StackRadar

CVE-2019-11254

Medium

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.031
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
120
of 17,781 indexed, latest versions
Container images
91
deployed by those charts
Fix available
1 of 2
affected packages

Excessive Platform Resource Consumption within a Loop in Kubernetes

Carried by container images the latest versions of 120 of 17,781 indexed charts deploy, on 91 images.

Affected packageAffected versionsFixed inImages
gopkg.in/yaml.v2golangv2.0.0-20170712054546-1be3d31502d6, v2.0.0-20170812160011-eb3733d160e7, v2.0.0-20190319135612-7b8349ac747c, v2.2.1+5 more2.2.885
github.com/go-yaml/yamlgolangv2.1.0+incompatibleno fix listed7
OSV records
GHSA-wxc4-f4m6-wwqv
Also known as
GO-2020-0036

Charts affected

120 by stars
ChartLatestAffected imagesRadar Score
aws-s3-proxydeliveryheroVerified publisher0.1.71 of 1See more

aws-s3-proxy deliveryhero 0.1.7

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
pottava/s3-proxy:2.020a0bcb15f76
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

1,323
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

10,466
drone-kubernetes-secretsdroneVerified publisher0.1.41 of 1See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
drone/kubernetes-secrets:latest206df2280ecf
gopkg.in/yaml.v2@v2.2.1
2.2.8

Open the chart page →

2,760
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

20,205
local-path-provisionerdysnixVerified publisher0.0.201 of 1See more

local-path-provisioner dysnix 0.0.20

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.20d5999b20a1b1
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

2,925
grafanaedu5.3.01 of 1See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

3,191
prometheusedu11.6.01 of 6See more

prometheus edu 11.6.0

1 of the 6 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

8,484
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed

Open the chart page →

952
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

14,673
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
gopkg.in/yaml.v2@v2.2.7
2.2.8

Open the chart page →

8,545
gotifygeek-cookbookVerified publisher1.2.21 of 1See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
gotify/server:2.1.409c79bc1e403
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed

Open the chart page →

3,131
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
gopkg.in/yaml.v2@v2.2.7
2.2.8

Open the chart page →

10,994
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
gopkg.in/yaml.v2@v2.2.7
2.2.8

Open the chart page →

14,283
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
gopkg.in/yaml.v2@v2.2.7
2.2.8

Open the chart page →

17,702
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
gopkg.in/yaml.v2@v2.2.7
2.2.8

Open the chart page →

7,768
webhook-receivergeek-cookbookVerified publisher0.0.11 of 1See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
gopkg.in/yaml.v2@v2.0.0-20170812160011-eb3733d160e7
2.2.8

Open the chart page →

1,362
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

2,374
kubernetes-event-exporterhbahadorzadeh0.1.01 of 1See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
gopkg.in/yaml.v2@v2.2.7
2.2.8

Open the chart page →

2,630
aws-s3-proxyhelm-charts-nr0.1.71 of 1See more

aws-s3-proxy helm-charts-nr 0.1.7

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
pottava/s3-proxy:2.020a0bcb15f76
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

1,323
labelsmanager-controllerhelm-charts-nr1.0.41 of 1See more

labelsmanager-controller helm-charts-nr 1.0.4

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

2,305
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
gopkg.in/yaml.v2@v2.2.1
2.2.8

Open the chart page →

7,984
cratedb-adapterhmdmph0.1.01 of 1See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
gopkg.in/yaml.v2@v2.2.3
2.2.8

Open the chart page →

2,913
jx-app-flaggerjenkins-x0.0.51 of 2See more

jx-app-flagger jenkins-x 0.0.5

1 of the 2 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
grafana/grafana:6.5.1befcd84da2c1
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

6,028
dex-k8s-authenticatorkfirfer0.0.31 of 1See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

2,791
gitlabkubesphereVerified publisher4.2.33 of 17See more

gitlab kubesphere 4.2.3

3 of the 17 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
gopkg.in/yaml.v2@v2.2.4
2.2.8
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
gopkg.in/yaml.v2@v2.2.2
2.2.8
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

38,133
grafanaleechistest5.3.01 of 1See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

3,191
prometheusleechistest11.6.01 of 6See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

8,484
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

9,880
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

23,613
flaggermesosphere0.21.01 of 2See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

6,048
karmamesosphere1.3.01 of 1See more

karma mesosphere 1.3.0

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.503751e5eed656
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

2,111
kudomesosphere0.1.41 of 1See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
kudobuilder/controller:v0.9.069072d979708
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

5,682
local-path-provisionermesosphere0.0.221 of 1See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.22e34c88ae0aff
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

2,317
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

2,806
azuredisk-csi-drivermesosphere-stable0.8.11 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

1 of the 6 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher:v2.2.0f55f30876129
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

14,065
kommandermesosphere-stable0.39.22 of 29See more

kommander mesosphere-stable 0.39.2

2 of the 29 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
gopkg.in/yaml.v2@v2.2.5
2.2.8
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

68,284
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

15,855
authmyaVerified publisher22.4.31 of 1See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

2,374
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

2,806
exposecontrollerolli-aiVerified publisher1.0.51 of 1See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
olliai/exposecontroller:1.0.5a470d96525e4
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

2,861
k8s-replicatorolli-aiVerified publisher1.3.01 of 1See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
olliai/k8s-replicator:1.3.05716f2a8bd4c
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

2,825
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

4,612
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

11,151
podtato-headportefaix-hub0.3.01 of 6See more

podtato-head portefaix-hub 0.3.0

1 of the 6 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
ghcr.io/podtato-head/entry:latestc3d9d9c98be7
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed

