StackRadar

CVE-2022-30636

Unscored

Advisory

Published 2 Jul 2024In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.006
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
823
of 17,781 indexed, latest versions
Container images
863
deployed by those charts
Fix available
1 of 1
affected package

Limited directory traversal vulnerability on Windows in golang.org/x/crypto

Carried by container images the latest versions of 823 of 17,781 indexed charts deploy, on 863 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+94 more0.0.0-20220525230936-793ad666bf5e863
OSV records
GO-2024-2961

Charts affected

823 by stars
ChartLatestAffected imagesRadar Score
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

11,069
vaultintelVerified publisher0.8.11 of 2See more

vault intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:1.1.0844337076b72
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,478
gravity-initinvisiblVerified publisher1.0.91 of 1See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
invisibl/gravity-init:v1.0.91a970f84178b
golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,006
identity-managerinvisiblVerified publisher1.0.01 of 1See more

identity-manager invisibl 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
invisibl/identity-manager:1.0.01029f4fe20eb
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,162
karpenteriometeVerified publisher0.19.31 of 1See more

karpenter iomete 0.19.3

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
public.ecr.aws/karpenter/controller:v0.19.3f0e5ab60b2df
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

1,548
jx-app-athensjenkins-x0.0.181 of 1See more

jx-app-athens jenkins-x 0.0.18

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
gomods/athens:v0.8.1d714c7ff0231
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,225
jx-app-flaggerjenkins-x0.0.52 of 2See more

jx-app-flagger jenkins-x 0.0.5

2 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
grafana/grafana:6.5.1befcd84da2c1
golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392
0.0.0-20220525230936-793ad666bf5e
weaveworks/flagger:1.0.0-rc.5174307de1b36
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

6,028
knative-servingjenkins-x0.19.124 of 4See more

knative-serving jenkins-x 0.19.12

4 of the 4 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned1e3db4f2eeed
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinneddb6ceff2aab4
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinnedb2cd45b8a8a4
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinnedd27b4495ccc3
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

9,699
alpine-torjfwenischVerified publisher1.1.01 of 1See more

alpine-tor jfwenisch 1.1.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
jfwenisch/alpine-tor:latest9e6c229f953c
golang.org/x/crypto@v0.0.0-20190325154230-a5d413f7728c
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,460
haven-complinacy-dashboardjolle-devVerified publisher1.0.01 of 2See more

haven-complinacy-dashboard jolle-dev 1.0.0

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
j0113/haven-compliancy-dashboard:1.3696cb8ca9f4e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,840
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

16,600
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
ghcr.io/k10app/businit:latest94c9a3e799c2
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,546
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

14,801
k8s-pausek8s-pause0.1.41 of 1See more

k8s-pause k8s-pause 0.1.4

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8s-pause:v0.1.16b3215e37738
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

1,846
k8svault-controllerk8svault-controller0.1.21 of 1See more

k8svault-controller k8svault-controller 0.1.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

1,885
keycloak-operator-legacykeycloak-operator-legacy1.0.01 of 1See more

keycloak-operator-legacy keycloak-operator-legacy 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,067
gogskeyporttech0.1.31 of 3See more

gogs keyporttech 0.1.3

1 of the 3 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
gogs/gogs:0.12.30195b095d0b2
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,523
helm-mongodb-operatorkeyporttech0.1.01 of 1See more

helm-mongodb-operator keyporttech 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

8,811
dex-k8s-authenticatorkfirfer0.0.31 of 1See more

dex-k8s-authenticator kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,791
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

6,447
kiaekiae0.1.62 of 9See more

kiae kiae 0.1.6

2 of the 9 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20220525230936-793ad666bf5e
grafana/promtail:2.6.1072527b12cdf
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

19,168
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
kubeflownotebookswg/notebook-controller:v1.9.20f14bd28fdd5
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.0.0-20220525230936-793ad666bf5e
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

70,530
lndkronkltdVerified publisher0.3.93 of 4See more

lnd kronkltd 0.3.9

3 of the 4 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.0.0-20220525230936-793ad666bf5e
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

8,451
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,649
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,812
traggokrzwiatrzyk1.0.01 of 1See more

traggo krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
traggo/server:0.2.3f1ced637510e
golang.org/x/crypto@v0.0.0-20190513172903-22d7a77e9e5f
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

