StackRadar

CVE-2023-45142

High

Advisory

Published 16 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
152
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttpgolangv0.16.0, v0.20.0, v0.22.0, v0.23.0+15 more0.44.0149
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptracegolangv0.16.0, v0.28.0, v0.29.0, v0.36.4+2 more0.44.023
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgingolangv0.36.3, v0.36.4, v0.40.0, v0.42.00.44.08
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgolangv0.20.0, v0.35.0, v0.36.40.44.05
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmuxgolangv0.22.0, v0.28.00.44.03
OSV records
GHSA-rcjv-mgp8-qvmr
Also known as
GO-2023-2113

Charts affected

152 by stars
ChartLatestAffected imagesRadar Score
kubedb-oneappscodeVerified publisher2023.12.287 of 10See more

kubedb-one appscode 2023.12.28

7 of the 10 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

15,200
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

23,353
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

8,556
graph-nodeastria0.2.21 of 3See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ipfs/kubo:v0.17.0803fac58ba15
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

5,495
cert-manager-webhook-civocert-manager-webhook-civoVerified publisher0.0.0-05b683cb6efdc99135f68af18007954e74f184041 of 1See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
okteto/civo-webhook:0.5.357cd51176538
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

1,271
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

1,752
capsule-rancher-addonclastixVerified publisher0.1.12 of 5See more

capsule-rancher-addon clastix 0.1.1

2 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

7,104
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

25,151
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

19,338
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

16,604
grafana-agentdandydev-chartsVerified publisher0.19.21 of 1See more

grafana-agent dandydev-charts 0.19.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/agent:v0.20.0825c09373d27
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.23.0
0.44.0

Open the chart page →

3,238
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

1,926
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.16.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.16.0
0.44.0
0.44.0

Open the chart page →

6,237
llo-docker-operatoreclipse-aeriosVerified publisher1.0.01 of 2See more

llo-docker-operator eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

2,187
llo-k8seclipse-aeriosVerified publisher1.1.01 of 2See more

llo-k8s eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

2,158
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

2,237
eoapi-supporteoapiVerified publisher0.1.72 of 7See more

eoapi-support eoapi 0.1.7

2 of the 7 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

8,648
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0

Open the chart page →

7,329
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

20,933
stackdriver-metrics-adapterfairwinds-incubator0.3.01 of 1See more

stackdriver-metrics-adapter fairwinds-incubator 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,758
podinfoflagger6.1.41 of 1See more

podinfo flagger 6.1.4

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.28.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.28.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.28.0
0.44.0
0.44.0
0.44.0

Open the chart page →

2,808
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.35.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0
0.44.0
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

5,684
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.36.4
0.44.0

Open the chart page →

4,602
forwardforward1.3.11 of 1See more

forward forward 1.3.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
udhos/forward:1.1.312e120d39fdb
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.42.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0

Open the chart page →

2,212
galoygaloymoney0.34.72 of 24See more

galoy galoymoney 0.34.7

2 of the 24 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
oryd/kratos:v1.0.0d06fc5845f63
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.36.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0
0.44.0
oryd/oathkeeper:v0.40.6e8cb9b79a89c
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.36.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0
0.44.0

Open the chart page →

8,677
galoygaloymoney20.34.72 of 24See more

galoy galoymoney2 0.34.7

2 of the 24 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
oryd/kratos:v1.0.0d06fc5845f63
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.36.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0
0.44.0
oryd/oathkeeper:v0.40.6e8cb9b79a89c
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.36.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0
0.44.0

Open the chart page →

8,677
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,547
gorsegorse-io0.4.22 of 4See more

gorse gorse-io 0.4.2

2 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.36.4
0.44.0
zhenghaoz/gorse-server:0.4.1239c565685b01
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.36.4
0.44.0

Open the chart page →

4,380
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

2,175
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.0
0.44.0

Open the chart page →

24,995
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,547
logging-stackhelm-charts-alexis-carbillet0.1.03 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

3 of the 9 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
grafana/loki:2.8.2b1da1d23037e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
grafana/loki-canary:2.6.1ab2a2569307b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

12,650
cert-managerhomeenterpriseinc1.10.12 of 3See more

cert-manager homeenterpriseinc 1.10.1

2 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.10.164121721c665
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

4,720
cac-systemhuangchengwu-helm-chart0.1.02 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

2 of the 9 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.12.0ec4306b243d9
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

11,186
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

7,862
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

5,713
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0

Open the chart page →

3,507
kiaekiae0.1.63 of 9See more

kiae kiae 0.1.6

3 of the 9 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
grafana/promtail:2.6.1072527b12cdf
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0

Open the chart page →

19,168
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,940
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,940
cluster-componentkubebb0.2.22 of 4See more

cluster-component kubebb 0.2.2

2 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
kubebb/cert-manager-controller:v1.8.020509de4b399
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

8,160
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

13,819
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0

Open the chart page →

3,561
lokikubeblocksVerified publisher5.39.02 of 5See more

loki kubeblocks 5.39.0

2 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.9.26074e01dbe03
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
grafana/loki-canary:2.9.24249db29b992
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

5,841
prometheuskubeblocksVerified publisher15.16.11 of 6See more

prometheus kubeblocks 15.16.1

1 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.39.14748e26f9369
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.0
0.44.0

Open the chart page →

10,302
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0

Open the chart page →

7,157
harborkubesphereVerified publisher1.9.33 of 11See more

harbor kubesphere 1.9.3

3 of the 11 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.5.386bf3031f4a7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.22.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
0.44.0
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0

Open the chart page →

17,798

Container images carrying it

156 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0
7
grafana/loki:2.6.11ee60f980950
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
4
library/docker:20.10-dind:20-dindaf96c680a7e1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0
3
quay.io/devtron/clair:4.3.675fb847ac045
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.16.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.16.0
0.44.0
0.44.0
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
3
grafana/loki:2.5.0f9ef133793af
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
oryd/kratos:v1.0.0d06fc5845f63
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.36.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0
0.44.0
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.36.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0
0.44.0
2
prom/prometheus:v2.37.98176adea328e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.35.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
0.44.0
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
2
zhenghaoz/gorse-master:0.4.12033046b432ec
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.36.4
0.44.0
2
zhenghaoz/gorse-server:0.4.1239c565685b01
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.36.4
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
1
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.43.0
0.44.0
1
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
1
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.36.3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
0.44.0
1
elastic/apm-server:7.17.6c7a1c63257d0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
goharbor/harbor-core:v2.9.06412d679fdc3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
goharbor/harbor-core:v2.5.386bf3031f4a7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
goharbor/harbor-jobservice:v2.9.039435daedd0c
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.22.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
0.44.0
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.22.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
0.44.0
1
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
goharbor/harbor-registryctl:v2.9.0cce272836449
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
grafana/agent:v0.20.0825c09373d27
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.23.0
0.44.0
1
grafana/grafana:10.1.50679e877ba20
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0
1
grafana/grafana:10.1.11b9ca4bbc4a2
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0
1
grafana/grafana:9.5.239c849cebccc
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
1
grafana/loki:2.9.26074e01dbe03
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
1
grafana/loki:2.8.2b1da1d23037e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
1
grafana/loki-canary:2.9.24249db29b992
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
1
grafana/loki-canary:2.6.1ab2a2569307b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1
grafana/phlare:0.5.1330f990cdad9
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
1
grafana/promtail:2.6.1072527b12cdf
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.