StackRadar

CVE-2021-38561

High

Advisory

Published 6 Oct 2021In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
664
of 17,781 indexed, latest versions
Container images
682
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/text/language Out-of-bounds Read vulnerability

Carried by container images the latest versions of 664 of 17,781 indexed charts deploy, on 682 images.

Affected packageAffected versionsFixed inImages
golang.org/x/textgolangv0.3.0, v0.3.1-0.20180807135948-17ff2d5776d2, v0.3.1-0.20181227161524-e6919f6577db, v0.3.2+6 more0.3.7682
OSV records
GHSA-ppp9-7jff-5vj2
Also known as
GO-2021-0113

Charts affected

664 by stars
ChartLatestAffected imagesRadar Score
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

8,408
katibcowboysysopVerified publisher2.4.23 of 4See more

katib cowboysysop 2.4.2

3 of the 4 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
golang.org/x/text@v0.3.5
0.3.7
kubeflowkatib/katib-db-manager:v0.12.0db88bf09d88e
golang.org/x/text@v0.3.5
0.3.7
kubeflowkatib/katib-ui:v0.12.0129f0aaba976
golang.org/x/text@v0.3.5
0.3.7

Open the chart page →

6,542
kfservingcowboysysopVerified publisher1.3.11 of 3See more

kfserving cowboysysop 1.3.1

1 of the 3 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
kfserving/kfserving-controller:v0.6.163d79d04c2e3
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

3,830
metacontrollercowboysysopVerified publisher1.2.21 of 1See more

metacontroller cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
metacontrollerio/metacontroller:v2.1.10336993b88e4
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

2,092
mpi-operatorcowboysysopVerified publisher1.2.21 of 1See more

mpi-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
mpioperator/mpi-operator:0.3.03ccfa8d8b7bf
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,577
notebook-controllercowboysysopVerified publisher1.1.21 of 1See more

notebook-controller cowboysysop 1.1.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller:v1.4cac3ed9a9826
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,582
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
golang.org/x/text@v0.3.0
0.3.7

Open the chart page →

5,488
training-operatorcowboysysopVerified publisher1.2.21 of 1See more

training-operator cowboysysop 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
public.ecr.aws/j1r0q0g6/training/training-operator:760ac1171dd30039a7363ffa03c77454bd714da5ae59d222fd87
golang.org/x/text@v0.3.5
0.3.7

Open the chart page →

2,275
crossplane-controllerscrossplane0.12.01 of 1See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
crossplane/crossplane:v0.12.066666e6963af
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,312
oam-kubernetes-runtimecrossplane0.0.3-71.g0f235901 of 2See more

oam-kubernetes-runtime crossplane 0.0.3-71.g0f23590

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,248
oam-kubernetes-runtime-legacycrossplane0.3.1-5.g11e18941 of 1See more

oam-kubernetes-runtime-legacy crossplane 0.3.1-5.g11e1894

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

2,231
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

4,624
electric-mailcryptexlabsVerified publisher0.0.12 of 5See more

electric-mail cryptexlabs 0.0.1

2 of the 5 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
golang.org/x/text@v0.3.6
0.3.7
hashicorp/vault-k8s:0.13.1bebb03e8e800
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.12 of 4See more

purple-pie cryptexlabs 0.0.1

2 of the 4 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
golang.org/x/text@v0.3.6
0.3.7
hashicorp/vault-k8s:0.13.1bebb03e8e800
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

5,973
openldapcsic-charts0.1.11 of 2See more

openldap csic-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
osixia/openldap:1.5.018742e9c449c
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

5,293
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

13,852
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

2,977
mongodb-bi-connectordasmeta1.0.31 of 1See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

5,832
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,806
datadog-csi-driverdatadogVerified publisher0.17.01 of 2See more

datadog-csi-driver datadog 0.17.0

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.0.1e07f914c32f0
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

2,040
datadog-operatordatadog-test0.1.21 of 1See more

datadog-operator datadog-test 0.1.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
datadog/operator:0.3.117f08a860090
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

3,980
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

7,486
eg-edge-stack-crdsdatawire0.0.11 of 2See more

eg-edge-stack-crds datawire 0.0.1

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

2,404
kube-better-nodedecayofmind0.0.41 of 1See more

kube-better-node decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
ghcr.io/decayofmind/kube-better-node:masterccd2ce03b682
golang.org/x/text@v0.3.4
0.3.7

