CVE-2022-30636

Unscored

Advisory

Published 2 Jul 2024In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.006; 49th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 823; of 17,781 indexed, latest versions
Container images: 863; deployed by those charts
Fix available: 1 of 1; affected package

Limited directory traversal vulnerability on Windows in golang.org/x/crypto

Carried by container images the latest versions of 823 of 17,781 indexed charts deploy, on 863 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+94 more	0.0.0-20220525230936-793ad666bf5e	863

OSV records: GO-2024-2961

Charts affected

823 by stars

Chart

Latest

Affected images

Radar Score

aperture-controlleraperture

2.34.0

1 of 5 See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

9,052

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,250

cert-managerchoerodon

1.8.2

3 of 4 See more

cert-manager choerodon 1.8.2

3 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

7,775

clowardenclowarden

0.2.3

1 of 4 See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,606

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

1,707

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,537

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,271

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,030

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

1 of 3 See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,906

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,154

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,610

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,234

gitvotegitvote

1.5.0

1 of 6 See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,613

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,622

coreinstill-ai

0.1.75

2 of 15 See more

core instill-ai 0.1.75

2 of the 15 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

30,816

jenkins-operatorjenkins

0.8.1

1 of 1 See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,211

skywalkingkubesphere-test

3.1.0

2 of 4 See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220525230936-793ad666bf5e
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

18,042

vcluster-k8sloft

0.0.0-ci.3

1 of 4 See more

vcluster-k8s loft 0.0.0-ci.3

1 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,570

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,743

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,793

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,067

oesopsmx

4.0.32

4 of 25 See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.0.0-20220525230936-793ad666bf5e
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20220525230936-793ad666bf5e
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

107,811

ipfs-clusterparadeum-team

0.0.19

1 of 2 See more

ipfs-cluster paradeum-team 0.0.19

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,757

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20220525230936-793ad666bf5e
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

12,125

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,730

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

12,502

sn-platformstreamnative

1.11.44

1 of 9 See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

15,477

feedbacksystemthm-mni-ii

0.47.1

1 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

28,534

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/crypto@v0.0.0-20200317142112-1b76d66859c6	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,136

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.0.0-20220525230936-793ad666bf5e
library/traefik :v2.5	7d5a6ae66572	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

9,257

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,245

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

6,085

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20220525230936-793ad666bf5e
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,032

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,714

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,039

soft-servealphani-helm-charts

0.4.0

1 of 1 See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,119

smockerandrcuns

0.0.4

1 of 1 See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,173

upcloud-csiankra-charts

0.4.0

1 of 8 See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

14,917

anteonanteon

2.6.4

2 of 13 See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.0.0-20220525230936-793ad666bf5e
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

22,202

stash-enterpriseappscode

0.42.0

1 of 4 See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,620

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,222

cert-exporterarzu

3.0.1

1 of 1 See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
joeelliott/cert-exporter :v2.7.0	b4acd14642d0	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,819

siemassist-iot-cybersecurity-monitroting-siem

0.1.0

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,730

dltbrokerassist-iot-distributed-broker

0.2.0

3 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

3 of the 9 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

3 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

3 of the 9 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

77,687

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,292

Container images carrying it

863 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
utkuozdemir/nvidia_gpu_exporter :0.3.0	149f9e7e7aa3	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	1
velero/velero :v1.9.0	277fbfaf8dcf	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	1
velero/velero :v1.8.1	8d784580931c	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	1
vikunja/api :0.17.1	8cba0520bf8c	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20220525230936-793ad666bf5e	1
voidxmh/xmh-auther :v1	93e42a569ca8	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	1
voidxmh/xmh-cacher :v1	1b7397412320	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	1
voidxmh/xmh-ui :v1	2ff3f2146547	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	1
volantmq/volantmq :v0.4.0-rc.6	9bfe7857ebc3	golang.org/x/crypto@v0.0.0-20190927123631-a832865fa7ad	0.0.0-20220525230936-793ad666bf5e	1
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/crypto@v0.0.0-20200204104054-c9f3fb736b72	0.0.0-20220525230936-793ad666bf5e	1
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	1
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	1
vultr/cert-manager-webhook-vultr :v0.1.0	541c3e0aec58	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	1
vultr/vultr-cloud-controller-manager :v0.3.0	1806f17d620c	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	1
wazuh/wazuh-manager :4.11.1	1da5c38c6a78	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220525230936-793ad666bf5e	1
wazuh/wazuh-manager :4.4.1	21994f40e0da	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220525230936-793ad666bf5e	1
wazuh/wazuh-manager :4.14.4	5a065930682d	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220525230936-793ad666bf5e	1
wazuh/wazuh-manager :4.14.3	f09282d281f6	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220525230936-793ad666bf5e	1
weaveworks/flagger :1.0.0-rc.5	174307de1b36	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.0.0-20220525230936-793ad666bf5e	1
weaveworks/flagger :0.19.0	a9c2e9df4227	golang.org/x/crypto@v0.0.0-20181025213731-e84da0312774	0.0.0-20220525230936-793ad666bf5e	1
weblate/weblate :3.11.3-1	82848df56ecd	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20220525230936-793ad666bf5e	1
wener/frpc :v0.37.0	cc9fd4da44c0	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20220525230936-793ad666bf5e	1
wener/frps :v0.37.0	5c92cc9e8597	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20220525230936-793ad666bf5e	1
willnorris/imageproxy :latest	21d0c90f4c31	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	1
zeetdev/tailscale-relay :v1.24.2	1967aa2840b6	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e	1
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20220525230936-793ad666bf5e	1
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/gke-release/custom-metrics-stackdriver-adapter :v0.13.1-gke.0	6937c0a9b203	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/gloo-mesh/gloo-mesh :1.1.2	a4011eae6a0b	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook	873b968f02b5	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	1e3db4f2eeed	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/activator	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler	db6ceff2aab4	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller :v1.2.5	75cfdcfa050a	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/controller	b2cd45b8a8a4	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	d27b4495ccc3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/kubecost1/cost-model :prod-1.82.2	989a60847416	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/kubecost1/server :prod-1.82.2	2b1a3d08caac	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/ml-pipeline/api-server :2.0.0-alpha.5	dc6ca05bb94f	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/ml-pipeline/cache-server :2.0.0-alpha.5	83e79c709df3	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/ml-pipeline/persistenceagent :2.0.0-alpha.5	00db9796a37b	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20220525230936-793ad666bf5e	1
gcr.io/ml-pipeline/scheduledworkflow :2.0.0-alpha.5	795a0c8a0e13	golang.org/x/crypto@v0.0.0-20220128200615-198e4374d7ed	0.0.0-20220525230936-793ad666bf5e	1