StackRadar

CVE-2023-39326

Medium

Advisory

Published 6 Dec 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,906
of 17,790 indexed, latest versions
Container images
2,220
deployed by those charts
Fix available
2 of 3
affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 1,906 of 17,790 indexed charts deploy, on 2,220 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
skopeorpm2:1.11.2-0.1.el92:1.13.3-4.el9_31
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+113 more1.20.122,220
OSV records
DEBIAN-CVE-2023-39326RHSA-2024:1149GO-2023-2382
Also known as
BIT-golang-2023-39326

Charts affected

1,906 by stars
ChartLatestAffected imagesRadar Score
iomeshkubesphere-stable1.1.021 of 25See more

iomesh kubesphere-stable 1.1.0

21 of the 25 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
stdlib@go1.20.3
1.20.12
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
stdlib@go1.20.3
1.20.12
iomesh/csi-driver:v2.7.25d3f9bf9240b
stdlib@go1.16.7
1.20.12
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
stdlib@go1.17.3
1.20.12
iomesh/csi-provisioner:v3.0.0f9508460b273
stdlib@go1.16.2
1.20.12
iomesh/csi-snapshotter:v6.2.2becc53e25b96
stdlib@go1.19
1.20.12
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
stdlib@go1.13.1
1.20.12
iomesh/livenessprobe:v2.8.0560f01510f99
stdlib@go1.18
1.20.12
iomesh/localpv-manager:v0.2.0f13deacac3f4
stdlib@go1.20.3
1.20.12
iomesh/node-disk-exporter:1.8.0f03148764f38
stdlib@go1.14.7
1.20.12
iomesh/node-disk-manager:1.8.0002c4b92fd34
stdlib@go1.14.7
1.20.12
iomesh/node-disk-operator:1.8.0f6c76380db34
stdlib@go1.14.7
1.20.12
iomesh/operator:v1.1.060081c9b2f52
stdlib@go1.21.4
1.20.12
iomesh/post-delete-hook:v1.1.0eea5651f3270
stdlib@go1.21.4
1.20.12
iomesh/snapshot-controller:v6.2.2fb95b65bb88f
stdlib@go1.19
1.20.12
iomesh/zookeeper-operator:0.2.159b38b5c7a61d
stdlib@go1.19.7
1.20.12
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
stdlib@go1.20.3
1.20.12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
stdlib@go1.20.3
1.20.12
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
stdlib@go1.20.3
1.20.12
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
stdlib@go1.20.3
1.20.12
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
stdlib@go1.20.3
1.20.12

Open the chart page →

48,954
IOMeshkubesphere-stable1.2.018 of 25See more

IOMesh kubesphere-stable 1.2.0

18 of the 25 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
stdlib@go1.17.3
1.20.12
iomesh/csi-provisioner:v3.0.0f9508460b273
stdlib@go1.16.2
1.20.12
iomesh/csi-snapshotter:v6.2.2becc53e25b96
stdlib@go1.19
1.20.12
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
stdlib@go1.13.1
1.20.12
iomesh/livenessprobe:v2.8.0560f01510f99
stdlib@go1.18
1.20.12
iomesh/localpv-manager:v0.2.0f13deacac3f4
stdlib@go1.20.3
1.20.12
iomesh/node-disk-exporter:1.8.0f03148764f38
stdlib@go1.14.7
1.20.12
iomesh/node-disk-manager:1.8.0-2292ad270082e
stdlib@go1.14.7
1.20.12
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
stdlib@go1.14.7
1.20.12
iomesh/operator:v1.2.0ba4dd6be7e59
stdlib@go1.21.4
1.20.12
iomesh/post-delete-hook:v1.2.0e3b92f838f4b
stdlib@go1.21.4
1.20.12
iomesh/snapshot-controller:v6.2.2fb95b65bb88f
stdlib@go1.19
1.20.12
iomesh/zookeeper-operator:0.2.159b38b5c7a61d
stdlib@go1.19.7
1.20.12
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
stdlib@go1.20.3
1.20.12
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0f6717ce72a26
stdlib@go1.20.3
1.20.12
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
stdlib@go1.20.3
1.20.12
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
stdlib@go1.20.3
1.20.12
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
stdlib@go1.20.3
1.20.12

Open the chart page →

46,639
pulsarkubesphere-stable2.7.132 of 3See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
prom/prometheus:v2.17.242d2395cd719
stdlib@go1.13.10
1.20.12
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
stdlib@go1.15.6
1.20.12

Open the chart page →

14,401
aws-fsx-csi-driverkubesphere-testVerified publisher0.1.01 of 4See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
amazon/aws-fsx-csi-driver:latestc9b14856fd22
stdlib@go1.16.8
1.20.12