Open the chart page →

1,583
k8s-cloudwatch-adapterdeliveryheroVerified publisher0.2.21 of 1See more

k8s-cloudwatch-adapter deliveryhero 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,468
lxd8sdevplayer0Verified publisher0.5.12 of 2See more

lxd8s devplayer0 0.5.1

2 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/kubelan:0.2.3b776dae45d08
golang.org/x/text@v0.3.6
0.3.7
ghcr.io/devplayer0/lxd8s:0.3.1e159ba41aede
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

5,431
octolxddevplayer0Verified publisher0.1.11 of 1See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
golang.org/x/text@v0.3.5
0.3.7

Open the chart page →

2,525
argocddevtron1.8.12 of 3See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/text@v0.3.2
0.3.7
quay.io/dexidp/dex:v2.25.07bcf286807b8
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

10,466
devtron-enterprisedevtron48.0.04 of 28See more

devtron-enterprise devtron 48.0.0

4 of the 28 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/text@v0.3.6
0.3.7
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
golang.org/x/text@v0.3.4
0.3.7
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/text@v0.3.4
0.3.7
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

68,240
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
golang.org/x/text@v0.3.4
0.3.7

Open the chart page →

5,039
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

11,909
kube-prometheus-stackdevtron19.3.03 of 6See more

kube-prometheus-stack devtron 19.3.0

3 of the 6 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
golang.org/x/text@v0.3.6
0.3.7
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
golang.org/x/text@v0.3.6
0.3.7
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

8,645
argocddevtron-labs1.8.12 of 3See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/text@v0.3.2
0.3.7
quay.io/dexidp/dex:v2.25.07bcf286807b8
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

10,466
calicodevtron-labs0.1.13 of 4See more

calico devtron-labs 0.1.1

3 of the 4 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
golang.org/x/text@v0.3.4
0.3.7
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
golang.org/x/text@v0.3.4
0.3.7
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
golang.org/x/text@v0.3.4
0.3.7

Open the chart page →

10,071
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.04 of 28See more

devtron-enterprise devtron-labs 48.0.0

4 of the 28 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/text@v0.3.6
0.3.7
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
golang.org/x/text@v0.3.4
0.3.7
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/text@v0.3.4
0.3.7
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

68,240
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
golang.org/x/text@v0.3.4
0.3.7

Open the chart page →

5,039
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/text@v0.3.6
0.3.7
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/text@v0.3.4
0.3.7
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

32,902
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

11,909
kube-prometheus-stackdevtron-labs19.3.03 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

3 of the 6 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
golang.org/x/text@v0.3.6
0.3.7
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
golang.org/x/text@v0.3.6
0.3.7
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

8,645
digital-mobiusdigital-mobius0.1.41 of 1See more

digital-mobius digital-mobius 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
qoveryrd/digital-mobius:0.1.4b30a9398a83c
golang.org/x/text@v0.3.4
0.3.7

Open the chart page →

2,287
snmp-exporterdniel0.0.21 of 1See more

snmp-exporter dniel 0.0.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
prom/snmp-exporter:v0.20.09d226d7de223
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,126
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

8,408
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
golang.org/x/text@v0.3.3
0.3.7

Open the chart page →

3,046
prometheus-memcached-exporterdoubanVerified publisher0.1.31 of 1See more

prometheus-memcached-exporter douban 0.1.3

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
prom/memcached-exporter:v0.9.001267317c95d
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

2,114
tencentcloud-info-exporterdoubanVerified publisher0.2.21 of 1See more

tencentcloud-info-exporter douban 0.2.2

1 of the 1 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tencentcloud-info-exporter:maind523c2c010cd
golang.org/x/text@v0.3.6
0.3.7

Open the chart page →

2,325
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2021-38561.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
golang.org/x/text@v0.3.2
0.3.7

