StackRadar

CVE-2023-45142

High

Advisory

Published 16 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
152
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttpgolangv0.16.0, v0.20.0, v0.22.0, v0.23.0+15 more0.44.0149
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptracegolangv0.16.0, v0.28.0, v0.29.0, v0.36.4+2 more0.44.023
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgingolangv0.36.3, v0.36.4, v0.40.0, v0.42.00.44.08
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgolangv0.20.0, v0.35.0, v0.36.40.44.05
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmuxgolangv0.22.0, v0.28.00.44.03
OSV records
GHSA-rcjv-mgp8-qvmr
Also known as
GO-2023-2113

Charts affected

152 by stars
ChartLatestAffected imagesRadar Score
actions-runner-controlleractions-runner-controller0.23.71 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

2,883
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.35.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
0.44.0

Open the chart page →

2,453
oncallgrafana1.16.52 of 12See more

oncall grafana 1.16.5

2 of the 12 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

16,251
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.43.0
0.44.0

Open the chart page →

1,556
linkerd-jaegerlinkerd2Verified publisher30.12.111 of 4See more

linkerd-jaeger linkerd2 30.12.11

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.59.0ee9da0b08d83
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.34.0
0.44.0

Open the chart page →

4,405
loki-simple-scalablegrafana1.8.111 of 3See more

loki-simple-scalable grafana 1.8.11

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

6,470
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

9,868
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

14,094
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

5,674
vclustermainVerified publisher0.17.03 of 10See more

vcluster main 0.17.0

3 of the 10 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

11,552
prometheusaveshaVerified publisher19.3.01 of 4See more

prometheus avesha 19.3.0

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

5,484
cert-managerchoerodon1.8.22 of 4See more

cert-manager choerodon 1.8.2

2 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.8.2ada7edd90bec
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

7,775
openshift-secured-appeximiaitVerified publisher0.5.01 of 1See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

12,042
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

13,874
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
kubevious/ui:1.2.16233e84bdd59
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.34.0
0.44.0

Open the chart page →

14,204
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.02 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

2 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

11,582
karporkusionstackVerified publisher0.7.61 of 3See more

karpor kusionstack 0.7.6

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
kusionstack/karpor:v0.6.4b707d3bf0abd
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

3,295
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

3,675
vcluster-k8sloftVerified publisher0.0.0-ci.32 of 4See more

vcluster-k8s loft 0.0.0-ci.3

2 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

5,570
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/forwarder-controller:v3.5.7f0c5bebaec96
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.34.0
0.44.0

Open the chart page →

107,811
ipfs-clusterparadeum-teamVerified publisher0.0.191 of 2See more

ipfs-cluster paradeum-team 0.0.19

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ipfs/go-ipfs:v0.13.117259397f587
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

3,757
sn-platformstreamnative1.11.442 of 9See more

sn-platform streamnative 1.11.44

2 of the 9 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

15,477
feedbacksystemthm-mni-iiVerified publisher0.47.12 of 10See more

feedbacksystem thm-mni-ii 0.47.1

2 of the 10 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:20.10.21-dind3153fa63f546
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0
thmmniii/fbs-runner:v1.27.186105349c1a3
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

28,534
vsphere-cpivsphere-tmm1.6.01 of 1See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.41.1
0.44.0

Open the chart page →

1,344
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

17,877
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

22,202
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

1,067
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell-operator:v0.8.9e43ad91f0684
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

3,951
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.16.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.16.0
0.44.0
0.44.0

Open the chart page →

6,237
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0

Open the chart page →

2,576
gboxgboxVerified publisher1.0.51 of 2See more

gbox gbox 1.0.5

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
gboxproxy/gbox:v1.0.63a9f4a711d5c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

2,521
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

2,556
gorse-enterprisegorse-io0.4.22 of 5See more

gorse-enterprise gorse-io 0.4.2

2 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.36.4
0.44.0
zhenghaoz/gorse-server:0.4.1239c565685b01
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.36.4
0.44.0

Open the chart page →

4,380
phlaregrafana0.5.41 of 1See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/phlare:0.5.1330f990cdad9
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

2,084
kubefedkubefed0.10.01 of 2See more

kubefed kubefed 0.10.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/kubernetes-multicluster/kubefed:v0.10.0c4635c95730e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

2,419
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

3,274
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.12 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

2 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

7,087
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.02 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

2 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

5,941
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.22 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

2 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

6,872
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

4,389
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

3,136
jaeger-collectorromanow-helm-chartsVerified publisher1.5.01 of 1See more

jaeger-collector romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.41.0ff81f0a9f63c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

1,854
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

2,022
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ipfs/kubo:v0.24.0e3de33bd746b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

4,661
agentkube-operatoragentkube-operator0.3.01 of 1See more

agentkube-operator agentkube-operator 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

1,716
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,547
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
prom/prometheus:v2.37.98176adea328e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

25,669
auditorappscodeVerified publisher2023.10.11 of 1See more

auditor appscode 2023.10.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/appscode/auditor:v0.0.1c62c89ee706d
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,673
inbox-agentappscodeVerified publisher2026.6.21 of 2See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

2,114

Container images carrying it

156 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.