StackRadar

CVE-2023-45142

High

Advisory

Published 16 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
152
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttpgolangv0.16.0, v0.20.0, v0.22.0, v0.23.0+15 more0.44.0149
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptracegolangv0.16.0, v0.28.0, v0.29.0, v0.36.4+2 more0.44.023
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgingolangv0.36.3, v0.36.4, v0.40.0, v0.42.00.44.08
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgolangv0.20.0, v0.35.0, v0.36.40.44.05
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmuxgolangv0.22.0, v0.28.00.44.03
OSV records
GHSA-rcjv-mgp8-qvmr
Also known as
GO-2023-2113

Charts affected

152 by stars
ChartLatestAffected imagesRadar Score
cranekubesphere-stable0.5.21 of 3See more

crane kubesphere-stable 0.5.2

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

8,883
deepflowkubesphere-stable6.2.6063 of 8See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.36.3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
0.44.0
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
grafana/grafana:9.5.239c849cebccc
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0

Open the chart page →

18,316
prometheuslectures-k8sinfra15.8.51 of 6See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

9,092
kltlifecycle-toolkitOfficialVerified publisher0.2.62 of 4See more

klt lifecycle-toolkit 0.2.6

2 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/keptn/metrics-operator:v0.8.2acf22310e9dd
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

4,658
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

2,101
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

3,225
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.38.0
0.44.0

Open the chart page →

2,444
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

3,225
vcluster-proloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.35.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
0.44.0
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

5,768
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.103 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

3 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

8,202
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
logiqai/tracing:v1.35.2-lq1-c3e149f6781b8
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

23,613
cert-manager-setupmesosphere-stable0.2.102 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

2 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

7,179
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

1,799
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

1,594
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

10,603
jupyterhubmizzoukube0.0.1-set.by.chartpress1 of 7See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

1,883
hcloud-ccm-networksmorremeyer2.0.01 of 1See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

1,739
prometheusnodepulse25.0.01 of 6See more

prometheus nodepulse 25.0.0

1 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

7,740
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,547
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

27,465
cluster-gateway-addon-managerocm-helm-chartsVerified publisher1.4.01 of 1See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,600
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

2,124
opa-nginxopa-nginx0.0.31 of 2See more

opa-nginx opa-nginx 0.0.3

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
openpolicyagent/opa:0.53.16a58dea59933
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

2,167
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,751
opscruiseopenshift0.35.1001 of 11See more

opscruise openshift 0.35.100

1 of the 11 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

8,201
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,237
gitlab-proxyopslevelVerified publisher0.0.81 of 1See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/caddy:2.660fb54d36b4b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

1,872
npre-essentialsphntom0.1.602 of 22See more

npre-essentials phntom 0.1.60

2 of the 22 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
grafana/promtail:2.7.0c16c710f7333
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.0
0.44.0

Open the chart page →

26,840
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

1,753
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.5.0f9ef133793af
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

6,525
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.16.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.16.0
0.44.0
0.44.0

Open the chart page →

6,237
cert-manager-desec-webhookschmitzis0.0.11 of 1See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
su541/cert-manager-desec-webhook:latest371ee33f83c1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

1,770
cert-manager-webhook-bunnyschmitzis0.1.11 of 1See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

1,498
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.20.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
0.44.0

Open the chart page →

3,462
harborsoftonic1.13.03 of 8See more

harbor softonic 1.13.0

3 of the 8 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.9.06412d679fdc3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
goharbor/harbor-jobservice:v2.9.039435daedd0c
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.22.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
0.44.0
goharbor/harbor-registryctl:v2.9.0cce272836449
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0

Open the chart page →

7,672
sn-platform-slimstreamnative1.11.442 of 6See more

sn-platform-slim streamnative 1.11.44

2 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

10,134
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0

Open the chart page →

10,902
agentssynapse0.1.303 of 9See more

agents synapse 0.1.30

3 of the 9 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.42.07d32a4eddec7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0

Open the chart page →

7,244
cctpsynapse0.3.01 of 4See more

cctp synapse 0.3.0

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0

Open the chart page →

1,815
promexportersynapse0.1.11 of 1See more

promexporter synapse 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0

Open the chart page →

1,704
sinnersynapse0.1.01 of 6See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.42.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0

Open the chart page →

1,955
ccm-hcloudsyself1.0.111 of 1See more

ccm-hcloud syself 1.0.11

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.13.0ed5ee5f83973
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,706
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0

Open the chart page →

4,212
monitoringthl-chartsVerified publisher0.1.12 of 10See more

monitoring thl-charts 0.1.1

2 of the 10 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.5.0f9ef133793af
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
quay.io/prometheus/prometheus:v2.34.0b37103e03399
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

18,908
tfy-cloudflaredtruefoundryVerified publisher0.5.01 of 2See more

tfy-cloudflared truefoundry 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

2,015
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

4,525
wavefront-hpa-adapterwavefront0.2.101 of 1See more

wavefront-hpa-adapter wavefront 0.2.10

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wavefronthq/wavefront-hpa-adapter:0.9.12af5fef9a4768
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,685

Container images carrying it

156 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.38.0
0.44.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
1
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
1
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
1
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.28.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.28.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.28.0
0.44.0
0.44.0
0.44.0
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.42.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0
1
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
1
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
1
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
1
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/jetstack/cert-manager-webhook:v1.10.164121721c665
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/jetstack/cert-manager-webhook:v1.12.0ec4306b243d9
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
1
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
quay.io/operator-framework/olmf9ea8cef95ac
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
1
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.34.0
0.44.0
1
quay.io/prometheus/prometheus:v2.39.14748e26f9369
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.0
0.44.0
1
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
1
quay.io/prometheus/prometheus:v2.34.0b37103e03399
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.41.1
0.44.0
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.