StackRadar

CVE-2023-48795

Medium

Advisory

Published 18 Dec 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.933
100th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,639
of 17,787 indexed, latest versions
Container images
1,762
deployed by those charts
Fix available
8 of 10
affected packages

Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin

Carried by container images the latest versions of 1,639 of 17,787 indexed charts deploy, on 1,762 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+120 more0.0.0-20231218163308-9d2ee975ef9f, 0.17.01,386
libsshdeb0.9.3-2ubuntu2.1, 0.9.3-2ubuntu2.2, 0.9.3-2ubuntu2.3, 0.9.6-2build1+2 more0.9.3-2ubuntu2.4, 0.9.6-2ubuntu0.22.04.2, 0.10.6-0+deb12u1243
libsshrpm0.8.5-2.el8, 0.9.0-4.el8, 0.9.4-2.el8, 0.9.4-3.el8+4 more0:0.9.6-13.el8_8, 0:0.9.6-13.el8_9156
opensshdeb1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+20 more1:7.2p2-4ubuntu2.10+esm5, 1:7.6p1-4ubuntu0.7+esm3, 1:8.2p1-4ubuntu0.10, 1:8.2p1-4ubuntu0.fips.0.10+2 more101
paramikopypi2.6.0, 2.7.1, 2.7.2, 2.8.0+9 more3.4.058
opensshapk9.0_p1-r1, 9.0_p1-r2, 9.0_p1-r4, 9.1_p1-r1+3 more9.0_p1-r5, 9.1_p1-r5, 9.3_p2-r122
libssh2apk1.10.0-r2, 1.10.0-r3, 1.10.0-r41.11.0-r010
paramikodeb1.10.1-1git1ubuntu0.1no fix listed2
dropbeardeb2022.83-4no fix listed1
php-phpseclibdeb2.0.14-1, 2.0.30-22.0.30-2+deb11u1, 2.0.30-2~deb10u22
OSV records
ALPINE-CVE-2023-48795DEBIAN-CVE-2023-48795GHSA-45x7-px36-x8w8RHSA-2024:0625RHSA-2024:0628UBUNTU-CVE-2023-48795DLA-3718-1DSA-5600-1
Also known as
GO-2023-2402, PYSEC-2026-1758, USN-6560-1, USN-6560-2, USN-6561-1

Charts affected

1,639 by stars
ChartLatestAffected imagesRadar Score
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
golang.org/x/crypto@v0.14.0
0.17.0

Open the chart page →

3,615
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
libssh@0.9.3-2ubuntu2.2
openssh@1:8.2p1-4ubuntu0.5
0.9.3-2ubuntu2.4
1:8.2p1-4ubuntu0.10

Open the chart page →

8,732
eoloplanthttpd-eoloplant0.1.04 of 7See more

eoloplant httpd-eoloplant 0.1.0

4 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
codeurjc/server:v1.0310bea5b1ee7
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
codeurjc/weatherservice:v1.0b9e2f7234349
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4

Open the chart page →

32,336
cac-systemhuangchengwu-helm-chart0.1.04 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

4 of the 9 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.0.0-20231218163308-9d2ee975ef9f
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
golang.org/x/crypto@v0.6.0
0.17.0
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
golang.org/x/crypto@v0.6.0
0.17.0
quay.io/jetstack/cert-manager-webhook:v1.12.0ec4306b243d9
golang.org/x/crypto@v0.6.0
0.17.0

Open the chart page →

11,190
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9

Open the chart page →

4,462
prometheushuangchengwu-helm-chart0.1.02 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f
libssh@0.9.6-2build1
0.0.0-20231218163308-9d2ee975ef9f
0.9.6-2ubuntu0.22.04.2
apache/skywalking-ui:9.2.0295f1dc87d98
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2

Open the chart page →

16,482
skywalking-v1huangchengwu-helm-chart0.1.02 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4
apache/skywalking-ui:8.9.180530f0308a5
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4

Open the chart page →

20,727
tdenginehuangchengwu-helm-chart3.0.21 of 1See more

tdengine huangchengwu-helm-chart 3.0.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
tdengine/tdengine:3.0.2.24140a4021ddb
golang.org/x/crypto@v0.4.0
0.17.0

