CVE-2023-45288

High

Advisory

Published 3 Apr 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.920; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,155; of 17,787 indexed, latest versions
Container images: 2,572; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 2,155 of 17,787 indexed charts deploy, on 2,572 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.2.0-3.el8_9	1
golang-1.19deb	1.19.8-2	no fix listed	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+189 more	0.23.0	1,906
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+123 more	1.21.9	2,480

OSV records: DEBIAN-CVE-2023-45288 RHSA-2024:2699 GHSA-4v7x-pqxf-cx7m GO-2024-2687
Also known as: BIT-golang-2023-45288, RHSA-2024:4546

Charts affected

2,155 by stars

Chart

Latest

Affected images

Radar Score

kubeservice-cosign-webhookkubservice-charts

1.1.1

5 of 5 See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

5 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dongjiang1989/cosign-webhook :v1.1.0	2a3ead6a55dc	golang.org/x/net@v0.11.0 stdlib@go1.19.12	0.23.0 1.21.9
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9

Open the chart page →

7,087

kubeservice-cpupools-controllerkubservice-charts

0.1.1

2 of 2 See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dongjiang1989/cpusets-controller :v1.1.1	dc5bd483874c	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.23.0 1.21.9
dongjiang1989/cpusets-device-plugin :v1.1.1	923085c65123	golang.org/x/net@v0.10.0 stdlib@go1.19.10	0.23.0 1.21.9

Open the chart page →

3,122

kubeservice-custom-limitrangekubservice-charts

1.3.0

4 of 5 See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

4 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9

Open the chart page →

5,941

kubeservice-ebpf-exporterkubservice-charts

1.2.1

1 of 1 See more

kubeservice-ebpf-exporter kubservice-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/cloudflare/ebpf_exporter :v2.3.0	75370b2ec2bb	stdlib@go1.21.5	1.21.9

Open the chart page →

545

kubeservice-namespace-node-affinitykubservice-charts

1.1.2

5 of 5 See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

5 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dongjiang1989/ns-node-affinity :latest	451f7823723c	golang.org/x/net@v0.7.0 stdlib@go1.18.5	0.23.0 1.21.9
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0 stdlib@go1.20.8	0.23.0 1.21.9

Open the chart page →

6,872

kubeservice-scheduler-pluskubservice-charts

0.2.1

1 of 2 See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dongjiang1989/crane-scheduler-controller :main	f0055c05dbee	golang.org/x/net@v0.7.0 stdlib@go1.19.9	0.23.0 1.21.9

Open the chart page →

1,803

kube-fencingkvaps

2.4.1

2 of 2 See more

kube-fencing kvaps 2.4.1

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/kube-fencing-controller :v2.4.0	313edfec2fca	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.23.0 1.21.9
ghcr.io/kvaps/kube-fencing-switcher :v2.4.0	f8c378e63b78	stdlib@go1.18.8	1.21.9

Open the chart page →

2,538

linstorkvaps

1.14.0

4 of 11 See more

linstor kvaps 1.14.0

4 of the 11 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/kvaps/linstor-controller :v1.14.0	00ce11c31087	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.15.14	0.23.0 1.21.9
ghcr.io/kvaps/linstor-csi :v1.14.0	087618d16b83	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b stdlib@go1.15.14	0.23.0 1.21.9
ghcr.io/kvaps/linstor-ha-controller :v1.14.0	8e7b44bbd123	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.14	0.23.0 1.21.9
ghcr.io/kvaps/linstor-stork :v1.14.0	5e409a6332b4	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.14	0.23.0 1.21.9

Open the chart page →

15,551

chibisafel4g

0.1.1

1 of 3 See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
chibisafe/chibisafe-server :latest	3da4fcbc1a18	stdlib@go1.20.12	1.21.9

Open the chart page →

5,657

lagoon-remotelagoon-charts

0.106.0

1 of 1 See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	stdlib@go1.21.3	1.21.9

