StackRadar

CVE-2022-27191

High

Advisory

Published 19 Mar 2022In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.039
90th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
730
of 17,781 indexed, latest versions
Container images
759
deployed by those charts
Fix available
1 of 1
affected package

golang.org/x/crypto/ssh Denial of service via crafted Signer

Carried by container images the latest versions of 730 of 17,781 indexed charts deploy, on 759 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+82 more0.0.0-20220314234659-1baeb1ce4c0b759
OSV records
GHSA-8c26-wmh5-6g9v
Also known as
GO-2021-0356

Charts affected

730 by stars
ChartLatestAffected imagesRadar Score
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,649
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,812
traggokrzwiatrzyk1.0.01 of 1See more

traggo krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
traggo/server:0.2.3f1ced637510e
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

1,885
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kubebb/cert-manager-cainjector:v1.8.0f83cd256229b
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20220314234659-1baeb1ce4c0b
kubebb/cert-manager-controller:v1.8.020509de4b399
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

8,160
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,988
u4a-componentkubebb0.2.102 of 8See more

u4a-component kubebb 0.2.10

2 of the 8 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220314234659-1baeb1ce4c0b
kubebb/oidc-server:v0.2.02b5894ef1e2f
golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

13,819
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

13,497
nvidia-gpu-exporterkubeblocksVerified publisher0.3.11 of 1See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,462
prometheuskubeblocksVerified publisher15.16.13 of 6See more

prometheus kubeblocks 15.16.1

3 of the 6 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.33496e0f85943
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b
quay.io/prometheus/alertmanager:v0.24.0088464f949de
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

10,302
logging-demokube-loggingVerified publisher4.0.31 of 1See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/log-generator:v0.4.105aa441b20aa
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

1,267
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,646
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,149
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:0.11.160ad97f07a78b
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,417
fluentbit-operatorkubesphereVerified publisher0.1.01 of 2See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,902
gitlabkubesphereVerified publisher4.2.35 of 17See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.0.0-20220314234659-1baeb1ce4c0b
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220314234659-1baeb1ce4c0b
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220314234659-1baeb1ce4c0b
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220314234659-1baeb1ce4c0b
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

38,133
harborkubesphereVerified publisher1.9.36 of 11See more

harbor kubesphere 1.9.3

6 of the 11 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20220314234659-1baeb1ce4c0b
goharbor/harbor-core:v2.5.386bf3031f4a7
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220314234659-1baeb1ce4c0b
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220314234659-1baeb1ce4c0b
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220314234659-1baeb1ce4c0b
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.0.0-20220314234659-1baeb1ce4c0b
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

17,798
cranekubesphere-stable0.5.22 of 3See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.0.0-20220314234659-1baeb1ce4c0b
gocrane/craned:v0.5.1a1400909118c
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

8,883
csi-qingcloudkubesphere-stable1.4.03 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.0.0-20220314234659-1baeb1ce4c0b
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220314234659-1baeb1ce4c0b
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

12,402
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kubeedge/edgemesh-server:latesta437cf5ec0ae
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,096
iomeshkubesphere-stable1.1.07 of 25See more

iomesh kubesphere-stable 1.1.0

7 of the 25 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/node-disk-manager:1.8.0002c4b92fd34
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/node-disk-operator:1.8.0f6c76380db34
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

48,665
IOMeshkubesphere-stable1.2.07 of 25See more

IOMesh kubesphere-stable 1.2.0

7 of the 25 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/node-disk-manager:1.8.0-2292ad270082e
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

46,341
pulsarkubesphere-stable2.7.132 of 3See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.0.0-20220314234659-1baeb1ce4c0b
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

14,320
csi-neonsankubesphere-testVerified publisher1.3.03 of 6See more

csi-neonsan kubesphere-test 1.3.0

3 of the 6 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220314234659-1baeb1ce4c0b
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220314234659-1baeb1ce4c0b
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

18,475
csi-qingcloudkubesphere-testVerified publisher1.4.03 of 6See more

csi-qingcloud kubesphere-test 1.4.0

3 of the 6 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.0.0-20220314234659-1baeb1ce4c0b
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220314234659-1baeb1ce4c0b
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

12,402
openelbkubesphere-testVerified publisher0.2.41 of 2See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.4.4ed7311a0f9e4
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,329
porterkubesphere-testVerified publisher0.2.21 of 2See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kubesphere/porter:v0.4.38d1ed5ee1d2e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,784
snapshot-controllerkubesphere-testVerified publisher0.2.01 of 1See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,220
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

16,520
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

8,534
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

26,356
metallblectures-k8sinfra0.10.22 of 2See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.10.221164241c045
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
quay.io/metallb/speaker:v0.10.258cb99053bb3
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

5,406
prometheuslectures-k8sinfra15.8.53 of 6See more

prometheus lectures-k8sinfra 15.8.5

3 of the 6 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b
quay.io/prometheus/node-exporter:v1.3.023ff46c728b9
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

9,092
grafanaleechistest5.3.01 of 1See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,191
prometheusleechistest11.6.03 of 6See more

prometheus leechistest 11.6.0

3 of the 6 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56
0.0.0-20220314234659-1baeb1ce4c0b
prom/prometheus:v2.19.0bfad037f95e5
golang.org/x/crypto@v0.0.0-20200422194213-44a606286825
0.0.0-20220314234659-1baeb1ce4c0b
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

8,484
kube-iptables-tailerlifen0.2.31 of 1See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,418
op-scim-bridgelifen1.0.31 of 2See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
1password/scim:v2.3.129d0c6cb67eb
golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,777
op-scim-bridgelifen-chartsVerified publisher1.0.31 of 2See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
1password/scim:v2.3.129d0c6cb67eb
golang.org/x/crypto@v0.0.0-20220131195533-30dcbda58838
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,777
livekit-recorderlivekit-server0.3.131 of 1See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
livekit/livekit-recorder:v0.3.13ecf1409c75e0
golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,129
patch-operatorloafoe0.11.31 of 2See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,904
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

