CVE-2023-6129

Medium

Advisory

Published 9 Jan 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.023; 83rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 839; of 17,787 indexed, latest versions
Container images: 870; deployed by those charts
Fix available: 2 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 839 of 17,787 indexed charts deploy, on 870 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.1.1f-1ubuntu2.24, 3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5+22 more	3.0.2-0ubuntu1.14, 3.0.10-1ubuntu4, 3.0.13-1~deb12u1	446
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+16 more	3.0.12-r2, 3.1.4-r3, 3.2.1-r0	424
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5

OSV records: ALPINE-CVE-2023-6129 CGA-23jm-pm92-qvp8 DEBIAN-CVE-2023-6129 UBUNTU-CVE-2023-6129
Also known as: CGA-22p8-hhxj-9pcc, CGA-42pj-9v2p-7m5w, CGA-4jq5-652c-7wmq, USN-6622-1

Charts affected

839 by stars

Chart

Latest

Affected images

Radar Score

synapsetranhailong

0.1.0

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
library/postgres :15.2-alpine	d9c304353c03	openssl@3.0.8-r3	3.0.12-r2

Open the chart page →

3,164

orchestra-login-portaltremolo

2.3.98

1 of 1 See more

orchestra-login-portal tremolo 2.3.98

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
ghcr.io/openunison/openunison-k8s-react :1.0.2	afb3e9282952	openssl@3.0.2-0ubuntu1.19	no fix listed

Open the chart page →

3,002

posteetrivy-operator

2.14.0

2 of 3 See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
aquasec/postee :2.12.0-amd64	0795cba777e7	openssl@3.1.1-r1	3.1.4-r3
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	openssl@3.1.1-r1	3.1.4-r3

Open the chart page →

4,815

tfy-distributortruefoundry

0.0.1

4 of 4 See more

tfy-distributor truefoundry 0.0.1

4 of the 4 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	openssl@3.1.4-r1	3.1.4-r3
natsio/nats-server-config-reloader :0.14.0	8c28b75bc416	openssl@3.1.1-r1	3.1.4-r3
natsio/prometheus-nats-exporter :0.13.0	2adf791d9f9f	openssl@3.1.3-r0	3.1.4-r3
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1

Open the chart page →

17,348

twentytwenty-crm

0.1.11

1 of 4 See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	openssl@3.0.2-0ubuntu1.15	no fix listed

Open the chart page →

5,599

uoappuoapp

1.1.0

1 of 1 See more

uoapp uoapp 1.1.0

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
okaforuchena/uo-docker :V1.0.0	004e81250f48	openssl@3.0.10-r0	3.0.12-r2

Open the chart page →

1,187

demo-backendv2fly

0.0.3

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssl@3.0.9-1	3.0.13-1~deb12u1

Open the chart page →

14,383

demo-frontendv2fly

0.0.3

1 of 1 See more

demo-frontend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/sys-stats :e1f9d77	8c8d08b95c0b	openssl@3.1.4-r1	3.1.4-r3

Open the chart page →

753

skoonervhdirk

0.1.4

1 of 1 See more

skooner vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
ghcr.io/skooner-k8s/skooner :stable	60c1562e4d51	openssl@3.1.2-r0	3.1.4-r3

Open the chart page →

1,341

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	nodejs@20.11.1-1nodesource1 openssl@3.0.2-0ubuntu1.10	no fix listed 3.0.2-0ubuntu1.14

Open the chart page →

9,396

twenty-crmvictorlane

0.0.1

2 of 3 See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :latest	798ab84d9f26	openssl@3.0.2-0ubuntu1.20	no fix listed
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	openssl@3.0.2-0ubuntu1.14	no fix listed

Open the chart page →

13,563

websitewaldo-vision

0.33.0

2 of 2 See more

website waldo-vision 0.33.0

2 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
ghcr.io/waldo-vision/migrate :v0.3.6	ae31923312ed	openssl@3.0.8-r3	3.0.12-r2
ghcr.io/waldo-vision/web :v0.3.6	5bbc7647df07	openssl@3.0.8-r3	3.0.12-r2

Open the chart page →

3,474

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
wallarm/ingress-tarantool :4.6.0-1	ba00516618ea	openssl@3.0.8-r0	3.0.12-r2

Open the chart page →

11,444

wallarm-ingress-rcwallarm

4.8.4

1 of 2 See more

wallarm-ingress-rc wallarm 4.8.4

1 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :4.8.0-1	a591b9c91570	openssl@3.1.3-r0	3.1.4-r3

