StackRadar

CVE-2023-5678

Medium

Advisory

Published 6 Nov 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.045
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,589
of 17,797 indexed, latest versions
Container images
1,657
deployed by those charts
Fix available
4 of 5
affected packages

libopenssl-1_1-devel-1.1.1w-4.1 on GA media

Carried by container images the latest versions of 1,589 of 17,797 indexed charts deploy, on 1,657 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+71 more1.0.2g-1ubuntu4.20+esm11, 1.1.1-1ubuntu2.1~18.04.23+esm4, 1.1.1f-1ubuntu2.21, 1.1.1f-1ubuntu2.fips.21+3 more887
opensslapk1.1.1l-r7, 1.1.1l-r8, 1.1.1m-r1, 1.1.1n-r0+27 more1.1.1w-r1, 3.0.12-r1, 3.1.4-r1760
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm115
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
openssl-1_1rpm1.1.0i-14.6.1, 1.1.0i-lp151.8.3.1, 1.1.1d-11.6.11.1.0i-150100.14.68.1, 1.1.1d-150200.11.82.1, 1.1.1w-4.110
OSV records
ALPINE-CVE-2023-5678DEBIAN-CVE-2023-5678UBUNTU-CVE-2023-5678openSUSE-SU-2024:13437-1SUSE-SU-2023:4519-1SUSE-SU-2023:4520-1
Also known as
USN-6622-1, USN-6632-1, USN-6709-1

Charts affected

1,589 by stars
ChartLatestAffected imagesRadar Score
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
openssl@3.1.1-r1
3.1.4-r1

Open the chart page →

5,731
mini-infrajaeki0.1.01 of 4See more

mini-infra jaeki 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.13.101b33357b3595
openssl@3.1.0-r4
3.1.4-r1

Open the chart page →

1,746
unifi-network-applicationjanip81-helm-chartsVerified publisher0.2.91 of 3See more

unifi-network-application janip81-helm-charts 0.2.9

1 of the 3 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
library/mongo:7.0b6421fd6d1c5
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,192
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
openssl@3.0.2-0ubuntu1.15
no fix listed

Open the chart page →

5,279
ingress-nginxjfrog4.5.21 of 2See more

ingress-nginx jfrog 4.5.2

1 of the 2 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.12-r1

Open the chart page →

3,798
vaultjfrog0.25.02 of 2See more

vault jfrog 0.25.0

2 of the 2 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
openssl@1.1.1u-r1
1.1.1w-r1
hashicorp/vault-k8s:1.2.14500e988b7ce
openssl@3.0.8-r3
3.0.12-r1

Open the chart page →

3,978
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

7,857
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

22,761
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1
moreillon/user-manager-front:v5.0.3b067dbbbb6af
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

63,890
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

16,686
todo-appjunktext-via-aws1.2.101 of 1See more

todo-app junktext-via-aws 1.2.10

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
junktext/getting-started:1.0.34d44adf5a4da2
openssl@1.1.1n-r0
1.1.1w-r1

Open the chart page →

1,582
k10appk10app0.2.14 of 11See more

k10app k10app 0.2.1

4 of the 11 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
ghcr.io/k10app/basicuserservice:latest2ee057ad3bef
openssl@1.1.1s-r0
1.1.1w-r1
ghcr.io/k10app/businit:latest94c9a3e799c2
openssl@3.0.7-r0
3.0.12-r1
ghcr.io/k10app/catalog:latest639c980be0f1
openssl@1.1.1s-r0
1.1.1w-r1
ghcr.io/k10app/order:lateste1017d0dbd78
openssl@3.0.7-r0
3.0.12-r1

Open the chart page →

10,588
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

3,378
nostr-strfryk8s-chartsVerified publisher1.3.01 of 1See more

nostr-strfry k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
dockurr/strfry:1.1.0545555da5dd2
openssl@3.1.2-r0
3.1.4-r1

Open the chart page →

349
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

6,218
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
nodejs@16.14.2-deb-1nodesource1
openssl@3.0.2-0ubuntu1.9
no fix listed
3.0.2-0ubuntu1.14

Open the chart page →

9,856
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
openssl@1.1.1n-r0
1.1.1w-r1

Open the chart page →

14,912
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.21

Open the chart page →

7,407
kube-admission-controller-starterk8s-validating-webhook0.2.01 of 2See more

kube-admission-controller-starter k8s-validating-webhook 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
ghcr.io/curium-rocks/kube-admission-controller-starter:maine9716966f30b
openssl@1.1.1q-r0
1.1.1w-r1

Open the chart page →

2,168
kadeck-teamskadeck1.1.211 of 1See more

kadeck-teams kadeck 1.1.21

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
xeotek/kadeck:6.3.439a3b37a17c5
openssl@3.0.2-0ubuntu1.20
no fix listed

Open the chart page →

3,626
kadeck-webkadeck0.6.01 of 1See more

kadeck-web kadeck 0.6.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
xeotek/kadeck:4.2.94c6b04d9ce55
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.21

Open the chart page →

7,364
kanbanapp-demokanbanapp-demo0.3.01 of 3See more

kanbanapp-demo kanbanapp-demo 0.3.0

1 of the 3 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
library/postgres:9.6-alpine8342bcb43446
openssl@1.1.1l-r7
1.1.1w-r1

