CVE-2023-45288

High

Advisory

Published 3 Apr 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.920; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,154; of 17,803 indexed, latest versions
Container images: 2,571; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 2,154 of 17,803 indexed charts deploy, on 2,571 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.2.0-3.el8_9	1
golang-1.19deb	1.19.8-2	no fix listed	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+189 more	0.23.0	1,907
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+123 more	1.21.9	2,479

OSV records: DEBIAN-CVE-2023-45288 RHSA-2024:2699 GHSA-4v7x-pqxf-cx7m GO-2024-2687
Also known as: BIT-golang-2023-45288, RHSA-2024:4546

Charts affected

2,154 by stars

Chart

Latest

Affected images

Radar Score

lensoci-ai-incubations

0.1.14

4 of 16 See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0 stdlib@go1.20.4	0.23.0 1.21.9
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9

Open the chart page →

17,161

cluster-gateway-addon-managerocm-helm-charts

1.4.0

1 of 1 See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.23.0 1.21.9

Open the chart page →

1,607

multicluster-meshocm-helm-charts

0.0.2

1 of 1 See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

2,131

my-bloody-jenkinsodavid

0.1.218

1 of 1 See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0 stdlib@go1.18.2	0.23.0 1.21.9

Open the chart page →

5,826

aspromokgolove

2.0.0

1 of 1 See more

asprom okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.21.9

Open the chart page →

1,869

hive-metastoreolehrgf

0.1.0

1 of 1 See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.4	0.23.0 1.21.9

Open the chart page →

8,548

exposecontrollerolli-ai

1.0.5

1 of 1 See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

2,861

k8s-replicatorolli-ai

1.3.0

1 of 1 See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.2	0.23.0 1.21.9

Open the chart page →

2,825

apicurioone-acre-fund

2.3.0

1 of 5 See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.21.9

Open the chart page →

18,668

nocodbone-acre-fund

0.4.6

1 of 3 See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.258.0	6779a4ddedf2	golang.org/x/net@v0.19.0	0.23.0

Open the chart page →

4,228

one-green-coreone-green-core

0.0.7

3 of 8 See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.3	ecc1b80b8ca2	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.23.0 1.21.9
library/influxdb :2.0.8	ba10ac9ba17a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.5	0.23.0 1.21.9
library/telegraf :1.20.4	28e98eece020	golang.org/x/net@v0.0.0-20211005215030-d2e5035098b3 stdlib@go1.17.3	0.23.0 1.21.9

Open the chart page →

9,582

opa-nginxopa-nginx

0.0.3

2 of 2 See more

opa-nginx opa-nginx 0.0.3

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openpolicyagent/opa :0.53.1	6a58dea59933	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.23.0 1.21.9
richardjennings/opa-nginx :0.0.3	66424aca125d	stdlib@go1.20.5	1.21.9

Open the chart page →

2,176

basic-appopen-charts

1.0.0

1 of 1 See more

basic-app open-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ovhplatform/what-is-my-pod :1.0.1	6d4d455e9aba	stdlib@go1.16.14	1.21.9

Open the chart page →

1,597

anchore-engineopencloudcx

1.13.0

1 of 2 See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

18,032

bbsimopencord

4.8.11

1 of 1 See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.13.8	0.23.0 1.21.9

Open the chart page →

3,915

bbsim-sadis-serveropencord

0.3.5

1 of 1 See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

3,729

nem-monitoringopencord

1.3.22

1 of 9 See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.23.0 1.21.9

Open the chart page →

4,619

volthaopencord

2.14.0

2 of 2 See more

voltha opencord 2.14.0

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/voltha-ofagent-go :2.1.6	8feb9ef89e97	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

3,825

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.5	0.23.0 1.21.9
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

41,148

voltha-stackopencord

2.14.0

2 of 4 See more

voltha-stack opencord 2.14.0

2 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/voltha-ofagent-go :2.1.6	8feb9ef89e97	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

5,567

federated-gatewayopenfaas

0.1.0

1 of 1 See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	stdlib@go1.21.5	1.21.9

Open the chart page →

1,240

mqtt-connectoropenfaas

0.4.7

1 of 1 See more

mqtt-connector openfaas 0.4.7

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	golang.org/x/net@v0.0.0-20200425230154-ff2c4b7c35a0 stdlib@go1.18.5	0.23.0 1.21.9

Open the chart page →

1,389

nats-connectoropenfaas

0.3.2

1 of 1 See more

nats-connector openfaas 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	stdlib@go1.18.5	1.21.9

