StackRadar

CVE-2022-29526

Medium

Advisory

Published 24 Jun 2022In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.030
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,076
of 17,781 indexed, latest versions
Container images
1,173
deployed by those charts
Fix available
2 of 2
affected packages

golang.org/x/sys/unix has Incorrect privilege reporting in syscall

Carried by container images the latest versions of 1,076 of 17,781 indexed charts deploy, on 1,173 images.

Affected packageAffected versionsFixed inImages
golang.org/x/sysgolangv0.0.0-20180302081741-dd2ff4accc09, v0.0.0-20180810173357-98c5dad5d1a0, v0.0.0-20190209173611-3b5209105503, v0.0.0-20190215142949-d0b11bdaac8a+192 more0.0.0-20220412211240-33da011f77ad1,033
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+69 more1.17.101,019
OSV records
GHSA-p782-xgp4-8hr8GO-2022-0493
Also known as
BIT-golang-2022-29526

Charts affected

1,076 by stars
ChartLatestAffected imagesRadar Score
ct-singlecalltelemetry0.8.42 of 7See more

ct-single calltelemetry 0.8.4

2 of the 7 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
library/nats:2.8.4-alpine988010f74b61
golang.org/x/sys@v0.0.0-20220111092808-5a964db01320
0.0.0-20220412211240-33da011f77ad
natsio/nats-box:0.11.09fbf7bf684e4
golang.org/x/sys@v0.0.0-20220111092808-5a964db01320
stdlib@go1.18.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

10,629
stablecalltelemetry0.7.12 of 9See more

stable calltelemetry 0.7.1

2 of the 9 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
library/nats:2.8.4-alpine988010f74b61
golang.org/x/sys@v0.0.0-20220111092808-5a964db01320
0.0.0-20220412211240-33da011f77ad
natsio/nats-box:0.11.09fbf7bf684e4
golang.org/x/sys@v0.0.0-20220111092808-5a964db01320
stdlib@go1.18.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

7,702
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
library/redis:5.0fc5ecd863862
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

8,001
bucket-clonercamptocamp31.0.41 of 1See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
camptocamp/bucket-cloner:latestacfafc308d88
golang.org/x/sys@v0.0.0-20210423185535-09eb48e85fd7
stdlib@go1.16.5
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

4,518
getconfigcamptocamp30.1.11 of 1See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
0.0.0-20220412211240-33da011f77ad

Open the chart page →

2,195
s3-exportercamptocamp32.2.01 of 1See more

s3-exporter camptocamp3 2.2.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ribbybibby/s3-exporter:v0.5.0998184c51a00
golang.org/x/sys@v0.0.0-20201018121011-98379d014ca7
stdlib@go1.15.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

1,183
snyk-exportercamptocamp30.1.41 of 1See more

snyk-exporter camptocamp3 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/lunarway/snyk_exporter:v1.11.155e5cc5aaa0a
golang.org/x/sys@v0.0.0-20201204225414-ed752295db88
stdlib@go1.17.7
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

1,079
castai-tetragoncastaiVerified publisher0.6.11 of 4See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
golang.org/x/sys@v0.0.0-20210902050250-f475640dd07b
0.0.0-20220412211240-33da011f77ad

Open the chart page →

4,136
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/sys@v0.0.0-20210917161153-d61c044b1678
0.0.0-20220412211240-33da011f77ad

Open the chart page →

15,027
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
golang.org/x/sys@v0.0.0-20200122134326-e047566fdf82
stdlib@go1.14.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

6,389
openldapccowleyVerified publisher2.0.41 of 3See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
stdlib@go1.13.4
1.17.10

Open the chart page →

6,219
openldap_exporterccowleyVerified publisher0.1.01 of 1See more

openldap_exporter ccowley 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/chriscowley/openldap_exporter:v2.1.16c308e9732e1
stdlib@go1.15.7
1.17.10

Open the chart page →

2,143
cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapiVerified publisher1.5.21 of 1See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi:1.5ded797477896
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,345
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
golang.org/x/sys@v0.0.0-20210423082822-04245dca01da
0.0.0-20220412211240-33da011f77ad
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
stdlib@go1.15.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

