CVE-2023-48795

Medium

Advisory

Published 18 Dec 2023In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.933; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,639; of 17,792 indexed, latest versions
Container images: 1,763; deployed by those charts
Fix available: 8 of 10; affected packages

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Carried by container images the latest versions of 1,639 of 17,792 indexed charts deploy, on 1,763 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+120 more	0.0.0-20231218163308-9d2ee975ef9f, 0.17.0	1,387
libsshdeb	0.9.3-2ubuntu2.1, 0.9.3-2ubuntu2.2, 0.9.3-2ubuntu2.3, 0.9.6-2build1+2 more	0.9.3-2ubuntu2.4, 0.9.6-2ubuntu0.22.04.2, 0.10.6-0+deb12u1	243
libsshrpm	0.8.5-2.el8, 0.9.0-4.el8, 0.9.4-2.el8, 0.9.4-3.el8+4 more	0:0.9.6-13.el8_8, 0:0.9.6-13.el8_9	156
opensshdeb	1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+20 more	1:7.2p2-4ubuntu2.10+esm5, 1:7.6p1-4ubuntu0.7+esm3, 1:8.2p1-4ubuntu0.10, 1:8.2p1-4ubuntu0.fips.0.10+2 more	101
paramikopypi	2.6.0, 2.7.1, 2.7.2, 2.8.0+9 more	3.4.0	58
opensshapk	9.0_p1-r1, 9.0_p1-r2, 9.0_p1-r4, 9.1_p1-r1+3 more	9.0_p1-r5, 9.1_p1-r5, 9.3_p2-r1	22
libssh2apk	1.10.0-r2, 1.10.0-r3, 1.10.0-r4	1.11.0-r0	10
paramikodeb	1.10.1-1git1ubuntu0.1	no fix listed	2
dropbeardeb	2022.83-4	no fix listed	1
php-phpseclibdeb	2.0.14-1, 2.0.30-2	2.0.30-2+deb11u1, 2.0.30-2~deb10u2	2

OSV records: ALPINE-CVE-2023-48795 DEBIAN-CVE-2023-48795 GHSA-45x7-px36-x8w8 RHSA-2024:0625 RHSA-2024:0628 UBUNTU-CVE-2023-48795 DLA-3718-1 DSA-5600-1
Also known as: GO-2023-2402, PYSEC-2026-1758, USN-6560-1, USN-6560-2, USN-6561-1

Charts affected

1,639 by stars

Chart

Latest

Affected images

Radar Score

katibcowboysysop

2.4.2

2 of 4 See more

katib cowboysysop 2.4.2

2 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
kubeflowkatib/katib-controller :v0.12.0	12a28c8a0b41	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f
kubeflowkatib/katib-ui :v0.12.0	129f0aaba976	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

6,563

kfservingcowboysysop

1.3.1

1 of 3 See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
kfserving/kfserving-controller :v0.6.1	63d79d04c2e3	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,837

mongodbcowboysysop

15.1.5

1 of 1 See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :7.0.8-debian-12-r2	3163c3842bfd	golang.org/x/crypto@v0.14.0	0.17.0

Open the chart page →

6,214

mpi-operatorcowboysysop

1.2.2

1 of 1 See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
mpioperator/mpi-operator :0.3.0	3ccfa8d8b7bf	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,577

notebook-controllercowboysysop

1.1.2

1 of 1 See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,582

training-operatorcowboysysop

1.2.2

1 of 1 See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,275

cp-helm-chartscp-helm-charts

0.6.1

7 of 8 See more

cp-helm-charts cp-helm-charts 0.6.1

7 of the 8 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	libssh@0.9.4-2.el8	0:0.9.6-13.el8_9

Open the chart page →

58,869

logstream-mastercriblio

2.9.9

1 of 1 See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
cribl/cribl :3.0.2	762747cb6796	openssh@1:7.6p1-4ubuntu0.3	1:7.6p1-4ubuntu0.7+esm3

