StackRadar

CVE-2023-54354

Medium

Advisory

Published 11 Apr 2023In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
21
of 17,781 indexed, latest versions
Container images
26
deployed by those charts
Fix available
1 of 1
affected package

Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 26 images.

Affected packageAffected versionsFixed inImages
nokogirigem1.8.2, 1.10.8, 1.10.9, 1.10.10+7 more1.14.326
OSV records
GHSA-pxvg-2qj5-37jq

Charts affected

21 by stars
ChartLatestAffected imagesRadar Score
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
nokogiri@1.13.10
1.14.3

Open the chart page →

10,530
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
uffizzi/app:latest66e9e3937c60
nokogiri@1.13.3
1.14.3

Open the chart page →

19,337
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
nokogiri@1.10.9
1.14.3

Open the chart page →

18,137
pact-brokeralmorgvVerified publisher0.1.01 of 1See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
nokogiri@1.11.2
1.14.3

Open the chart page →

4,995
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
nokogiri@1.14.1
1.14.3

Open the chart page →

5,056
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
nokogiri@1.11.5
1.14.3

Open the chart page →

6,110
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
gollumorg/gollum:latest7cd5305a3cf7
nokogiri@1.10.10
1.14.3

Open the chart page →

4,629
docker-registry-browsergmelilloVerified publisher0.1.21 of 1See more

docker-registry-browser gmelillo 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.3.5430a440d95af
nokogiri@1.10.10
1.14.3

Open the chart page →

4,108
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
nokogiri@1.12.5
1.14.3

Open the chart page →

6,810
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
nokogiri@1.10.9
1.14.3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
nokogiri@1.10.9
1.14.3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
nokogiri@1.10.9
1.14.3
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
nokogiri@1.10.9
1.14.3
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
nokogiri@1.10.9
1.14.3

Open the chart page →

113,791
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
nokogiri@1.12.5
1.14.3

Open the chart page →

7,529
honeywell-exporterbryanalves0.1.11 of 1See more

honeywell-exporter bryanalves 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
nokogiri@1.8.2
1.14.3

Open the chart page →

5,437
showoffcamptocamp31.0.01 of 1See more

showoff camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
binford2k/showoff:0.20.2a64937052ce7
nokogiri@1.10.8
1.14.3

Open the chart page →

1,584
pact-brokercloud-native-toolkit0.3.01 of 1See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.101.0.0a3021fc42834
nokogiri@1.13.6
1.14.3

Open the chart page →

2,814
docker-registry-browsergtaylor0.4.41 of 1See more

docker-registry-browser gtaylor 0.4.4

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
nokogiri@1.12.5
1.14.3

Open the chart page →

3,564
gitlabkubesphereVerified publisher4.2.34 of 17See more

gitlab kubesphere 4.2.3

4 of the 17 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
nokogiri@1.10.9
1.14.3
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
nokogiri@1.10.9
1.14.3
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
nokogiri@1.10.9
1.14.3
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
nokogiri@1.10.9
1.14.3

Open the chart page →

38,133
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
nokogiri@1.13.6
1.14.3

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
nokogiri@1.13.6
1.14.3

Open the chart page →

12,791
betydbncsaVerified publisher0.6.11 of 4See more

betydb ncsa 0.6.1

1 of the 4 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
nokogiri@1.12.5
1.14.3

Open the chart page →

9,542
pecanncsaVerified publisher0.6.21 of 15See more

pecan ncsa 0.6.2

1 of the 15 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
pecan/bety:5.4.1f825d480cd62
nokogiri@1.12.5
1.14.3

Open the chart page →

14,154
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2023-54354.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
nokogiri@1.14.1
1.14.3

Open the chart page →

6,026

Container images carrying it

26 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
pecan/bety:5.4.1f825d480cd62
nokogiri@1.12.5
1.14.3
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
nokogiri@1.13.6
1.14.3
2
binford2k/showoff:0.20.2a64937052ce7
nokogiri@1.10.8
1.14.3
1
bryanalves/honeywell_exporter:0.0.1195f73dce8b21
nokogiri@1.8.2
1.14.3
1
gollumorg/gollum:latest7cd5305a3cf7
nokogiri@1.10.10
1.14.3
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
nokogiri@1.10.9
1.14.3
1
klausmeyer/docker-registry-browser:1.3.5430a440d95af
nokogiri@1.10.10
1.14.3
1
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
nokogiri@1.12.5
1.14.3
1
library/logstash:7.17.817a4f64e9cf5
nokogiri@1.12.5
1.14.3
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
nokogiri@1.10.9
1.14.3
1
mirrorgitlabcontainers/gitlab-sidekiq-ce:v13.2.294d1431683fa
nokogiri@1.10.9
1.14.3
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
nokogiri@1.10.9
1.14.3
1
mirrorgitlabcontainers/gitlab-webservice-ce:v13.2.230393f990f5c
nokogiri@1.10.9
1.14.3
1
openproject/community:12.0.2734743d11094
nokogiri@1.12.5
1.14.3
1
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
nokogiri@1.13.10
1.14.3
1
pactfoundation/pact-broker:2.79.1.112861b0bd4d9
nokogiri@1.11.2
1.14.3
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
nokogiri@1.13.6
1.14.3
1
uffizzi/app:latest66e9e3937c60
nokogiri@1.13.3
1.14.3
1
zammad/zammad-docker-compose:zammad-4.1.0-312808e2dfa810
nokogiri@1.11.5
1.14.3
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
nokogiri@1.10.9
1.14.3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
nokogiri@1.10.9
1.14.3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
nokogiri@1.10.9
1.14.3
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
nokogiri@1.10.9
1.14.3
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
nokogiri@1.10.9
1.14.3
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
nokogiri@1.14.1
1.14.3
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
nokogiri@1.14.1
1.14.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.