1,885
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
kubebb/cert-manager-cainjector:v1.8.0f83cd256229b
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20220525230936-793ad666bf5e
kubebb/cert-manager-controller:v1.8.020509de4b399
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

8,160
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,988
u4a-componentkubebb0.2.104 of 8See more

u4a-component kubebb 0.2.10

4 of the 8 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
kubebb/iam-controller:v0.2.0-202401288ffbfa2d67e9
golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898
0.0.0-20220525230936-793ad666bf5e
kubebb/iam-provider:v0.2.0-202401280ba03fcee3a7
golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898
0.0.0-20220525230936-793ad666bf5e
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220525230936-793ad666bf5e
kubebb/oidc-server:v0.2.02b5894ef1e2f
golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

13,819
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

13,497
nvidia-gpu-exporterkubeblocksVerified publisher0.3.11 of 1See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,462
openebskubeblocksVerified publisher3.10.01 of 3See more

openebs kubeblocks 3.10.0

1 of the 3 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
openebs/node-disk-operator:2.1.06afe2123c457
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,489
prometheuskubeblocksVerified publisher15.16.14 of 6See more

prometheus kubeblocks 15.16.1

4 of the 6 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.33496e0f85943
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
quay.io/prometheus/alertmanager:v0.24.0088464f949de
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,302
logging-demokube-loggingVerified publisher4.0.31 of 1See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/log-generator:v0.4.105aa441b20aa
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

1,267
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,646
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,149
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:0.11.160ad97f07a78b
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,417
fluentbit-operatorkubesphereVerified publisher0.1.01 of 2See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
kubesphere/fluentbit-operator:v0.9.0b87db3c57cb3
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,902
gitlabkubesphereVerified publisher4.2.35 of 17See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:alpine-v13.2.1fd7e5dfb9f30
golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734
0.0.0-20220525230936-793ad666bf5e
mirrorgitlabcontainers/gitaly:v13.2.283599461ef8b
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220525230936-793ad666bf5e
mirrorgitlabcontainers/gitlab-container-registry:v2.9.1-gitlab06b19a4bc805
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220525230936-793ad666bf5e
mirrorgitlabcontainers/gitlab-shell:v13.3.09f3654f1eafc
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220525230936-793ad666bf5e
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

38,133
harborkubesphereVerified publisher1.9.37 of 11See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20220525230936-793ad666bf5e
goharbor/harbor-core:v2.5.386bf3031f4a7
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e
goharbor/notary-server-photon:v2.5.3fd91a4a1273f
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.0.0-20220525230936-793ad666bf5e
goharbor/notary-signer-photon:v2.5.3a92b51aa7d6e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
golang.org/x/crypto@v0.0.0-20220513210258-46612604a0f9
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

17,798
cranekubesphere-stable0.5.22 of 3See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5
0.0.0-20220525230936-793ad666bf5e
gocrane/craned:v0.5.1a1400909118c
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

8,883
csi-qingcloudkubesphere-stable1.4.03 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.0.0-20220525230936-793ad666bf5e
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220525230936-793ad666bf5e
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

12,402
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
kubeedge/edgemesh-server:latesta437cf5ec0ae
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,096
iomeshkubesphere-stable1.1.07 of 25See more

iomesh kubesphere-stable 1.1.0

7 of the 25 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220525230936-793ad666bf5e
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
iomesh/node-disk-manager:1.8.0002c4b92fd34
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
iomesh/node-disk-operator:1.8.0f6c76380db34
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

48,665
IOMeshkubesphere-stable1.2.07 of 25See more

IOMesh kubesphere-stable 1.2.0

7 of the 25 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
iomesh/csi-provisioner:v3.0.0f9508460b273
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220525230936-793ad666bf5e
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e
iomesh/node-disk-exporter:1.8.0f03148764f38
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
iomesh/node-disk-manager:1.8.0-2292ad270082e
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

46,341
pulsarkubesphere-stable2.7.132 of 3See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.0.0-20220525230936-793ad666bf5e
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

14,320
csi-neonsankubesphere-testVerified publisher1.3.03 of 6See more

csi-neonsan kubesphere-test 1.3.0

3 of the 6 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220525230936-793ad666bf5e
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

