CVE-2023-45288

High

Advisory

Published 3 Apr 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.920; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,154; of 17,797 indexed, latest versions
Container images: 2,571; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 2,154 of 17,797 indexed charts deploy, on 2,571 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.2.0-3.el8_9	1
golang-1.19deb	1.19.8-2	no fix listed	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+189 more	0.23.0	1,907
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+123 more	1.21.9	2,479

OSV records: DEBIAN-CVE-2023-45288 RHSA-2024:2699 GHSA-4v7x-pqxf-cx7m GO-2024-2687
Also known as: BIT-golang-2023-45288, RHSA-2024:4546

Charts affected

2,154 by stars

Chart

Latest

Affected images

Radar Score

lensoci-ai-incubations

0.1.14

4 of 16 See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.10	6dbe6f391eda	golang.org/x/net@v0.19.0 stdlib@go1.20.4	0.23.0 1.21.9
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9

Open the chart page →

17,161

cluster-gateway-addon-managerocm-helm-charts

1.4.0

1 of 1 See more

cluster-gateway-addon-manager ocm-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
oamdev/cluster-gateway-addon-manager :v1.4.0	1bcae00bd7b0	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.10	0.23.0 1.21.9

Open the chart page →

1,607

multicluster-meshocm-helm-charts

0.0.2

1 of 1 See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

2,131

my-bloody-jenkinsodavid

0.1.218

1 of 1 See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	golang.org/x/net@v0.21.0 stdlib@go1.18.2	0.23.0 1.21.9

Open the chart page →

5,826

aspromokgolove

2.0.0

1 of 1 See more

asprom okgolove 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
okgolove/asprom :1.10.1	974d2e5eb150	stdlib@go1.14.11	1.21.9

Open the chart page →

1,869

hive-metastoreolehrgf

0.1.0

1 of 1 See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	golang.org/x/net@v0.0.0-20191112182307-2180aed22343 stdlib@go1.13.4	0.23.0 1.21.9

Open the chart page →

8,548

exposecontrollerolli-ai

1.0.5

1 of 1 See more

exposecontroller olli-ai 1.0.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
olliai/exposecontroller :1.0.5	a470d96525e4	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

2,861

k8s-replicatorolli-ai

1.3.0

1 of 1 See more

k8s-replicator olli-ai 1.3.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
olliai/k8s-replicator :1.3.0	5716f2a8bd4c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.2	0.23.0 1.21.9

Open the chart page →

2,825

apicurioone-acre-fund

2.3.0

1 of 5 See more

apicurio one-acre-fund 2.3.0

1 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.4.0-debian-11-r23	7e7ebb082031	stdlib@go1.16.7	1.21.9

Open the chart page →

18,668

nocodbone-acre-fund

0.4.6

1 of 3 See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.258.0	6779a4ddedf2	golang.org/x/net@v0.19.0	0.23.0

Open the chart page →

4,228

one-green-coreone-green-core

0.0.7

3 of 8 See more

one-green-core one-green-core 0.0.7

3 of the 8 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/grafana :8.5.3	ecc1b80b8ca2	golang.org/x/net@v0.0.0-20211118161319-6a13c67c3ce4 stdlib@go1.17.9	0.23.0 1.21.9
library/influxdb :2.0.8	ba10ac9ba17a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.16.5	0.23.0 1.21.9
library/telegraf :1.20.4	28e98eece020	golang.org/x/net@v0.0.0-20211005215030-d2e5035098b3 stdlib@go1.17.3	0.23.0 1.21.9

Open the chart page →

9,582

opa-nginxopa-nginx

0.0.3

2 of 2 See more

opa-nginx opa-nginx 0.0.3

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openpolicyagent/opa :0.53.1	6a58dea59933	golang.org/x/net@v0.10.0 stdlib@go1.20.4	0.23.0 1.21.9
richardjennings/opa-nginx :0.0.3	66424aca125d	stdlib@go1.20.5	1.21.9

Open the chart page →

2,176

basic-appopen-charts

1.0.0

1 of 1 See more

basic-app open-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ovhplatform/what-is-my-pod :1.0.1	6d4d455e9aba	stdlib@go1.16.14	1.21.9