Open the chart page →

9,296

crossplane-controllerscrossplane

0.12.0

1 of 1 See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
crossplane/crossplane :v0.12.0	66666e6963af	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,312

oam-kubernetes-runtimecrossplane

0.0.3-71.g0f23590

1 of 2 See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.0.3-71.g0f23590	0112171c45e3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,248

oam-kubernetes-runtime-legacycrossplane

0.3.1-5.g11e1894

1 of 1 See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
crossplane/oam-kubernetes-runtime :v0.3.1-5.g11e1894	07b8b410dc76	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,231

external-service-operatorcrowdfox

0.1.0

1 of 1 See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
crowdfox/external-service-operator :v1.1.0	6fa7e8063d27	golang.org/x/crypto@v0.0.0-20190605123033-f99c8df09eb5	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,631

electric-mailcryptexlabs

0.0.1

1 of 5 See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,980

purple-piecryptexlabs

0.0.1

1 of 4 See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.8.3	4db614d40d0e	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,980

pagescrypticcode-helmchart

1.0.0

1 of 3 See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

openldapcsic-charts

0.1.1

2 of 2 See more

openldap csic-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	php-phpseclib@2.0.30-2	2.0.30-2+deb11u1
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,294

rtcsic-charts

0.1.1

1 of 5 See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dtzar/helm-kubectl :3.11.2	a1041bb0f1d1	golang.org/x/crypto@v0.5.0 openssh@9.1_p1-r2	0.17.0 9.1_p1-r5

Open the chart page →

15,419

wazuhcsic-charts

0.1.0

1 of 4 See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/crypto@v0.4.0 libssh@0.9.3-2ubuntu2.2	0.17.0 0.9.3-2ubuntu2.4

Open the chart page →

13,944

irods-csi-drivercyverse

0.12.0

1 of 4 See more

irods-csi-driver cyverse 0.12.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,288

domain-exporterd0main-exp0rter

0.1.0

1 of 1 See more

domain-exporter d0main-exp0rter 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/crypto@v0.0.0-20211215165025-cf75a172585e	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,832

jupyterhubd4n

3.3.7

1 of 7 See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
aristidetm/basic-notebook :3.6.5	469dbc951224	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

16,683

pagesdalston-pages

1.0.0

1 of 3 See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

pagesdaman-dell-kuber

1.0.0

1 of 3 See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

home-assistantdamoun

1.1.0

1 of 1 See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2023.11.3	feffc0b8227d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad libssh2@1.10.0-r4 openssh@9.3_p2-r0 paramiko@3.3.1	0.0.0-20231218163308-9d2ee975ef9f 1.11.0-r0 9.3_p2-r1 3.4.0

Open the chart page →

6,179

grafana-agentdandydev-charts

0.19.2

1 of 1 See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
grafana/agent :v0.20.0	825c09373d27	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,246

cloudwatch-agent-prometheusdasmeta

0.2.2

1 of 1 See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,985

mongodb-bi-connectordasmeta

1.0.3

1 of 1 See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dasmeta/mongodb-bi-connector :1.0.3	fa657960dfec	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,841

nfs-provisionerdasmeta

1.0.3

1 of 1 See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,806

adot-exporter-for-eks-on-ec2dasmeta-adot

0.15.5

1 of 1 See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
amazon/aws-otel-collector :v0.27.0	d8ab0eef5074	golang.org/x/crypto@v0.1.0	0.17.0

Open the chart page →

1,933

datadog-operatordatadog-test

0.1.2

1 of 1 See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
datadog/operator :0.3.1	17f08a860090	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,978

agent-helmdatasaker

0.1.8

4 of 6 See more

agent-helm datasaker 0.1.8

4 of the 6 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
datasaker/dsk-container-agent :latest	08b52999f67b	golang.org/x/crypto@v0.14.0	0.17.0
datasaker/dsk-kube-state-agent :latest	d6d2eb48589d	golang.org/x/crypto@v0.14.0	0.17.0
datasaker/dsk-node-agent :latest	1b95913b6729	golang.org/x/crypto@v0.14.0	0.17.0
datasaker/dsk-process-agent :latest	2f38720a637d	golang.org/x/crypto@v0.13.0	0.17.0