Open the chart page →

3,753
mocktailhuseyinnurbaki0.2.11 of 1See more

mocktail huseyinnurbaki 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
hhaluk/mocktail:2.0.3350d19360038
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,606
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2

Open the chart page →

7,184
vcbackendi4trustVerified publisher0.0.81 of 1See more

vcbackend i4trust 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
wistefan/vcbackend:0.0.13bd436164b51
golang.org/x/crypto@v0.3.0
0.17.0

Open the chart page →

1,848
vcverifieri4trustVerified publisher1.0.231 of 1See more

vcverifier i4trust 1.0.23

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/fiware/vcverifier:2.0.1cd36290dc849
golang.org/x/crypto@v0.7.0
0.17.0

Open the chart page →

1,784
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2

Open the chart page →

7,902
stoloniamalryz0.10.01 of 2See more

stolon iamalryz 0.10.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
sorintlab/stolon:v0.16.0-pg1236b45c0f97fc
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,045
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
openssh@1:7.2p2-4ubuntu2.2
1:7.2p2-4ubuntu2.10+esm5

Open the chart page →

57,728
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
libssh@0.9.0-4.el8
0:0.9.6-13.el8_9
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
libssh@0.9.0-4.el8
0:0.9.6-13.el8_9

Open the chart page →

12,460
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
openssh@1:7.2p2-4ubuntu2.4
1:7.2p2-4ubuntu2.10+esm5

Open the chart page →

25,184
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
libssh@0.8.5-2.el8
0:0.9.6-13.el8_9

Open the chart page →

11,975
eoloserverihuertas2021-vmartinp2021-helm0.1.03 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
codeurjc/weatherservice:v1.0b9e2f7234349
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
libssh@0.9.3-2ubuntu2.2
0.0.0-20231218163308-9d2ee975ef9f
0.9.3-2ubuntu2.4

Open the chart page →

27,812
ikigaiikigai-chartVerified publisher0.0.95 of 58See more

ikigai ikigai-chart 0.0.9

5 of the 58 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
jupyterhub/k8s-hub:1.2.0e4770285aaf7
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4
kuberay/operator:v1.0.04e6ac8a3a2c4
libssh@0.9.6-10.el8_8
0:0.9.6-13.el8_8
library/zookeeper:3.8-temurin55d1e5b2e601
libssh@0.9.6-2ubuntu0.22.04.1
0.9.6-2ubuntu0.22.04.2
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

37,844
apexkube-agentimprowisedVerified publisher1.4.01 of 2See more

apexkube-agent improwised 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
masipcat/wireguard-go:0.0.20230223769f7bb64694
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

3,350
kore-boardimprowisedVerified publisher0.5.83 of 4See more

kore-board improwised 0.5.8

3 of the 4 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f
ghcr.io/kore3lab/kore-board.metrics-scraper:v0.5.547f88b18fb7c
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

16,226
fpga-operatorinaccelVerified publisher2.8.21 of 7See more

fpga-operator inaccel 2.8.2

1 of the 7 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
inaccel/daemon:latest093e1ea90ab8
golang.org/x/crypto@v0.16.0
0.17.0

Open the chart page →

5,759
chronografinfluxdata1.2.61 of 1See more

chronograf influxdata 1.2.6

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
library/chronograf:1.9.496d8a3f65a4f
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,198
l2gethinfradao0.0.11 of 1See more

l2geth infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ethereumoptimism/l2geth:0.5.315577036dc36d
golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,659
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
golang.org/x/crypto@v0.13.0
libssh@0.9.6-2ubuntu0.22.04.1
openssh@1:8.9p1-3ubuntu0.4
0.17.0
0.9.6-2ubuntu0.22.04.2
1:8.9p1-3ubuntu0.5

Open the chart page →

10,542
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,645
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
paramiko@2.7.2
3.4.0

