StackRadar

CVE-2023-49092

Medium

Advisory

Published 22 Nov 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 17,781 indexed, latest versions
Container images
62
deployed by those charts
Fix available
None
affected package

Marvin Attack: potential key recovery through timing sidechannels

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 62 images.

Affected packageAffected versionsFixed inImages
rsacargo0.9.7, 0.9.10no fix listed62
OSV records
RUSTSEC-2023-0071
Also known as
GHSA-4grx-2x9w-596c, GHSA-c38w-74pg-36hr

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
rsa@0.9.10
no fix listed

Open the chart page →

838
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
rsa@0.9.10
no fix listed

Open the chart page →

4,626
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.017 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

17 of the 40 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
rsa@0.9.10
no fix listed
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
rsa@0.9.10
no fix listed

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
rsa@0.9.10
no fix listed

Open the chart page →

6,583
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
rsa@0.9.7
no fix listed

Open the chart page →

9,256
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
rsa@0.9.10
no fix listed

Open the chart page →

1,577
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
rsa@0.9.10
no fix listed
safeglobal/safe-transaction-service:latest80db836cc5d5
rsa@0.9.10
no fix listed

Open the chart page →

19,560
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest80db836cc5d5
rsa@0.9.10
no fix listed

Open the chart page →

16,620
svc-lb-muxsvc-lb-mux0.1.31 of 1See more

svc-lb-mux svc-lb-mux 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
rsa@0.9.10
no fix listed

Open the chart page →

1,419
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2023-49092.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
rsa@0.9.10
no fix listed

Open the chart page →

7,849

Container images carrying it

62 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
rsa@0.9.10
no fix listed
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
rsa@0.9.10
no fix listed
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
rsa@0.9.10
no fix listed
1
registry.gitlab.com/dyff/dyff-api:0.57.4911acf4052e5
rsa@0.9.10
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.