StackRadar

CVE-2021-4235

Medium

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
60
of 17,781 indexed, latest versions
Container images
38
deployed by those charts
Fix available
1 of 2
affected packages

YAML Go package vulnerable to denial of service

Carried by container images the latest versions of 60 of 17,781 indexed charts deploy, on 38 images.

Affected packageAffected versionsFixed inImages
gopkg.in/yaml.v2golangv2.0.0-20170712054546-1be3d31502d6, v2.0.0-20170812160011-eb3733d160e7, v2.0.0-20190319135612-7b8349ac747c, v2.2.1+1 more2.2.332
github.com/go-yaml/yamlgolangv2.1.0+incompatibleno fix listed7
OSV records
GHSA-r88r-gmrh-7j83
Also known as
GO-2021-0061

Charts affected

60 by stars
ChartLatestAffected imagesRadar Score
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,315
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

12,237
dex-k8s-authenticatorsagikazarmarkVerified publisher0.0.31 of 1See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,791
code-serverdeploy-code-server1.0.31 of 2See more

code-server deploy-code-server 1.0.3

1 of the 2 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
codercom/code-server:3.10.247605610ad8d
gopkg.in/yaml.v2@v2.2.1
2.2.3

Open the chart page →

4,577
nfs-server-provisionernfs-ganesha-server-and-external-provisioner1.8.01 of 1See more

nfs-server-provisioner nfs-ganesha-server-and-external-provisioner 1.8.0

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,315
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
drone/drone-runner-docker:1.8.1137e79c5e23c
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

5,674
nfs-server-provisionerraphaelVerified publisher1.3.01 of 1See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,730
cubefscubefs3.2.01 of 10See more

cubefs cubefs 3.2.0

1 of the 10 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

15,891
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
gopkg.in/yaml.v2@v2.2.1
2.2.3

Open the chart page →

7,984
alertmanager-botgeek-cookbookVerified publisher6.4.21 of 1See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

3,586
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

24,690
prometheus-cachethqoxyno-zetaVerified publisher1.1.11 of 1See more

prometheus-cachethq oxyno-zeta 1.1.1

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
oxynozeta/prometheus-cachethq:1.1.131f11669d597
github.com/go-yaml/yaml@v2.1.0+incompatible
gopkg.in/yaml.v2@v2.2.2
no fix listed
2.2.3

Open the chart page →

1,713
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
codercom/code-server:4.11.0-debian1e2cc688008e
gopkg.in/yaml.v2@v2.2.1
2.2.3

Open the chart page →

31,844
rke2-canalrke2-charts3.13.31 of 2See more

rke2-canal rke2-charts 3.13.3

1 of the 2 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
gopkg.in/yaml.v2@v2.0.0-20170712054546-1be3d31502d6
2.2.3

Open the chart page →

6,996
vearchvearch3.3.41 of 4See more

vearch vearch 3.3.4

1 of the 4 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

5,008
webhookswebhooks0.1.51 of 1See more

webhooks webhooks 0.1.5

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
gopkg.in/yaml.v2@v2.0.0-20170812160011-eb3733d160e7
2.2.3

Open the chart page →

2,030
chirpstack-packet-multiplexerangelnu3.0.01 of 1See more

chirpstack-packet-multiplexer angelnu 3.0.0

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
ghcr.io/angelnu/chirpstack-packet-multiplexer:latest0c84c2d71006
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,239
nfs-server-provisioneranvibo1.3.01 of 1See more

nfs-server-provisioner anvibo 1.3.0

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,730
appmesh-prometheusaws1.0.31 of 2See more

appmesh-prometheus aws 1.0.3

1 of the 2 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,939
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

10,629
stablecalltelemetry0.7.11 of 9See more

stable calltelemetry 0.7.1

1 of the 9 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

7,702
openldap_exporterccowleyVerified publisher0.1.01 of 1See more

openldap_exporter ccowley 0.1.0

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,143
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

3,595
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

16,069
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

5,488
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed

Open the chart page →

5,973
nfs-provisionerdasmeta1.0.31 of 1See more

nfs-provisioner dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,806
aws-s3-proxydeliveryheroVerified publisher0.1.71 of 1See more

aws-s3-proxy deliveryhero 0.1.7

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
pottava/s3-proxy:2.020a0bcb15f76
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

1,323
drone-kubernetes-secretsdroneVerified publisher0.1.41 of 1See more

drone-kubernetes-secrets drone 0.1.4

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
drone/kubernetes-secrets:latest206df2280ecf
gopkg.in/yaml.v2@v2.2.1
2.2.3

Open the chart page →

2,760
prometheusedu11.6.01 of 6See more

prometheus edu 11.6.0

1 of the 6 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

8,484
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed

Open the chart page →

952
gotifygeek-cookbookVerified publisher1.2.21 of 1See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
gotify/server:2.1.409c79bc1e403
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed

Open the chart page →

3,131
webhook-receivergeek-cookbookVerified publisher0.0.11 of 1See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
gopkg.in/yaml.v2@v2.0.0-20170812160011-eb3733d160e7
2.2.3

Open the chart page →

1,362
docker-authhalkeye0.1.11 of 1See more

docker-auth halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,374
aws-s3-proxyhelm-charts-nr0.1.71 of 1See more

aws-s3-proxy helm-charts-nr 0.1.7

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
pottava/s3-proxy:2.020a0bcb15f76
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

1,323
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
gopkg.in/yaml.v2@v2.2.1
2.2.3

