CVE-2023-45288

High

Advisory

Published 3 Apr 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.920; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,156; of 17,790 indexed, latest versions
Container images: 2,573; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 2,156 of 17,790 indexed charts deploy, on 2,573 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.2.0-3.el8_9	1
golang-1.19deb	1.19.8-2	no fix listed	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+189 more	0.23.0	1,908
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+123 more	1.21.9	2,481

OSV records: DEBIAN-CVE-2023-45288 RHSA-2024:2699 GHSA-4v7x-pqxf-cx7m GO-2024-2687
Also known as: BIT-golang-2023-45288, RHSA-2024:4546

Charts affected

2,156 by stars

Chart

Latest

Affected images

Radar Score

wordpressdevops

0.12.0

1 of 4 See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.3	0abf60f81588	stdlib@go1.16.7	1.21.9

Open the chart page →

13,039

kyvernodevopstales

2.5.1

2 of 2 See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.23.0 1.21.9
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.23.0 1.21.9

Open the chart page →

4,735

pushproxdevopstales

0.1.6

2 of 2 See more

pushprox devopstales 0.1.6

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
rancher/pushprox-client :v0.1.0-rancher2-client	a41cd716c412	stdlib@go1.16.4	1.21.9
rancher/pushprox-proxy :v0.1.0-rancher2-proxy	3126395b966c	stdlib@go1.16.4	1.21.9

Open the chart page →

3,754

devopsweeklydevopsweekly

2.1.0

1 of 1 See more

devopsweekly devopsweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/devopsweekly :v2.1.0	46625567fb60	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.17.13	0.23.0 1.21.9

Open the chart page →

1,217

lxd8sdevplayer0

0.5.1

2 of 2 See more

lxd8s devplayer0 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.23.0 1.21.9
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.17	0.23.0 1.21.9

Open the chart page →

5,431

octolxddevplayer0

0.1.1

1 of 1 See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	stdlib@go1.16.6	1.21.9

Open the chart page →

2,525

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.23.0 1.21.9
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.9	0.23.0 1.21.9

Open the chart page →

10,484

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.17.13	0.23.0 1.21.9

Open the chart page →

13,011

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.23.0 1.21.9

Open the chart page →

1,587

calertdevtron

0.0.1

1 of 1 See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.21.9

Open the chart page →

4,690

devtron-enterprisedevtron

48.0.0

14 of 28 See more

devtron-enterprise devtron 48.0.0

14 of the 28 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.23.0 1.21.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.21.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.23.0 1.21.9
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.15	0.23.0 1.21.9
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.23.0 1.21.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.23.0 1.21.9
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.21.9
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.19.2	0.23.0 1.21.9
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.21.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.21.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.23.0 1.21.9
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.21.9
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	stdlib@go1.21.5	1.21.9

Open the chart page →

68,695

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.23.0 1.21.9
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.23.0 1.21.9

Open the chart page →

5,055

devtron-logs-dumpdevtron

0.1.0

1 of 1 See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.23.0 1.21.9

Open the chart page →

4,972

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.23.0 1.21.9

Open the chart page →

11,959

discord-alertmanagerdevtron

0.10.0

1 of 1 See more

discord-alertmanager devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.21.9

Open the chart page →

951

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

3 of 6 See more

kube-prometheus-stack devtron 19.3.0

3 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.23.0 1.21.9
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.23.0 1.21.9
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.23.0 1.21.9

Open the chart page →

8,659

migration-incluster-cddevtron

0.10.0

1 of 1 See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.21.9

Open the chart page →

3,908

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.16.10	0.23.0 1.21.9

Open the chart page →

2,441

winter-soldierdevtron

0.10.6

1 of 1 See more

winter-soldier devtron 0.10.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

1,176

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

1,514

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.23.0 1.21.9
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.9	0.23.0 1.21.9

Open the chart page →

10,484

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.17.13	0.23.0 1.21.9

Open the chart page →

13,011

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.23.0 1.21.9

Open the chart page →

1,587

calertdevtron-labs

0.0.1

1 of 1 See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.21.9

Open the chart page →

4,690

calicodevtron-labs

0.1.1

4 of 4 See more

calico devtron-labs 0.1.1

4 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.23.0 1.21.9
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.23.0 1.21.9
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.23.0 1.21.9
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.21.9