Open the chart page →

2,635

consulwarjiang

1.3.0

2 of 2 See more

consul warjiang 1.3.0

2 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.17.0	712fe02d2f84	openssl@3.1.4-r0	3.1.4-r3
hashicorp/consul-k8s-control-plane :1.3.0	0e4452f0f265	openssl@3.1.4-r0	3.1.4-r3

Open the chart page →

4,059

eth-validatorwateim

1.4.5

2 of 3 See more

eth-validator wateim 1.4.5

2 of the 3 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
sigp/lighthouse :latest	9a62bb870545	openssl@3.0.2-0ubuntu1.26	no fix listed
wateim/lighthouse-launch :latest	2520149ee574	openssl@3.0.2-0ubuntu1.18	no fix listed

Open the chart page →

5,077

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.14

Open the chart page →

6,272

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1

Open the chart page →

6,540

web-dvwaweb-dvwa

1.16.0

2 of 2 See more

web-dvwa web-dvwa 1.16.0

2 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	openssl@3.0.9-1	3.0.13-1~deb12u1
library/mariadb :10	ce66c7be32a0	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

8,858

generic-webhookwebhooks

0.1.1

1 of 1 See more

generic-webhook webhooks 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	openssl@3.0.8-r0	3.0.12-r2

Open the chart page →

2,031

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.14
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.14

Open the chart page →

10,568

wexa-studiowexa-studio

1.2.0

2 of 15 See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.15.4	0b01ed3924e6	openssl@3.1.4-r1	3.1.4-r3
qdrant/qdrant :v1.7.4	5f2a56b95266	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1

Open the chart page →

14,618

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.14

Open the chart page →

9,296

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1

Open the chart page →

5,548

wiremind-baremetalwiremind

2.0.2

1 of 1 See more

wiremind-baremetal wiremind 2.0.2

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
library/alpine :3.18.0	02bb6f428431	openssl@3.1.0-r4	3.1.4-r3

Open the chart page →

487

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed no fix listed

Open the chart page →

14,172

workadventureworkadventure

1.1.0

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
matthiasluedtke/iconserver :v3.16.0	661d607b0fbc	openssl@3.1.3-r0	3.1.4-r3

Open the chart page →

16,083

oauth2xd

1.0.0

1 of 1 See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
lishimeng/hufu :v1.2.1	3d5752dac834	openssl@3.0.8-r0	3.0.12-r2

Open the chart page →

2,007

owlxd

0.5.1

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	openssl@3.0.8-r0	3.0.12-r2
lishimeng/owl-messager :v0.11.2	3d00485e64dc	openssl@3.0.8-r0	3.0.12-r2

Open the chart page →

3,880

passportxd

0.2.16

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	openssl@3.0.8-r0	3.0.12-r2
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	openssl@3.0.8-r0	3.0.12-r2

Open the chart page →

3,974

tabbyxd

1.0.6

2 of 2 See more

tabby xd 1.0.6

2 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1
lishimeng/tabby :v1.0.4	8145c3dc83c8	openssl@3.0.8-r0	3.0.12-r2

Open the chart page →

7,685

treexd

0.1.10

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	openssl@3.0.8-r0	3.0.12-r2

Open the chart page →

1,997

zooxd

0.4.0

1 of 1 See more

1,955

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1

Open the chart page →

2,674

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	openssl@3.0.9-r1	3.0.12-r2
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	openssl@3.0.9-r1	3.0.12-r2

Open the chart page →

5,033

zahori-postgresqlzahori

1.0.1

1 of 1 See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
library/postgres :12.15-alpine	73ea9cdd4a9d	openssl@3.1.2-r0	3.1.4-r3

Open the chart page →

448

zahori-processzahori

1.0.1

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	openssl@3.1.1-r1	3.1.4-r3

Open the chart page →

3,480

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.12-r2
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.12-r2

Open the chart page →

5,847

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2023-6129.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,916

