StackRadar

CVE-2023-48795

Medium

Advisory

Published 18 Dec 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.933
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,640
of 17,790 indexed, latest versions
Container images
1,764
deployed by those charts
Fix available
8 of 10
affected packages

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Carried by container images the latest versions of 1,640 of 17,790 indexed charts deploy, on 1,764 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+120 more0.0.0-20231218163308-9d2ee975ef9f, 0.17.01,388
libsshdeb0.9.3-2ubuntu2.1, 0.9.3-2ubuntu2.2, 0.9.3-2ubuntu2.3, 0.9.6-2build1+2 more0.9.3-2ubuntu2.4, 0.9.6-2ubuntu0.22.04.2, 0.10.6-0+deb12u1243
libsshrpm0.8.5-2.el8, 0.9.0-4.el8, 0.9.4-2.el8, 0.9.4-3.el8+4 more0:0.9.6-13.el8_8, 0:0.9.6-13.el8_9156
opensshdeb1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+20 more1:7.2p2-4ubuntu2.10+esm5, 1:7.6p1-4ubuntu0.7+esm3, 1:8.2p1-4ubuntu0.10, 1:8.2p1-4ubuntu0.fips.0.10+2 more101
paramikopypi2.6.0, 2.7.1, 2.7.2, 2.8.0+9 more3.4.058
opensshapk9.0_p1-r1, 9.0_p1-r2, 9.0_p1-r4, 9.1_p1-r1+3 more9.0_p1-r5, 9.1_p1-r5, 9.3_p2-r122
libssh2apk1.10.0-r2, 1.10.0-r3, 1.10.0-r41.11.0-r010
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
dropbeardeb2022.83-4no fix listed1
php-phpseclibdeb2.0.14-1, 2.0.30-22.0.30-2+deb11u1, 2.0.30-2~deb10u22
OSV records
ALPINE-CVE-2023-48795DEBIAN-CVE-2023-48795GHSA-45x7-px36-x8w8RHSA-2024:0625RHSA-2024:0628UBUNTU-CVE-2023-48795DLA-3718-1DSA-5600-1
Also known as
GO-2023-2402, PYSEC-2026-1758, USN-6560-1, USN-6560-2, USN-6561-1

Charts affected

1,640 by stars
ChartLatestAffected imagesRadar Score
codebase-operatorepmdedp-devVerified publisher2.12.0-MDTU-DDM-SNAPSHOT.101 of 1See more

codebase-operator epmdedp-dev 2.12.0-MDTU-DDM-SNAPSHOT.10

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
epamedp/codebase-operator:2.12.0-MDTU-DDM-SNAPSHOT.1096028c86f0dd
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,826
gerrit-operatorepmdedp-devVerified publisher2.11.0-MDTU-DDM-SNAPSHOT.21 of 1See more

gerrit-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
epamedp/gerrit-operator:2.11.0-MDTU-DDM-SNAPSHOT.2b71fb39e0c9e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,812
jenkins-operatorepmdedp-devVerified publisher2.11.0-MDTU-DDM-SNAPSHOT.11 of 1See more

jenkins-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
epamedp/jenkins-operator:2.11.0-MDTU-DDM-SNAPSHOT.1ff25e9fe4419
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,267
keycloak-operatorepmdedp-devVerified publisher1.11.0-MDTU-DDM-SNAPSHOT.101 of 1See more

keycloak-operator epmdedp-dev 1.11.0-MDTU-DDM-SNAPSHOT.10

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
epamedp/keycloak-operator:1.11.0-MDTU-DDM-SNAPSHOT.105d352199e12e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,234
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
3.4.0

Open the chart page →

4,678
blob-me-babyethereum-helm-chartsVerified publisher0.1.21 of 1See more

blob-me-baby ethereum-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ethpandaops/blob-me-baby:latestad26158420dd
golang.org/x/crypto@v0.14.0
0.17.0

Open the chart page →

1,462
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

12,202
dugtrioethereum-helm-chartsVerified publisher0.0.71 of 1See more

dugtrio ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ethpandaops/dugtrio:1.0.0e261d1734e9f
golang.org/x/crypto@v0.10.0
0.17.0

