StackRadar

CVE-2023-2253

High

Advisory

Published 11 May 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
310
of 17,781 indexed, latest versions
Container images
284
deployed by those charts
Fix available
2 of 2
affected packages

distribution catalog API endpoint can lead to OOM via malicious user input

Carried by container images the latest versions of 310 of 17,781 indexed charts deploy, on 284 images.

Affected packageAffected versionsFixed inImages
github.com/docker/distributiongolangv0.0.0-20171011171712-7484e51bf6af, v0.0.0-20191216044856-a8371794149d, v0.0.0-20260602055908-11540eae06cb+dirty, v0.0.0-20260701071724-493dca9a81a8+dirty+7 more2.8.2-beta.1280
github.com/distribution/distributiongolangv2.7.1+incompatible, v2.8.0+incompatible, v2.8.1+incompatible2.8.2-beta.1+incompatible8
OSV records
GHSA-hqxw-f8mx-cpmwGO-2023-1772

Charts affected

310 by stars
ChartLatestAffected imagesRadar Score
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

7,561
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

6,908
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

7,705
prometheusazureorkestra14.8.01 of 6See more

prometheus azureorkestra 14.8.0

1 of the 6 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

9,661
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

7,342
bitpokebitpokeVerified publisher1.8.191 of 1See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

2,312
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

2,770
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

3,449
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

15,027
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

8,408
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

7,104
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/docker/distribution@v2.8.1+incompatible
github.com/distribution/distribution@v2.8.1+incompatible
2.8.2-beta.1
2.8.2-beta.1+incompatible

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

6,921
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

16,069
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

19,338
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

8,408
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

3,672
katibcowboysysopVerified publisher2.4.21 of 4See more

katib cowboysysop 2.4.2

1 of the 4 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

6,542
crossplane-controllerscrossplane0.12.01 of 1See more

crossplane-controllers crossplane 0.12.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
crossplane/crossplane:v0.12.066666e6963af
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

2,312
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

15,380
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

13,852
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

3,238
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/docker/distribution@v2.7.1-0.20190205005809-0d3efadf0154+incompatible
2.8.2-beta.1

Open the chart page →

2,977
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

1,926
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

7,486
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/distribution@v2.8.0+incompatible
github.com/distribution/distribution@v2.7.1+incompatible
2.8.2-beta.1
2.8.2-beta.1+incompatible
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/distribution@v2.8.0+incompatible
github.com/distribution/distribution@v2.7.1+incompatible
2.8.2-beta.1
2.8.2-beta.1+incompatible

Open the chart page →

4,722
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

10,466
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

12,949
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

1,580
devtron-enterprisedevtron48.0.02 of 28See more

devtron-enterprise devtron 48.0.0

2 of the 28 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

68,240
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

4,928
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

8,645
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

2,435
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

10,466
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

12,949
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

1,580
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.02 of 28See more

devtron-enterprise devtron-labs 48.0.0

2 of the 28 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

68,240
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

4,928
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

32,902
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

8,645
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

2,435
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1

Open the chart page →

8,408
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1

Open the chart page →

3,046
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-2253.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1

Open the chart page →

3,659

Container images carrying it

284 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/docker/distribution@v2.8.0+incompatible
2.8.2-beta.1
7
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
6
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
3
goharbor/harbor-registryctl:v2.15.2223d5cb49d5d
github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty
2.8.2-beta.1
3
goharbor/registry-photon:v2.15.2c4ebef61ceb5
github.com/docker/distribution@v0.0.0-20260701071724-493dca9a81a8+dirty
2.8.2-beta.1
3
grafana/promtail:2.4.2626900031c4e
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
3
groundnuty/k8s-wait-for:v2.0c14d7271e401
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
3
library/docker:20.10-dind:20-dindaf96c680a7e1
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
3
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
3
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
3
bitnamilegacy/kubectl:1.26.4a0a972324d93
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
cesanta/docker_auth:1.6.04d16885f3d4c
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
grafana/agent-operator:v0.25.1a136c6208aa3
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
kubernetesui/dashboard:v2.2.0148991563e37
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
library/traefik:v2.57d5a6ae66572
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
prom/prometheus:v2.37.98176adea328e
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
quay.io/prometheus-operator/prometheus-operator:v0.44.0983627001c89
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
2
alpine/k8s:1.22.600ac10bcb759
github.com/docker/distribution@v2.7.1+incompatible
2.8.2-beta.1
1
alpine/k8s:1.27.321b24e6bf801
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
1
alpine/k8s:1.31.106dbe6f391eda
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
1
alpine/k8s:1.31.137a319b15cfc9
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
1
alpine/k8s:1.32.47e1e7d5b7a96
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
1
alpine/k8s:1.31.49c4976d47656
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
1
alpine/k8s:1.18.16a41efe02a041
github.com/docker/distribution@v0.0.0-20191216044856-a8371794149d
2.8.2-beta.1
1
alpine/k8s:1.30.0bd01dae02676
github.com/docker/distribution@v2.8.1+incompatible
2.8.2-beta.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.