Open the chart page →

3,314
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

7,510
consulintelVerified publisher0.8.12 of 2See more

consul intel 0.8.1

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.0.0-20231218163308-9d2ee975ef9f
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,389
evi-consulintelVerified publisher3.0.32 of 2See more

evi-consul intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.0.0-20231218163308-9d2ee975ef9f
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

5,389
evi-kesintelVerified publisher3.0.31 of 1See more

evi-kes intel 3.0.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
minio/kes:2023-04-03T16-41-28Zf93c2d9088df
golang.org/x/crypto@v0.4.0
0.17.0

Open the chart page →

1,758
evi-miniointelVerified publisher3.0.32 of 2See more

evi-minio intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
golang.org/x/crypto@v0.3.0
libssh@0.9.6-3.el8
0.17.0
0:0.9.6-13.el8_9
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
golang.org/x/crypto@v0.5.0
libssh@0.9.6-3.el8
0.17.0
0:0.9.6-13.el8_9

Open the chart page →

7,457
evi-vaultintelVerified publisher3.0.32 of 2See more

evi-vault intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8
0.0.0-20231218163308-9d2ee975ef9f
hashicorp/vault-k8s:1.1.0844337076b72
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,478
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
openssh@1:8.2p1-4ubuntu0.5
1:8.2p1-4ubuntu0.10

Open the chart page →

7,697
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4

Open the chart page →

18,137
kesintelVerified publisher0.8.31 of 1See more

kes intel 0.8.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
minio/kes:v0.22.255f3aef5803e
golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b
libssh@0.9.6-3.el8
0.0.0-20231218163308-9d2ee975ef9f
0:0.9.6-13.el8_9

Open the chart page →

3,570
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
openssh@1:8.2p1-4ubuntu0.5
1:8.2p1-4ubuntu0.10

Open the chart page →

7,697
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

11,123
tcs-issuerintelVerified publisher0.5.01 of 2See more

tcs-issuer intel 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
intel/trusted-certificate-issuer:0.5.0591a9db4a427
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4

Open the chart page →

5,996
vaultintelVerified publisher0.8.12 of 2See more

vault intel 0.8.1

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8
0.0.0-20231218163308-9d2ee975ef9f
hashicorp/vault-k8s:1.1.0844337076b72
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

4,478
gravity-initinvisiblVerified publisher1.0.91 of 1See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
invisibl/gravity-init:v1.0.91a970f84178b
golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,006
identity-managerinvisiblVerified publisher1.0.01 of 1See more

identity-manager invisibl 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
invisibl/identity-manager:1.0.01029f4fe20eb
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,162
karpenteriometeVerified publisher0.19.31 of 1See more

karpenter iomete 0.19.3

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
public.ecr.aws/karpenter/controller:v0.19.3f0e5ab60b2df
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

1,548
istio-aws-private-ingress-customizedistio-aws-private-ingress-customized1.0.01 of 1See more

istio-aws-private-ingress-customized istio-aws-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
golang.org/x/crypto@v0.7.0
libssh@0.9.6-2ubuntu0.22.04.1
0.17.0
0.9.6-2ubuntu0.22.04.2

Open the chart page →

5,570
istio-azure-private-ingress-customizedistio-azure-private-ingress-customized1.0.01 of 1See more

istio-azure-private-ingress-customized istio-azure-private-ingress-customized 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
istio/proxyv2:1.18.0757d28c24100
golang.org/x/crypto@v0.7.0
libssh@0.9.6-2ubuntu0.22.04.1
0.17.0
0.9.6-2ubuntu0.22.04.2

Open the chart page →

5,570
adguard-homejacobcolvinVerified publisher0.4.01 of 2See more

adguard-home jacobcolvin 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.3843ec119419a9
golang.org/x/crypto@v0.13.0
0.17.0

Open the chart page →

1,605
rclonejacobcolvinVerified publisher1.0.11 of 1See more

rclone jacobcolvin 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
rclone/rclone:1.63.008e1af3c8814
golang.org/x/crypto@v0.7.0
0.17.0

Open the chart page →

2,143
twitch-predictions-recorderjacobcolvinVerified publisher0.1.01 of 1See more

twitch-predictions-recorder jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
macropower/twitch_predictions_recorder:v0.21e9c4fb89787
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.0.0-20231218163308-9d2ee975ef9f