Open the chart page →

1,594
ccm-qingcloudkubesphere-testVerified publisher0.1.01 of 1See more

ccm-qingcloud kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
qingcloud/cloud-controller-manager:v1.4.1210f66b5df886
stdlib@go1.18.2
1.20.12

Open the chart page →

1,540
cni-hostnickubesphere-testVerified publisher0.1.01 of 1See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
qingcloud/hostnic-plus:v1.0.34cd5366a9f51
stdlib@go1.16.3
1.20.12

Open the chart page →

2,443
csi-neonsankubesphere-testVerified publisher1.3.06 of 6See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.20.12
csiplugin/csi-neonsan:v1.2.21fa83d45417f
stdlib@go1.14.4
1.20.12
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.20.12
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.20.12
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.20.12
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.20.12

Open the chart page →

18,526
csi-qingcloudkubesphere-testVerified publisher1.4.06 of 6See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
stdlib@go1.16
1.20.12
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
stdlib@go1.16
1.20.12
csiplugin/csi-qingcloud:v1.4.00766163dc046
stdlib@go1.19.13
1.20.12
csiplugin/csi-resizer:v1.2.036c31f7e1f43
stdlib@go1.16
1.20.12
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
stdlib@go1.15
1.20.12
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
stdlib@go1.16.2
1.20.12

Open the chart page →

12,444
curvefs-csikubesphere-testVerified publisher0.1.01 of 3See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
stdlib@go1.13.3
1.20.12

Open the chart page →

2,831
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
mikefarah/yq:2.4.16fc625c402de
stdlib@go1.13.3
1.20.12

Open the chart page →

9,631
online-boutiquekubesphere-testVerified publisher0.1.08 of 11See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2023-39326.

Open the chart page →

26,075
openelbkubesphere-testVerified publisher0.2.42 of 2See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
kubesphere/openelb:v0.4.4ed7311a0f9e4
stdlib@go1.15.15
1.20.12
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
stdlib@go1.16.9
1.20.12

Open the chart page →

4,336
porterkubesphere-testVerified publisher0.2.21 of 2See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
kubesphere/porter:v0.4.38d1ed5ee1d2e
stdlib@go1.15.15
1.20.12

Open the chart page →

2,791
snapshot-controllerkubesphere-testVerified publisher0.2.01 of 1See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
stdlib@go1.15
1.20.12

Open the chart page →

2,220
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
stdlib@go1.20.4
1.20.12

Open the chart page →

4,456
kubestellar-uikubestellaruiVerified publisher0.1.12 of 4See more

kubestellar-ui kubestellarui 0.1.1

2 of the 4 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
library/redis:7.0-alpinec9d92d840fd0
stdlib@go1.18.2
1.20.12
mavrick1/kubestellar-b:latest45ca0429a1d4
stdlib@go1.20.3
1.20.12

Open the chart page →

4,773
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.20.12

Open the chart page →

8,767
kube-workload-restarterkube-workload-restarterVerified publisher0.0.41 of 1See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
andreacioni/kube-workload-restarter:0.0.242938b310090a
stdlib@go1.20.2
1.20.12

Open the chart page →

1,815
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
stdlib@go1.21.1
1.20.12

Open the chart page →

20,386
operatingkusionstackVerified publisher0.5.11 of 1See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
kusionstack/operating:v0.5.0c28bd96b986b
stdlib@go1.19.13
1.20.12

Open the chart page →

1,881
sample-operatorkusionstackVerified publisher0.1.21 of 1See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
chaerr/kridge:demo-operator-v0.1.266833deec017
stdlib@go1.20.7
1.20.12

Open the chart page →

2,503
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
stdlib@go1.14.1
1.20.12

Open the chart page →

16,539
metadockvalitetsitVerified publisher0.0.72 of 2See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
kvalitetsit/metadoc-app:maine89e351733ad
stdlib@go1.19.5
1.20.12
kvalitetsit/metadoc-web:mainf57e7553f5bd
stdlib@go1.16
1.20.12

Open the chart page →

4,033
nsp-prometheus-exporterkvalitetsitVerified publisher1.0.191 of 2See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
kvalitetsit/nsp-prometheus-exporter:1.0.190b397ff954ec
stdlib@go1.15.3
1.20.12

Open the chart page →

2,063
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
kvalitetsit/stakit-frontend:0.2.5fd5c4f60ef80
stdlib@go1.19.3
1.20.12

Open the chart page →

7,848
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
stdlib@go1.13.10
1.20.12

Open the chart page →

8,543
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
stdlib@go1.14
1.20.12

Open the chart page →

26,377
lagoon-docker-hostlagoon-chartsVerified publisher0.7.01 of 1See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
stdlib@go1.21.3
1.20.12