Open the chart page →

7,606

ambassador-operatordatawire

0.3.0

1 of 1 See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
datawire/ambassador-operator :v1.3.0	f95ae710d75c	golang.org/x/crypto@v0.0.0-20191028145041-f83a4685e152 libssh@0.9.4-2.el8	0.0.0-20231218163308-9d2ee975ef9f 0:0.9.6-13.el8_9

Open the chart page →

7,494

eg-edge-stackdatawire

0.0.1

2 of 7 See more

eg-edge-stack datawire 0.0.1

2 of the 7 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ambassador/aes-authsvc :v4.0.0-preview.1	2a4598b03a6a	golang.org/x/crypto@v0.10.0	0.17.0
ambassador/aes-wafsvc :v4.0.0-preview.1	5fc571509b8c	golang.org/x/crypto@v0.10.0	0.17.0

Open the chart page →

15,861

pagesdavid-pages

1.0.0

1 of 3 See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

pagesdebasish-pages

1.0.0

1 of 3 See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.4

Open the chart page →

20,242

symfony-appdefault-gh

0.6.5

1 of 3 See more

symfony-app default-gh 0.6.5

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
alpine/git :2.36.3	66b210a97bc0	golang.org/x/crypto@v0.0.0-20221005025214-4161e89ecf1b openssh@9.0_p1-r2	0.0.0-20231218163308-9d2ee975ef9f 9.0_p1-r5

Open the chart page →

5,123

cortex-gatewaydeliveryhero

0.1.9

1 of 1 See more

cortex-gateway deliveryhero 0.1.9

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,241

k8s-cloudwatch-adapterdeliveryhero

0.2.2

1 of 1 See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
chankh/k8s-cloudwatch-adapter :v0.9.0	963c44c7f8b1	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,475

deploy-elibrarydeploy-elibrary-helm

0.1.0

1 of 1 See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
psorab/elibrary :latest	53b68896c4ce	libssh@0.9.3-2ubuntu2.2 openssh@1:8.2p1-4ubuntu0.7	0.9.3-2ubuntu2.4 1:8.2p1-4ubuntu0.10

Open the chart page →

7,254

deploy-elibrarydeploy-elibrary-oo

0.1.0

1 of 1 See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
jedi132000/nextapp :latest	dc2a81e92f23	libssh@0.9.3-2ubuntu2.2 openssh@1:8.2p1-4ubuntu0.5	0.9.3-2ubuntu2.4 1:8.2p1-4ubuntu0.10

Open the chart page →

8,149

kubeteach-coredergeberl

0.2.3

1 of 1 See more

kubeteach-core dergeberl 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,505

kubeteach-exerciseset1dergeberl

0.2.3

1 of 2 See more

kubeteach-exerciseset1 dergeberl 0.2.3

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/dergeberl/kubeteach :v0.2.3-alpha	cf4428a3c79e	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,505

seafilederp

3.2.0

1 of 1 See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :10.0.1	70628f29c663	libssh@0.9.3-2ubuntu2.3 openssh@1:8.2p1-4ubuntu0.7	0.9.3-2ubuntu2.4 1:8.2p1-4ubuntu0.10

Open the chart page →

14,920

apachedevops

0.1.0

1 of 4 See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	libssh@0.9.6-2build1 openssh@1:8.9p1-3	0.9.6-2ubuntu0.22.04.2 1:8.9p1-3ubuntu0.5

Open the chart page →

30,156

laraveldevops

0.10.3

1 of 4 See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	libssh@0.9.6-2build1 openssh@1:8.9p1-3	0.9.6-2ubuntu0.22.04.2 1:8.9p1-3ubuntu0.5

Open the chart page →

29,157

kyvernodevopstales

2.5.1

2 of 2 See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,735

octolxddevplayer0

0.1.1

1 of 1 See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,525

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20231218163308-9d2ee975ef9f
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

