StackRadar

CVE-2023-50495

Medium

Advisory

Published 12 Dec 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,515
of 17,792 indexed, latest versions
Container images
1,576
deployed by those charts
Fix available
2 of 2
affected packages

Security update for ncurses

Carried by container images the latest versions of 1,515 of 17,792 indexed charts deploy, on 1,576 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+8 more5.9+20140118-1ubuntu1+esm5, 6.0+20160213-1ubuntu1+esm5, 6.1-1ubuntu1.18.04.1+esm21,575
ncursesrpm6.1-150000.5.12.16.1-150000.5.20.11
OSV records
DEBIAN-CVE-2023-50495UBUNTU-CVE-2023-50495SUSE-SU-2023:4891-1
Also known as
USN-6684-1

Charts affected

1,515 by stars
ChartLatestAffected imagesRadar Score
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.7.45f2a56b95266
ncurses@6.4-4
no fix listed

Open the chart page →

15,056
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
ncurses@6.3-2ubuntu0.1
no fix listed

Open the chart page →

9,340
keycloakwiremindVerified publisher25.3.12 of 2See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
ncurses@6.4-4
no fix listed
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
ncurses@6.4-4
no fix listed

Open the chart page →

7,687
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
ncurses@6.2-0ubuntu2.1
no fix listed

Open the chart page →

6,336
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
ncurses@6.4-4
no fix listed

Open the chart page →

5,566
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
ncurses@6.4-4
no fix listed

Open the chart page →

2,500
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
ncurses@6.4-4
no fix listed

Open the chart page →

2,143
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
ncurses@6.3-2ubuntu0.1
no fix listed

Open the chart page →

14,218
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
ncurses@6.4-4
no fix listed

Open the chart page →

11,622
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
ncurses@6.4-4
no fix listed

Open the chart page →

7,714
xkopsxkops0.1.03 of 5See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
ncurses@6.4-4
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
ncurses@6.4-4
no fix listed
murtazashah46/helmfile:latest4d11726cf803
ncurses@6.4-4
no fix listed

Open the chart page →

13,813
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
ncurses@6.4-4
no fix listed

Open the chart page →

2,692
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
ncurses@6.4-4
no fix listed

Open the chart page →

2,630
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm2
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
no fix listed

Open the chart page →

9,272
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2023-50495.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
ncurses@6.3-2ubuntu0.2
no fix listed

Open the chart page →

7,936

Container images carrying it

1,576 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
ncurses@6.3-2
no fix listed
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
ncurses@6.3-2
no fix listed
1
zenmldocker/zenml-server:0.96.409027a6312ee
ncurses@6.4-4
no fix listed
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
ncurses@6.4-4
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
ncurses@6.3-2ubuntu0.2
no fix listed
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
ncurses@6.3-2ubuntu0.1
no fix listed
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm2
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm5
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm5
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm5
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
ncurses@6.2-0ubuntu2
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm5
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
ncurses@6.2-0ubuntu2
no fix listed
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
ncurses@6.3-2ubuntu0.1
no fix listed
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
ncurses@6.4-4
no fix listed
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm5
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
ncurses@6.2-0ubuntu2.1
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
ncurses@6.4-4
no fix listed
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
ncurses@6.4-4
no fix listed
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
ncurses@6.2-0ubuntu2
no fix listed
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm2
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
ncurses@6.1-1ubuntu1.18.04.1
6.1-1ubuntu1.18.04.1+esm2
1
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
ncurses@6.4-4
no fix listed
1
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
ncurses@6.4-4
no fix listed
1
ghcr.io/aklivity/zilla:2.4.3e33d59dbb606
ncurses@6.3-2ubuntu0.1
no fix listed
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
ncurses@6.4-4
no fix listed
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
ncurses@6.4-4
no fix listed
1
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
ncurses@6.4-4
no fix listed
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
ncurses@6.4-4
no fix listed
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
ncurses@6.4-4
no fix listed
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
ncurses@6.3-2ubuntu0.1
no fix listed
1
ghcr.io/appscode/csi-driver-cacerts:v0.5.0b6bf1888f9d5
ncurses@6.4-4
no fix listed
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
ncurses@6.3-2ubuntu0.1
no fix listed
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
ncurses@6.3-2ubuntu0.1
no fix listed
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
ncurses@6.4-4
no fix listed
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
ncurses@6.4-4
no fix listed
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
ncurses@6.4-4
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
ncurses@6.4-4
no fix listed
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
ncurses@6.4-4
no fix listed
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
ncurses@6.4-4
no fix listed
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
ncurses@6.4-4
no fix listed
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
ncurses@6.4-4
no fix listed
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
ncurses@6.4-4
no fix listed
1
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
ncurses@6.4-4
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
ncurses@6.4-4
no fix listed
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
ncurses@6.3-2ubuntu0.1
no fix listed
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
ncurses@6.3-2ubuntu0.1
no fix listed
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
ncurses@6.4-4
no fix listed
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
ncurses@6.4-4
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
ncurses@6.2-0ubuntu2
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.