Open the chart page →

1,597

anchore-engineopencloudcx

1.13.0

1 of 2 See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.10.0	bde9eedf639d	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

18,032

bbsimopencord

4.8.11

1 of 1 See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/bbsim :1.16.7	d90403d58016	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.13.8	0.23.0 1.21.9

Open the chart page →

3,915

bbsim-sadis-serveropencord

0.3.5

1 of 1 See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/bbsim-sadis-server :0.4.0	762b272d439e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

3,729

nem-monitoringopencord

1.3.22

1 of 9 See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.23.0 1.21.9

Open the chart page →

4,619

volthaopencord

2.14.0

2 of 2 See more

voltha opencord 2.14.0

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/voltha-ofagent-go :2.1.6	8feb9ef89e97	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

3,825

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
opencord/onos-classic-helm-utils :0.1.0	0d693ba85fd6	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.5	0.23.0 1.21.9
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

41,148

voltha-stackopencord

2.14.0

2 of 4 See more

voltha-stack opencord 2.14.0

2 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
voltha/voltha-ofagent-go :2.1.6	8feb9ef89e97	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9
voltha/voltha-rw-core :3.4.8	7a325316fe59	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

5,567

federated-gatewayopenfaas

0.1.0

1 of 1 See more

federated-gateway openfaas 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/federated-gateway :0.2.3	9066d7b3e6a1	stdlib@go1.21.5	1.21.9

Open the chart page →

1,240

mqtt-connectoropenfaas

0.4.7

1 of 1 See more

mqtt-connector openfaas 0.4.7

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/mqtt-connector :0.4.3	3311a30b8fe6	golang.org/x/net@v0.0.0-20200425230154-ff2c4b7c35a0 stdlib@go1.18.5	0.23.0 1.21.9

Open the chart page →

1,389

nats-connectoropenfaas

0.3.2

1 of 1 See more

nats-connector openfaas 0.3.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/nats-connector :0.3.0	315e57c0a8d8	stdlib@go1.18.5	1.21.9

Open the chart page →

1,471

probuilderopenfaas

0.2.0

1 of 2 See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
moby/buildkit :v0.10.0	c2aeafaed434	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.8	0.23.0 1.21.9

Open the chart page →

4,761

sns-connectoropenfaas

0.1.3

1 of 1 See more

sns-connector openfaas 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/sns-connector :0.2.0	e9ab76a4ec77	stdlib@go1.21.7	1.21.9

Open the chart page →

850

kruise-rolloutopenkruise

0.6.2

1 of 1 See more

kruise-rollout openkruise 0.6.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openkruise/kruise-rollout :v0.6.2	a75e6739ea7d	golang.org/x/net@v0.7.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

1,034

kruise-state-metricsopenkruise

0.2.0

1 of 1 See more

kruise-state-metrics openkruise 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
openkruise/kruise-state-metrics :v0.2.0	a8108f771287	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

1,929

openldapopenldap

0.1.1

1 of 2 See more

openldap openldap 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.23.0 1.21.9

Open the chart page →

5,294

minioopenobserve

5.0.7

2 of 2 See more

minio openobserve 5.0.7

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	golang.org/x/net@v0.4.0 stdlib@go1.19.4	0.23.0 1.21.9
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	golang.org/x/net@v0.5.0 stdlib@go1.19.4	0.23.0 1.21.9

Open the chart page →

7,472

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/redis :7.2.5-alpine	6aaf3f5e6bc8	stdlib@go1.18.2	1.21.9

Open the chart page →

3,472

open-pdcopen-pdc

0.1.0

1 of 3 See more

open-pdc open-pdc 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

open-pubopen-pub

0.1.0

1 of 3 See more

open-pub open-pub 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

akeyless-api-gatewayopenshift

1.41.2

1 of 1 See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
akeyless/base-rhel :0.0.1	4ba8900a0061	stdlib@go1.22.1	1.21.9

Open the chart page →

12,185

exporteropenshift

1.0.47

1 of 3 See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/net@v0.17.0 stdlib@go1.20.12	0.23.0 1.21.9

