StackRadar

CVE-2023-49092

Medium

Advisory

Published 22 Nov 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 17,781 indexed, latest versions
Container images
62
deployed by those charts
Fix available
None
affected package

Marvin Attack: potential key recovery through timing sidechannels

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 62 images.

Affected packageAffected versionsFixed inImages
rsacargo0.9.7, 0.9.10no fix listed62
OSV records
RUSTSEC-2023-0071
Also known as
GHSA-4grx-2x9w-596c, GHSA-c38w-74pg-36hr

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
authentikgoauthentikOfficialVerified publisher2026.8.21 of 1See more

authentik goauthentik 2026.8.2

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.8.2ff8489a5af4f
rsa@0.9.10
no fix listed

Open the chart page →

1,257
dagsterdagsterVerified publisher1.13.222 of 5See more

dagster dagster 1.13.22

2 of the 5 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
dagster/dagster-celery-k8s:1.13.22e29a64392e12
rsa@0.9.10
no fix listed
dagster/user-code-example:1.13.225947f9ae481c
rsa@0.9.10
no fix listed

Open the chart page →

3,455
netboxnetboxOfficialVerified publisher8.3.741 of 5See more

netbox netbox 8.3.74

1 of the 5 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox:v4.7.01685e91c61bb
rsa@0.9.10
no fix listed

Open the chart page →

1,015
datahubdatahubVerified publisher1.1.41 of 4See more

datahub datahub 1.1.4

1 of the 4 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
rsa@0.9.10
no fix listed

Open the chart page →

635
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
weblate/weblate:2026.9.1.0990720d1737a
rsa@0.9.10
no fix listed

Open the chart page →

6,699
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
rsa@0.9.10
no fix listed

Open the chart page →

22,002
localstacklocalstack0.7.01 of 1See more

localstack localstack 0.7.0

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
rsa@0.9.10
no fix listed

Open the chart page →

2,156
prefect-serverprefectVerified publisher2026.9.32126051 of 2See more

prefect-server prefect 2026.9.3212605

1 of the 2 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
prefecthq/prefect:3.8.5-python3.110018d02259bc
rsa@0.9.10
no fix listed

Open the chart page →

5,786
paperless-ngxpaperless-ngxVerified publisher0.3.221 of 3See more

paperless-ngx paperless-ngx 0.3.22

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rsa@0.9.10
no fix listed

Open the chart page →

8,489
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
rsa@0.9.10
no fix listed

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
rsa@0.9.10
no fix listed

Open the chart page →

2,133
dagster-user-deploymentsdagsterVerified publisher1.13.221 of 1See more

dagster-user-deployments dagster 1.13.22

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
dagster/user-code-example:1.13.225947f9ae481c
rsa@0.9.10
no fix listed

Open the chart page →

928
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
rsa@0.9.10
no fix listed

Open the chart page →

1,272
dyff-apidyff-apiVerified publisher0.57.41 of 1See more

dyff-api dyff-api 0.57.4

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
rsa@0.9.10
no fix listed

Open the chart page →

1,314
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rsa@0.9.10
no fix listed

Open the chart page →

1,767
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
rsa@0.9.10
no fix listed

Open the chart page →

2,331
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
rsa@0.9.10
no fix listed

Open the chart page →

5,852
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rsa@0.9.10
no fix listed

Open the chart page →

4,626
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rsa@0.9.10
no fix listed

Open the chart page →

19,691
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
rsa@0.9.10
no fix listed

Open the chart page →

5,880
music-assistantbdclark-helm-chartsVerified publisher0.4.131 of 1See more

music-assistant bdclark-helm-charts 0.4.13

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.10.3885872224fa5
rsa@0.9.10
no fix listed

Open the chart page →

3,657
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
rsa@0.9.10
no fix listed

Open the chart page →

1,767
dagster-cloud-agentdagster-cloudVerified publisher1.13.221 of 1See more

dagster-cloud-agent dagster-cloud 1.13.22

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
dagster/dagster-cloud-agent:1.13.229674f3b94a3b
rsa@0.9.10
no fix listed

Open the chart page →

1,082
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
rsa@0.9.10
no fix listed

Open the chart page →

2,133
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
rsa@0.9.10
no fix listed

Open the chart page →

8,489
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
rsa@0.9.10
no fix listed

Open the chart page →

2,133
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
rsa@0.9.10
no fix listed

Open the chart page →

8,158
waldurwaldur-chartsVerified publisher8.1.21 of 3See more

waldur waldur-charts 8.1.2

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.24c82b15d9042
rsa@0.9.10
no fix listed

Open the chart page →

4,839
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
rsa@0.9.10
no fix listed

Open the chart page →

5,817
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rsa@0.9.10
no fix listed

Open the chart page →

4,626
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
rsa@0.9.10
no fix listed

Open the chart page →

4,601
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
rsa@0.9.10
no fix listed

Open the chart page →

2,481
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
rsa@0.9.10
no fix listed

Open the chart page →

58,897
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
rsa@0.9.10
no fix listed

Open the chart page →

2,305
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:main-localda995c129e2f
rsa@0.9.10
no fix listed

Open the chart page →

19,224
home-assistantegebackVerified publisher2.0.351 of 1See more

home-assistant egeback 2.0.35

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
rsa@0.9.10
no fix listed

Open the chart page →

2,158
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
rsa@0.9.10
no fix listed

Open the chart page →

2,305
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
rsa@0.9.10
no fix listed

Open the chart page →

10,849
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
rsa@0.9.10
no fix listed

Open the chart page →

4,243
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
rsa@0.9.10
no fix listed

Open the chart page →

5,714
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rsa@0.9.10
no fix listed

Open the chart page →

26,612
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
rsa@0.9.10
no fix listed

Open the chart page →

5,788
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
rsa@0.9.10
no fix listed

Open the chart page →

953
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
rsa@0.9.10
no fix listed

Open the chart page →

7,081
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
rsa@0.9.10
no fix listed

Open the chart page →

2,444
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
rsa@0.9.10
no fix listed

Open the chart page →

2,552
matrix-authentication-servicematrix-authentication-serviceVerified publisher0.1.241 of 1See more

matrix-authentication-service matrix-authentication-service 0.1.24

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:1.24.052c18ffcc940
rsa@0.9.10
no fix listed

Open the chart page →

298
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
rsa@0.9.10
no fix listed

Open the chart page →

1,672
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
rsa@0.9.10
no fix listed

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
rsa@0.9.10
no fix listed

Open the chart page →

10,603

Container images carrying it

62 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
rsa@0.9.10
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
rsa@0.9.10
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
rsa@0.9.10
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.