Open the chart page →

1,471

probuilderopenfaas

0.2.0

1 of 2 See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.8	0.23.0 1.21.9

Open the chart page →

4,761

sns-connectoropenfaas

0.1.3

1 of 1 See more

sns-connector openfaas 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/sns-connector :0.2.0	e9ab76a4ec77	stdlib@go1.21.7	1.21.9

Open the chart page →

850

kruise-rolloutopenkruise

0.6.2

1 of 1 See more

kruise-rollout openkruise 0.6.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openkruise/kruise-rollout :v0.6.2	a75e6739ea7d	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

1,034

kruise-state-metricsopenkruise

0.2.0

1 of 1 See more

kruise-state-metrics openkruise 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

1,929

openldapopenldap

0.1.1

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.23.0 1.21.9

Open the chart page →

5,294

minioopenobserve

5.0.7

2 of 2 See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.23.0 1.21.9
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.23.0 1.21.9

Open the chart page →

7,472

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/redis :7.2.5-alpine	6aaf3f5e6bc8	stdlib@go1.18.2	1.21.9

Open the chart page →

3,472

open-pdcopen-pdc

0.1.0

1 of 3 See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

open-pubopen-pub

0.1.0

1 of 3 See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

akeyless-api-gatewayopenshift

1.41.2

1 of 1 See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
akeyless/base-rhel :0.0.1	4ba8900a0061	stdlib@go1.22.1	1.21.9

Open the chart page →

12,185

exporteropenshift

1.0.47

1 of 3 See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/net@v0.17.0 stdlib@go1.20.12	0.23.0 1.21.9

Open the chart page →

13,041

fsmopenshift

0.1.8-ubi.6

3 of 6 See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9

Open the chart page →

16,563

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.23.0 1.21.9

Open the chart page →

4,170

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.23.0 1.21.9
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.23.0 1.21.9
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

8,224

osm-edgeopenshift

1.2.1-ubi8

4 of 7 See more

osm-edge openshift 1.2.1-ubi8

4 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9

Open the chart page →

19,471

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/net@v0.11.0 stdlib@go1.20.8	0.23.0 1.21.9

Open the chart page →

8,643

openvscode-serveropenvscode-server-helm

2.7.38

1 See more

openvscode-server openvscode-server-helm 2.7.38

1 container image this version deploys carries CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.23.0 1.21.9

Open the chart page →

—

open-webconceptopen-webconcept

0.1.0

1 of 3 See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/net@v0.7.0 stdlib@go1.20	0.23.0 1.21.9

Open the chart page →

1,879

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.23.0 1.21.9

Open the chart page →

5,658

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.23.0 1.21.9

Open the chart page →

1,220

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.23.0 1.21.9

Open the chart page →

7,501

prometheusosc

0.26.2

2 of 12 See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.23.0 1.21.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

1 of 5 See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.21.9

Open the chart page →

11,020

osdfir-infrastructureosdfir-infrastructure

2.15.0

6 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

6 of the 40 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.21.9
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.21.9
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.21.9
library/postgres :17.2-alpine	7e5df973a748	stdlib@go1.18.2	1.21.9
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.21.9
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

72,857

yetiosdfir-infrastructure

1.0.5

1 of 4 See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.21.9

Open the chart page →

6,707

osm-edgeosm-edge

1.3.9

4 of 7 See more

osm-edge osm-edge 1.3.9

4 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-preinstall :1.3.9	bd224d55ed0f	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