Open the chart page →

5,279
prometheus-blackbox-exporterprometheus-worawutchan4.10.11 of 1See more

prometheus-blackbox-exporter prometheus-worawutchan 4.10.1

1 of the 1 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.18.01ffc3f109eb3
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

2,250
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
reportportal/service-index:5.0.112b27a2d7a87d
gopkg.in/yaml.v2@v2.2.4
2.2.8

Open the chart page →

25,737
rke2-canal-1.19-1.20rke2-charts3.13.3-build20211022021 of 2See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

1 of the 2 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

5,942
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/yaml.v2@v2.2.5
2.2.8

Open the chart page →

10,466
seldon-core-analyticsseldon1.17.12 of 8See more

seldon-core-analytics seldon 1.17.1

2 of the 8 container images this version deploys carry CVE-2019-11254.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/yaml.v2@v2.2.5
2.2.8
prom/alertmanager:v0.20.07e4e9f7a0954
gopkg.in/yaml.v2@v2.2.2
2.2.8

Open the chart page →

10,733

Container images carrying it

91 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/yaml.v2@v2.2.5
2.2.8
6
prom/alertmanager:v0.20.07e4e9f7a0954
gopkg.in/yaml.v2@v2.2.2
2.2.8
5
prom/prometheus:v2.13.10a8caa2e9f19
gopkg.in/yaml.v2@v2.2.2
2.2.8
5
grafana/grafana:6.7.11ff3999e0fc0
gopkg.in/yaml.v2@v2.2.5
2.2.8
4
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
gopkg.in/yaml.v2@v2.2.2
2.2.8
3
stakater/proxyinjector:v0.0.2383fef483d497
gopkg.in/yaml.v2@v2.2.7
2.2.8
3
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/yaml.v2@v2.2.5
2.2.8
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
gopkg.in/yaml.v2@v2.2.2
2.2.8
3
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
gopkg.in/yaml.v2@v2.2.2
2.2.8
3
cesanta/docker_auth:1.6.04d16885f3d4c
gopkg.in/yaml.v2@v2.2.2
2.2.8
2
crate/crate_adapter:latestb8d89fa5d19b
gopkg.in/yaml.v2@v2.2.3
2.2.8
2
hashicorp/vault:1.8.34db614d40d0e
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
gopkg.in/yaml.v2@v2.2.2
2.2.8
2
natsio/nats-box:0.11.09fbf7bf684e4
gopkg.in/yaml.v2@v2.2.2
2.2.8
2
pottava/s3-proxy:2.020a0bcb15f76
gopkg.in/yaml.v2@v2.2.2
2.2.8
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
gopkg.in/yaml.v2@v2.2.5
2.2.8
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
gopkg.in/yaml.v2@v2.2.4
2.2.8
2
weblate/weblate:4.2.2-169c160d37a3c
gopkg.in/yaml.v2@v2.2.1
2.2.8
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
gopkg.in/yaml.v2@v2.2.2
2.2.8
2
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
gopkg.in/yaml.v2@v2.0.0-20170812160011-eb3733d160e7
2.2.8
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
gopkg.in/yaml.v2@v2.2.5
2.2.8
2
almir/webhook:2.8.01698346f6077
gopkg.in/yaml.v2@v2.0.0-20170812160011-eb3733d160e7
2.2.8
1
codercom/code-server:4.11.0-debian1e2cc688008e
gopkg.in/yaml.v2@v2.2.1
2.2.8
1
codercom/code-server:3.10.247605610ad8d
gopkg.in/yaml.v2@v2.2.1
2.2.8
1
codeskyblue/gohttpserver:latestcaa862590e34
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
devspacecloud/manager:0.3.349c397413f7b
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
drone/drone-runner-docker:1.8.1137e79c5e23c
gopkg.in/yaml.v2@v2.2.2
2.2.8
1
drone/kubernetes-secrets:latest206df2280ecf
gopkg.in/yaml.v2@v2.2.1
2.2.8
1
envoyproxy/ratelimit:v1.4.071081616da3e
gopkg.in/yaml.v2@v2.2.7
2.2.8
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
gopkg.in/yaml.v2@v2.2.7
2.2.8
1
gotify/server:2.1.409c79bc1e403
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
1
grafana/grafana:6.6.0052147d7e0ec
gopkg.in/yaml.v2@v2.2.5
2.2.8
1
grafana/grafana:6.5.1befcd84da2c1
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
hashicorp/vault:1.8.4dfc3500beb0e
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
1
hashicorp/vault-k8s:0.6.05697b85bc69a
gopkg.in/yaml.v2@v2.2.5
2.2.8
1
ianw/quickchart:v1.7.1dc49dd460c37
gopkg.in/yaml.v2@v2.2.2
2.2.8
1
jmferrer/azure-devops-agent:latest030f68ec6998
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
kudobuilder/controller:v0.9.069072d979708
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
gopkg.in/yaml.v2@v2.2.2
2.2.8
1
lmierzwa/karma:v0.503751e5eed656
gopkg.in/yaml.v2@v2.2.5
2.2.8
1
mesosphere/traefik-forward-auth:3.1.05456581d7b76
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
gopkg.in/yaml.v2@v2.2.2
2.2.8
1
minio/mc:RELEASE.2020-04-25T00-43-23Z1806872732e1
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
gopkg.in/yaml.v2@v2.2.2
2.2.8
1
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
gopkg.in/yaml.v2@v2.2.4
2.2.8
1
monitoror/monitoror:44b88edcf51ff
gopkg.in/yaml.v2@v2.2.2
2.2.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.