7,776
clechaosnative0.2.73 of 6See more

cle chaosnative 0.2.7

3 of the 6 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10
chaosnative/cle-license-module:2.7.062cf6adc355e
golang.org/x/sys@v0.0.0-20210823070655-63515b42dcdf
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10
chaosnative/cle-server:2.7.0e7bcff4a20c0
golang.org/x/sys@v0.0.0-20211117180635-dee7805ff2e1
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

16,389
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
stdlib@go1.17.8
1.17.10

Open the chart page →

4,911
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

8,408
lokichoerodon0.29.01 of 1See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
grafana/loki:1.5.0922b3f412fdd
golang.org/x/sys@v0.0.0-20200217220822-9197077df867
stdlib@go1.13.11
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,869
promtailchoerodon0.23.01 of 1See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
grafana/promtail:1.5.046e88d390cd6
golang.org/x/sys@v0.0.0-20200217220822-9197077df867
stdlib@go1.13.11
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,821
kubedoomchristianhuthVerified publisher1.1.21 of 1See more

kubedoom christianhuth 1.1.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/storax/kubedoom:0.6.0851ba8c80b93
stdlib@go1.17.6
1.17.10

Open the chart page →

1,021
sloopchristianhuthVerified publisher0.4.01 of 1See more

sloop christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/salesforce/sloop:sha-2ce8bbe119e24f24b1d
golang.org/x/sys@v0.0.0-20210603081109-ebe580a85c40
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,290
tor-proxychronicleVerified publisher0.1.01 of 1See more

tor-proxy chronicle 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
btcpayserver/tor:0.4.8.10e9585b68dc6b
golang.org/x/sys@v0.0.0-20210426230700-d19ff857e887
stdlib@go1.16.5
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

3,329
chubaofschubaofs1.5.11 of 6See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
stdlib@go1.13.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

3,595
chekrckotzbauerVerified publisher0.5.31 of 2See more

chekr ckotzbauer 0.5.3

1 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/ckotzbauer/chekrdigest-pinnedf299baf467b5
golang.org/x/sys@v0.0.0-20210823070655-63515b42dcdf
stdlib@go1.17.3
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

3,469
calico-cniclastixVerified publisher3.28.11 of 3See more

calico-cni clastix 3.28.1

1 of the 3 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
calico/cni:v3.28.1e486870cfde8
golang.org/x/sys@v0.0.0-20210809222454-d867a43fc93e
0.0.0-20220412211240-33da011f77ad

Open the chart page →

3,050
kamajiclastixVerified publisher0.0.0+latest1 of 4See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

4,630
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.628cb0630cb85
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
stdlib@go1.16.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

11,995
vcloud-csiclastixVerified publisher1.6.04 of 5See more

vcloud-csi clastix 1.6.0

4 of the 5 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
golang.org/x/sys@v0.0.0-20210330210617-4fbd30eecc44
stdlib@go1.16
0.0.0-20220412211240-33da011f77ad
1.17.10
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
stdlib@go1.16
0.0.0-20220412211240-33da011f77ad
1.17.10
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
stdlib@go1.16.2
0.0.0-20220412211240-33da011f77ad
1.17.10
registry.k8s.io/sig-storage/csi-resizer:v1.4.09ebbf9f023e7
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
stdlib@go1.17.3
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

7,386
kube-acp-stackcloudentity2.28.02 of 7See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
stdlib@go1.18.1
1.17.10
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
golang.org/x/sys@v0.0.0-20201112073958-5cba982894dd
stdlib@go1.13.14
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

20,900
openbankingcloudentity0.1.96 of 6See more

openbanking cloudentity 0.1.9

6 of the 6 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
cloudentity/openbanking-quickstart-bank:1.11.19402ec4b5016
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.15.14
0.0.0-20220412211240-33da011f77ad
1.17.10
cloudentity/openbanking-quickstart-configuration:1.11.18a1890eb8265
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.15.14
0.0.0-20220412211240-33da011f77ad
1.17.10
cloudentity/openbanking-quickstart-consent-admin-portal:1.11.1ee83cdd45b7b
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10
cloudentity/openbanking-quickstart-consent-page:1.11.15728654cecb7
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.16.6
0.0.0-20220412211240-33da011f77ad
1.17.10
cloudentity/openbanking-quickstart-consent-self-service-portal:1.11.18ca94ae6acf4
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10
cloudentity/openbanking-quickstart-financroo-tpp:1.11.1c04eb10c77b7
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.15.2
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

