StackRadar

CVE-2023-45142

High

Advisory

Published 16 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.014
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
152
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
5 of 5
affected packages

OpenTelemetry-Go Contrib vulnerable to denial of service in otelhttp due to unbound cardinality metrics

Carried by container images the latest versions of 152 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttpgolangv0.16.0, v0.20.0, v0.22.0, v0.23.0+15 more0.44.0149
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptracegolangv0.16.0, v0.28.0, v0.29.0, v0.36.4+2 more0.44.023
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgingolangv0.36.3, v0.36.4, v0.40.0, v0.42.00.44.08
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestfulgolangv0.20.0, v0.35.0, v0.36.40.44.05
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmuxgolangv0.22.0, v0.28.00.44.03
OSV records
GHSA-rcjv-mgp8-qvmr
Also known as
GO-2023-2113

Charts affected

152 by stars
ChartLatestAffected imagesRadar Score
cranekubesphere-stable0.5.21 of 3See more

crane kubesphere-stable 0.5.2

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

8,883
deepflowkubesphere-stable6.2.6063 of 8See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.36.3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
0.44.0
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
grafana/grafana:9.5.239c849cebccc
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0

Open the chart page →

18,316
prometheuslectures-k8sinfra15.8.51 of 6See more

prometheus lectures-k8sinfra 15.8.5

1 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.37.056e7f18e05dd
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

9,092
kltlifecycle-toolkitOfficialVerified publisher0.2.62 of 4See more

klt lifecycle-toolkit 0.2.6

2 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/keptn/metrics-operator:v0.8.2acf22310e9dd
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

4,658
solgateloafoe0.0.121 of 1See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

2,101
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

3,225
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.38.0
0.44.0

Open the chart page →

2,444
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

3,225
vcluster-proloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.35.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
0.44.0
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

5,768
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.103 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

3 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

8,202
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
logiqai/tracing:v1.35.2-lq1-c3e149f6781b8
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

23,613
cert-manager-setupmesosphere-stable0.2.102 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

2 of the 5 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

7,179
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

1,799
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

1,594
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

10,603
jupyterhubmizzoukube0.0.1-set.by.chartpress1 of 7See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

1,883
hcloud-ccm-networksmorremeyer2.0.01 of 1See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0

Open the chart page →

1,739
prometheusnodepulse25.0.01 of 6See more

prometheus nodepulse 25.0.0

1 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0

Open the chart page →

7,740
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,547
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

27,465
cluster-gateway-addon-managerocm-helm-chartsVerified publisher1.4.01 of 1See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
oamdev/cluster-gateway-addon-manager:v1.4.01bcae00bd7b0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,600
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

2,124
opa-nginxopa-nginx0.0.31 of 2See more

opa-nginx opa-nginx 0.0.3

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
openpolicyagent/opa:0.53.16a58dea59933
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0

Open the chart page →

2,167
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,751
opscruiseopenshift0.35.1001 of 11See more

opscruise openshift 0.35.100

1 of the 11 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0

Open the chart page →

8,201
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:23.0.1-dindd9a0fd8bdd15
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0

Open the chart page →

4,237
gitlab-proxyopslevelVerified publisher0.0.81 of 1See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/caddy:2.660fb54d36b4b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

1,872
npre-essentialsphntom0.1.602 of 22See more

npre-essentials phntom 0.1.60

2 of the 22 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.6.11ee60f980950
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
grafana/promtail:2.7.0c16c710f7333
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.0
0.44.0

Open the chart page →

26,840
pixie-operator-helm2-chartpixie0.1.21 of 2See more

pixie-operator-helm2-chart pixie 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinnedf9ea8cef95ac
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

1,753
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.5.0f9ef133793af
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

6,525
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.16.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.16.0
0.44.0
0.44.0

Open the chart page →

6,237
cert-manager-desec-webhookschmitzis0.0.11 of 1See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
su541/cert-manager-desec-webhook:latest371ee33f83c1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

1,770
cert-manager-webhook-bunnyschmitzis0.1.11 of 1See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny:latest125e31c8e85a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0

Open the chart page →

1,498
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.20.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
0.44.0

Open the chart page →

3,462
harborsoftonic1.13.03 of 8See more

harbor softonic 1.13.0

3 of the 8 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.9.06412d679fdc3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
goharbor/harbor-jobservice:v2.9.039435daedd0c
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.22.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
0.44.0
goharbor/harbor-registryctl:v2.9.0cce272836449
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0