Open the chart page →

1,145
eth-faucetethereum-helm-chartsVerified publisher0.1.11 of 1See more

eth-faucet ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
chainflag/eth-faucet:latestac642796bcb6
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,996
forkmonethereum-helm-chartsVerified publisher0.1.61 of 1See more

forkmon ethereum-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
holiman/nodemonitor:latest5cd609761065
golang.org/x/crypto@v0.8.0
0.17.0

Open the chart page →

1,694
ethexporterethersphereVerified publisher0.3.01 of 1See more

ethexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
darkobas/ethexporter:latest62e6464491ba
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,394
geth-swapethersphereVerified publisher0.6.31 of 2See more

geth-swap ethersphere 0.6.3

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ethereum/client-go:v1.10.186d6d12a40465
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,756
onboarding-faucetethersphereVerified publisher0.2.01 of 1See more

onboarding-faucet ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ethersphere/onboarding-faucet:0.3.0513154aab230
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,320
tokenexporterethersphereVerified publisher0.3.01 of 1See more

tokenexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
darkobas/tokenexporter:latesta0349a0eedf0
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,394
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
golang.org/x/crypto@v0.0.0-20220210151621-f4118a5b28e2
libssh@0.9.3-2ubuntu2.1
openssh@1:8.2p1-4ubuntu0.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10

Open the chart page →

20,983
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2

Open the chart page →

6,041
exa-csiexa-csi-driver0.2.0-rev21 of 6See more

exa-csi exa-csi-driver 0.2.0-rev2

1 of the 6 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,091
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
simpleidserver/faasprometheus:0.0.425e378d57d78
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,704
degafactlyVerified publisher0.11.132 of 3See more

dega factly 0.11.13

2 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
factly/dega-api:0.15.166fafc7b0a17
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f
factly/dega-server:0.15.194d21479382e
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,747
kavachfactlyVerified publisher0.9.51 of 2See more

kavach factly 0.9.5

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
factly/kavach-server:0.22.3be85ff1b9bd3
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,573
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
factly/mande-server:0.34.1384d384310ef
golang.org/x/crypto@v0.1.0
0.17.0

Open the chart page →

4,785
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
golang.org/x/crypto@v0.10.0
0.17.0

Open the chart page →

1,743
stackdriver-metrics-adapterfairwinds-incubator0.3.01 of 1See more

stackdriver-metrics-adapter fairwinds-incubator 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,765
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
libssh@0.9.6-2build1
openssh@1:8.9p1-3
0.0.0-20231218163308-9d2ee975ef9f
0.9.6-2ubuntu0.22.04.2
1:8.9p1-3ubuntu0.5

Open the chart page →

13,502
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4

Open the chart page →

7,523
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152
paramiko@2.6.0
0.0.0-20231218163308-9d2ee975ef9f
3.4.0

Open the chart page →

14,692
fickyhelmappfickyhelmapp1.1.01 of 1See more

fickyhelmapp fickyhelmapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
golang.org/x/crypto@v0.0.0-20211108221036-ceb1ce70b4fa
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,318
grgatefikaworks0.3.41 of 1See more

grgate fikaworks 0.3.4

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/fikaworks/grgate:v0.6.37104f60d8972
golang.org/x/crypto@v0.7.0
0.17.0

Open the chart page →

1,080
first-matefirst-mateVerified publisher1.0.51 of 1See more

first-mate first-mate 1.0.5

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
chriswells0/first-mate:1.0.5f3918ec8471c
libssh2@1.10.0-r4
1.11.0-r0

Open the chart page →

1,722
apollofiware0.1.41 of 1See more

apollo fiware 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/fiware/apollo:0.0.1055330b1b60c1
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9

Open the chart page →

6,936
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
openssh@1:8.2p1-4ubuntu0.13
1:8.2p1-4ubuntu0.fips.0.10

Open the chart page →

64,668
canis-majorfiware0.2.31 of 1See more

canis-major fiware 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
libssh@0.9.4-3.el8
0:0.9.6-13.el8_9

Open the chart page →

8,528
dsba-pdpfiware0.1.21 of 2See more

dsba-pdp fiware 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
golang.org/x/crypto@v0.1.0
0.17.0