18,040
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
golang.org/x/sys@v0.0.0-20210225134936-a50acf3fe073
stdlib@go1.16.3
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
golang.org/x/sys@v0.0.0-20210403161142-5e06dd20ab57
stdlib@go1.17.5
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
stdlib@go1.18.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

6,921
pact-brokercloud-native-toolkit0.3.01 of 1See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.101.0.0a3021fc42834
golang.org/x/sys@v0.0.0-20200413165638-669c56c373c4
stdlib@go1.14.4
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,814
robot-shopcloud-native-toolkit1.1.12 of 12See more

robot-shop cloud-native-toolkit 1.1.1

2 of the 12 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
robotshop/rs-dispatch:latestde81f1d07b02
stdlib@go1.17
1.17.10
robotshop/rs-mongodb:latest119b545823cd
golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527
stdlib@go1.16.3
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

29,555
ctrox-csi-s3cloudve0.1.01 of 4See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
golang.org/x/sys@v0.0.0-20210816074244-15123e1e1f71
stdlib@go1.16.13
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

3,136
galaxy-depscloudve1.1.12 of 7See more

galaxy-deps cloudve 1.1.1

2 of the 7 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq-cluster-operator:1.14.0-scratch-r567ac64a9623a
golang.org/x/sys@v0.0.0-20220319134239-a9b59b0215f8
stdlib@go1.17
0.0.0-20220412211240-33da011f77ad
1.17.10
bitnamilegacy/rmq-messaging-topology-operator:1.7.1-scratch-r33c26208691a1
stdlib@go1.17
1.17.10

Open the chart page →

10,531
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
golang.org/x/sys@v0.0.0-20190924154521-2837fb4f24fe
stdlib@go1.16.2
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

16,069
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/sys@v0.0.0-20190616124812-15dcb6c0061f
stdlib@go1.13.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

14,270
openstack-cinder-csicloudve1.2.01 of 5See more

openstack-cinder-csi cloudve 1.2.0

1 of the 5 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
k8scloudprovider/cinder-csi-plugin:latesta30c7a2a594a
golang.org/x/sys@v0.0.0-20220209214540-3681064d5158
0.0.0-20220412211240-33da011f77ad

Open the chart page →

2,061
proxyinjectorcloudve0.0.231 of 1See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/sys@v0.0.0-20190616124812-15dcb6c0061f
stdlib@go1.13.1
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,853
d2-prometheus-exportercmacraeVerified publisher0.1.01 of 1See more

d2-prometheus-exporter cmacrae 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
cmacrae/d2-prometheus-exporter:v0.1.0fc5fecba436e
golang.org/x/sys@v0.0.0-20200615200032-f1bc736245b1
stdlib@go1.15
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

1,299
kovecmacraeVerified publisher0.2.01 of 1See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/cmacrae/kove:v0.2.0185bfaae750c
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
stdlib@go1.17
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,089
kove-deprecationscmacraeVerified publisher0.1.21 of 1See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
ghcr.io/cmacrae/kove:v0.1.0db1244edefc8
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
stdlib@go1.16
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,203
lgtmcmacraeVerified publisher0.1.01 of 1See more

lgtm cmacrae 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
cmacrae/lgtm:0.1.0dec8d490fe40
stdlib@go1.14.1
1.17.10

Open the chart page →

1,909
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
envoyproxy/ratelimit:6f5de117b6cb6e16f8c9
golang.org/x/sys@v0.0.0-20191120155948-bd437916bb0e
stdlib@go1.14.13
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

19,338
traefik-forward-authcolearendt0.0.151 of 1See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:269a2c985d2c5
golang.org/x/sys@v0.0.0-20190813064441-fde4db37ae7a
stdlib@go1.13.12
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

