StackRadar

CVE-2023-48795

Medium

Advisory

Published 18 Dec 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.933
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,640
of 17,790 indexed, latest versions
Container images
1,764
deployed by those charts
Fix available
8 of 10
affected packages

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Carried by container images the latest versions of 1,640 of 17,790 indexed charts deploy, on 1,764 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+120 more0.0.0-20231218163308-9d2ee975ef9f, 0.17.01,388
libsshdeb0.9.3-2ubuntu2.1, 0.9.3-2ubuntu2.2, 0.9.3-2ubuntu2.3, 0.9.6-2build1+2 more0.9.3-2ubuntu2.4, 0.9.6-2ubuntu0.22.04.2, 0.10.6-0+deb12u1243
libsshrpm0.8.5-2.el8, 0.9.0-4.el8, 0.9.4-2.el8, 0.9.4-3.el8+4 more0:0.9.6-13.el8_8, 0:0.9.6-13.el8_9156
opensshdeb1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+20 more1:7.2p2-4ubuntu2.10+esm5, 1:7.6p1-4ubuntu0.7+esm3, 1:8.2p1-4ubuntu0.10, 1:8.2p1-4ubuntu0.fips.0.10+2 more101
paramikopypi2.6.0, 2.7.1, 2.7.2, 2.8.0+9 more3.4.058
opensshapk9.0_p1-r1, 9.0_p1-r2, 9.0_p1-r4, 9.1_p1-r1+3 more9.0_p1-r5, 9.1_p1-r5, 9.3_p2-r122
libssh2apk1.10.0-r2, 1.10.0-r3, 1.10.0-r41.11.0-r010
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
dropbeardeb2022.83-4no fix listed1
php-phpseclibdeb2.0.14-1, 2.0.30-22.0.30-2+deb11u1, 2.0.30-2~deb10u22
OSV records
ALPINE-CVE-2023-48795DEBIAN-CVE-2023-48795GHSA-45x7-px36-x8w8RHSA-2024:0625RHSA-2024:0628UBUNTU-CVE-2023-48795DLA-3718-1DSA-5600-1
Also known as
GO-2023-2402, PYSEC-2026-1758, USN-6560-1, USN-6560-2, USN-6561-1

Charts affected

1,640 by stars
ChartLatestAffected imagesRadar Score
ai-scale-saverdysnixVerified publisher0.1.01 of 1See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
alex6021710/ai-scale-saver:latestf73e8d60fd03
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,142
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
grafana/grafana:7.4.5d322192ed2fa
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,167
heimdalldysnixVerified publisher0.0.11 of 1See more

heimdall dysnix 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
0xpolygon/heimdall:1.0.134ddf259993c
golang.org/x/crypto@v0.1.0
0.17.0

Open the chart page →

1,373
local-path-provisionerdysnixVerified publisher0.0.201 of 1See more

local-path-provisioner dysnix 0.0.20

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.20d5999b20a1b1
golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,925
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,056
servicemonitor-appsdysnixVerified publisher0.1.01 of 1See more

servicemonitor-apps dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ethpandaops/ethereum-metrics-exporter:0.21.0d1780db2e286
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,578
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,265
aeros-orchestrator-overlayeclipse-aeriosVerified publisher2.0.01 of 2See more

aeros-orchestrator-overlay eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
masipcat/wireguard-go:latest696206e5954d
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,195
iotaeclipse-aeriosVerified publisher1.0.22 of 4See more

iota eclipse-aerios 1.0.2

2 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
iotaledger/hornet:2.001206f1ba89c
golang.org/x/crypto@v0.12.0
0.17.0
iotaledger/inx-dashboard:1.012c669cb8748
golang.org/x/crypto@v0.12.0
0.17.0

Open the chart page →

13,487
llo-apieclipse-aeriosVerified publisher1.0.01 of 1See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
eclipseaerios/llo-api:1.2.0ab7a04182191
golang.org/x/crypto@v0.14.0
0.17.0

Open the chart page →

931
llo-docker-operatoreclipse-aeriosVerified publisher1.0.01 of 2See more

llo-docker-operator eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,193
llo-k8seclipse-aeriosVerified publisher1.1.01 of 2See more

llo-k8s eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,164
mintakaeclipse-aeriosVerified publisher1.0.02 of 2See more

mintaka eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
timescale/timescaledb-postgis:latest-pg127758704d4a14
golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

11,483
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.5ced93c701875
golang.org/x/crypto@v0.10.0
0.17.0

Open the chart page →

6,688
chartecr-toke-renew0.1.51 of 1See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
itzmanish/ecr-token-renew:latest02154d1c05b5
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,818
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

10,998
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libssh@0.9.3-2ubuntu2.1
0.9.3-2ubuntu2.4