Open the chart page →

4,105
dss-validation-servicefiware0.0.191 of 1See more

dss-validation-service fiware 0.0.19

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9

Open the chart page →

4,536
endpoint-auth-servicefiware0.1.42 of 4See more

endpoint-auth-service fiware 0.1.4

2 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
quay.io/fiware/ishare-auth-provider:0.4.3158108f70f95
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

11,836
mintakafiware0.4.71 of 1See more

mintaka fiware 0.4.7

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
fiware/mintaka:latestefc6793388cc
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9

Open the chart page →

7,019
orionfiware1.6.111 of 2See more

orion fiware 1.6.11

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
libssh@0.9.4-2.el8
0:0.9.6-13.el8_9

Open the chart page →

10,638
trusted-issuers-registryfiware0.13.01 of 1See more

trusted-issuers-registry fiware 0.13.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9

Open the chart page →

7,087
grafanaflagger1.7.01 of 1See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
grafana/grafana:7.3.46d42886b3ebe
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,372
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
golang.org/x/crypto@v0.9.0
0.17.0

Open the chart page →

6,150
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
golang.org/x/crypto@v0.1.0
0.17.0
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
golang.org/x/crypto@v0.14.0
0.17.0

Open the chart page →

5,709
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
paramiko@2.11.0
3.4.0

Open the chart page →

4,089
flinkflink0.5.11 of 1See more

flink flink 0.5.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/flink:1.14.6-scala_2.122461f02672b3
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2

Open the chart page →

5,693
floriapp-mongodbfloriapp1.0.01 of 1See more

floriapp-mongodb floriapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

8,049
fluent-operatorfluent-operatorVerified publisher0.1.01 of 2See more

fluent-operator fluent-operator 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
kubesphere/fluent-operator:v1.0.2702df77228c6
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,631
flyte-depsflyte1.16.81 of 3See more

flyte-deps flyte 1.16.8

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,245
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
golang.org/x/crypto@v0.4.0
0.17.0

Open the chart page →

4,650
forwardforward1.3.11 of 1See more

forward forward 1.3.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
udhos/forward:1.1.312e120d39fdb
golang.org/x/crypto@v0.9.0
0.17.0

Open the chart page →

2,212
maxscalefour-allportalVerified publisher4.1.161 of 3See more

maxscale four-allportal 4.1.16

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
bitnamilegacy/mysqld-exporter:0.14.0-debian-11-r10304768b637c94
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

6,610
readium-lcpserverfpetr0.0.51 of 3See more

readium-lcpserver fpetr 0.0.5

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver:1.9.0324f9b7b689c
golang.org/x/crypto@v0.14.0
0.17.0