2,234
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2022-29526.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
golang.org/x/sys@v0.0.0-20191022100944-742c48ecaeb7
stdlib@go1.13.10
0.0.0-20220412211240-33da011f77ad
1.17.10

Open the chart page →

7,209

Container images carrying it

1,173 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
jimmidyson/configmap-reload:v0.5.0904d08e9f701
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
stdlib@go1.15.7
0.0.0-20220412211240-33da011f77ad
1.17.10
14
library/mysql:8.0.28fc77d54cacef
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
11
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
10
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
stdlib@go1.16.9
0.0.0-20220412211240-33da011f77ad
1.17.10
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/sys@v0.0.0-20200602225109-6fdc65e7d980
stdlib@go1.14.4
0.0.0-20220412211240-33da011f77ad
1.17.10
8
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.17.10
7
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/sys@v0.0.0-20220114195835-da31bd327af9
0.0.0-20220412211240-33da011f77ad
7
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/sys@v0.0.0-20200223170610-d5e6a3e2c0ae
stdlib@go1.14.3
0.0.0-20220412211240-33da011f77ad
1.17.10
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
golang.org/x/sys@v0.0.0-20210831042530-f4d43177bf5e
0.0.0-20220412211240-33da011f77ad
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/sys@v0.0.0-20210124154548-22da62e12c0c
stdlib@go1.16.6
0.0.0-20220412211240-33da011f77ad
1.17.10
6
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/sys@v0.0.0-20210220050731-9a76102bfb43
0.0.0-20220412211240-33da011f77ad
6
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
stdlib@go1.17.6
0.0.0-20220412211240-33da011f77ad
1.17.10
6
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/sys@v0.0.0-20200420163511-1957bb5e6d1f
stdlib@go1.14.4
0.0.0-20220412211240-33da011f77ad
1.17.10
6
containous/whoami:latest:v1.5.07d6a3c8f9147
stdlib@go1.14
1.17.10
5
library/redis:5:5.0fc5ecd863862
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
5
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
stdlib@go1.13.5
0.0.0-20220412211240-33da011f77ad
1.17.10
5
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/sys@v0.0.0-20191010194322-b09406accb47
stdlib@go1.13.1
0.0.0-20220412211240-33da011f77ad
1.17.10
5
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
golang.org/x/sys@v0.0.0-20180302081741-dd2ff4accc09
stdlib@go1.13.3
0.0.0-20220412211240-33da011f77ad
1.17.10
5
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
golang.org/x/sys@v0.0.0-20210615035016-665e8c7367d1
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
5
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
stdlib@go1.16.2
0.0.0-20220412211240-33da011f77ad
1.17.10
5
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
golang.org/x/sys@v0.0.0-20210330210617-4fbd30eecc44
stdlib@go1.16
0.0.0-20220412211240-33da011f77ad
1.17.10
4
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
stdlib@go1.16
0.0.0-20220412211240-33da011f77ad
1.17.10
4
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/sys@v0.0.0-20200223170610-d5e6a3e2c0ae
stdlib@go1.13.4
0.0.0-20220412211240-33da011f77ad
1.17.10
4
grafana/loki:2.6.11ee60f980950
golang.org/x/sys@v0.0.0-20220222172238-00053529121e
stdlib@go1.17.9
0.0.0-20220412211240-33da011f77ad
1.17.10
4
hyperledger/fabric-orderer:2.46ec3fe59ea55
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.0.0-20220412211240-33da011f77ad
4
hyperledger/fabric-peer:2.46ff36af21eb1