Open the chart page →

2,113

landelijketabellencataloguslandelijketabellencatalogus

1.0.0

1 of 3 See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php :latest	26d91dcbba56	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.23.0 1.21.9

Open the chart page →

7,510

lgtm-stacklgtm-stack

0.1.3

2 of 8 See more

lgtm-stack lgtm-stack 0.1.3

2 of the 8 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2024-01-16T16-06-34Z	591b097ea2d4	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.23.0 1.21.9
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.23.0 1.21.9

Open the chart page →

5,614

kube-iptables-tailerlifen-charts

0.2.3

1 of 1 See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.13.8	0.23.0 1.21.9

Open the chart page →

4,456

linkerd-jaegerlinkerd2-edge

30.14.11-edge

2 of 4 See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

2 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.6	0.23.0 1.21.9
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.23.0 1.21.9

Open the chart page →

4,389

litlyxlitlyx

0.2.0

1 of 5 See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.18.2	1.21.9

Open the chart page →

7,915

jspolicyloft

0.2.2

1 of 1 See more

jspolicy loft 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
loftsh/jspolicy :0.2.2	25deb9bd2683	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.13	0.23.0 1.21.9

Open the chart page →

2,309

vcluster-eksloft

0.0.0-ci.3

3 of 4 See more

vcluster-eks loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
public.ecr.aws/eks-distro/etcd-io/etcd :v3.5.6-eks-1-24-7	efa6dee17ed2	golang.org/x/net@v0.0.0-20211112202133-69e39bad7dc2 stdlib@go1.16.15	0.23.0 1.21.9
public.ecr.aws/eks-distro/kubernetes/kube-apiserver :v1.24.9-eks-1-24-7	72e06b605692	stdlib@go1.18.9	1.21.9
public.ecr.aws/eks-distro/kubernetes/kube-controller-manager :v1.24.9-eks-1-24-7	eaea8c230432	stdlib@go1.18.9	1.21.9

Open the chart page →

3,304

vcluster-k0sloft

0.0.0-ci.3

1 of 2 See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.23.0 1.21.9

Open the chart page →

3,138

log2rbac-operatorlog2rbac-operator

0.0.5

1 of 1 See more

log2rbac-operator log2rbac-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
jkremser/log2rbac :v0.0.5	e35cf56ef183	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.23.0 1.21.9

Open the chart page →

1,938

logclilogcli

0.1.0

1 of 1 See more

logcli logcli 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/net@v0.0.0-20210505214959-0714010a04ed stdlib@go1.16.2	0.23.0 1.21.9

Open the chart page →

2,947

voice-biometricslumenvox

2.0.1

8 of 26 See more

voice-biometrics lumenvox 2.0.1

8 of the 26 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.21.9
library/traefik :v2.5	7d5a6ae66572	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.6	0.23.0 1.21.9
lumenvox/cloud-init-tools :2.0.0	7ff037a71c50	stdlib@go1.17.3	1.21.9
lumenvox/cloud-license :2.0.0	9a69862e1248	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.3	0.23.0 1.21.9
prom/pushgateway :v1.3.1	8305a33fb80a	stdlib@go1.15.6	1.21.9
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.23.0 1.21.9
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b stdlib@go1.15.8	0.23.0 1.21.9
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.16.2	0.23.0 1.21.9

Open the chart page →

71,216

magentomagento

3.2.3

1 of 12 See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mariadb :10.4	22edfe1c7834	stdlib@go1.18.2	1.21.9

Open the chart page →

13,582

goblackholemain

0.0.4

1 of 1 See more

goblackhole main 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bedag/goblackhole :0.2.0	447a88598f4c	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.6	0.23.0 1.21.9

Open the chart page →

1,972

plane-enterprisemakeplane

3.7.2

1 of 13 See more

plane-enterprise makeplane 3.7.2

1 of the 13 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	stdlib@go1.18.2	1.21.9

