-ocisgeek-cookbook

2.4.2

1 of 1 See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,236

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d libssh@0.9.6-2build1	0.0.0-20231218163308-9d2ee975ef9f 0.9.6-2ubuntu0.22.04.2

Open the chart page →

19,560

puppeteergeek-cookbook

1.2.2

1 of 1 See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

15,792

qbittorrentgeek-cookbook

13.5.2

1 of 1 See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

11,855

radarrgeek-cookbook

16.3.2

1 of 1 See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.2

Open the chart page →

10,418

readarrgeek-cookbook

6.4.2

1 of 1 See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/readarr :v0.1.0.715	ad943e9309e4	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

7,806

rtsp-to-webgeek-cookbook

2.2.2

1 of 1 See more

rtsp-to-web geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,467

seafilegeek-cookbook

3.2.0

1 of 1 See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	libssh@0.9.3-2ubuntu2.1 openssh@1:8.2p1-4ubuntu0.2	0.9.3-2ubuntu2.4 1:8.2p1-4ubuntu0.10

Open the chart page →

24,355

searxgeek-cookbook

5.6.2

1 of 4 See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
library/caddy :2.2.0-alpine	7367adca165f	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,470

torrservergeek-cookbook

1.2.2

1 of 1 See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
smailkoz/torrserver :1.0.111	7b52d15de8f0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,165

transmissiongeek-cookbook

8.4.3

1 of 1 See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

11,909

vikunjageek-cookbook

6.2.0

2 of 4 See more

vikunja geek-cookbook 6.2.0

2 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
library/caddy :2.4.2-alpine	fbc51bcf1ab0	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20231218163308-9d2ee975ef9f
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

6,893

wallabaggeek-cookbook

7.2.0

1 of 1 See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
wallabag/wallabag :2.4.2	5e4c26a7fb4a	paramiko@2.7.1	3.4.0

Open the chart page →

4,357

webhook-receivergeek-cookbook

0.0.1

1 of 1 See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/geek-cookbook/webhook-receiver :2.8.1	72e7e77f8091	golang.org/x/crypto@v0.14.0	0.17.0

Open the chart page →

1,362

xtevegeek-cookbook

8.4.2

1 of 1 See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4

Open the chart page →

17,996

kafkagengxiankun-charts

0.2.0

1 of 1 See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,547

geonetwork-k8sgeonetwork-k8s

4.2.8

2 of 5 See more

geonetwork-k8s geonetwork-k8s 4.2.8

2 of the 5 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.15	88c2ec10c7f2	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.4
library/kibana :7.17.15	0172f1c538e7	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.4

Open the chart page →

34,879

istiogetindata

1.11.1

2 of 2 See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83 libssh@0.9.3-2ubuntu2.1	0.0.0-20231218163308-9d2ee975ef9f 0.9.3-2ubuntu2.4
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83 libssh@0.9.3-2ubuntu2.1	0.0.0-20231218163308-9d2ee975ef9f 0.9.3-2ubuntu2.4

Open the chart page →

16,834

ghostghost

0.1.0

1 of 4 See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
litestream/litestream :0.3	c5a1e1b01916	golang.org/x/crypto@v0.12.0	0.17.0

Open the chart page →

9,036

gitanagitana

1.4.0

1 of 1 See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,478

github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporter

0.2.15

1 of 1 See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/kalgurn/grl-exporter :v3.2.0	bd109b2bda38	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