10,484

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd libssh@0.9.6-2build1 openssh@1:8.9p1-3ubuntu0.1	0.0.0-20231218163308-9d2ee975ef9f 0.9.6-2ubuntu0.22.04.2 1:8.9p1-3ubuntu0.5

Open the chart page →

13,011

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/crypto@v0.7.0	0.17.0

Open the chart page →

1,587

Container images carrying it

1,763 by charts deploying them

A fixed version is listed for 8 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/knative-releases/knative.dev/serving/cmd/activator	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.10.2	98a2cc7fd62e	golang.org/x/crypto@v0.1.0	0.17.0	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	bac158dfb0c7	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	d27b4495ccc3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/crypto@v0.15.0	0.17.0	1
gcr.io/kubecost1/cost-model :prod-1.82.2	989a60847416	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/ml-pipeline/workflow-controller :v3.3.8-license-compliance	6c8e4e2a6443	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	golang.org/x/crypto@v0.1.0	0.17.0	1
gcr.io/projectsigstore/cosigned	784518ff3ee7	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f	1
gcr.io/projectsigstore/policy-webhook	82940e8c3e0d	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/akhilrex/podgrab :1.0.0	bce133f3f511	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	golang.org/x/crypto@v0.1.0	0.17.0	1
ghcr.io/angelscloud/prometheus-optimizer :latest	744bc929a579	golang.org/x/crypto@v0.15.0	0.17.0	1
ghcr.io/appscode/auditor :v0.0.1	c62c89ee706d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/appscode/capa-vpc-peering-operator :v0.0.4	b1557553a2b3	golang.org/x/crypto@v0.15.0	0.17.0	1
ghcr.io/appscode/docker-machine-operator :v0.0.4	81f6007abb4e	golang.org/x/crypto@v0.12.0	0.17.0	1
ghcr.io/appscode/grafana :v2025.2.3	67d18880448c	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/appscode/kube-rbac-proxy :v0.15.0	d8cc6ffb9819	golang.org/x/crypto@v0.14.0	0.17.0	1
ghcr.io/aquasecurity/trivy-operator :0.16.0	a608b798fda5	golang.org/x/crypto@v0.12.0	0.17.0	1
ghcr.io/astriaorg/ria-faucet :0.0.1	a06c8ebef427	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/autobrr/autobrr :v1.10.0	d4022cd32df5	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/banzaicloud/kafka-operator :v0.25.1	13dcbc7ebfc6	golang.org/x/crypto@v0.7.0	0.17.0	1
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/banzaicloud/logging-operator :3.17.10	1b530cf7c07f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/beezlabs-org/cloudflare-tunnel-operator :v0.1.0	9afcd070940f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/beluga-cloud/helm-dashboard/dashboard :1.3.3	9ab9a675c405	golang.org/x/crypto@v0.14.0	0.17.0	1
ghcr.io/blakeblackshear/frigate :0.14.1	22e3d0b486df	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/borgmatic-collective/borgmatic :1.9.9	835b72878606	golang.org/x/crypto@v0.14.0	0.17.0	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	golang.org/x/crypto@v0.3.0 libssh@0.9.3-2ubuntu2.2 openssh@1:8.2p1-4ubuntu0.5	0.17.0 0.9.3-2ubuntu2.4 1:8.2p1-4ubuntu0.10	1
ghcr.io/caarlos0/domain_exporter :v1.18.0-arm64	c852606428cf	golang.org/x/crypto@v0.0.0-20211215165025-cf75a172585e	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/camptocamp/terraboard :v2.3.0	df53e2c8998c	golang.org/x/crypto@v0.14.0	0.17.0	1
ghcr.io/camunda-community-hub/zeebe-simple-monitor :2.6.2	d9d796a1b846	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.2	1
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.0.0-20231218163308-9d2ee975ef9f	1
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.0.0-20231218163308-9d2ee975ef9f	1