Open the chart page →

20,242
grafanaedu5.3.01 of 1See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,198
prometheusedu11.6.03 of 6See more

prometheus edu 11.6.0

3 of the 6 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56
0.0.0-20231218163308-9d2ee975ef9f
prom/prometheus:v2.19.0bfad037f95e5
golang.org/x/crypto@v0.0.0-20200422194213-44a606286825
0.0.0-20231218163308-9d2ee975ef9f
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

8,491
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,337
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
openssh@1:8.2p1-4ubuntu0.13
1:8.2p1-4ubuntu0.fips.0.10

Open the chart page →

5,153
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_8

Open the chart page →

4,047
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_8

Open the chart page →

4,034
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_8

Open the chart page →

4,034
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_8

Open the chart page →

4,034
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,519
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

8,049
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
libssh@0.9.3-2ubuntu2.1
openssh@1:8.2p1-4ubuntu0.2
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10

Open the chart page →

25,263
Navidromeemmas-chartsVerified publisher0.0.41 of 1See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
deluan/navidrome:0.49.311a24da08977
golang.org/x/crypto@v0.3.0
0.17.0

Open the chart page →

2,837
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
golang.org/x/crypto@v0.12.0
0.17.0

Open the chart page →

2,243
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4

Open the chart page →

10,610
edge-operatoremqx-operator0.0.51 of 1See more

edge-operator emqx-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
emqx/edge-operator-controller:0.0.553865c1267d9
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,329
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
golang.org/x/crypto@v0.12.0
0.17.0

Open the chart page →

23,813
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/superq/smokeping-prober:v0.7.125d07dfc1d7e
golang.org/x/crypto@v0.8.0
0.17.0

Open the chart page →

6,165
eoapi-supporteoapiVerified publisher0.1.75 of 7See more

eoapi-support eoapi 0.1.7

5 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
golang.org/x/crypto@v0.11.0
0.17.0
quay.io/prometheus/node-exporter:v1.6.181f94e50ea37
golang.org/x/crypto@v0.8.0
0.17.0
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
golang.org/x/crypto@v0.11.0
0.17.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.0ec5d6f6be228
golang.org/x/crypto@v0.9.0
0.17.0
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
golang.org/x/crypto@v0.1.0
0.17.0

Open the chart page →

8,667
eoloPlanteolo-plannerVerified publisher0.1.03 of 7See more

eoloPlant eolo-planner 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
mastercloudapps/server:v2.23f3d24dfe2686
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
mastercloudapps/weatherservice:v1.23de859d29c116
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9

Open the chart page →

27,702
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
codeurjc/server:v1.0310bea5b1ee7
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
codeurjc/weatherservice:v1.0b9e2f7234349
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4

Open the chart page →

32,372
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.03 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
mastercloudapps/server:v2.23f3d24dfe2686
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
mastercloudapps/weatherservice:v1.23de859d29c116
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9

Open the chart page →

27,702
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
codeurjc/weatherservice:v1.0b9e2f7234349
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
library/mongo:4.4.66efa05203990
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

28,549
eolo-plannereolo-planner-repo0.1.02 of 7See more

eolo-planner eolo-planner-repo 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
codeurjc/weatherservice:v1.0b9e2f7234349
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4

Open the chart page →

27,197
eoloplanteoloplant1.0.03 of 7See more

eoloplant eoloplant 1.0.0

3 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
mastercloudapps/server:v2.23f3d24dfe2686
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
mastercloudapps/weatherservice:v1.23de859d29c116
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9

Open the chart page →

27,702
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
codeurjc/weatherservice:v1.0b9e2f7234349
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4

Open the chart page →

27,822
servereoloserverVerified publisher0.1.04 of 7See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
codeurjc/server:v1.0310bea5b1ee7
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
codeurjc/weatherservice:v1.0b9e2f7234349
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4

Open the chart page →

32,372
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4

Open the chart page →

9,402
epinio-uiepinioVerified publisher1.7.21 of 1See more

epinio-ui epinio 1.7.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,693
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
golang.org/x/crypto@v0.11.0
0.17.0

Open the chart page →

7,376
admin-console-operatorepmdedpVerified publisher2.14.02 of 2See more

admin-console-operator epmdedp 2.14.0

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
epamedp/admin-console-operator:2.14.090f9921d8d58
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
openssh@9.0_p1-r2
0.0.0-20231218163308-9d2ee975ef9f
9.0_p1-r5
epamedp/edp-admin-console:2.14.0616c678ba3e7
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,309
edp-argocd-operatorepmdedpVerified publisher0.2.01 of 1See more

edp-argocd-operator epmdedp 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
epamedp/edp-argocd-operator:0.2.0976a662a5e72
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,574
jenkins-operatorepmdedpVerified publisher2.15.31 of 3See more

jenkins-operator epmdedp 2.15.3

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
epamedp/jenkins-operator:2.15.328ef56bc0ca3
golang.org/x/crypto@v0.14.0
openssh@9.3_p2-r0
0.17.0
9.3_p2-r1