7,510
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
golang.org/x/crypto@v0.0.0-20200128174031-69ecbb4d6d5d
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

9,880
kioskloftVerified publisher0.2.111 of 1See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
kiosksh/kiosk:0.2.11501725ba2025
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,086
loft-direct-cluster-endpointloftVerified publisher1.14.01 of 1See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
loftsh/directclusterendpoint:1.14.0310cc7d690f5
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,112
virtualclusterloftVerified publisher0.0.281 of 2See more

virtualcluster loft 0.0.28

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
loftsh/virtual-cluster:0.0.28023b13bf5898
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,986
loggingcomponentloggingcomponent1.0.01 of 3See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

7,492
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

7,499
apica-ascentlogiqai2.0.42 of 19See more

apica-ascent logiqai 2.0.4

2 of the 19 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2020-03-14T01-23-37Z571feb124476
golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6
0.0.0-20220314234659-1baeb1ce4c0b
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

23,613
chronograflsst-sqre1.3.51 of 1See more

chronograf lsst-sqre 1.3.5

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
quay.io/influxdb/chronograf:1.9.4bb0a980bc2bf
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,342
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
library/kapacitor:1.6.37232f6388a4d
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.0.0-20220314234659-1baeb1ce4c0b
quay.io/influxdb/chronograf:1.9.3c2ed16080689
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

9,332
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,764

Container images carrying it

759 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
cesanta/docker_auth:1.6.04d16885f3d4c
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20220314234659-1baeb1ce4c0b
2
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220314234659-1baeb1ce4c0b
2
crate/crate_adapter:latestb8d89fa5d19b
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.0.0-20220314234659-1baeb1ce4c0b
2
datawire/aes:1.14.48588eafe6862
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.0.0-20220314234659-1baeb1ce4c0b
2
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220314234659-1baeb1ce4c0b
2
governify/dashboard:lateste83a17ba5038
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b
2
grafana/agent-operator:v0.25.1a136c6208aa3
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.0.0-20220314234659-1baeb1ce4c0b
2
grafana/grafana:8.5.042d3e6bc1865
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20220314234659-1baeb1ce4c0b
2
grafana/grafana:7.3.5511bc20bfcd1
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.0.0-20220314234659-1baeb1ce4c0b
2
grafana/loki:1.5.0922b3f412fdd
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
0.0.0-20220314234659-1baeb1ce4c0b
2
grafana/loki:2.5.0f9ef133793af
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20220314234659-1baeb1ce4c0b
2
grafana/promtail:1.5.046e88d390cd6
golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708
0.0.0-20220314234659-1baeb1ce4c0b
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
2
hashicorp/vault:1.8.34db614d40d0e
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.0.0-20220314234659-1baeb1ce4c0b
2
honestica/kube-iptables-tailer:master-91a393242fb939
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220314234659-1baeb1ce4c0b
2
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220314234659-1baeb1ce4c0b
2
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
2
istio/proxyv2:1.10.3a78b7a165744
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.0.0-20220314234659-1baeb1ce4c0b
2
jaegertracing/all-in-one:1.3104d224a9999b
golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63
0.0.0-20220314234659-1baeb1ce4c0b
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
golang.org/x/crypto@v0.0.0-20181203042331-505ab145d0a9
0.0.0-20220314234659-1baeb1ce4c0b
2
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
kubernetesui/dashboard:v2.2.0148991563e37
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220314234659-1baeb1ce4c0b
2
library/traefik:v2.57d5a6ae66572
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b
2
listmonk/listmonk:v2.1.0d2eac77ddfad
golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e
0.0.0-20220314234659-1baeb1ce4c0b
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
minio/mc:RELEASE.2020-11-25T23-04-07Zbf85c57cdfcc
golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee
0.0.0-20220314234659-1baeb1ce4c0b
2
minio/operator:v4.3.754393e03f3b2
golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b
0.0.0-20220314234659-1baeb1ce4c0b
2
natsio/nats-account-server:1.0.0a3381560aab6
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b
2
natsio/nats-box:0.11.09fbf7bf684e4
golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59
0.0.0-20220314234659-1baeb1ce4c0b
2
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
osixia/openldap:1.4.0ccd95cc6e61e
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20220314234659-1baeb1ce4c0b
2
phntom/kochi:1.1.33b82358bd56e
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.0.0-20220314234659-1baeb1ce4c0b
2
prom/blackbox-exporter:v0.18.01ffc3f109eb3
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220314234659-1baeb1ce4c0b
2
prom/prometheus:v2.17.242d2395cd719
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.0.0-20220314234659-1baeb1ce4c0b
2
prom/prometheus:v2.21.0d43417c260e5
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/crypto@v0.0.0-20191002192127-34f69633bfdc
0.0.0-20220314234659-1baeb1ce4c0b
2
statping/statping:v0.90.74e874da513a5c
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.0.0-20220314234659-1baeb1ce4c0b
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.0.0-20220314234659-1baeb1ce4c0b
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.0.0-20220314234659-1baeb1ce4c0b
2
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220314234659-1baeb1ce4c0b
2
weblate/weblate:4.2.2-169c160d37a3c
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20220314234659-1baeb1ce4c0b
2
xelalex/dregsy:0.4.3574054e1c417
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20220314234659-1baeb1ce4c0b
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20220314234659-1baeb1ce4c0b
2
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220314234659-1baeb1ce4c0b
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220314234659-1baeb1ce4c0b
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.