StackRadar

CVE-2023-5217

HighKEV

Advisory

Published 28 Sept 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.490
99th percentile
CISA KEV
Listed
since 2 Oct 2023
Charts affected
40
of 17,781 indexed, latest versions
Container images
39
deployed by those charts
Fix available
2 of 4
affected packages

Electron affected by libvpx's heap buffer overflow in vp8 encoding

Carried by container images the latest versions of 40 of 17,781 indexed charts deploy, on 39 images.

Affected packageAffected versionsFixed inImages
libvpxdeb1.3.0-2, 1.5.0-2ubuntu1, 1.7.0-3, 1.7.0-3ubuntu0.18.04.1+3 more1.3.0-2ubuntu0.1~esm3, 1.5.0-2ubuntu1.1+esm2, 1.7.0-3ubuntu0.18.04.1+esm1, 1.8.2-1ubuntu0.2+2 more35
electronnpm3.0.7, 11.3.022.3.252
firefox-esrdeb140.10.2esr-1~deb13u1no fix listed1
mozjs68deb68.6.0-1ubuntu1no fix listed1
OSV records
DEBIAN-CVE-2023-5217GHSA-qqvq-6xgj-jw8gUBUNTU-CVE-2023-5217DSA-5510-1
Also known as
USN-6403-1, USN-6403-2, USN-6403-3, USN-7172-1

Charts affected

40 by stars
ChartLatestAffected imagesRadar Score
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

7,880
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
libvpx@1.9.0-1
1.9.0-1+deb11u1

Open the chart page →

18,517
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

24,488
wombatwombatOfficialVerified publisher4.1.281 of 1See more

wombat wombat 4.1.28

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
erlangsolutions/wombatoam:4.1.284680c990147a
libvpx@1.9.0-1
1.9.0-1+deb11u1

Open the chart page →

3,697
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
libvpx@1.9.0-1
1.9.0-1+deb11u1

Open the chart page →

5,056
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

35,305
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
electron@11.3.0
22.3.25

Open the chart page →

4,405
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
libvpx@1.9.0-1
1.9.0-1+deb11u1

Open the chart page →

3,924
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

31,000
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

45,832
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

26,657
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

42,126
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libvpx@1.5.0-2ubuntu1
1.5.0-2ubuntu1.1+esm2

Open the chart page →

77,758
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
galaxy/galaxy-stable:v18.018e577a626dfd
libvpx@1.3.0-2
1.3.0-2ubuntu0.1~esm3

Open the chart page →

70,895
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
mozjs68@68.6.0-1ubuntu1
no fix listed

Open the chart page →

64,489
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1

Open the chart page →

19,215
jellyfingeek-cookbookVerified publisher9.5.31 of 1See more

jellyfin geek-cookbook 9.5.3

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1ee24f4459a40
libvpx@1.9.0-1
1.9.0-1+deb11u1

Open the chart page →

1,381
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

14,283
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
libvpx@1.11.0-2ubuntu2
1.11.0-2ubuntu2.2

Open the chart page →

19,503
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1

Open the chart page →

26,944
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

17,929
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

18,066
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
libvpx@1.11.0-2ubuntu2
1.11.0-2ubuntu2.2

Open the chart page →

10,716
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1

Open the chart page →

58,160
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
firefox-esr@140.10.2esr-1~deb13u1
no fix listed

Open the chart page →

7,944
cameramedia-streaming-meshVerified publisher0.2.52 of 3See more

camera media-streaming-mesh 0.2.5

2 of the 3 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
ciscolabs/rtsp-server:latestb59fc10bb821
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

18,608
msm-rtspmedia-streaming-meshVerified publisher0.0.22 of 2See more

msm-rtsp media-streaming-mesh 0.0.2

2 of the 2 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
ciscolabs/rtsp-server:latestb59fc10bb821
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

18,608
rtspmedia-streaming-meshVerified publisher0.0.142 of 2See more

rtsp media-streaming-mesh 0.0.14

2 of the 2 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ciscolabs/rtsp-client:latesta7b60ec88285
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
ciscolabs/rtsp-server:latestb59fc10bb821
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

18,608
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libvpx@1.11.0-2ubuntu2
1.11.0-2ubuntu2.2

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libvpx@1.11.0-2ubuntu2
1.11.0-2ubuntu2.2

Open the chart page →

12,791
liquidsoapnorth141.0.01 of 1See more

liquidsoap north14 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
libvpx@1.9.0-1
1.9.0-1+deb11u1

Open the chart page →

2,954
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1

Open the chart page →

27,633
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libvpx@1.7.0-3
1.7.0-3ubuntu0.18.04.1+esm1
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
libvpx@1.5.0-2ubuntu1
1.5.0-2ubuntu1.1+esm2

Open the chart page →

63,223
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libvpx@1.5.0-2ubuntu1
1.5.0-2ubuntu1.1+esm2

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
libvpx@1.5.0-2ubuntu1
1.5.0-2ubuntu1.1+esm2

Open the chart page →

29,124
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2

Open the chart page →

9,167
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
libvpx@1.9.0-1
1.9.0-1+deb11u1

Open the chart page →

6,026
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-5217.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
electron@3.0.7
22.3.25

Open the chart page →

5,215

Container images carrying it

39 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ciscolabs/rtsp-client:latesta7b60ec88285
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
3
ciscolabs/rtsp-server:latestb59fc10bb821
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
libvpx@1.5.0-2ubuntu1
1.5.0-2ubuntu1.1+esm2
3
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
libvpx@1.11.0-2ubuntu2
1.11.0-2ubuntu2.2
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
2
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
electron@11.3.0
22.3.25
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1
1
erlangsolutions/wombatoam:4.1.284680c990147a
libvpx@1.9.0-1
1.9.0-1+deb11u1
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
mozjs68@68.6.0-1ubuntu1
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
libvpx@1.3.0-2
1.3.0-2ubuntu0.1~esm3
1
gristlabs/grist:0.7.96e71b1914a7e
electron@3.0.7
22.3.25
1
haveagitgat/tdarr:2.00.181256348872ce
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
jellyfin/jellyfin:10.8.1ee24f4459a40
libvpx@1.9.0-1
1.9.0-1+deb11u1
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
libvpx@1.9.0-1
1.9.0-1+deb11u1
1
linuxserver/jellyfin:10.7.72427dde159a2
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
livekit/ingress:v1.2.21ab01641b366
libvpx@1.11.0-2ubuntu2
1.11.0-2ubuntu2.2
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libvpx@1.7.0-3
1.7.0-3ubuntu0.18.04.1+esm1
1
photoprism/photoprism:220629-jammy2954334adbda
libvpx@1.11.0-2ubuntu2
1.11.0-2ubuntu2.2
1
scrapinghub/splash:3.4.1a5f89bc84606
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1
1
sismics/docs:v1.10f4b0ef019cf1
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1
1
stashapp/stash:latest24dbd7607174
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
libvpx@1.5.0-2ubuntu1
1.5.0-2ubuntu1.1+esm2
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
firefox-esr@140.10.2esr-1~deb13u1
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
libvpx@1.7.0-3ubuntu0.18.04.1
1.7.0-3ubuntu0.18.04.1+esm1
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
libvpx@1.9.0-1
1.9.0-1+deb11u1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
libvpx@1.9.0-1
1.9.0-1+deb11u1
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
libvpx@1.9.0-1
1.9.0-1+deb11u1
1
ghcr.io/savonet/liquidsoap:v2.0.19e08148e1055
libvpx@1.9.0-1
1.9.0-1+deb11u1
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
libvpx@1.8.2-1build1
1.8.2-1ubuntu0.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.