Container images carrying it

870 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
checkmk/check-mk-community :2.5.0p6	c11b422210c4	openssl@3.0.2-0ubuntu1.23	no fix listed	1
cheveo/azp-agent :1.0.2	82240f890884	openssl@3.0.2-0ubuntu1.19	no fix listed	1
chirpstack/chirpstack-application-server :3	fb7667fe037f	openssl@3.0.7-r0	3.0.12-r2	1
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	openssl@3.0.7-r0	3.0.12-r2	1
chriseaton/adventureworks :latest	54c3384ce701	openssl@3.0.2-0ubuntu1.19	no fix listed	1
chrisfu/docker-wipeout-rewrite :sha-0c4f0614	f8b4996a203d	openssl@3.1.2-r0	3.1.4-r3	1
chrislusf/seaweedfs :3.56	ed80f00fde46	openssl@3.1.2-r0	3.1.4-r3	1
chriswells0/first-mate :1.0.5	f3918ec8471c	openssl@3.1.1-r1	3.1.4-r3	1
circleci/container-agent :3	4d8d0ae5efc3	openssl@3.0.8-r3	3.0.12-r2	1
ciscolabs/msm-nc :07102023	36d02faad958	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.14	1
ckan/ckan-solr :2.11-solr9	ef8e5d3e6be1	openssl@3.0.2-0ubuntu1.23	no fix listed	1
clickhouse/clickhouse-server :26.7	01b81d1432c4	openssl@3.0.2-0ubuntu1.29	no fix listed	1
clickhouse/clickhouse-server :26.3	810861a2e2d0	openssl@3.0.2-0ubuntu1.29	no fix listed	1
clickhouse/clickhouse-server :25.3.2.39	8745843b17f9	openssl@3.0.2-0ubuntu1.19	no fix listed	1
clickhouse/clickhouse-server :26.3.10	92098d3b31dd	openssl@3.0.2-0ubuntu1.23	no fix listed	1
clickhouse/clickhouse-server :24.12.6	a65ca89ddbe8	openssl@3.0.2-0ubuntu1.19	no fix listed	1
clickhouse/clickhouse-server :25.3.14.14	b627d7a9bc0e	openssl@3.0.2-0ubuntu1.21	no fix listed	1
clickhouse/clickhouse-server :23.4.2.11	dc5658853ce1	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.14	1
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	openssl@3.0.2-0ubuntu1.20	no fix listed	1
cloudnativelabs/kube-router :v1.6.0	0ec7cd73f43f	openssl@3.0.9-r1	3.0.12-r2	1
codecov/self-hosted-api :24.4.1	0475cb1c3136	openssl@3.1.0-r4	3.1.4-r3	1
coldatom/containers-security-api :latest	eae9e82da080	openssl@3.0.8-r3	3.0.12-r2	1
coldatom/containers-security-front :latest	7c2fbbb41bcf	openssl@3.0.8-r0	3.0.12-r2	1
collabora/code :23.05.10.1.1	05299b452f7f	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1	1
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	openssl@3.0.2-0ubuntu1.20	no fix listed	1
cortezaproject/corteza :2024.9.4	cb9f200de5d2	openssl@3.0.2-0ubuntu1.19	no fix listed	1
crazymax/rrdcached :1.8.0	841b10cdae76	openssl@3.1.0-r4	3.1.4-r3	1
crazymax/rtorrent-rutorrent :3.10-0.9.8-0.13.8	fb307f5b87bf	openssl@3.0.7-r0	3.0.12-r2	1
curlimages/curl :8.1.1	5af13420d29b	openssl@3.0.8-r4	3.0.12-r2	1
cyverse/irods-csi-driver :v0.12.0	aa69d105b292	openssl@3.0.2-0ubuntu1.29	no fix listed	1
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1	1
danny1dockerhub/nodejswebapp :latest	e434683fcc89	openssl@3.0.8-r3	3.0.12-r2	1
dariomader/twampy :v0.0.2	d2f4a8c5e690	openssl@3.2.0-r0	3.2.1-r0	1
datafuselabs/databend-meta :v1.2.279	ba877ee6cb4d	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1	1
datafuselabs/databend-query :v1.2.279	a936843b85b4	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1	1
datalayers/datalayers :v2.2.10	17b292079239	openssl@3.0.2-0ubuntu1.18	no fix listed	1
datamate/seafile-professional :11.0.20	2dd66b722464	openssl@3.0.2-0ubuntu1.19	no fix listed	1
davdiv/musicociel :dev	a85f99be882c	openssl@3.1.4-r2	3.1.4-r3	1
dblaci/ubuntu-ssh-rsync :20231020	eea697611af4	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.14	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	openssl@3.0.11-1~deb12u2	3.0.13-1~deb12u1	1
deepflowce/deepflow-agent :v6.2.6.5	29332fee7fc2	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.14	1
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	openssl@3.1.0-r4	3.1.4-r3	1
deluan/navidrome :0.49.3	11a24da08977	openssl@3.0.8-r0	3.0.12-r2	1
deluan/navidrome :0.50.0	2cf4442b0099	openssl@3.1.3-r0	3.1.4-r3	1
devopstales/trivy-operator :2.5	75136aa7a26e	openssl@3.0.7-r2	3.0.12-r2	1
dinutac/jinja2docker :2.1.8	9340dde8a8a4	openssl@3.1.4-r2	3.1.4-r3	1
distribution/distribution :2.8.3	f84b2078238f	openssl@3.1.3-r0	3.1.4-r3	1