CVE-2022-27191

High

Advisory

Published 19 Mar 2022In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.039; 90th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 730; of 17,787 indexed, latest versions
Container images: 759; deployed by those charts
Fix available: 1 of 1; affected package

golang.org/x/crypto/ssh Denial of service via crafted Signer

Carried by container images the latest versions of 730 of 17,787 indexed charts deploy, on 759 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+82 more	0.0.0-20220314234659-1baeb1ce4c0b	759

OSV records: GHSA-8c26-wmh5-6g9v
Also known as: GO-2021-0356

Charts affected

730 by stars

Chart

Latest

Affected images

Radar Score

magistralamagistrala-devops

0.16.2

1 of 42 See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
timescale/timescaledb :latest-pg12	645fd9e92d76	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

24,400

focalboardmattermost

0.5.0

1 of 1 See more

focalboard mattermost 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.6.7	f2f987dada52	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,014

mattermost-chaos-enginemattermost

0.2.0

1 of 1 See more

mattermost-chaos-engine mattermost 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
mattermost/mattermost-app-chaosengine :c153e43	6268954edd67	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,067

eoloplantmca-eoloplaner

0.1.0

1 of 7 See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

29,588

medewerkercatalogusmedewerkercatalogus

1.0.0

1 of 3 See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/medewerkercatalogus-php :latest	1ea5412bed26	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

7,327

cameramedia-streaming-mesh

0.2.5

1 of 3 See more

camera media-streaming-mesh 0.2.5

1 of the 3 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

18,608

msm-rtspmedia-streaming-mesh

0.0.2

1 of 2 See more

msm-rtsp media-streaming-mesh 0.0.2

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

18,608

rtspmedia-streaming-mesh

0.0.14

1 of 2 See more

rtsp media-streaming-mesh 0.0.14

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

18,608

memo-componentmemo-component

1.0.0

1 of 3 See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/memo-component-php :latest	ef77f4c089a1	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

7,510

flaggermesosphere

0.21.0

1 of 2 See more

flagger mesosphere 0.21.0

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
weaveworks/flagger :0.19.0	a9c2e9df4227	golang.org/x/crypto@v0.0.0-20181025213731-e84da0312774	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

6,048

gatekeepermesosphere

0.6.11

1 of 2 See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,034

kafka-operatormesosphere

0.20.2

1 of 2 See more

kafka-operator mesosphere 0.20.2

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/kafka-operator :v0.20.2	e341aefa9a90	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

1,884

kubeaddons-catalogmesosphere

0.1.16

1 of 2 See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

12,010

kubefedmesosphere

0.5.2

1 of 1 See more

kubefed mesosphere 0.5.2

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
mesosphere/kubefed :proxyurl	4fd8889195fe	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,144

kube-oidc-proxymesosphere

0.3.4

1 of 1 See more

kube-oidc-proxy mesosphere 0.3.4

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,144

kudomesosphere

0.1.4

1 of 1 See more

kudo mesosphere 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
kudobuilder/controller :v0.9.0	69072d979708	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

5,682

local-path-provisionermesosphere

0.0.22

1 of 1 See more

local-path-provisioner mesosphere 0.0.22

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.22	e34c88ae0aff	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,317

nfs-server-provisionermesosphere

0.6.1

1 of 1 See more

nfs-server-provisioner mesosphere 0.6.1

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,806

prometheus-operatormesosphere

12.11.13

3 of 8 See more

prometheus-operator mesosphere 12.11.13

3 of the 8 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

11,689

traefik2mesosphere

9.18.0

1 of 1 See more

traefik2 mesosphere 9.18.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
library/traefik :2.4.8	eda951fd29a8	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,341

azuredisk-csi-drivermesosphere-stable

0.8.1

4 of 6 See more

azuredisk-csi-driver mesosphere-stable 0.8.1

4 of the 6 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi :v1.1.1	ec1803037ed9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20220314234659-1baeb1ce4c0b
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220314234659-1baeb1ce4c0b
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	golang.org/x/crypto@v0.0.0-20201217014255-9d1352758620	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

14,065

gatekeepermesosphere-stable

0.6.11

1 of 2 See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,034

kommandermesosphere-stable

0.39.2

17 of 29 See more

kommander mesosphere-stable 0.39.2

17 of the 29 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220314234659-1baeb1ce4c0b
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220314234659-1baeb1ce4c0b
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.0.0-20220314234659-1baeb1ce4c0b
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.0.0-20220314234659-1baeb1ce4c0b
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/crypto@v0.0.0-20200728195943-123391ffb6de	0.0.0-20220314234659-1baeb1ce4c0b
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20220314234659-1baeb1ce4c0b
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20220314234659-1baeb1ce4c0b
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220314234659-1baeb1ce4c0b
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

68,284

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

7,027

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

4,107

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

8,902

wg-access-servermglants

0.4.7

1 of 1 See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,745

gogsmhio

0.9.2

1 of 2 See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
gogs/gogs :0.12.1	420d53bb7277	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,230

middleware-odigosmiddleware-labs

0.2.41

3 of 6 See more

middleware-odigos middleware-labs 0.2.41

3 of the 6 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

8,370

middleware-visionmiddleware-labs

0.2.65

3 of 6 See more

middleware-vision middleware-labs 0.2.65

3 of the 6 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

8,361

sshportalmidokura-community

0.1.4

1 of 2 See more

sshportal midokura-community 0.1.4

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
moul/sshportal :v1.19.3	332b603727c3	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,338

pulsarv2milvus-helm

2.7.8

2 of 4 See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.0.0-20220314234659-1baeb1ce4c0b
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