Open the chart page →

7,502
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.21

Open the chart page →

16,557
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

8,895
helm-mongodb-operatorkeyporttech0.1.01 of 1See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
openssl@1.0.2g-1ubuntu4.17
1.0.2g-1ubuntu4.20+esm11

Open the chart page →

8,829
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

12,559
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
openssl@3.1.3-r0
3.1.4-r1

Open the chart page →

6,458
kingkfirfer0.1.01 of 1See more

king kfirfer 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
kfirfer/king:latestc05d9fc7ae77
openssl@3.0.10-r0
3.0.12-r1

Open the chart page →

1,173
kube-hunterkfirfer1.0.51 of 1See more

kube-hunter kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
openssl@1.1.1n-r0
1.1.1w-r1

Open the chart page →

997
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.21

Open the chart page →

10,319
quickwitkfirfer0.7.21 of 1See more

quickwit kfirfer 0.7.2

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1

Open the chart page →

3,507
rabbitmqkfirfer0.7.211 of 2See more

rabbitmq kfirfer 0.7.21

1 of the 2 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
library/rabbitmq:3.12.100742852455ad
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.14

Open the chart page →

2,494
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
openssl@1.1.1q-r0
1.1.1w-r1

Open the chart page →

2,320
skoonerkfirfer0.0.61 of 1See more

skooner kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
openssl@3.1.2-r0
3.1.4-r1

Open the chart page →

1,343
slackgptkfirfer0.0.61 of 1See more

slackgpt kfirfer 0.0.6

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
kfirfer/slackgpt:0.0.15461331bd838e
openssl@3.1.3-r0
3.1.4-r1

Open the chart page →

1,125
kiaekiae0.1.63 of 9See more

kiae kiae 0.1.6

3 of the 9 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
openssl@1.1.1n-r0
1.1.1w-r1
istio/pilot:1.15.2db08d6963975
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.14
ghcr.io/dexidp/dex:v2.35.313964b29d63e
openssl@1.1.1q-r0
1.1.1w-r1

Open the chart page →

19,267
kloudlite-platformkloudlite1.1.51 of 3See more

kloudlite-platform kloudlite 1.1.5

1 of the 3 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
openssl@3.1.3-r0
3.1.4-r1

Open the chart page →

1,971
visual-regression-trackerkokuwa5.1.03 of 4See more

visual-regression-tracker kokuwa 5.1.0

3 of the 4 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
openssl@3.0.11-1~deb12u2
3.0.13-1~deb12u1
visualregressiontracker/migration:5.0.1f983a1d4306e
openssl@3.1.2-r0
3.1.4-r1
visualregressiontracker/ui:5.0.4ca7835844257
openssl@3.0.10-r0
3.0.12-r1

Open the chart page →

9,177
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm4

Open the chart page →

14,914
kovi-tile38kovi-charts0.1.11 of 1See more

kovi-tile38 kovi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
tile38/tile38:1.33.4afb7e82f9485
openssl@1.1.1q-r0
1.1.1w-r1

Open the chart page →

1,208
kubeflowkromanow94-kubeflow0.5.13 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

3 of the 30 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
openssl@3.1.2-r0
3.1.4-r1
library/python:3.7eedf63967cdb
openssl@3.0.9-1
3.0.13-1~deb12u1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.fips.21

Open the chart page →

71,075
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.21

Open the chart page →

8,937
kron-aapm-sidecarkron-aapm-sidecar1.1.01 of 1See more

kron-aapm-sidecar kron-aapm-sidecar 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
krontechnology/aapm-sidecar-injector:1.1.0e078d54c1711
openssl@1.1.1n-r0
1.1.1w-r1

Open the chart page →

2,111
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

4,506
fileserverkronkltdVerified publisher0.3.101 of 1See more

fileserver kronkltd 0.3.10

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
duck1123/lnd-fileserver:latest9d6fb247b714
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.14

Open the chart page →

3,778
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
duck1123/cert-downloader:latest0e29f19fa67c
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.14

Open the chart page →

5,655
aapm-servicekron-pam-aapm-helmcharts1.2.51 of 1See more

aapm-service kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
krontechnology/aapm-service:1.1.39dd602db8baa
openssl@3.0.2-0ubuntu1.21
no fix listed

Open the chart page →

2,656
kron-aapm-agentkron-pam-aapm-helmcharts1.2.51 of 1See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.8.41cc7d5be6529
openssl@3.0.2-0ubuntu1.21
no fix listed

Open the chart page →

2,757
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
openssl@3.0.7-r2
3.0.12-r1

Open the chart page →

3,649
nocodbkrzwiatrzyk0.0.11 of 1See more

nocodb krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-5678.

Container imageDigestPackageFixed in
nocodb/nocodb:0.100.2b0b91ec2a2dd
openssl@1.1.1q-r0
1.1.1w-r1

Open the chart page →

2,320

Container images carrying it

1,657 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
openssl@3.0.11-1~deb12u1
3.0.13-1~deb12u1
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.12-r1
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
openssl@1.1.1q-r0
1.1.1w-r1
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
openssl@3.1.0-r4
3.1.4-r1
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.12-r1
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
openssl@1.1.1q-r0
1.1.1w-r1
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
openssl@1.1.1q-r0
1.1.1w-r1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.