Open the chart page →

10,094

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.6	0.23.0 1.21.9

Open the chart page →

6,237

devtron-enterprisedevtron-labs

48.0.0

14 of 28 See more

devtron-enterprise devtron-labs 48.0.0

14 of the 28 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.23.0 1.21.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.21.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.23.0 1.21.9
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.15	0.23.0 1.21.9
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.23.0 1.21.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.23.0 1.21.9
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.21.9
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.19.2	0.23.0 1.21.9
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.21.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.21.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.23.0 1.21.9
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.21.9
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	stdlib@go1.21.5	1.21.9

Open the chart page →

68,695

devtron-in-clustercddevtron-labs

0.10.2

2 of 2 See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.23.0 1.21.9
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.23.0 1.21.9

Open the chart page →

5,055

devtron-logs-dumpdevtron-labs

0.1.0

1 of 1 See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.23.0 1.21.9

Open the chart page →

4,972

devtron-operatordevtron-labs

0.23.3

7 of 11 See more

devtron-operator devtron-labs 0.23.3

7 of the 11 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.23.0 1.21.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.21.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.23.0 1.21.9
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.23.0 1.21.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.23.0 1.21.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.21.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.23.0 1.21.9

Open the chart page →

33,180

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.23.0 1.21.9

Open the chart page →

11,959

jcmhproxy-ingressdevtron-labs

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

1,379

kube-prometheus-stackdevtron-labs

19.3.0

3 of 6 See more

kube-prometheus-stack devtron-labs 19.3.0

3 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.23.0 1.21.9
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.23.0 1.21.9
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.23.0 1.21.9

Open the chart page →

8,659

migration-incluster-cddevtron-labs

0.10.0

1 of 1 See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.21.9

Open the chart page →

3,908

securitydevtron-labs

0.2.2

1 of 1 See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.16.10	0.23.0 1.21.9

Open the chart page →

2,441

winter-soldierdevtron-labs

0.10.6

1 of 1 See more

winter-soldier devtron-labs 0.10.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

1,176

zincdevtron-labs

0.1.2

1 of 1 See more

zinc devtron-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

1,514

eoloplannerdfa-amm-eoloplanner

0.1.0

1 of 7 See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.21.9

Open the chart page →

27,620

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/net@v0.20.0 stdlib@go1.20.6	0.23.0 1.21.9

Open the chart page →

19,399

digital-mobiusdigital-mobius

0.1.4

1 of 1 See more

digital-mobius digital-mobius 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
qoveryrd/digital-mobius :0.1.4	b30a9398a83c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.5	0.23.0 1.21.9

Open the chart page →

2,287

directusdirectus

0.9.10

1 of 4 See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
directus/directus :11.1.0	e3c8bb975350	stdlib@go1.20.7	1.21.9

Open the chart page →

4,552

adventurelogdjjudas21

0.1.1

1 of 3 See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.21.9

Open the chart page →

7,501

hammonddjjudas21

0.3.9

1 of 1 See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.23.0 1.21.9

Open the chart page →

1,807

smokepingdjjudas21

0.1.3

1 of 1 See more

smokeping djjudas21 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
linuxserver/smokeping :2.8.2	b7f906899cd3	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.23.0

Open the chart page →

2,054

spoolmandjjudas21

0.1.8

1 of 1 See more

spoolman djjudas21 0.1.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/donkie/spoolman :0.24.0	42135965c42d	stdlib@go1.19.8	1.21.9

Open the chart page →

1,850

uptime-kumadjjudas21

1.5.18

1 of 1 See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/net@v0.19.0 stdlib@go1.19.6	0.23.0 1.21.9

Open the chart page →

4,224

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

2 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	golang.org/x/net@v0.0.0-20221017152216-f25eb7ecb193 stdlib@go1.19.2	0.23.0 1.21.9
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.23.0 1.21.9

Open the chart page →

21,744

ssl-exporterdnationcloud

1.2.1

1 of 1 See more

ssl-exporter dnationcloud 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

1,632

snmp-exporterdniel

0.0.2

1 of 1 See more

snmp-exporter dniel 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.15.8	0.23.0 1.21.9