Open the chart page →

13,041

fsmopenshift

0.1.8-ubi.6

3 of 6 See more

fsm openshift 0.1.8-ubi.6

3 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.12	0.23.0 1.21.9

Open the chart page →

16,563

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.23.0 1.21.9

Open the chart page →

4,170

opscruiseopenshift

0.35.100

3 of 11 See more

opscruise openshift 0.35.100

3 of the 11 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/loki :2.0.0	77e138f81a8e	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.23.0 1.21.9
grafana/promtail :2.0.0	5fd12edcc694	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.14.2	0.23.0 1.21.9
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

8,224

osm-edgeopenshift

1.2.1-ubi8

4 of 7 See more

osm-edge openshift 1.2.1-ubi8

4 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	golang.org/x/net@v0.5.0 stdlib@go1.18.4	0.23.0 1.21.9

Open the chart page →

19,471

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	golang.org/x/net@v0.11.0 stdlib@go1.20.8	0.23.0 1.21.9

Open the chart page →

8,643

openvscode-serveropenvscode-server-helm

2.7.38

1 See more

openvscode-server openvscode-server-helm 2.7.38

1 container image this version deploys carries CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/docker :23.0.1-dind	d9a0fd8bdd15	golang.org/x/net@v0.4.0 stdlib@go1.19.5	0.23.0 1.21.9

Open the chart page →

—

open-webconceptopen-webconcept

0.1.0

1 of 3 See more

open-webconcept open-webconcept 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,424

gitlab-proxyopslevel

0.0.8

1 of 1 See more

gitlab-proxy opslevel 0.0.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/caddy :2.6	60fb54d36b4b	golang.org/x/net@v0.7.0 stdlib@go1.20	0.23.0 1.21.9

Open the chart page →

1,879

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.23.0 1.21.9

Open the chart page →

5,658

agentoptimizely-agent

1.4.0

1 of 1 See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
optimizely/agent :4.0.0	9d0096cabd63	golang.org/x/net@v0.17.0 stdlib@go1.21.6	0.23.0 1.21.9

Open the chart page →

1,220

orderregistratiecomponentorderregistratiecomponent

1.0.0

1 of 3 See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/orderregistratiecomponent-php :latest	d17257e4fa27	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.23.0 1.21.9

Open the chart page →

7,501

prometheusosc

0.26.2

2 of 12 See more

prometheus osc 0.26.2

2 of the 12 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	golang.org/x/net@v0.9.0 stdlib@go1.20.4	0.23.0 1.21.9
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

3,381

grrosdfir-infrastructure

1.0.3

1 of 5 See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.21.9

Open the chart page →

11,020

osdfir-infrastructureosdfir-infrastructure

2.15.0

6 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

6 of the 40 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.21.9
library/mariadb :11.3.2	e101f9db3191	stdlib@go1.18.2	1.21.9
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.21.9
library/postgres :17.2-alpine	7e5df973a748	stdlib@go1.18.2	1.21.9
library/redis :7.4.2-alpine	02419de7eddf	stdlib@go1.18.2	1.21.9
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

72,857

yetiosdfir-infrastructure

1.0.5

1 of 4 See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/arangodb :3.11.8	1e75d74954a4	stdlib@go1.21.5	1.21.9

Open the chart page →

6,707

osm-edgeosm-edge

1.3.9

4 of 7 See more

osm-edge osm-edge 1.3.9

4 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
flomesh/osm-edge-bootstrap :1.3.9	b188e128cbfe	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-controller :1.3.9	add7a4da4622	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-injector :1.3.9	47287e3ad324	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/osm-edge-preinstall :1.3.9	bd224d55ed0f	golang.org/x/net@v0.5.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