5,610

Container images carrying it

2,571 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
nineinfra/zookeeper-operator :v0.7.0	af6eb2f37bfc	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.23.0 1.21.9	1
nmalhotr/webserver :v1.0.0	3419361fb0dd	stdlib@go1.13.10	1.21.9	1
nocodb/nocodb :0.258.0	6779a4ddedf2	golang.org/x/net@v0.19.0	0.23.0	1
nocodb/nocodb :0.100.2	b0b91ec2a2dd	golang.org/x/net@v0.0.0-20220805013720-a33c5aa5df48 stdlib@go1.18.2	0.23.0 1.21.9	1
nocodb/nocodb :0.84.15	f9b799933aa8	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.8	0.23.0 1.21.9	1
nsqio/nsq :v1.3.0	1a369c146af7	stdlib@go1.21.5	1.21.9	1
ntakashi/cole :1.2.3	f7b68bee2a68	golang.org/x/net@v0.10.0 stdlib@go1.20.11	0.23.0 1.21.9	1
ntakashi/gitana :1.4.0	4171ec641120	golang.org/x/net@v0.0.0-20210929161516-d455829e376d stdlib@go1.17.7	0.23.0 1.21.9	1
nvidia/dcgm-exporter :2.2.9-2.4.1-ubuntu20.04	91b20b66d1cd	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.2	0.23.0 1.21.9	1
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.23.0 1.21.9	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0 stdlib@go1.18.2	0.23.0 1.21.9	1
ofekmeister/csi-gcs :v0.9.0	30d70fa9211b	golang.org/x/net@v0.0.0-20220513224357-95641704303c stdlib@go1.18.2	0.23.0 1.21.9	1
offchainlabs/nitro-node :v3.1.0-7d1d84c	e95865866129	golang.org/x/net@v0.21.0	0.23.0	1
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.21.9	1
okteto/civo-webhook :0.5.3	57cd51176538	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.23.0 1.21.9	1
oliver006/redis_exporter :v1.11.1	04d958d209ab	stdlib@go1.15	1.21.9	1
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.21.9	1
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.3	0.23.0 1.21.9	1
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.2	0.23.0 1.21.9	1
opea/codegen-ui :1.0	2bee4eb66f3e	stdlib@go1.20.7	1.21.9	1
opea/codetrans-ui :1.0	3ef121f34610	stdlib@go1.20.12	1.21.9	1
opea/docsum-ui :1.0	7f854e9bffaf	stdlib@go1.20.12	1.21.9	1
openbas/caldera-server :5.1.0	a277796d9724	golang-1.19@1.19.8-2 golang.org/x/net@v0.14.0 stdlib@go1.19.8	no fix listed 0.23.0 1.21.9	1
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.5	0.23.0 1.21.9	1
opencsghq/agenticflow :ee-v0.6.5-2	41cba9c366f1	stdlib@go1.19.8	1.21.9	1
openebs/provisioner-nfs :0.11.0	4f41dd782761	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.23.0 1.21.9	1
openenergyprojects/modbus_exporter :20230617_a144551	58990f24fb25	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.23.0 1.21.9	1
openkruise/kruise-rollout :v0.6.2	a75e6739ea7d	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.23.0 1.21.9	1
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.23.0 1.21.9	1
openmined/syft-frontend :0.9.5	d11524a3854a	stdlib@go1.20.5	1.21.9	1
openmined/syft-seaweedfs :0.9.5	3a4144c0bb82	golang.org/x/net@v0.21.0 stdlib@go1.22.1	0.23.0 1.21.9	1
openpolicyagent/opa :0.53.1	6a58dea59933	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.23.0 1.21.9	1
openproject/community :12.0.2	734743d11094	stdlib@go1.17	1.21.9	1
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	stdlib@go1.20.6	1.21.9	1
opsgenie/kubernetes-event-exporter :0.9	ecb246e4d260	golang.org/x/net@v0.0.0-20200520182314-0ba52f642ac2 stdlib@go1.14.7	0.23.0 1.21.9	1
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.23.0 1.21.9	1
oranhack7/solidproject :77	c6453942223f	stdlib@go1.21.7	1.21.9	1
oryd/kratos :v1.1.0	8f15006a080d	golang.org/x/net@v0.20.0 stdlib@go1.21.5	0.23.0 1.21.9	1
otel/opentelemetry-collector :0.59.0	ee9da0b08d83	golang.org/x/net@v0.0.0-20220809184613-07c6da5e1ced stdlib@go1.18.5	0.23.0 1.21.9	1
otel/opentelemetry-collector-contrib :0.83.0	71fcef33ae71	golang.org/x/net@v0.14.0 stdlib@go1.20.7	0.23.0 1.21.9	1
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.23.0 1.21.9	1
otel/opentelemetry-collector-contrib :0.46.0	ba173aa85f3f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.7	0.23.0 1.21.9	1
otel/opentelemetry-collector-contrib :0.81.0	c6671841470b	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.23.0 1.21.9	1
otel/opentelemetry-collector-contrib :0.63.1	dfb3a55ea8c9	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.23.0 1.21.9	1
otel/opentelemetry-ebpf-k8s-watcher :v0.10.2	63a0d1dd2cac	golang.org/x/net@v0.7.0 stdlib@go1.20	0.23.0 1.21.9	1
outlinewiki/outline :0.82.0	494dfb9249a6	stdlib@go1.20.12	1.21.9	1
ovhplatform/what-is-my-pod :1.0.1	6d4d455e9aba	stdlib@go1.16.14	1.21.9	1
owncloud/ocis :1.7.0	d2efcae92c84	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.5	0.23.0 1.21.9	1
oxynozeta/kubernetes-tagger :1.3.0	a153c386f5af	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17	0.23.0 1.21.9	1
oxynozeta/prometheus-cachethq :1.1.1	31f11669d597	stdlib@go1.15.1	1.21.9	1