StackRadar

CVE-2023-49295

Medium

Advisory

Published 10 Jan 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.4
base score, highest
EPSS
0.012
66th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
25
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
1 of 1
affected package

quic-go's path validation mechanism can be exploited to cause denial of service

Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
github.com/quic-go/quic-gogolangv0.32.0, v0.33.0, v0.37.5, v0.38.1+5 more0.37.7, 0.38.2, 0.39.4, 0.40.120
OSV records
GHSA-ppxx-5m9h-6vxf
Also known as
GO-2024-2459

Charts affected

25 by stars
ChartLatestAffected imagesRadar Score
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/quic-go/quic-go@v0.40.0
0.40.1

Open the chart page →

17,263
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
github.com/quic-go/quic-go@v0.39.1
0.39.4

Open the chart page →

14,094
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/quic-go/quic-go@v0.40.0
0.40.1

Open the chart page →

1,884
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
github.com/quic-go/quic-go@v0.40.0
0.40.1

Open the chart page →

17,404
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/quic-go/quic-go@v0.40.0
0.40.1

Open the chart page →

3,451
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
github.com/quic-go/quic-go@v0.40.1-0.20240101045026-22b7f7744eb6
0.40.1

Open the chart page →

4,196
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
ipfs/kubo:v0.24.0e3de33bd746b
github.com/quic-go/quic-go@v0.39.3
0.39.4

Open the chart page →

4,661
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/quic-go/quic-go@v0.39.0
0.39.4

Open the chart page →

3,165
v2ray-proxyv2ray-proxy0.2.41 of 1See more

v2ray-proxy v2ray-proxy 0.2.4

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
pinclr/v2ray-proxy:latestf37f250b7091
github.com/quic-go/quic-go@v0.33.0
0.37.7

Open the chart page →

1,954
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
github.com/quic-go/quic-go@v0.40.0
0.40.1

Open the chart page →

10,145
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/quic-go/quic-go@v0.33.0
0.37.7

Open the chart page →

3,672
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/quic-go/quic-go@v0.40.1-0.20240101045026-22b7f7744eb6
0.40.1

Open the chart page →

4,217
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
iotaledger/hornet:2.001206f1ba89c
github.com/quic-go/quic-go@v0.38.1
0.38.2

Open the chart page →

13,391
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/quic-go/quic-go@v0.37.5
0.37.7

Open the chart page →

2,237
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/quic-go/quic-go@v0.40.0
0.40.1

Open the chart page →

3,451
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
github.com/quic-go/quic-go@v0.40.0
0.40.1

Open the chart page →

3,614
adguard-homejacobcolvinVerified publisher0.4.01 of 2See more

adguard-home jacobcolvin 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.3843ec119419a9
github.com/quic-go/quic-go@v0.38.1
0.38.2

Open the chart page →

1,605
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
github.com/quic-go/quic-go@v0.33.0
0.37.7

Open the chart page →

4,096
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/quic-go/quic-go@v0.38.1
0.38.2

Open the chart page →

2,101
gitlab-proxyopslevelVerified publisher0.0.81 of 1See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
library/caddy:2.660fb54d36b4b
github.com/quic-go/quic-go@v0.32.0
0.37.7

Open the chart page →

1,872
chainrss30.1.281 of 8See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/quic-go/quic-go@v0.39.3
0.39.4

Open the chart page →

8,528
vsl-chainrss30.1.01 of 7See more

vsl-chain rss3 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
github.com/quic-go/quic-go@v0.39.3
0.39.4

Open the chart page →

6,044
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/quic-go/quic-go@v0.39.3
0.39.4

Open the chart page →

4,610
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/quic-go/quic-go@v0.39.3
0.39.4

Open the chart page →

4,610
tfy-cloudflaredtruefoundryVerified publisher0.5.01 of 2See more

tfy-cloudflared truefoundry 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-49295.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/quic-go/quic-go@v0.32.0
0.37.7

Open the chart page →

2,015

Container images carrying it

20 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
caddy/ingress:v0.2.118d1366fc0e9
github.com/quic-go/quic-go@v0.40.0
0.40.1
3
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
github.com/quic-go/quic-go@v0.39.3
0.39.4
3
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/quic-go/quic-go@v0.40.0
0.40.1
2
adguard/adguardhome:v0.107.3843ec119419a9
github.com/quic-go/quic-go@v0.38.1
0.38.2
1
baserow/baserow:1.30.1df0c42eb67e8
github.com/quic-go/quic-go@v0.40.0
0.40.1
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
github.com/quic-go/quic-go@v0.40.0
0.40.1
1
iotaledger/hornet:2.001206f1ba89c
github.com/quic-go/quic-go@v0.38.1
0.38.2
1
ipfs/kubo:v0.24.0e3de33bd746b
github.com/quic-go/quic-go@v0.39.3
0.39.4
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/quic-go/quic-go@v0.33.0
0.37.7
1
library/caddy:2.660fb54d36b4b
github.com/quic-go/quic-go@v0.32.0
0.37.7
1
library/traefik:v2.10.11489caffaedb
github.com/quic-go/quic-go@v0.33.0
0.37.7
1
library/traefik:2.10.61957e3314f43
github.com/quic-go/quic-go@v0.39.1
0.39.4
1
louislam/uptime-kuma:1.23.1396510915e6be
github.com/quic-go/quic-go@v0.40.1-0.20240101045026-22b7f7744eb6
0.40.1
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/quic-go/quic-go@v0.40.1-0.20240101045026-22b7f7744eb6
0.40.1
1
pinclr/v2ray-proxy:latestf37f250b7091
github.com/quic-go/quic-go@v0.33.0
0.37.7
1
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
github.com/quic-go/quic-go@v0.39.3
0.39.4
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/quic-go/quic-go@v0.38.1
0.38.2
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/quic-go/quic-go@v0.39.0
0.39.4
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/quic-go/quic-go@v0.32.0
0.37.7
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/quic-go/quic-go@v0.37.5
0.37.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.