CVE-2023-45288

High

Advisory

Published 3 Apr 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.920; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,155; of 17,803 indexed, latest versions
Container images: 2,572; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 2,155 of 17,803 indexed charts deploy, on 2,572 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.2.0-3.el8_9	1
golang-1.19deb	1.19.8-2	no fix listed	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+189 more	0.23.0	1,907
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+124 more	1.21.9	2,480

OSV records: DEBIAN-CVE-2023-45288 RHSA-2024:2699 GHSA-4v7x-pqxf-cx7m GO-2024-2687
Also known as: BIT-golang-2023-45288, RHSA-2024:4546

Charts affected

2,155 by stars

Chart

Latest

Affected images

Radar Score

lensoci-ai-incubations

0.1.14

4 of 16 See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0 stdlib@go1.20.4	0.23.0 1.21.9
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9

Open the chart page →

17,257

cluster-gateway-addon-managerocm-helm-charts

1.4.0

1 of 1 See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.23.0 1.21.9

Open the chart page →

1,607

multicluster-meshocm-helm-charts

0.0.2

1 of 1 See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

2,131

my-bloody-jenkinsodavid

0.1.218

1 of 1 See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0 stdlib@go1.18.2	0.23.0 1.21.9

Open the chart page →

5,812

aspromokgolove

2.0.0

1 of 1 See more

asprom okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.21.9

Open the chart page →

1,869

hive-metastoreolehrgf

0.1.0

1 of 1 See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.4	0.23.0 1.21.9

Open the chart page →

8,549

exposecontrollerolli-ai

1.0.5

1 of 1 See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

2,861

k8s-replicatorolli-ai

1.3.0

1 of 1 See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.2	0.23.0 1.21.9

Open the chart page →

2,825

apicurioone-acre-fund

2.3.0

1 of 5 See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.21.9

Open the chart page →

18,671

nocodbone-acre-fund

0.4.6

1 of 3 See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.258.0	6779a4ddedf2	golang.org/x/net@v0.19.0	0.23.0

Open the chart page →

4,241

one-green-coreone-green-core

0.0.7

3 of 8 See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.3	ecc1b80b8ca2	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.23.0 1.21.9
library/influxdb :2.0.8	ba10ac9ba17a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.5	0.23.0 1.21.9
library/telegraf :1.20.4	28e98eece020	golang.org/x/net@v0.0.0-20211005215030-d2e5035098b3 stdlib@go1.17.3	0.23.0 1.21.9

Open the chart page →

9,582

opa-nginxopa-nginx

0.0.3

2 of 2 See more

opa-nginx opa-nginx 0.0.3

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openpolicyagent/opa :0.53.1	6a58dea59933	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.23.0 1.21.9
richardjennings/opa-nginx :0.0.3	66424aca125d	stdlib@go1.20.5	1.21.9

Open the chart page →

2,207

basic-appopen-charts

1.0.0

1 of 1 See more

basic-app open-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ovhplatform/what-is-my-pod :1.0.1	6d4d455e9aba	stdlib@go1.16.14	1.21.9

Open the chart page →

1,597

anchore-engineopencloudcx

1.13.0

1 of 2 See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

18,034

bbsimopencord

4.8.11

1 of 1 See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.13.8	0.23.0 1.21.9

Open the chart page →

3,918

bbsim-sadis-serveropencord

0.3.5

1 of 1 See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

3,731

nem-monitoringopencord

1.3.22

1 of 9 See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.23.0 1.21.9

Open the chart page →

4,620

volthaopencord

2.14.0

2 of 2 See more

voltha opencord 2.14.0

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/voltha-ofagent-go :2.1.6	8feb9ef89e97	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

3,825

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.5	0.23.0 1.21.9
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

41,148

voltha-stackopencord

2.14.0

2 of 4 See more

voltha-stack opencord 2.14.0

2 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/voltha-ofagent-go :2.1.6	8feb9ef89e97	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

5,567

federated-gatewayopenfaas

0.1.0

1 of 1 See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	stdlib@go1.21.5	1.21.9

Open the chart page →

1,240

mqtt-connectoropenfaas

0.4.7

1 of 1 See more

mqtt-connector openfaas 0.4.7

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	golang.org/x/net@v0.0.0-20200425230154-ff2c4b7c35a0 stdlib@go1.18.5	0.23.0 1.21.9

Open the chart page →

1,389

nats-connectoropenfaas

0.3.2

1 of 1 See more

nats-connector openfaas 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	stdlib@go1.18.5	1.21.9

Open the chart page →

1,471

probuilderopenfaas

0.2.0

1 of 2 See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.8	0.23.0 1.21.9

Open the chart page →

4,761

sns-connectoropenfaas

0.1.3

1 of 1 See more

sns-connector openfaas 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/sns-connector :0.2.0	e9ab76a4ec77	stdlib@go1.21.7	1.21.9