Open the chart page →

4,942

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.13.10	0.23.0 1.21.9

Open the chart page →

3,606

traefik-forward-authmesosphere

0.3.10

2 of 2 See more

traefik-forward-auth mesosphere 0.3.10

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.5.1	5efa21defcbc	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.11	0.23.0 1.21.9
mesosphere/traefik-forward-auth :3.1.0	5456581d7b76	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.14.15	0.23.0 1.21.9

Open the chart page →

5,308

subspacemglants

0.1.0

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14.6	0.23.0 1.21.9

Open the chart page →

3,254

librenmsmidokura-community

0.3.2

1 of 6 See more

librenms midokura-community 0.3.2

1 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
librenms/librenms :22.4.1	4f1f3d667cc7	stdlib@go1.16.12	1.21.9

Open the chart page →

8,967

chartmuseummike7515

1.2.0

1 of 1 See more

chartmuseum mike7515 1.2.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.15.0	c298183a5208	golang.org/x/net@v0.0.0-20220531201128-c960675eff93 stdlib@go1.17.8	0.23.0 1.21.9

Open the chart page →

3,168

miniomilvus

8.0.17

1 of 1 See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.23.0 1.21.9

Open the chart page →

6,915

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.23.0 1.21.9

Open the chart page →

13,763

podsyncmy0n

1.5.4

1 of 2 See more

podsync my0n 1.5.4

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.19.3	0.23.0 1.21.9

Open the chart page →

2,059

maddymya

22.4.12

1 of 2 See more

maddy mya 22.4.12

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.7.1	6ab538e2f28b	golang.org/x/net@v0.20.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

1,412

registrymya

22.4.11

1 of 1 See more

registry mya 22.4.11

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
distribution/distribution :2.8.3	f84b2078238f	stdlib@go1.20.8	1.21.9

Open the chart page →

899

satisfactorynaj98

1.1.1

1 of 1 See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.1	199be1064b18	stdlib@go1.18.1	1.21.9

Open the chart page →

3,729

nats-account-servernats

0.8.1

1 of 1 See more

nats-account-server nats 0.8.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
natsio/nats-account-server :1.0.0	a3381560aab6	stdlib@go1.16.6	1.21.9

Open the chart page →

2,634

clowder2ncsa

1.9.7

6 of 12 See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	golang.org/x/net@v0.21.0 stdlib@go1.21.8	0.23.0 1.21.9
bitnamilegacy/keycloak :20.0.5	cb04e49e6eb1	stdlib@go1.18.2	1.21.9
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	golang.org/x/net@v0.19.0 stdlib@go1.20.13	0.23.0 1.21.9
bitnamilegacy/mongodb :5.0.10	3bb1deeaf9d0	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.4	0.23.0 1.21.9
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.23.0 1.21.9
bitnamilegacy/rabbitmq :3.10.8	8f7161d8ce19	stdlib@go1.16.7	1.21.9

Open the chart page →

37,441

ngrok-operatorngrok-operator

1.1.0

1 of 2 See more

ngrok-operator ngrok-operator 1.1.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/ngrok-operator :v1.3.0	7cf2ae3fb1fb	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.15	0.23.0 1.21.9

Open the chart page →

1,896

node-exporternode-exporter

0.1.10

1 of 1 See more

node-exporter node-exporter 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
prom/node-exporter :v1.6.0	d2e48098c364	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.23.0 1.21.9

Open the chart page →

1,229

helm-composenousefreak

0.1.3

1 of 2 See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.21.9

Open the chart page →

14,324

oadaoada

5.0.5

1 of 11 See more

oada oada 5.0.5

1 of the 11 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.23.0 1.21.9

Open the chart page →

13,319

transfer.shobeone

1.0.5

1 of 1 See more

transfer.sh obeone 1.0.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dutchcoders/transfer.sh :v1.6.1-noroot	8db9ade72a0d	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.23.0 1.21.9

Open the chart page →

1,171

open5gs-webuiopen5gs-webui

2.3.1

1 of 2 See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :4.4.1	4fe2bd7b4036	stdlib@go1.15.1	1.21.9