Open the chart page →

2,122
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
stdlib@go1.20.5
1.20.12

Open the chart page →

33,540
metallblectures-k8sinfra0.10.22 of 2See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.10.221164241c045
stdlib@go1.16.5
1.20.12
quay.io/metallb/speaker:v0.10.258cb99053bb3
stdlib@go1.16.5
1.20.12

Open the chart page →

5,406
prometheuslectures-k8sinfra15.8.55 of 6See more

prometheus lectures-k8sinfra 15.8.5

5 of the 6 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.20.12
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.20.12
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
stdlib@go1.16.7
1.20.12
quay.io/prometheus/node-exporter:v1.3.023ff46c728b9
stdlib@go1.17.3
1.20.12
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
stdlib@go1.18.4
1.20.12

Open the chart page →

9,100
grafanaleechistest5.3.01 of 1See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.20.12

Open the chart page →

3,198
prometheusleechistest11.6.04 of 6See more

prometheus leechistest 11.6.0

4 of the 6 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.20.12
prom/prometheus:v2.19.0bfad037f95e5
stdlib@go1.14.4
1.20.12
prom/pushgateway:v1.2.00a9031142481
stdlib@go1.13.8
1.20.12
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.20.12

Open the chart page →

8,491
kube-benchlemontechVerified publisher0.1.01 of 1See more

kube-bench lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.6.9c329d73fea58
stdlib@go1.19
1.20.12

Open the chart page →

1,632
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
stdlib@go1.19
1.20.12

Open the chart page →

4,280
kltlifecycle-toolkitOfficialVerified publisher0.2.64 of 4See more

klt lifecycle-toolkit 0.2.6

4 of the 4 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
ghcr.io/keptn/certificate-operator:v1.1.08fdd311a6d33
stdlib@go1.20.4
1.20.12
ghcr.io/keptn/lifecycle-operator:v0.8.2487bfc37c4b4
stdlib@go1.20.4
1.20.12
ghcr.io/keptn/metrics-operator:v0.8.2acf22310e9dd
stdlib@go1.20.4
1.20.12
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
stdlib@go1.20.4
1.20.12

Open the chart page →

4,680
kube-iptables-tailerlifen0.2.31 of 1See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
stdlib@go1.13.8
1.20.12

Open the chart page →

4,459
op-scim-bridgelifen1.0.31 of 2See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
1password/scim:v2.3.129d0c6cb67eb
stdlib@go1.16.8
1.20.12

Open the chart page →

2,777
op-scim-bridgelifen-chartsVerified publisher1.0.31 of 2See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
1password/scim:v2.3.129d0c6cb67eb
stdlib@go1.16.8
1.20.12

Open the chart page →

2,777
komgalinkding0.2.31 of 1See more

komga linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
gotson/komga:1.22.0ba892ab3e082
stdlib@go1.17.8
1.20.12

Open the chart page →

3,133
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
stdlib@go1.20.7
1.20.12

Open the chart page →

10,780
livekit-recorderlivekit-server0.3.131 of 1See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
livekit/livekit-recorder:v0.3.13ecf1409c75e0
stdlib@go1.16.2
1.20.12

Open the chart page →

2,135
patch-operatorloafoe0.11.31 of 2See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
stdlib@go1.15.15
1.20.12

Open the chart page →

4,911
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
stdlib@go1.21.0
1.20.12

Open the chart page →

2,108
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
stdlib@go1.13.10
1.20.12

Open the chart page →

7,519
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
sky5367/locust-plugins-timescale:latestd3150f201471
stdlib@go1.18.7
1.20.12

Open the chart page →

7,534
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
stdlib@go1.20.5
1.20.12

Open the chart page →

33,540
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
stdlib@go1.20.10
1.20.12

Open the chart page →

3,234
devspace-cloudloftVerified publisher0.3.32 of 8See more

devspace-cloud loft 0.3.3

2 of the 8 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
stdlib@go1.13.8
1.20.12
library/postgres:115d2aa4a7b5f9
stdlib@go1.16.7
1.20.12

Open the chart page →

9,888
kioskloftVerified publisher0.2.111 of 1See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2023-39326.