Open the chart page →

850

kruise-rolloutopenkruise

0.6.2

1 of 1 See more

kruise-rollout openkruise 0.6.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openkruise/kruise-rollout :v0.6.2	a75e6739ea7d	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

1,034

kruise-state-metricsopenkruise

0.2.0

1 of 1 See more

kruise-state-metrics openkruise 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

1,929

openldapopenldap

0.1.1

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.23.0 1.21.9

Open the chart page →

5,295

minioopenobserve

5.0.7

2 of 2 See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.23.0 1.21.9
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.23.0 1.21.9

Open the chart page →

7,613

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/redis :7.2.5-alpine	6aaf3f5e6bc8	stdlib@go1.18.2	1.21.9

Open the chart page →

3,477

open-pdcopen-pdc

0.1.0

1 of 3 See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

open-pubopen-pub

0.1.0

1 of 3 See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

akeyless-api-gatewayopenshift

1.41.2

1 of 1 See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
akeyless/base-rhel :0.0.1	4ba8900a0061	stdlib@go1.22.1	1.21.9

Open the chart page →

12,178

exporteropenshift

1.0.47

1 of 3 See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/net@v0.17.0 stdlib@go1.20.12	0.23.0 1.21.9

Open the chart page →

13,076

fsmopenshift

0.1.8-ubi.6

3 of 6 See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9

Open the chart page →

16,567

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.23.0 1.21.9

Open the chart page →

4,234

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.23.0 1.21.9
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.23.0 1.21.9
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

8,234

osm-edgeopenshift

1.2.1-ubi8

4 of 7 See more

osm-edge openshift 1.2.1-ubi8

4 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9

Open the chart page →

19,476

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/net@v0.11.0 stdlib@go1.20.8	0.23.0 1.21.9

Open the chart page →

8,687

openvscode-serveropenvscode-server-helm

2.7.38

1 of 2 See more

openvscode-server openvscode-server-helm 2.7.38

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.23.0 1.21.9

Open the chart page →

4,232

open-webconceptopen-webconcept

0.1.0

1 of 3 See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/net@v0.7.0 stdlib@go1.20	0.23.0 1.21.9

Open the chart page →

1,882

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.23.0 1.21.9

Open the chart page →

5,670

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.23.0 1.21.9

Open the chart page →

1,230

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.23.0 1.21.9

Open the chart page →

7,503

prometheusosc

0.26.2

2 of 12 See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.23.0 1.21.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

1 of 5 See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.21.9

Open the chart page →

11,047

osdfir-infrastructureosdfir-infrastructure

2.15.0

6 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

6 of the 40 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.21.9
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.21.9
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.21.9
library/postgres :17.2-alpine	7e5df973a748	stdlib@go1.18.2	1.21.9
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.21.9
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

184,580

yetiosdfir-infrastructure

1.0.5

1 of 4 See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.21.9

Open the chart page →

6,756

osm-edgeosm-edge

1.3.9

4 of 7 See more

osm-edge osm-edge 1.3.9

4 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-preinstall :1.3.9	bd224d55ed0f	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