Open the chart page →

2,669
koptimizejaconiVerified publisher0.5.42 of 2See more

koptimize jaconi 0.5.4

2 of the 2 container images this version deploys carry CVE-2023-48795.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
golang.org/x/crypto@v0.9.0
0.17.0
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
golang.org/x/crypto@v0.9.0
0.17.0

Open the chart page →

5,716

Container images carrying it

1,762 by charts deploying them

A fixed version is listed for 8 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
stakater/stakater-nordmart-review:1.0.35954d2be66e95
libssh@0.9.6-3.el8
0:0.9.6-13.el8_9
2
statping/statping:v0.90.74e874da513a5c
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
golang.org/x/crypto@v0.4.0
0.17.0
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
libssh@0.9.6-2build1
openssh@1:8.9p1-3
0.9.6-2ubuntu0.22.04.2
1:8.9p1-3ubuntu0.5
2
temporalio/server:1.22.4c0a44c26397b
golang.org/x/crypto@v0.14.0
0.17.0
2
temporalio/ui:2.16.2af9c9349708f
golang.org/x/crypto@v0.1.0
0.17.0
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.0.0-20231218163308-9d2ee975ef9f
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.0.0-20231218163308-9d2ee975ef9f
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20231218163308-9d2ee975ef9f
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
2
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20231218163308-9d2ee975ef9f
2
weblate/weblate:4.2.2-169c160d37a3c
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20231218163308-9d2ee975ef9f
2
wurstmeister/zookeeper:latest7a7fd44a7210
openssh@1:6.6p1-2ubuntu2
no fix listed
2
xelalex/dregsy:0.4.3574054e1c417
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20231218163308-9d2ee975ef9f
2
zhenghaoz/gorse-master:0.4.12033046b432ec
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.0.0-20231218163308-9d2ee975ef9f
2
zhenghaoz/gorse-server:0.4.1239c565685b01
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.0.0-20231218163308-9d2ee975ef9f
2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.0.0-20231218163308-9d2ee975ef9f
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20231218163308-9d2ee975ef9f
2
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
golang.org/x/crypto@v0.6.0
0.17.0
2
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
dropbear@2022.83-4
no fix listed
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20231218163308-9d2ee975ef9f
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
libssh@0.9.6-2build1
openssh@1:8.9p1-3
0.9.6-2ubuntu0.22.04.2
1:8.9p1-3ubuntu0.5
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
2
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f
2
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.0.0-20231218163308-9d2ee975ef9f
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libssh@0.9.3-2ubuntu2.2
0.9.3-2ubuntu2.4
2
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
golang.org/x/crypto@v0.14.0
0.17.0
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
golang.org/x/crypto@v0.9.0
0.17.0
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
libssh@0.9.6-2build1
0.9.6-2ubuntu0.22.04.2
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
libssh@0.9.3-2ubuntu2.3
0.9.3-2ubuntu2.4
2
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/iver-wharf/wharf-api:v5.2.0b736b345437d
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/iver-wharf/wharf-cmd:v0.8.2e98d13459cdc
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/iver-wharf/wharf-provider-azuredevops:v3.0.12fe7e4dcffdf
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/iver-wharf/wharf-provider-github:v3.0.177a22cb45c2a
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/iver-wharf/wharf-provider-gitlab:v2.0.1d7079e0890da
golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f
0.0.0-20231218163308-9d2ee975ef9f
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
golang.org/x/crypto@v0.14.0
0.17.0
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
golang.org/x/crypto@v0.5.0
0.17.0
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
golang.org/x/crypto@v0.5.0
0.17.0
2
quay.io/jetstack/cert-manager-webhook:v1.13.20a9470447ebf
golang.org/x/crypto@v0.14.0
0.17.0
2
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
golang.org/x/crypto@v0.5.0
0.17.0
2
quay.io/jetstack/version-checker:v0.2.15f6f8ba0b671
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20231218163308-9d2ee975ef9f
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.