Open the chart page →

5,300

kruiseopenkruise

1.9.1

1 of 2 See more

kruise openkruise 1.9.1

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openkruise/kruise-helm-hook :v0.1.0	edc7cf9428fd	stdlib@go1.20.14	1.21.9

Open the chart page →

1,495

openvaultopenvault

0.8.1

1 of 2 See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/ov-frontend :v1.1.0	bfc3118f6565	stdlib@go1.20.4	1.21.9

Open the chart page →

6,899

opikopik

2.2.61

2 of 13 See more

opik opik 2.2.61

2 of the 13 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :8.4.2	ac80b6e09e5b	stdlib@go1.18.2	1.21.9
library/zookeeper :3.9.4	dfa9ba46d14b	stdlib@go1.18.1	1.21.9

Open the chart page →

14,422

kubernetes-dashboard-proxyosc

0.7.2

3 of 4 See more

kubernetes-dashboard-proxy osc 0.7.2

3 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
kubernetesui/dashboard :v2.7.0	2e500d29e9d5	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19	0.23.0 1.21.9
kubernetesui/metrics-scraper :v1.0.8	76049887f07a	golang.org/x/net@v0.0.0-20220524220425-1d687d428aca stdlib@go1.18.2	0.23.0 1.21.9
quay.io/oauth2-proxy/oauth2-proxy :v7.1.3	ecd26b74a01f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.16	0.23.0 1.21.9

Open the chart page →

6,005

hlf-caowkin

2.1.0

1 of 2 See more

hlf-ca owkin 2.1.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.1	c7f3422ec1d5	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.15.7	0.23.0 1.21.9

Open the chart page →

3,424

hlf-ordowkin

3.1.0

1 of 1 See more

hlf-ord owkin 3.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.2.1	37294e05209b	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.23.0 1.21.9

Open the chart page →

3,350

hlf-peerowkin

5.1.0

1 of 1 See more

hlf-peer owkin 5.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
hyperledger/fabric-peer :2.2.1	bf4995c86af6	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859 stdlib@go1.14.4	0.23.0 1.21.9