Container imageDigestPackageFixed in
kiosksh/kiosk:0.2.11501725ba2025
stdlib@go1.15.7
1.20.12

Open the chart page →

3,094

Container images carrying it

2,220 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
stdlib@go1.18.1
1.20.12
1
clastix/capsule-rancher-addon:v0.1.143d301afbca8
stdlib@go1.19.2
1.20.12
1
clickhouse/clickhouse-server:23.8512bb8a21483
stdlib@go1.19.10
1.20.12
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
stdlib@go1.19.5
1.20.12
1
cloudbees/cert-requester:2.3.31d44fb4f799b
stdlib@go1.20.1
1.20.12
1
cloudbees/sidecar-injector:2.3.38f102ef0383a
stdlib@go1.20.1
1.20.12
1
cloudecho/hello:0.1.0f76ede067ab9
stdlib@go1.16.6
1.20.12
1
cloudentity/openbanking-quickstart-bank:1.11.19402ec4b5016
stdlib@go1.15.14
1.20.12
1
cloudentity/openbanking-quickstart-configuration:1.11.18a1890eb8265
stdlib@go1.15.14
1.20.12
1
cloudentity/openbanking-quickstart-consent-admin-portal:1.11.1ee83cdd45b7b
stdlib@go1.15.2
1.20.12
1
cloudentity/openbanking-quickstart-consent-page:1.11.15728654cecb7
stdlib@go1.16.6
1.20.12
1
cloudentity/openbanking-quickstart-consent-self-service-portal:1.11.18ca94ae6acf4
stdlib@go1.15.2
1.20.12
1
cloudentity/openbanking-quickstart-financroo-tpp:1.11.1c04eb10c77b7
stdlib@go1.15.2
1.20.12
1
cloudflare/cloudflared:2023.10.0c18744ae1767
stdlib@go1.20.6
1.20.12
1
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
stdlib@go1.19.5
1.20.12
1
cloudposse/bastion:latest0d9507e8a760
stdlib@go1.13.3
1.20.12
1
cmacrae/d2-prometheus-exporter:v0.1.0fc5fecba436e
stdlib@go1.15
1.20.12
1
cmacrae/lgtm:0.1.0dec8d490fe40
stdlib@go1.14.1
1.20.12
1
cockroachdb/cockroach-operator:v2.1.0983312754620
stdlib@go1.13.14
1.20.12
1
codenotary/immudb:1.9.77c85d7cc4f22
stdlib@go1.18.10
1.20.12
1
codercom/code-server:4.11.0-debian1e2cc688008e
stdlib@go1.14.4
1.20.12
1
codercom/code-server:3.10.247605610ad8d
stdlib@go1.14.4
1.20.12
1
codeskyblue/gohttpserver:latestcaa862590e34
stdlib@go1.16.3
1.20.12
1
conduction/agendaservice-php:latest9cfeeb6c7c20
stdlib@go1.13.10
1.20.12
1
conduction/balance-registration-php:devc36094a41369
stdlib@go1.13.10
1.20.12
1
conduction/betaalservice-php:latestece1ab544c57
stdlib@go1.13.10
1.20.12
1
conduction/cgrc-php:dev25415534d245
stdlib@go1.13.10
1.20.12
1
conduction/checkin-component-php:dev3423845692c1
stdlib@go1.13.10
1.20.12
1
conduction/conduction-ui-php:dev2744565516e8
stdlib@go1.13.10
1.20.12
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
stdlib@go1.13.10
1.20.12
1
conduction/docparser-php:devb6f95c8ead7d
stdlib@go1.13.10
1.20.12
1
conduction/kvk-php:dev8f177f9f8a7b
stdlib@go1.13.10
1.20.12
1
conduction/pan-php:dev24f03c57568f
stdlib@go1.13.10
1.20.12
1
containous/maesh:v1.3.2587162516502
stdlib@go1.14.4
1.20.12
1
coredns/coredns:1.7.073ca82b4ce82
stdlib@go1.14.4
1.20.12
1
coredns/coredns:1.10.1a0ead06651cf
stdlib@go1.20
1.20.12
1
cortezaproject/corteza:2024.9.08eb7a26605c9
stdlib@go1.19.13
1.20.12
1
countly/api:25.05.4f4cc7447c4f5
stdlib@go1.19.4
1.20.12
1
countly/countly-server:25.05.4e3c238248f99
stdlib@go1.19.4
1.20.12
1
countly/frontend:25.05.42acbc11499b6
stdlib@go1.19.4
1.20.12
1
craftypath/sops-operator:v0.8.0402a0024c732
stdlib@go1.16.5
1.20.12
1
crossplane/crossplane:v0.12.066666e6963af
stdlib@go1.14.4
1.20.12
1
crossplane/oam-kubernetes-runtime:v0.0.3-71.g0f235900112171c45e3
stdlib@go1.13.14
1.20.12
1
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
stdlib@go1.13.15
1.20.12
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
stdlib@go1.14.2
1.20.12
1
csepulvedab/secret-sync:0.5227a6f2b0ff8
stdlib@go1.19.4
1.20.12
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
stdlib@go1.14.4
1.20.12
1
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
stdlib@go1.15
1.20.12
1
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
stdlib@go1.16.13
1.20.12
1
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.20.12
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.