Open the chart page →

2,126

Container images carrying it

2,573 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
layer5/meshery-nginx-sm :stable-latest	b3864dfd47ad	golang.org/x/net@v0.9.0 stdlib@go1.19.11	0.23.0 1.21.9	1
layer5/meshery-nsm :stable-latest	ebd6a8faf21f	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.12	0.23.0 1.21.9	1
layer5/meshery-osm :stable-latest	ec898e5786c6	golang.org/x/net@v0.5.0 stdlib@go1.19.8	0.23.0 1.21.9	1
layer5/meshery-traefik-mesh :stable-latest	797fa7a03570	golang.org/x/net@v0.9.0 stdlib@go1.19.11	0.23.0 1.21.9	1
library/caddy :2.6	60fb54d36b4b	golang.org/x/net@v0.7.0 stdlib@go1.20	0.23.0 1.21.9	1
library/caddy :2.2.0-alpine	7367adca165f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.2	0.23.0 1.21.9	1
library/caddy :2.4.5	874405536b3e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17	0.23.0 1.21.9	1
library/caddy :2.4.2-alpine	fbc51bcf1ab0	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.5	0.23.0 1.21.9	1
library/chronograf :1.9.4	96d8a3f65a4f	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.4	0.23.0 1.21.9	1
library/docker :24.0.2-dind	1d148deae16a	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.23.0 1.21.9	1
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.7	0.23.0 1.21.9	1
library/docker :23.0.6-dind	afa5d5134900	golang.org/x/net@v0.8.0 stdlib@go1.19.9	0.23.0 1.21.9	1
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.23.0 1.21.9	1
library/ghost :6.37.0	1ef2e532ca4d	stdlib@go1.20.12	1.21.9	1
library/ghost :5.79.0	83f7bf209844	stdlib@go1.18.2	1.21.9	1
library/influxdb :2.7.4-alpine	a10d46445d68	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.23.0 1.21.9	1
library/influxdb :2.0.8	ba10ac9ba17a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.5	0.23.0 1.21.9	1
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	golang.org/x/net@v0.0.0-20220401154927-543a649e0bdd stdlib@go1.18.3	0.23.0 1.21.9	1
library/kapacitor :1.6.3	7232f6388a4d	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826 stdlib@go1.17.2	0.23.0 1.21.9	1
library/logstash :7.17.8	17a4f64e9cf5	stdlib@go1.19.3	1.21.9	1
library/mariadb :10.7.3	07e06f2e7ae9	stdlib@go1.16.7	1.21.9	1
library/mariadb :10.11.2	1c33370a599c	stdlib@go1.16.7	1.21.9	1
library/mariadb :10.4	22edfe1c7834	stdlib@go1.18.2	1.21.9	1
library/mariadb :10.8.2-focal	490f01279be1	stdlib@go1.16.7	1.21.9	1
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.21.9	1
library/mariadb :10.6.21	8a16204dc96c	stdlib@go1.18.2	1.21.9	1
library/mariadb :10.7	9a48ac9f196f	stdlib@go1.16.7	1.21.9	1
library/mariadb :10.10.2	bfc25a68e113	stdlib@go1.16.7	1.21.9	1
library/mariadb :10.6.15	e22328f4d714	stdlib@go1.16.7	1.21.9	1
library/mariadb :10.9.4	fbb8456ebdb1	stdlib@go1.16.7	1.21.9	1
library/mariadb :11.7.2	fcc7fcd7114a	stdlib@go1.18.2	1.21.9	1
library/mongo :7.0.14	0032d2ca20db	stdlib@go1.18.2	1.21.9	1
library/mongo :4.4.13	05678ae4e5e1	stdlib@go1.16.7	1.21.9	1
library/mongo :4.4-bionic	3d0e6df9fd5b	stdlib@go1.16.3	1.21.9	1
library/mongo :5.0.14-focal	50cae5081ab4	stdlib@go1.17.10	1.21.9	1
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.21.9	1
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.21.9	1
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.21.9	1
library/mongo :5.0.21	7c81758cb295	stdlib@go1.19.12	1.21.9	1
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.18.2	1.21.9	1
library/mongo :4.4.18	d23ec07162ca	stdlib@go1.17.10	1.21.9	1
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.18.2	1.21.9	1
library/mysql :8.4.3	106d5197fd8e	stdlib@go1.18.2	1.21.9	1
library/mysql :8.0.30	3c1aab708f6e	stdlib@go1.16.7	1.21.9	1
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.21.9	1
library/mysql :8.0.41	bf577825b52a	stdlib@go1.18.2	1.21.9	1
library/mysql :8.0.39	ccb8f749bb5e	stdlib@go1.18.2	1.21.9	1
library/mysql :8.0.40	d58ac93387f6	stdlib@go1.18.2	1.21.9	1
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.21.9	1
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.21.9	1