Open the chart page →

3,688

Container images carrying it

2,572 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
grafana/agent :v0.40.3	f6cbec9409be	golang.org/x/net@v0.20.0 stdlib@go1.22.1	0.23.0 1.21.9	1
grafana/agent-operator :v0.34.1	045c9125634c	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.23.0 1.21.9	1
grafana/beyla :1.3.3	36d07f8d276e	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.23.0 1.21.9	1
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.23.0 1.21.9	1
grafana/grafana :10.1.5	0679e877ba20	golang.org/x/net@v0.12.0 stdlib@go1.20.10	0.23.0 1.21.9	1
grafana/grafana :7.5.6	09bb407e26ab	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.1	0.23.0 1.21.9	1
grafana/grafana :7.3.3	15b977f5207d	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.23.0 1.21.9	1
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/net@v0.4.0 stdlib@go1.20.1	0.23.0 1.21.9	1
grafana/grafana :10.1.1	1b9ca4bbc4a2	golang.org/x/net@v0.12.0 stdlib@go1.20.8	0.23.0 1.21.9	1
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.23.0 1.21.9	1
grafana/grafana :8.0.3	696823fbc561	golang.org/x/net@v0.0.0-20210521195947-fe42d452be8f stdlib@go1.16.1	0.23.0 1.21.9	1
grafana/grafana :10.2.3	6b5b37eb35bb	golang.org/x/net@v0.19.0 stdlib@go1.21.3	0.23.0 1.21.9	1
grafana/grafana :7.3.4	6d42886b3ebe	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.5	0.23.0 1.21.9	1
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/net@v0.0.0-20200813134508-3edf25e44fcc stdlib@go1.15.1	0.23.0 1.21.9	1
grafana/grafana :9.4.3	76dcf36e7d2a	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.23.0 1.21.9	1
grafana/grafana :10.3.3	8640e5038e83	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.23.0 1.21.9	1
grafana/grafana :9.1.1	9746858c20e6	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.17.12	0.23.0 1.21.9	1
grafana/grafana :9.0.1	a738d0744784	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.11	0.23.0 1.21.9	1
grafana/grafana :6.5.1	befcd84da2c1	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.23.0 1.21.9	1
grafana/grafana :8.3.5	cd7cb4345aa7	golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f stdlib@go1.17.6	0.23.0 1.21.9	1
grafana/grafana :8.3.4	cf81d2c753c8	golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f stdlib@go1.17.6	0.23.0 1.21.9	1
grafana/grafana :7.4.5	d322192ed2fa	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.6	0.23.0 1.21.9	1
grafana/grafana :8.5.3	ecc1b80b8ca2	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.23.0 1.21.9	1
grafana/grafana :10.4.0	f9811e4e687f	golang.org/x/net@v0.20.0 stdlib@go1.21.8	0.23.0 1.21.9	1
grafana/kubernetes-diff-logger :0.0.5	98f6d1cd1e25	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.23.0 1.21.9	1
grafana/logcli :main-c90366d-amd64	3d85bb66e39b	golang.org/x/net@v0.0.0-20210505214959-0714010a04ed stdlib@go1.16.2	0.23.0 1.21.9	1
grafana/loki :2.9.2	6074e01dbe03	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.23.0 1.21.9	1
grafana/loki :2.9.6	6ca6e2cd3b6f	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.23.0 1.21.9	1
grafana/loki :3.0.0	757b5fadf816	golang.org/x/net@v0.22.0	0.23.0	1
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.23.0 1.21.9	1
grafana/loki :2.8.2	b1da1d23037e	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.23.0 1.21.9	1
grafana/loki :2.4.2	b3af8ead67d7	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3 stdlib@go1.17.2	0.23.0 1.21.9	1
grafana/loki-canary :3.0.0	28d7c00588aa	golang.org/x/net@v0.22.0	0.23.0	1
grafana/loki-canary :2.9.2	4249db29b992	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.23.0 1.21.9	1
grafana/loki-canary :2.9.6	549a40203e97	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.23.0 1.21.9	1
grafana/loki-canary :2.6.1	ab2a2569307b	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.23.0 1.21.9	1
grafana/mimir :2.0.0	80c1a8eb24dd	golang.org/x/net@v0.0.0-20220105145211-5b0dc2dfae98 stdlib@go1.17.8	0.23.0 1.21.9	1
grafana/phlare :0.5.1	330f990cdad9	golang.org/x/net@v0.5.0 stdlib@go1.19.6	0.23.0 1.21.9	1
grafana/promtail :2.6.1	072527b12cdf	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.23.0 1.21.9	1
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.23.0 1.21.9	1
grafana/promtail :2.7.0	c16c710f7333	golang.org/x/net@v0.0.0-20220920203100-d0c6ba3f52d9 stdlib@go1.19.2	0.23.0 1.21.9	1
grafana/promtail :3.0.0	d3de3da9431c	golang.org/x/net@v0.22.0	0.23.0	1
grafana/rollout-operator :v0.14.0	3409edfb45c7	golang.org/x/net@v0.21.0 stdlib@go1.22.1	0.23.0 1.21.9	1
grafana/snyk_exporter :v1.4.1	d3c9093401ca	stdlib@go1.21.0	1.21.9	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.11	0.23.0 1.21.9	1
groundnuty/k8s-wait-for :v1.6	84edcf796267	stdlib@go1.18.1	1.21.9	1
groundnuty/k8s-wait-for :no-root-v2.0	a26d3d3f6e1c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.23.0 1.21.9	1
grpl/grapple-cli :0.2.127	c00aafee6629	stdlib@go1.18.10	1.21.9	1
gutmensch/podnat-controller :0.5.2	566979793fc4	golang.org/x/net@v0.4.0	0.23.0	1
haproxytech/haproxy-alpine :2.6.6	14e4afa90dfd	golang.org/x/net@v0.2.0 stdlib@go1.19.3	0.23.0 1.21.9	1