Open the chart page →

30,699

Container images carrying it

682 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
golang.org/x/text@v0.3.2
0.3.7
1
subspacecommunity/subspace:1.5.0e2042b63fb35
golang.org/x/text@v0.3.0
0.3.7
1
surajwarbhe/grafana:v185248611e9f1
golang.org/x/text@v0.3.2
0.3.7
1
syncthing/syncthing:1.18.2966433161272
golang.org/x/text@v0.3.6
0.3.7
1
thanosio/thanos:v0.19.088276fcd1491
golang.org/x/text@v0.3.5
0.3.7
1
thanosio/thanos:v0.15.0b12d5c31bf5a
golang.org/x/text@v0.3.3
0.3.7
1
thecampagnards/trafficlight-api:main7dca9d973837
golang.org/x/text@v0.3.6
0.3.7
1
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
golang.org/x/text@v0.3.6
0.3.7
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
golang.org/x/text@v0.3.2
0.3.7
1
timescale/timescaledb-postgis:latest-pg127758704d4a14
golang.org/x/text@v0.3.2
0.3.7
1
tobiasbp/db-backup:0.0.314bee6e33a26
golang.org/x/text@v0.3.2
0.3.7
1
tobirachel/node-project3:v17d9f37154994
golang.org/x/text@v0.3.6
0.3.7
1
toucansoftware/spa-reloader:latestc187b1fba501
golang.org/x/text@v0.3.3
0.3.7
1
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
golang.org/x/text@v0.3.6
0.3.7
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
golang.org/x/text@v0.3.5
0.3.7
1
ubercadence/server:0.23.22ac5491d13bb
golang.org/x/text@v0.3.4
0.3.7
1
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
golang.org/x/text@v0.3.6
0.3.7
1
velero/velero:v1.9.0277fbfaf8dcf
golang.org/x/text@v0.3.6
0.3.7
1
velero/velero:v1.8.18d784580931c
golang.org/x/text@v0.3.6
0.3.7
1
vikunja/api:0.17.18cba0520bf8c
golang.org/x/text@v0.3.6
0.3.7
1
voltha/bbsim:1.16.7d90403d58016
golang.org/x/text@v0.3.5
0.3.7
1
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
golang.org/x/text@v0.3.6
0.3.7
1
voltha/bbsim-sadis-server:0.4.0762b272d439e
golang.org/x/text@v0.3.6
0.3.7
1
vultr/cert-manager-webhook-vultr:v0.1.0541c3e0aec58
golang.org/x/text@v0.3.3
0.3.7
1
vultr/vultr-cloud-controller-manager:v0.3.01806f17d620c
golang.org/x/text@v0.3.4
0.3.7
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
golang.org/x/text@v0.3.2
0.3.7
1
wazuh/wazuh-manager:4.4.121994f40e0da
golang.org/x/text@v0.3.2
0.3.7
1
wazuh/wazuh-manager:4.14.45a065930682d
golang.org/x/text@v0.3.2
0.3.7
1
wazuh/wazuh-manager:4.14.3f09282d281f6
golang.org/x/text@v0.3.2
0.3.7
1
weaveworks/flagger:1.0.0-rc.5174307de1b36
golang.org/x/text@v0.3.2
0.3.7
1
weaveworks/flagger:0.19.0a9c2e9df4227
golang.org/x/text@v0.3.2
0.3.7
1
weaveworks/flagger-loadtester:0.9.03cdac6928a63
golang.org/x/text@v0.3.2
0.3.7
1
weblate/weblate:3.11.3-182848df56ecd
golang.org/x/text@v0.3.0
0.3.7
1
wener/frpc:v0.37.0cc9fd4da44c0
golang.org/x/text@v0.3.2
0.3.7
1
wener/frps:v0.37.05c92cc9e8597
golang.org/x/text@v0.3.2
0.3.7
1
willnorris/imageproxy:latest21d0c90f4c31
golang.org/x/text@v0.3.6
0.3.7
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
golang.org/x/text@v0.3.6
0.3.7
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
golang.org/x/text@v0.3.3
0.3.7
1
zufardhiyaulhaq/ngrok-operator:v1.3.07cf2ae3fb1fb
golang.org/x/text@v0.3.6
0.3.7
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
golang.org/x/text@v0.3.4
0.3.7
1
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
golang.org/x/text@v0.3.2
0.3.7
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
golang.org/x/text@v0.3.4
0.3.7
1
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
golang.org/x/text@v0.3.6
0.3.7
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
golang.org/x/text@v0.3.6
0.3.7
1
gcr.io/google-samples/microservices-demo/cartservice:v0.2.3566733b4d2d5
golang.org/x/text@v0.3.4
0.3.7
1
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
golang.org/x/text@v0.3.2
0.3.7
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
golang.org/x/text@v0.3.4
0.3.7
1
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
golang.org/x/text@v0.3.2
0.3.7
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
golang.org/x/text@v0.3.4
0.3.7
1
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
golang.org/x/text@v0.3.2
0.3.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.