Open the chart page →

7,984
dex-k8s-authenticatorkfirfer0.0.31 of 1See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,791
gitlabkubesphereVerified publisher4.2.31 of 17See more

gitlab kubesphere 4.2.3

1 of the 17 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

38,133
prometheusleechistest11.6.01 of 6See more

prometheus leechistest 11.6.0

1 of the 6 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

8,484
flaggermesosphere0.21.01 of 2See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
weaveworks/flagger:0.19.0a9c2e9df4227
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

6,048
nfs-server-provisionermesosphere0.6.11 of 1See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,806
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

68,284
authmyaVerified publisher22.4.31 of 1See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.6.04d16885f3d4c
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,374
nfs-server-provisionernovum-rgi-charts1.1.21 of 1See more

nfs-server-provisioner novum-rgi-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

2,806
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

4,612
podtato-headportefaix-hub0.3.01 of 6See more

podtato-head portefaix-hub 0.3.0

1 of the 6 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
ghcr.io/podtato-head/entry:latestc3d9d9c98be7
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed

Open the chart page →

5,279
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
gopkg.in/yaml.v2@v2.2.2
2.2.3

Open the chart page →

10,733
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
gopkg.in/yaml.v2@v2.0.0-20190319135612-7b8349ac747c
2.2.3

Open the chart page →

8,694
preemptible-killersoftonic1.2.61 of 1See more

preemptible-killer softonic 1.2.6

1 of the 1 container images this version deploys carry CVE-2021-4235.

Container imageDigestPackageFixed in
softonic/preemptible-killer:1.2.6-294b87f1fb362
gopkg.in/yaml.v2@v2.2.1
2.2.3

Open the chart page →

2,338

Container images carrying it

38 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
prom/alertmanager:v0.20.07e4e9f7a0954
gopkg.in/yaml.v2@v2.2.2
2.2.3
5
prom/prometheus:v2.13.10a8caa2e9f19
gopkg.in/yaml.v2@v2.2.2
2.2.3
5
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
gopkg.in/yaml.v2@v2.2.2
2.2.3
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
gopkg.in/yaml.v2@v2.2.2
2.2.3
3
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
gopkg.in/yaml.v2@v2.2.2
2.2.3
3
cesanta/docker_auth:1.6.04d16885f3d4c
gopkg.in/yaml.v2@v2.2.2
2.2.3
2
hashicorp/vault:1.8.34db614d40d0e
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
gopkg.in/yaml.v2@v2.2.2
2.2.3
2
natsio/nats-box:0.11.09fbf7bf684e4
gopkg.in/yaml.v2@v2.2.2
2.2.3
2
pottava/s3-proxy:2.020a0bcb15f76
gopkg.in/yaml.v2@v2.2.2
2.2.3
2
weblate/weblate:4.2.2-169c160d37a3c
gopkg.in/yaml.v2@v2.2.1
2.2.3
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
gopkg.in/yaml.v2@v2.2.2
2.2.3
2
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
gopkg.in/yaml.v2@v2.0.0-20170812160011-eb3733d160e7
2.2.3
2
almir/webhook:2.8.01698346f6077
gopkg.in/yaml.v2@v2.0.0-20170812160011-eb3733d160e7
2.2.3
1
codercom/code-server:4.11.0-debian1e2cc688008e
gopkg.in/yaml.v2@v2.2.1
2.2.3
1
codercom/code-server:3.10.247605610ad8d
gopkg.in/yaml.v2@v2.2.1
2.2.3
1
codeskyblue/gohttpserver:latestcaa862590e34
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
1
drone/drone-runner-docker:1.8.1137e79c5e23c
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
drone/kubernetes-secrets:latest206df2280ecf
gopkg.in/yaml.v2@v2.2.1
2.2.3
1
gotify/server:2.1.409c79bc1e403
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
1
hashicorp/vault:1.8.4dfc3500beb0e
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
1
ianw/quickchart:v1.7.1dc49dd460c37
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
layer5/meshery-cpx:stable-latest8c20a8a1d6a4
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
metalmatze/alertmanager-bot:0.4.3426bc2ca7586
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
monitoror/monitoror:44b88edcf51ff
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
oxynozeta/prometheus-cachethq:1.1.131f11669d597
github.com/go-yaml/yaml@v2.1.0+incompatible
gopkg.in/yaml.v2@v2.2.2
no fix listed
2.2.3
1
rancher/hardened-flannel:v0.13.0-rancher142784bb38ed3
gopkg.in/yaml.v2@v2.0.0-20170712054546-1be3d31502d6
2.2.3
1
softonic/preemptible-killer:1.2.6-294b87f1fb362
gopkg.in/yaml.v2@v2.2.1
2.2.3
1
weaveworks/flagger:0.19.0a9c2e9df4227
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
weblate/weblate:3.11.3-182848df56ecd
gopkg.in/yaml.v2@v2.0.0-20190319135612-7b8349ac747c
2.2.3
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
ghcr.io/angelnu/chirpstack-packet-multiplexer:latest0c84c2d71006
gopkg.in/yaml.v2@v2.2.2
2.2.3
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
1
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
gopkg.in/yaml.v2@v2.0.0-20170812160011-eb3733d160e7
2.2.3
1
ghcr.io/podtato-head/entry:latestc3d9d9c98be7
github.com/go-yaml/yaml@v2.1.0+incompatible
no fix listed
1
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
gopkg.in/yaml.v2@v2.2.2
2.2.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.