CVE-2022-30636

Unscored

Advisory

Published 2 Jul 2024In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.006; 49th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 823; of 17,781 indexed, latest versions
Container images: 863; deployed by those charts
Fix available: 1 of 1; affected package

Limited directory traversal vulnerability on Windows in golang.org/x/crypto

Carried by container images the latest versions of 823 of 17,781 indexed charts deploy, on 863 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+94 more	0.0.0-20220525230936-793ad666bf5e	863

OSV records: GO-2024-2961

Charts affected

823 by stars

Chart

Latest

Affected images

Radar Score

aperture-controlleraperture

2.34.0

1 of 5 See more

aperture-controller aperture 2.34.0

1 of the 5 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,663

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,300

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

9,052

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,250

cert-managerchoerodon

1.8.2

3 of 4 See more

cert-manager choerodon 1.8.2

3 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

7,775

clowardenclowarden

0.2.3

1 of 4 See more

clowarden clowarden 0.2.3

1 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,606

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

1,707

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,537

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,271

blockygeek-cookbook

10.5.2

1 of 1 See more

blocky geek-cookbook 10.5.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/0xerr0r/blocky :v0.18	b15824464acb	golang.org/x/crypto@v0.0.0-20211209193657-4570a0811e8b	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,030

mealiegeek-cookbook

5.1.2

1 of 2 See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
hkotel/mealie :frontend-v1.0.0beta-2	3c04c0e85039	golang.org/x/crypto@v0.0.0-20210915214749-c084706c2272	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

7,579

multusgeek-cookbook

3.5.2

1 of 3 See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v3.7.1	e72aa733faf2	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,906

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,154

statpinggeek-cookbook

6.2.0

1 of 2 See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,371

syncthinggeek-cookbook

3.5.2

1 of 1 See more

syncthing geek-cookbook 3.5.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
syncthing/syncthing :1.18.2	966433161272	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,610

traefik-forward-authgeek-cookbook

2.2.2

1 of 1 See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,234

gitvotegitvote

1.5.0

1 of 6 See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/cncf/gitvote/dbmigrator :v1.5.0	f1e7efe440da	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,613

frpc-ingressinfinity-server

0.4.1

1 of 1 See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,622

coreinstill-ai

0.1.75

2 of 15 See more

core instill-ai 0.1.75

2 of the 15 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

30,816

jenkins-operatorjenkins

0.8.1

1 of 1 See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,211

skywalkingkubesphere-test

3.1.0

2 of 4 See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220525230936-793ad666bf5e
apache/skywalking-ui :8.1.0	67d50e4deff4	golang.org/x/crypto@v0.0.0-20191122220453-ac88ee75c92c	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

18,042

vcluster-k8sloft

0.0.0-ci.3

1 of 4 See more

vcluster-k8s loft 0.0.0-ci.3

1 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,570

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,743

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,793

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,067

oesopsmx

4.0.32

4 of 25 See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.0.0-20220525230936-793ad666bf5e
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20220525230936-793ad666bf5e
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

107,811

ipfs-clusterparadeum-team

0.0.19

1 of 2 See more

ipfs-cluster paradeum-team 0.0.19

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,757

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20220525230936-793ad666bf5e
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

12,125

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,730

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

12,502

sn-platformstreamnative

1.11.44

1 of 9 See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

15,477

feedbacksystemthm-mni-ii

0.47.1

1 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

28,534

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/crypto@v0.0.0-20200317142112-1b76d66859c6	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,136

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.0.0-20220525230936-793ad666bf5e
library/traefik :v2.5	7d5a6ae66572	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

9,257

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,245

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

6,085

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.0.0-20220525230936-793ad666bf5e
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,032

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,714

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,039

soft-servealphani-helm-charts

0.4.0

1 of 1 See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,119

smockerandrcuns

0.0.4

1 of 1 See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,173

upcloud-csiankra-charts

0.4.0

1 of 8 See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

14,917

anteonanteon

2.6.4

2 of 13 See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.0.0-20220525230936-793ad666bf5e
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

22,202

stash-enterpriseappscode

0.42.0

1 of 4 See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

3,620

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

5,222

cert-exporterarzu

3.0.1

1 of 1 See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
joeelliott/cert-exporter :v2.7.0	b4acd14642d0	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

2,819

siemassist-iot-cybersecurity-monitroting-siem

0.1.0

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

10,730

dltbrokerassist-iot-distributed-broker

0.2.0

3 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

3 of the 9 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

3 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

3 of the 9 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

77,687

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2022-30636.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e

Open the chart page →

4,292

Container images carrying it

863 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/mongo :5.0.6-focal	8e70544b6c76	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e	10
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.0.0-20220525230936-793ad666bf5e	8
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.0.0-20220525230936-793ad666bf5e	7
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.0.0-20220525230936-793ad666bf5e	7
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/crypto@v0.0.0-20200406173513-056763e48d71	0.0.0-20220525230936-793ad666bf5e	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.0.0-20220525230936-793ad666bf5e	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e	6
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220525230936-793ad666bf5e	6
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/crypto@v0.0.0-20190617133340-57b3e21c3d56	0.0.0-20220525230936-793ad666bf5e	5
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220525230936-793ad666bf5e	5
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	5
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.0.0-20220525230936-793ad666bf5e	5
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.0.0-20220525230936-793ad666bf5e	4
grafana/loki :2.6.1	1ee60f980950	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.0.0-20220525230936-793ad666bf5e	4
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e	4
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e	4
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.0.0-20220525230936-793ad666bf5e	4
library/mongo :4.4.6	6efa05203990	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.0.0-20220525230936-793ad666bf5e	4
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	3
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	3
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220525230936-793ad666bf5e	3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.0.0-20220525230936-793ad666bf5e	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.0.0-20220525230936-793ad666bf5e	3
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	3
grafana/promtail :2.4.2	626900031c4e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.0.0-20220525230936-793ad666bf5e	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/crypto@v0.0.0-20201124201722-c8d3bf9c5392	0.0.0-20220525230936-793ad666bf5e	3
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2	0.0.0-20220525230936-793ad666bf5e	3
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/crypto@v0.0.0-20200422194213-44a606286825	0.0.0-20220525230936-793ad666bf5e	3
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.0.0-20220525230936-793ad666bf5e	3
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687f	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.0.0-20220525230936-793ad666bf5e	3
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.0.0-20220525230936-793ad666bf5e	3
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220525230936-793ad666bf5e	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.0.0-20220525230936-793ad666bf5e	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.0.0-20220525230936-793ad666bf5e	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.0.0-20220525230936-793ad666bf5e	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.0.0-20220525230936-793ad666bf5e	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.0.0-20220525230936-793ad666bf5e	3