Open the chart page →

1,373

Container images carrying it

1,764 by charts deploying them

A fixed version is listed for 8 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
golang.org/x/crypto@v0.4.0
libssh@0.9.3-2ubuntu2.3
0.17.0
0.9.3-2ubuntu2.4
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
golang.org/x/crypto@v0.7.0
libssh@0.9.3-2ubuntu2.3
openssh@1:8.2p1-4ubuntu0.7
paramiko@2.11.0
0.17.0
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10
3.4.0
1
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
golang.org/x/crypto@v0.16.0
0.17.0
1
syncthing/syncthing:1.18.2966433161272
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.0.0-20231218163308-9d2ee975ef9f
1
tdengine/tdengine:3.0.2.24140a4021ddb
golang.org/x/crypto@v0.4.0
0.17.0
1
temporalio/admin-tools:1.22.4258958fe2ff2
golang.org/x/crypto@v0.14.0
0.17.0
1
temporalio/admin-tools:1.22.0836af062af30
golang.org/x/crypto@v0.10.0
0.17.0
1
temporalio/server:1.26.21e2626efcbc1
golang.org/x/crypto@v0.14.0
0.17.0
1
temporalio/server:1.25.08a5798191dea
golang.org/x/crypto@v0.14.0
0.17.0
1
temporalio/server:1.22.0ddeebf8bad8f
golang.org/x/crypto@v0.12.0
0.17.0
1
temporalio/server:1.15.1e26758f5a1bf
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f
1
temporalio/ui:2.30.25c2a3645d09c
golang.org/x/crypto@v0.14.0
0.17.0
1
temporalio/ui:2.33.05c586a3c8ec5
golang.org/x/crypto@v0.14.0
0.17.0
1
thanosio/thanos:v0.19.088276fcd1491
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20231218163308-9d2ee975ef9f
1
thanosio/thanos:v0.15.0b12d5c31bf5a
golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de
0.0.0-20231218163308-9d2ee975ef9f
1
thecampagnards/trafficlight-api:main7dca9d973837
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.0.0-20231218163308-9d2ee975ef9f
1
thesisrobot/lnd:v0.16.4-beta-c287129953689
golang.org/x/crypto@v0.7.0
0.17.0
1
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20231218163308-9d2ee975ef9f
1
thmmniii/fbs-core:v1.27.15438517d9fc2
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
1
thmmniii/fbs-runner:v1.27.186105349c1a3
golang.org/x/crypto@v0.1.0
0.17.0
1
thomseddon/traefik-forward-auth:269a2c985d2c5
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20231218163308-9d2ee975ef9f
1
thomseddon/traefik-forward-auth:latestb364aa6a4117
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20231218163308-9d2ee975ef9f
1
thomseddon/traefik-forward-auth:2.2.0e875194d67e2
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20231218163308-9d2ee975ef9f
1
thongngo3301/stakefish:latesta341af5976e3
openssh@1:9.2p1-2
1:9.2p1-2+deb12u2
1
timescale/timescaledb:latest-pg12645fd9e92d76
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.0.0-20231218163308-9d2ee975ef9f
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
libssh@0.9.6-2build1
0.0.0-20231218163308-9d2ee975ef9f
0.9.6-2ubuntu0.22.04.2
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
libssh@0.9.6-2build1
0.0.0-20231218163308-9d2ee975ef9f
0.9.6-2ubuntu0.22.04.2
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7
libssh@0.9.6-2build1
0.0.0-20231218163308-9d2ee975ef9f
0.9.6-2ubuntu0.22.04.2
1
timescale/timescaledb-postgis:latest-pg127758704d4a14
golang.org/x/crypto@v0.0.0-20190911031432-227b76d455e7
0.0.0-20231218163308-9d2ee975ef9f
1
timonwong/prometheus-webhook-dingtalk:v1.4.0a0fcc028bd8d
golang.org/x/crypto@v0.0.0-20191205180655-e7c4368fe9dd
0.0.0-20231218163308-9d2ee975ef9f
1
tobiasbp/db-backup:0.0.314bee6e33a26
golang.org/x/crypto@v0.0.0-20200109152110-61a87790db17
0.0.0-20231218163308-9d2ee975ef9f
1
tobirachel/node-project3:v17d9f37154994
golang.org/x/crypto@v0.0.0-20211108221036-ceb1ce70b4fa
0.0.0-20231218163308-9d2ee975ef9f
1
toucansoftware/spa-reloader:latestc187b1fba501
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20231218163308-9d2ee975ef9f
1
traefik/mesh:v1.4.8cf071f3e165c
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.0.0-20231218163308-9d2ee975ef9f
1
traggo/server:0.2.3f1ced637510e
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
0.0.0-20231218163308-9d2ee975ef9f
1
treeverse/lakefs:0.69.0478f37a6cffc
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f
1
trinodb/trino:405ee80ab5eeab2
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
1
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
golang.org/x/crypto@v0.0.0-20211108221036-ceb1ce70b4fa
0.0.0-20231218163308-9d2ee975ef9f
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f
1
tusproject/tusd:v1.13.0f8088058b80f
golang.org/x/crypto@v0.12.0
0.17.0
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88
0.0.0-20231218163308-9d2ee975ef9f
1
twinproduction/gatus:v3.8.049dc0d9b2e2c
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f
1
ubercadence/server:0.23.22ac5491d13bb
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f
1
udhos/forward:1.1.312e120d39fdb
golang.org/x/crypto@v0.9.0
0.17.0
1
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f
1
vearch/vearch:3.3.40768af33f9d9
golang.org/x/crypto@v0.9.0
0.17.0
1
velero/velero:v1.9.0277fbfaf8dcf
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f
1
velero/velero:v1.8.18d784580931c
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f
1
vikunja/api:0.17.18cba0520bf8c
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.0.0-20231218163308-9d2ee975ef9f
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
libssh@0.9.4-3.el8
0:0.9.6-13.el8_9
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.