StackRadar

CVE-2023-54397

Medium

Advisory

Published 14 Aug 2023In the index since 16 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
48
of 17,790 indexed, latest versions
Container images
51
deployed by those charts
Fix available
1 of 1
affected package

Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths

Carried by container images the latest versions of 48 of 17,790 indexed charts deploy, on 51 images.

Affected packageAffected versionsFixed inImages
tornadopypi2.4.1, 4.5.3, 5.1.1, 6.0.2+4 more6.3.351
OSV records
GHSA-qppv-j76h-2rpx

Charts affected

48 by stars
ChartLatestAffected imagesRadar Score
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tornado@6.1
6.3.3

Open the chart page →

7,707
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
tornado@6.1
6.3.3
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tornado@6.0.4
6.3.3

Open the chart page →

53,052
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
tornado@6.1
6.3.3

Open the chart page →

3,718
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
tornado@4.5.3
6.3.3

Open the chart page →

36,143
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
apsl/thumbor:6.7.051e2de5c2c70
tornado@5.1.1
6.3.3

Open the chart page →

38,441
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
tornado@6.1
6.3.3

Open the chart page →

5,307
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
tornado@5.1.1
6.3.3

Open the chart page →

3,154
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
tornado@4.5.3
6.3.3

Open the chart page →

3,609
open-notificatiesopen-zaak0.7.01 of 4See more

open-notificaties open-zaak 0.7.0

1 of the 4 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
openzaak/open-notificaties:1.3.02e65313b9b10
tornado@6.1
6.3.3

Open the chart page →

2,851
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
tornado@6.1
6.3.3

Open the chart page →

3,333
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
tornado@4.5.3
6.3.3

Open the chart page →

20,794
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
tornado@6.1
6.3.3

Open the chart page →

22,929
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
tornado@4.5.3
6.3.3

Open the chart page →

19,006
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
tornado@5.1.1
6.3.3

Open the chart page →

2,505
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
tornado@5.1.1
6.3.3
daskdev/dask-notebook:1.1.0052630f5ca04
tornado@5.1.1
6.3.3

Open the chart page →

29,920
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
tornado@4.5.3
6.3.3

Open the chart page →

36,143
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
tornado@5.1.1
6.3.3

Open the chart page →

5,061
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
tornado@4.5.3
6.3.3

Open the chart page →

77,816
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
tornado@6.0.4
6.3.3

Open the chart page →

18,881
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
tornado@4.5.3
6.3.3

Open the chart page →

11,176
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
tornado@6.2
6.3.3

Open the chart page →

4,086
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
tornado@6.1
6.3.3

Open the chart page →

16,176
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
tornado@6.2
6.3.3

Open the chart page →

13,077
gmaas-github-apigmaas-github-api2.0.11 of 1See more

gmaas-github-api gmaas-github-api 2.0.1

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
gmaas2/github-api:latest148fc2d9afe9
tornado@6.2
6.3.3

Open the chart page →

1,206
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
tornado@6.1
6.3.3

Open the chart page →

37,874
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
tornado@6.1
6.3.3

Open the chart page →

18,155
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
tornado@5.1.1
6.3.3

Open the chart page →

7,234
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
tornado@4.5.3
6.3.3

Open the chart page →

19,006
webappiti-web-appVerified publisher0.1.01 of 2See more

webapp iti-web-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
mohameddev006/web-app:v50fbc7360ecf4
tornado@5.1.1
6.3.3

Open the chart page →

1,230
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
tornado@6.2
6.3.3

Open the chart page →

16,484
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
tornado@6.3.2
6.3.3
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
tornado@6.3.2
6.3.3

Open the chart page →

7,357
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
tornado@4.5.3
6.3.3

Open the chart page →

9,388
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
tornado@6.2
6.3.3

Open the chart page →

2,766
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
tornado@6.1
6.3.3
lsstsqre/sciplat-hub:latest5e0ade6bed1c
tornado@6.1
6.3.3
lsstsqre/wfdispatcher:lateste9feb99f524d
tornado@6.1
6.3.3

Open the chart page →

5,790
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
tornado@6.1
6.3.3

Open the chart page →

17,858
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
tornado@6.1
6.3.3

Open the chart page →

2,234
python-apppython-app-chart0.1.01 of 2See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
mnaggar3396/python-app:latest371d8ed84b15
tornado@6.2
6.3.3

Open the chart page →

3,383
reload-counterreload-counter0.1.01 of 1See more

reload-counter reload-counter 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
alaaamin/reload-count-tornado-py-app:v1.0.1alpine46da5844794e
tornado@5.1.1
6.3.3