18,475
csi-qingcloudkubesphere-testVerified publisher1.4.03 of 6See more

csi-qingcloud kubesphere-test 1.4.0

3 of the 6 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.0.0-20220525230936-793ad666bf5e
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220525230936-793ad666bf5e
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

12,402
openelbkubesphere-testVerified publisher0.2.41 of 2See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.4.4ed7311a0f9e4
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,329
porterkubesphere-testVerified publisher0.2.21 of 2See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container imageDigestPackageFixed in
kubesphere/porter:v0.4.38d1ed5ee1d2e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,784

Container images carrying it

863 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mongo:5.0.6-focal8e70544b6c76
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.0.0-20220525230936-793ad666bf5e
10
prom/pushgateway:v1.4.2a684e7c830a4
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37
0.0.0-20220525230936-793ad666bf5e
8
osixia/openldap:1.5.018742e9c449c
golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee
0.0.0-20220525230936-793ad666bf5e
7
wurstmeister/kafka:latest2d4bbf9cc83d
golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e
0.0.0-20220525230936-793ad666bf5e
7
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71
0.0.0-20220525230936-793ad666bf5e
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871
0.0.0-20220525230936-793ad666bf5e
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.0.0-20220525230936-793ad666bf5e
6
quay.io/devtron/kubectl:latest2ad610626658
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220525230936-793ad666bf5e
6
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
6
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220525230936-793ad666bf5e
6
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56
0.0.0-20220525230936-793ad666bf5e
5
prom/prometheus:v2.13.10a8caa2e9f19
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20220525230936-793ad666bf5e
5
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
5
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670
0.0.0-20220525230936-793ad666bf5e
5
grafana/grafana:6.7.11ff3999e0fc0
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.0.0-20220525230936-793ad666bf5e
4
grafana/loki:2.6.11ee60f980950
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.0.0-20220525230936-793ad666bf5e
4
hyperledger/fabric-orderer:2.46ec3fe59ea55
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.0.0-20220525230936-793ad666bf5e
4
hyperledger/fabric-peer:2.46ff36af21eb1
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.0.0-20220525230936-793ad666bf5e
4
hyperledger/fabric-tools:2.4b1194f509085
golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2
0.0.0-20220525230936-793ad666bf5e
4
library/mongo:4.4.66efa05203990
golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073
0.0.0-20220525230936-793ad666bf5e
4
alfhou/hammond:v0.0.24c85dc0293aa1
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220525230936-793ad666bf5e
3
argoproj/argocd:v1.8.1830e86cacefd
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220525230936-793ad666bf5e
3
ciscolabs/rtsp-server:latestb59fc10bb821
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.0.0-20220525230936-793ad666bf5e
3
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220525230936-793ad666bf5e
3
dgraph/dgraph:v21.12.03b55ea83fffe
golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a
0.0.0-20220525230936-793ad666bf5e
3
grafana/grafana:8.2.500568d89c4f8
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
3
grafana/promtail:2.4.2626900031c4e
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.0.0-20220525230936-793ad666bf5e
3
groundnuty/k8s-wait-for:v2.0c14d7271e401
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20220525230936-793ad666bf5e
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392
0.0.0-20220525230936-793ad666bf5e
3
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.0.0-20220525230936-793ad666bf5e
3
prom/prometheus:v2.19.0bfad037f95e5
golang.org/x/crypto@v0.0.0-20200422194213-44a606286825
0.0.0-20220525230936-793ad666bf5e
3
stakater/proxyinjector:v0.0.2383fef483d497
golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8
0.0.0-20220525230936-793ad666bf5e
3
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/clair:4.3.675fb847ac045
golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/nats-box:latest48cdd3054b20
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.0.0-20220525230936-793ad666bf5e
3
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.0.0-20220525230936-793ad666bf5e
3
quay.io/dexidp/dex:v2.25.07bcf286807b8
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20220525230936-793ad666bf5e
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.0.0-20220525230936-793ad666bf5e
3
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.0.0-20220525230936-793ad666bf5e
3
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.0.0-20220525230936-793ad666bf5e
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.0.0-20220525230936-793ad666bf5e
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.0.0-20220525230936-793ad666bf5e
3

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.