895

Container images carrying it

1,763 by charts deploying them

A fixed version is listed for 8 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
matrixdb/kubebuilder_kube-rbac-proxy :v0.12.0	ed3c7e6291e8	golang.org/x/crypto@v0.0.0-20211115234514-b4de73f9ece8	0.0.0-20231218163308-9d2ee975ef9f	1
matrixdb/rawfile-csi :v0.2.1	95b2e38e913d	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20231218163308-9d2ee975ef9f	1
mattermost/calls-offloader :v0.9.0	b440b282599e	golang.org/x/crypto@v0.16.0	0.17.0	1
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20231218163308-9d2ee975ef9f	1
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20231218163308-9d2ee975ef9f	1
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20231218163308-9d2ee975ef9f	1
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/crypto@v0.5.0	0.17.0	1
mediagis/nominatim :3.7	c15e941485ef	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.4	1
mesosphere/dex :v2.37.0-d2iq.1	b093d78a21ed	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/dex-k8s-authenticator :v1.4.1-d2iq	f3d9982cc2fd	golang.org/x/crypto@v0.11.0	0.17.0	1
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/kubefed :proxyurl	4fd8889195fe	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f	1
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20231218163308-9d2ee975ef9f	1
metalmatze/alertmanager-bot :0.4.3	426bc2ca7586	golang.org/x/crypto@v0.0.0-20181029021203-45a5f77698d3	0.0.0-20231218163308-9d2ee975ef9f	1
milvusdb/etcd :3.5.5-r2	102aac62827b	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f	1
milvusdb/milvus :v2.2.13	a3a55e1c1497	golang.org/x/crypto@v0.9.0 libssh@0.9.3-2ubuntu2.2	0.17.0 0.9.3-2ubuntu2.4	1
milvusdb/milvus-config-tool :v0.1.1	2212dfb61401	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.0.0-20231218163308-9d2ee975ef9f	1
miniflux/miniflux :2.0.36	e2fb990dae74	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f	1
minio/kes :v0.22.2	55f3aef5803e	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b libssh@0.9.6-3.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9	1
minio/kes :2023-04-03T16-41-28Z	f93c2d9088df	golang.org/x/crypto@v0.4.0	0.17.0	1
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.0.0-20231218163308-9d2ee975ef9f	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392 libssh@0.9.4-2.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9	1
minio/mc :RELEASE.2022-05-09T04-08-26Z	4b415310d8d0	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed libssh@0.9.4-3.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9	1
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.0.0-20231218163308-9d2ee975ef9f	1
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/crypto@v0.6.0 libssh@0.9.6-3.el8	0.17.0 0:0.9.6-13.el8_9	1
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20231218163308-9d2ee975ef9f	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b libssh@0.9.4-3.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	golang.org/x/crypto@v0.7.0 libssh@0.9.6-3.el8	0.17.0 0:0.9.6-13.el8_9	1
minio/minio :RELEASE.2020-09-17T04-49-20Z	e2b7b633c250	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20231218163308-9d2ee975ef9f	1
minio/minio :RELEASE.2020-01-03T19-12-21Z	f00aa6ef2b72	golang.org/x/crypto@v0.0.0-20191117063200-497ca9f6d64f	0.0.0-20231218163308-9d2ee975ef9f	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	golang.org/x/crypto@v0.1.0 libssh@0.9.6-3.el8	0.17.0 0:0.9.6-13.el8_9	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	golang.org/x/crypto@v0.5.0 libssh@0.9.6-3.el8	0.17.0 0:0.9.6-13.el8_9	1
minio/operator :v5.0.9	170b154d2c61	golang.org/x/crypto@v0.11.0 libssh@0.9.6-10.el8_8	0.17.0 0:0.9.6-13.el8_8	1
minio/operator :v4.1.0	2adc5be088f5	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b libssh@0.9.4-2.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9	1
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20231218163308-9d2ee975ef9f	1
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20231218163308-9d2ee975ef9f	1
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20231218163308-9d2ee975ef9f	1
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20231218163308-9d2ee975ef9f	1
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20231218163308-9d2ee975ef9f	1
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.0.0-20231218163308-9d2ee975ef9f	1
monitoror/monitoror :4	4b88edcf51ff	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20231218163308-9d2ee975ef9f	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	openssh@1:9.2p1-2+deb12u1	1:9.2p1-2+deb12u2	1