Open the chart page →

1,010
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
tornado@4.5.3
6.3.3

Open the chart page →

20,490
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
tornado@4.5.3
6.3.3

Open the chart page →

20,490
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
tornado@6.1
6.3.3

Open the chart page →

22,349
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
tornado@2.4.1
6.3.3

Open the chart page →

3,117
icinga2-reportsvtech-public-helm-charts1.0.01 of 1See more

icinga2-report svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
tornado@5.1.1
6.3.3

Open the chart page →

1,779
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tornado@6.1
6.3.3

Open the chart page →

5,322
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
tornado@6.1
6.3.3

Open the chart page →

3,165
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
tornado@6.2
6.3.3

Open the chart page →

8,642
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
tornado@6.0.2
6.3.3

Open the chart page →

9,424
webapp-chartwebappchart1.0.01 of 1See more

webapp-chart webappchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-54397.

Container imageDigestPackageFixed in
amagdi888/my-repo:hello-appd8a10fc8faf6
tornado@5.1.1
6.3.3

Open the chart page →

1,202

Container images carrying it

51 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
tornado@4.5.3
6.3.3
2
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
tornado@4.5.3
6.3.3
2
alaaamin/reload-count-tornado-py-app:v1.0.1alpine46da5844794e
tornado@5.1.1
6.3.3
1
amagdi888/my-repo:hello-appd8a10fc8faf6
tornado@5.1.1
6.3.3
1
amancevice/superset:0.28.1c8c04bfe3d66
tornado@5.1.1
6.3.3
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
tornado@4.5.3
6.3.3
1
apsl/thumbor:6.7.051e2de5c2c70
tornado@5.1.1
6.3.3
1
cheyang/distributed-tf:1.6.046cc34755493
tornado@4.5.3
6.3.3
1
daskdev/dask:1.1.04ecd7bc35500
tornado@5.1.1
6.3.3
1
daskdev/dask-notebook:1.1.0052630f5ca04
tornado@5.1.1
6.3.3
1
errbotio/errbot:6.1.900ee4e0953ab
tornado@6.1
6.3.3
1
esphome/esphome:1.18.03f51ec10e823
tornado@6.1
6.3.3
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
tornado@6.2
6.3.3
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
tornado@6.0.4
6.3.3
1
gethue/hue:4.11.011b649636e68
tornado@6.2
6.3.3
1
gethue/hue:4.10.05702b2c37ff9
tornado@6.1
6.3.3
1
gmaas2/github-api:latest148fc2d9afe9
tornado@6.2
6.3.3
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
tornado@6.1
6.3.3
1
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
tornado@4.5.3
6.3.3
1
jaedb/iris:latest048cfbf58d57
tornado@6.2
6.3.3
1
josh5/unmanic:0.2.64d49c4816260
tornado@6.0.2
6.3.3
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
tornado@6.3.2
6.3.3
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
tornado@6.1
6.3.3
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
tornado@6.1
6.3.3
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
tornado@6.3.2
6.3.3
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
tornado@6.0.4
6.3.3
1
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
tornado@4.5.3
6.3.3
1
kyso/kyso-nbdime:latest4aa9d38ee81d
tornado@6.2
6.3.3
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
tornado@6.1
6.3.3
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
tornado@5.1.1
6.3.3
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
tornado@6.1
6.3.3
1
lsstsqre/prepuller:latest19c2dfc4e4ff
tornado@6.1
6.3.3
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
tornado@6.1
6.3.3
1
lsstsqre/wfdispatcher:lateste9feb99f524d
tornado@6.1
6.3.3
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
tornado@6.1
6.3.3
1
matrixdotorg/synapse:v1.78.0def97fd537d8
tornado@6.1
6.3.3
1
mnaggar3396/python-app:latest371d8ed84b15
tornado@6.2
6.3.3
1
mohameddev006/web-app:v50fbc7360ecf4
tornado@5.1.1
6.3.3
1
octoprint/octoprint:1.4.0106c26efcd8a
tornado@4.5.3
6.3.3
1
octoprint/octoprint:1.6.1ea3bffae2470
tornado@5.1.1
6.3.3
1
openzaak/open-notificaties:1.3.02e65313b9b10
tornado@6.1
6.3.3
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tornado@6.1
6.3.3
1
roadiehq/community-backstage-image:latestef355bf5b639
tornado@5.1.1
6.3.3
1
robmarkcole/deepstack-ui:latest410275726459
tornado@6.1
6.3.3
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
tornado@6.1
6.3.3
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
tornado@2.4.1
6.3.3
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
tornado@4.5.3
6.3.3
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
tornado@4.5.3
6.3.3
1
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
tornado@5.1.1
6.3.3
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tornado@6.1
6.3.3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.