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.0.0-20220412211240-33da011f77ad
4
hyperledger/fabric-tools:2.4b1194f509085
golang.org/x/sys@v0.0.0-20210420205809-ac73e9fd8988
0.0.0-20220412211240-33da011f77ad
4
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
golang.org/x/sys@v0.0.0-20200620081246-981b61492c35
stdlib@go1.14.4
0.0.0-20220412211240-33da011f77ad
1.17.10
4
library/mongo:4.4.66efa05203990
golang.org/x/sys@v0.0.0-20200302150141-5c8b2ff67527
stdlib@go1.16.3
0.0.0-20220412211240-33da011f77ad
1.17.10
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
golang.org/x/sys@v0.0.0-20200523222454-059865788121
stdlib@go1.15.6
0.0.0-20220412211240-33da011f77ad
1.17.10
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
0.0.0-20220412211240-33da011f77ad
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
golang.org/x/sys@v0.0.0-20210616094352-59db8d763f22
stdlib@go1.16.9
0.0.0-20220412211240-33da011f77ad
1.17.10
4
alfhou/hammond:v0.0.24c85dc0293aa1
golang.org/x/sys@v0.0.0-20210330210617-4fbd30eecc44
0.0.0-20220412211240-33da011f77ad
3
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/sys@v0.0.0-20200930185726-fdedc70b468f
stdlib@go1.14.12
0.0.0-20220412211240-33da011f77ad
1.17.10
3
csiplugin/csi-resizer:v1.2.036c31f7e1f43
golang.org/x/sys@v0.0.0-20210317225723-c4fcb01b228e
stdlib@go1.16
0.0.0-20220412211240-33da011f77ad
1.17.10
3
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/sys@v0.0.0-20201214095126-aec9a390925b
stdlib@go1.15
0.0.0-20220412211240-33da011f77ad
1.17.10
3
dgraph/dgraph:v21.12.03b55ea83fffe
golang.org/x/sys@v0.0.0-20210511113859-b0526f3d8744
stdlib@go1.17.3
0.0.0-20220412211240-33da011f77ad
1.17.10
3
grafana/grafana:8.2.500568d89c4f8
golang.org/x/sys@v0.0.0-20210806184541-e5e7981a1069
stdlib@go1.17
0.0.0-20220412211240-33da011f77ad
1.17.10
3
grafana/promtail:2.4.2626900031c4e
golang.org/x/sys@v0.0.0-20210917161153-d61c044b1678
stdlib@go1.17.2
0.0.0-20220412211240-33da011f77ad
1.17.10
3
library/postgres:14.13162a6ead070
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
3
library/postgres:115d2aa4a7b5f9
golang.org/x/sys@v0.0.0-20210817142637-7d9622a276b7
stdlib@go1.16.7
0.0.0-20220412211240-33da011f77ad
1.17.10
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
golang.org/x/sys@v0.0.0-20210119212857-b64e53b001e4
stdlib@go1.15.7
0.0.0-20220412211240-33da011f77ad
1.17.10
3
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/sys@v0.0.0-20190215142949-d0b11bdaac8a
stdlib@go1.13.11
0.0.0-20220412211240-33da011f77ad
1.17.10
3
prom/prometheus:v2.19.0bfad037f95e5
golang.org/x/sys@v0.0.0-20200602225109-6fdc65e7d980
stdlib@go1.14.4
0.0.0-20220412211240-33da011f77ad
1.17.10
3
prom/pushgateway:v1.2.00a9031142481
stdlib@go1.13.8
1.17.10
3
prom/pushgateway:v1.3.18305a33fb80a
golang.org/x/sys@v0.0.0-20201214210602-f9fddec55a1e
stdlib@go1.15.6
0.0.0-20220412211240-33da011f77ad
1.17.10
3
prom/statsd-exporter:v0.18.0d23aca343b86
golang.org/x/sys@v0.0.0-20200523222454-059865788121
stdlib@go1.14.7
0.0.0-20220412211240-33da011f77ad
1.17.10
3
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/sys@v0.0.0-20190616124812-15dcb6c0061f
stdlib@go1.13.1
0.0.0-20220412211240-33da011f77ad
1.17.10
3
ghcr.io/devplayer0/kubelan:0.2.3b776dae45d08
golang.org/x/sys@v0.0.0-20210630005230-0f9fa26af87c
stdlib@go1.16.5
0.0.0-20220412211240-33da011f77ad
1.17.10
3
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
golang.org/x/sys@v0.0.0-20201119102817-f84b799fce68
stdlib@go1.15.7
0.0.0-20220412211240-33da011f77ad
1.17.10
3

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.