5,610

Container images carrying it

2,572 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
sophos/nginx-vts-exporter :latest	f1073556b29b	stdlib@go1.13.6	1.21.9	1
sorintlab/stolon :v0.16.0-pg12	36b45c0f97fc	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.8	0.23.0 1.21.9	1
splunk/splunk-operator :2.0.0	c4e0d3146226	golang.org/x/net@v0.0.0-20211029224645-99673261e6eb stdlib@go1.17.12	0.23.0 1.21.9	1
springhack/frpc_ingress :latest	4aceb821da88	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.19.5	0.23.0 1.21.9	1
sstarcher/ecr-cleaner :0.1.1	2d43c390cb19	stdlib@go1.14.2	1.21.9	1
sstarcher/helm-exporter :0.5.0	11769d01ba35	golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271 stdlib@go1.13.6	0.23.0 1.21.9	1
sstarcher/kube-ebs-tagger :0.1.0	1f8cae8cfa80	golang.org/x/net@v0.0.0-20191028085509-fe3aa8a45271 stdlib@go1.13.9	0.23.0 1.21.9	1
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.21.9	1
stakater/k8s-cost-optimizer :v0.0.5	450415ce1b4e	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.8	0.23.0 1.21.9	1
stakater/konfigurator :v0.1.39	3409565b1ef5	golang.org/x/net@v0.17.0 stdlib@go1.17.13	0.23.0 1.21.9	1
stakater/reloader :v1.0.15	f4b87a8e56d4	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.23.0 1.21.9	1
stakater/tronador :v0.0.1	37ce9acf2722	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.11	0.23.0 1.21.9	1
stakater/whitelister :v0.0.16	39107924063e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.13.1	0.23.0 1.21.9	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.16.13	0.23.0 1.21.9	1
stakkato95/twitter-service-analytics :0.1.0	5d48906d66b3	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.23.0 1.21.9	1
stakkato95/twitter-service-graphql :0.1.1	3cbe857234f2	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.23.0 1.21.9	1
stakkato95/twitter-service-tweets :0.1.1	8412d8a8cac3	stdlib@go1.18.3	1.21.9	1
stakkato95/twitter-service-users :0.1.1	456049efee9a	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.18.3	0.23.0 1.21.9	1
stashapp/stash :latest	24dbd7607174	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.13.15	0.23.0 1.21.9	1
statcan/ingress-istio-controller :1.4.0	d7d6bd180c46	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.18.10	0.23.0 1.21.9	1
statcan/kubernetes-sidecar-terminator :2.0.2	bc361ee7748f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.10	0.23.0 1.21.9	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.6	0.23.0 1.21.9	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.23.0 1.21.9	1
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.11	0.23.0 1.21.9	1
stubin87/tiny-api :v1.1.0	2e5c42e92ec8	stdlib@go1.19.1	1.21.9	1
su541/cert-manager-desec-webhook :latest	371ee33f83c1	golang.org/x/net@v0.7.0 stdlib@go1.19.10	0.23.0 1.21.9	1
subspacecommunity/subspace :1.5.0	e2042b63fb35	golang.org/x/net@v0.0.0-20200519113804-d87ec0cfa476 stdlib@go1.14.6	0.23.0 1.21.9	1
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	golang.org/x/net@v0.12.0 stdlib@go1.20.7	0.23.0 1.21.9	1
sumuduliya/hello-world :latest	b7788a2984a3	stdlib@go1.19.13	1.21.9	1
supabase/gotrue :v2.91.0	7174d551d720	golang.org/x/net@v0.10.0 stdlib@go1.20.7	0.23.0 1.21.9	1
superorbital/cludod :0.0.2-alpha	d59732f61d6e	golang.org/x/net@v0.0.0-20220111093109-d55c255bac03 stdlib@go1.17.6	0.23.0 1.21.9	1
supporttools/go-redis-proxy :0.0.7	cbd45f6b02b8	stdlib@go1.21.6	1.21.9	1
supporttools/go-web-cache :v1.3.2	f4f775dd43b9	stdlib@go1.21.6	1.21.9	1
supporttools/powerdns-admin-proxy :5	e3687d66bcfa	stdlib@go1.21.3	1.21.9	1
surajwarbhe/grafana :v1	85248611e9f1	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.23.0 1.21.9	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.23.0 1.21.9	1
svtechnmaa/svtech_icingadb :v1.1.2	6d91c2e4e882	stdlib@go1.21.5	1.21.9	1
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	stdlib@go1.21.6	1.21.9	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.23.0 1.21.9	1
svtechnmaa/svtech_syncthing :v1.0.4	1a75d88031fe	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.23.0 1.21.9	1
syncthing/syncthing :1.18.2	966433161272	golang.org/x/net@v0.0.0-20210716203947-853a461950ff stdlib@go1.17	0.23.0 1.21.9	1
sysintelligent/hello-app :2.0.1	77fb30df847d	golang.org/x/net@v0.19.0 stdlib@go1.19.3	0.23.0 1.21.9	1
t3nde/tideways :1.7.27	77e008f764db	stdlib@go1.16.4	1.21.9	1
tailwarden/komiser :3.1.10	3f68c8ae7993	golang.org/x/net@v0.17.0 stdlib@go1.22.0	0.23.0 1.21.9	1
tdengine/tdengine :3.0.2.2	4140a4021ddb	golang.org/x/net@v0.0.0-20220607020251-c690dde0001d stdlib@go1.17.6	0.23.0 1.21.9	1
tdeutsch/podsync :v2.4.2	b67186f4c9a5	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.19.3	0.23.0 1.21.9	1
temporalio/admin-tools :1.22.4	258958fe2ff2	golang.org/x/net@v0.8.0 stdlib@go1.20.10	0.23.0 1.21.9	1
temporalio/admin-tools :1.15.1	35034611d981	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.23.0 1.21.9	1
temporalio/admin-tools :1.22.0	836af062af30	golang.org/x/net@v0.14.0 stdlib@go1.19.11	0.23.0 1.21.9	1
temporalio/admin-tools :1.25.0-tctl-1.18.1-cli-1.0.0	cda4901bab53	golang.org/x/net@v0.15.0	0.23.0	1