15,855

minio-operatorminio-operator

4.3.7

1 of 2 See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

6,085

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,847

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

7,775

mongodbmmontes

0.5.0

1 of 1 See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
library/mongo :4.4.13	05678ae4e5e1	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

7,109

corednsmoikot

1.13.3

1 of 1 See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,547

backendmojaloop

0.1.0

2 of 6 See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220314234659-1baeb1ce4c0b
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

16,198

chirpstackmosquitto-helm-chart

0.5.0

1 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

25,933

chirpstack-event-forwardmosquitto-helm-chart

0.1.2

1 of 1 See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

1,854

replacermosquitto-helm-chart

0.2.0

1 of 3 See more

replacer mosquitto-helm-chart 0.2.0

1 of the 3 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,929

configmapsecretsmozilla

0.0.1

1 of 1 See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,109

authmya

22.4.3

1 of 1 See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,374

myhelmappmyhelmapp

0.1.1

1 of 1 See more

myhelmapp myhelmapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/crypto@v0.0.0-20211108221036-ceb1ce70b4fa	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,359

Practica_4_helmmy-heml-app

0.1.0

1 of 7 See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

27,721

traefik-forward-auth-openidnas-helm-charts

1.0.1

1 of 1 See more

traefik-forward-auth-openid nas-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :latest	b364aa6a4117	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,197

incorencsa

1.38.0

1 of 29 See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.5	e3c9d6b4bc92	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

15,369

papergirlneoskop

3.2.6

1 of 5 See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2022-05-09T04-08-26Z	4b415310d8d0	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

6,982

iamdnetsoc

0.6.1

1 of 2 See more

iamd netsoc 0.6.1

1 of the 2 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/netsoc/iamd :1.1.2	2fe6b69b20d7	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

2,890

shhdnetsoc

0.1.7

1 of 1 See more

shhd netsoc 0.1.7

1 of the 1 container images this version deploys carry CVE-2022-27191.

Container image	Digest	Package	Fixed in
ghcr.io/netsoc/shhd :0.1.6	0bb44992b62c	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220314234659-1baeb1ce4c0b

Open the chart page →

3,986

Container images carrying it

759 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/chaos-mesh/chaos-coredns :v0.2.6	78dc63bc5b89	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220314234659-1baeb1ce4c0b	2
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/oauth2-proxy/oauth2-proxy :v7.3.0	8c21390be87d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/openshift/origin-cli :4.8	bb5e052770e5	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220314234659-1baeb1ce4c0b	2
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20220314234659-1baeb1ce4c0b	2
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220314234659-1baeb1ce4c0b	2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20220314234659-1baeb1ce4c0b	2
absaoss/terraform-controller :v0.0.20	ad538a1285a0	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220314234659-1baeb1ce4c0b	1
adrianberger/fluxcd-webui :latest	76848c0d2780	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b	1
alex6021710/ai-scale-auth :latest	6c7a47e470c3	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20220314234659-1baeb1ce4c0b	1
alex6021710/ai-scale-doer :latest	31e533cf7cd3	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20220314234659-1baeb1ce4c0b	1
alex6021710/ai-scale-migrator :latest	744b8a924f35	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20220314234659-1baeb1ce4c0b	1
alex6021710/ai-scale-provider :latest	5837d9b30cc7	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220314234659-1baeb1ce4c0b	1
alex6021710/ai-scale-saver :latest	f73e8d60fd03	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20220314234659-1baeb1ce4c0b	1
almorgv/gitlab-code-review-notifier :0.1.2	5f2a7d2b44d8	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220314234659-1baeb1ce4c0b	1
alpine/k8s :1.22.6	00ac10bcb759	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220314234659-1baeb1ce4c0b	1
alpine/k8s :1.18.16	a41efe02a041	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b	1
altinity/clickhouse-operator :0.16.1	db7dde971407	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20220314234659-1baeb1ce4c0b	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20220314234659-1baeb1ce4c0b	1
amazon/cloudwatch-agent :1.247350.0b251780	e745d1783c93	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20220314234659-1baeb1ce4c0b	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b	1
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.0.0-20220314234659-1baeb1ce4c0b	1
ansgroup/cert-manager-webhook-safedns :v1.0.1	cd6b0ef2b309	golang.org/x/crypto@v0.0.0-20191202143827-86a70503ff7e	0.0.0-20220314234659-1baeb1ce4c0b	1
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.0.0-20220314234659-1baeb1ce4c0b	1
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220314234659-1baeb1ce4c0b	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.0.0-20220314234659-1baeb1ce4c0b	1
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220314234659-1baeb1ce4c0b	1
aquasec/harbor-scanner-trivy :0.20.0	7ea4aa3d2eb6	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.0.0-20220314234659-1baeb1ce4c0b	1
artifacthub/db-migrator :v1.23.0	28c13565ac5c	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220314234659-1baeb1ce4c0b	1
artifacthub/db-migrator :v1.19.0	2a746b289fcd	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220314234659-1baeb1ce4c0b	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220314234659-1baeb1ce4c0b	1
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220314234659-1baeb1ce4c0b	1
bitnamilegacy/mongodb :4.4.5	e3c9d6b4bc92	golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5	0.0.0-20220314234659-1baeb1ce4c0b	1
bitnamilegacy/mysqld-exporter :0.14.0-debian-11-r103	04768b637c94	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220314234659-1baeb1ce4c0b	1
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.0.0-20220314234659-1baeb1ce4c0b	1
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20220314234659-1baeb1ce4c0b	1
bsgrigorov/helm-operator :latest	45ab095f09c8	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.0.0-20220314234659-1baeb1ce4c0b	1
buildkite/agent :3.25.0	aec38cfaae0e	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220314234659-1baeb1ce4c0b	1