Open the chart page →

2,116
reconcilerepmdedpVerified publisher2.12.01 of 1See more

reconciler epmdedp 2.12.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
epamedp/reconciler:2.12.0d33e938b6d59
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,181

Container images carrying it

1,764 by charts deploying them

A fixed version is listed for 8 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
smailkoz/torrserver:1.0.1117b52d15de8f0
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20231218163308-9d2ee975ef9f
1
snipe/snipe-it:v6.0.1455fb7636a98c
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
openssh@1:9.2p1-2
1:9.2p1-2+deb12u2
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
openssh@1:9.2p1-2
1:9.2p1-2+deb12u2
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
openssh@1:9.2p1-2
1:9.2p1-2+deb12u2
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
openssh@1:9.2p1-2
1:9.2p1-2+deb12u2
1
softonic/node-policy-webhook:0.1.2ab6098c04a53
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20231218163308-9d2ee975ef9f
1
softonic/pod-defaulter:0.1.072017aed5902
golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de
0.0.0-20231218163308-9d2ee975ef9f
1
softonic/rate-limit-operator:0.1.1910f6de37763
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20231218163308-9d2ee975ef9f
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4
1
sonatype/nexus3:3.53.04bd975493104
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
1
sonatype/nexus3:3.58.1586060431b64
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_8
1
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20231218163308-9d2ee975ef9f
1
splunk/splunk-operator:2.0.0c4e0d3146226
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
libssh@0.9.6-3.el8
0.0.0-20231218163308-9d2ee975ef9f
0:0.9.6-13.el8_9
1
springhack/frpc_ingress:latest4aceb821da88
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f
1
sstarcher/ecr-cleaner:0.1.12d43c390cb19
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.0.0-20231218163308-9d2ee975ef9f
1
sstarcher/helm-exporter:0.5.011769d01ba35
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
0.0.0-20231218163308-9d2ee975ef9f
1
sstarcher/kube-ebs-tagger:0.1.01f8cae8cfa80
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
0.0.0-20231218163308-9d2ee975ef9f
1
stackstorm/st2actionrunner:3.888235ba70cad
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2api:3.86f56d239d280
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2auth:3.833ecfda16608
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2notifier:3.8f190a6212195
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2rulesengine:3.8259503496ff9
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2scheduler:3.8b1de2055c362
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2stream:3.81c8904a3bf67
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2timersengine:3.81bf35bfaf00c
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stackstorm/st2web:3.809989a26c8b7
libssh@0.9.3-2ubuntu2.3
0.9.3-2ubuntu2.4
1
stackstorm/st2workflowengine:3.819fdfffdbba8
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.9
paramiko@2.11.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
stakater/tronador:v0.0.137ce9acf2722
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20231218163308-9d2ee975ef9f
1
stakater/whitelister:v0.0.1639107924063e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20231218163308-9d2ee975ef9f
1
stakater/workshop-operator:v0.0.3897bf456cc97c
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
libssh@0.9.4-3.el8
0.0.0-20231218163308-9d2ee975ef9f
0:0.9.6-13.el8_9
1
stakkato95/twitter-service-analytics:0.1.05d48906d66b3
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f
1
stakkato95/twitter-service-tweets:0.1.18412d8a8cac3
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f
1
stakkato95/twitter-service-users:0.1.1456049efee9a
golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898
0.0.0-20231218163308-9d2ee975ef9f
1
stashapp/stash:latest24dbd7607174
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
libssh@0.9.3-2ubuntu2.1
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4
1
statcan/ckan:2.93921305425b8
libssh@0.9.3-2ubuntu2.1
openssh@1:8.2p1-4ubuntu0.2
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
1
statcan/ingress-istio-controller:1.4.0d7d6bd180c46
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f
1
statcan/kubernetes-sidecar-terminator:2.0.2bc361ee7748f
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.0.0-20231218163308-9d2ee975ef9f
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
libssh@0.9.3-2ubuntu2.1
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20231218163308-9d2ee975ef9f
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab
0.0.0-20231218163308-9d2ee975ef9f
1
su541/cert-manager-desec-webhook:latest371ee33f83c1
golang.org/x/crypto@v0.5.0
0.17.0
1
subspacecommunity/subspace:1.5.0e2042b63fb35
golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37
0.0.0-20231218163308-9d2ee975ef9f
1
summerwind/actions-runner-controller:v0.27.62128f81dbede
golang.org/x/crypto@v0.11.0
0.17.0
1
supabase/gotrue:v2.91.07174d551d720
golang.org/x/crypto@v0.9.0
0.17.0
1
superorbital/cludod:0.0.2-alphad59732f61d6e
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.0.0-20231218163308-9d2ee975ef9f
1
surajwarbhe/grafana:v185248611e9f1
golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71
0.0.0-20231218163308-9d2ee975ef9f
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.