Open the chart page →

7,672
sn-platform-slimstreamnative1.11.442 of 6See more

sn-platform-slim streamnative 1.11.44

2 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0

Open the chart page →

10,134
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0

Open the chart page →

10,902
agentssynapse0.1.303 of 9See more

agents synapse 0.1.30

3 of the 9 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.42.07d32a4eddec7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0

Open the chart page →

7,244
cctpsynapse0.3.01 of 4See more

cctp synapse 0.3.0

1 of the 4 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0

Open the chart page →

1,815
promexportersynapse0.1.11 of 1See more

promexporter synapse 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0

Open the chart page →

1,704
sinnersynapse0.1.01 of 6See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.42.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0

Open the chart page →

1,955
ccm-hcloudsyself1.0.111 of 1See more

ccm-hcloud syself 1.0.11

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.13.0ed5ee5f83973
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,706
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.40.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
0.44.0

Open the chart page →

4,212
monitoringthl-chartsVerified publisher0.1.12 of 10See more

monitoring thl-charts 0.1.1

2 of the 10 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
grafana/loki:2.5.0f9ef133793af
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
quay.io/prometheus/prometheus:v2.34.0b37103e03399
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0

Open the chart page →

18,908
tfy-cloudflaredtruefoundryVerified publisher0.5.01 of 2See more

tfy-cloudflared truefoundry 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0

Open the chart page →

2,015
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

4,525
wavefront-hpa-adapterwavefront0.2.101 of 1See more

wavefront-hpa-adapter wavefront 0.2.10

1 of the 1 container images this version deploys carry CVE-2023-45142.

Container imageDigestPackageFixed in
wavefronthq/wavefront-hpa-adapter:0.9.12af5fef9a4768
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0

Open the chart page →

1,685

Container images carrying it

156 by charts deploying them

A fixed version is listed for 5 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0
7
grafana/loki:2.6.11ee60f980950
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
4
library/docker:20.10-dind:20-dindaf96c680a7e1
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.29.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
0.44.0
3
quay.io/devtron/clair:4.3.675fb847ac045
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.16.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.16.0
0.44.0
0.44.0
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.1
0.44.0
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
3
grafana/loki:2.5.0f9ef133793af
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
oryd/kratos:v1.0.0d06fc5845f63
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.36.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0
0.44.0
2
oryd/oathkeeper:v0.40.6e8cb9b79a89c
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.36.4
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.36.4
0.44.0
0.44.0
2
prom/prometheus:v2.37.98176adea328e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.35.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
0.44.0
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
2
zhenghaoz/gorse-master:0.4.12033046b432ec
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.36.4
0.44.0
2
zhenghaoz/gorse-server:0.4.1239c565685b01
go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful@v0.36.4
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
2
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
quay.io/jetstack/cert-manager-webhook:v1.11.06730d96fc382
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
2
quay.io/prometheus/prometheus:v2.36.2df0cd5887887
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
2
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.35.0
0.44.0
2
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.39.0
0.44.0
1
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.43.0
0.44.0
1
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
1
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin@v0.36.3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.32.0
0.44.0
0.44.0
1
elastic/apm-server:7.17.6c7a1c63257d0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.20.0
0.44.0
1
goharbor/harbor-core:v2.9.06412d679fdc3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
goharbor/harbor-core:v2.5.386bf3031f4a7
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
goharbor/harbor-jobservice:v2.9.039435daedd0c
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.22.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
0.44.0
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux@v0.22.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
0.44.0
1
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
goharbor/harbor-registryctl:v2.9.0cce272836449
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.22.0
0.44.0
1
grafana/agent:v0.20.0825c09373d27
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.23.0
0.44.0
1
grafana/grafana:10.1.50679e877ba20
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0
1
grafana/grafana:10.1.11b9ca4bbc4a2
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.42.0
0.44.0
0.44.0
1
grafana/grafana:9.5.239c849cebccc
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace@v0.37.0
0.44.0
1
grafana/loki:2.9.26074e01dbe03
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
1
grafana/loki:2.8.2b1da1d23037e
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
1
grafana/loki-canary:2.9.24249db29b992
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.40.0
0.44.0
1
grafana/loki-canary:2.6.1ab2a2569307b
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1
grafana/phlare:0.5.1330f990cdad9
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.37.0
0.44.0
1
grafana/promtail:2.6.1072527b12cdf
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp@v0.29.0
0.44.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.