5,610

Container images carrying it

2,571 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
temporalio/server :1.25.0	8a5798191dea	golang.org/x/net@v0.17.0	0.23.0	1
temporalio/server :1.22.0	ddeebf8bad8f	golang.org/x/net@v0.14.0 stdlib@go1.19.11	0.23.0 1.21.9	1
temporalio/server :1.15.1	e26758f5a1bf	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.6	0.23.0 1.21.9	1
temporalio/ui :2.30.2	5c2a3645d09c	golang.org/x/net@v0.17.0 stdlib@go1.22.1	0.23.0 1.21.9	1
temporalio/ui :2.33.0	5c586a3c8ec5	golang.org/x/net@v0.17.0 stdlib@go1.22.1	0.23.0 1.21.9	1
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777 stdlib@go1.15.10	0.23.0 1.21.9	1
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.14.2	0.23.0 1.21.9	1
thecampagnards/trafficlight-api :main	7dca9d973837	stdlib@go1.16.4	1.21.9	1
thecodingmachine/workadventure-back :v1.17.7	64001369dad5	stdlib@go1.20.7	1.21.9	1
thecodingmachine/workadventure-ejabberd :v1.17.7	01df99622ad3	stdlib@go1.17.13	1.21.9	1
thecodingmachine/workadventure-map-storage :v1.17.7	5bdab56da2fa	stdlib@go1.19.3	1.21.9	1
thecodingmachine/workadventure-play :v1.17.7	d8f66979b9b4	stdlib@go1.20.7	1.21.9	1
thecodingmachine/workadventure-uploader :v1.17.7	3ccd467543b3	stdlib@go1.20.7	1.21.9	1
thesisrobot/lnd :v0.16.4-beta-c	287129953689	golang.org/x/net@v0.8.0 stdlib@go1.21.0	0.23.0 1.21.9	1
thesisrobot/lnd :v0.14.1-beta	d94c8dbf6dac	golang.org/x/net@v0.0.0-20210913180222-943fd674d43e stdlib@go1.17.1	0.23.0 1.21.9	1
thmmniii/fbs-qcm-frontend :v1.27.1	a347f7f4d144	stdlib@go1.20.12	1.21.9	1
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/net@v0.17.0 stdlib@go1.20.11	0.23.0 1.21.9	1
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.23.0 1.21.9	1
thomseddon/traefik-forward-auth :latest	b364aa6a4117	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.15	0.23.0 1.21.9	1
thomseddon/traefik-forward-auth :2.2.0	e875194d67e2	golang.org/x/net@v0.0.0-20190930134127-c5a3c61f89f3 stdlib@go1.13.12	0.23.0 1.21.9	1
timescale/timescaledb :latest-pg12	645fd9e92d76	stdlib@go1.18.7	1.21.9	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	stdlib@go1.19.1	1.21.9	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	stdlib@go1.19.1	1.21.9	1
timescale/timescaledb-ha :pg16	d7db8f1085a3	stdlib@go1.18.1	1.21.9	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	stdlib@go1.18.1	1.21.9	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	stdlib@go1.15.6	1.21.9	1
timescale/timescaledb-postgis :latest-pg12	7758704d4a14	stdlib@go1.14	1.21.9	1
timonwong/prometheus-webhook-dingtalk :v1.4.0	a0fcc028bd8d	stdlib@go1.13.5	1.21.9	1
tiredofit/freescout :php8.2-1.17.72	5b7cc0658f07	golang.org/x/net@v0.21.0	0.23.0	1
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.20.3	0.23.0 1.21.9	1
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/net@v0.0.0-20191109021931-daa7c04131f5 stdlib@go1.13.10	0.23.0 1.21.9	1
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.23.0 1.21.9	1
toucansoftware/spa-reloader :latest	c187b1fba501	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.13.15	0.23.0 1.21.9	1
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e stdlib@go1.19	0.23.0 1.21.9	1
traefik/whoami :v1.6.1	2c52bb2c8480	stdlib@go1.15.6	1.21.9	1
traefik/whoami :v1.8.0	8d0f943abdbf	stdlib@go1.17.7	1.21.9	1
traefik/whoami :v1.6.0	d38496bf0900	stdlib@go1.15.2	1.21.9	1
traggo/server :0.2.3	f1ced637510e	stdlib@go1.13.1	1.21.9	1
tranhailong/nfs-server :4.2-2-gcsfuse	028662749be2	golang.org/x/net@v0.4.0 stdlib@go1.18.4	0.23.0 1.21.9	1
treeverse/lakefs :0.69.0	478f37a6cffc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.8	0.23.0 1.21.9	1
tundeficky/nodejs-app :v1.0.0	3cf9a9ce54e8	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.23.0 1.21.9	1
turt2live/matrix-media-repo :v1.2.8	bfbd459f89a5	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.3	0.23.0 1.21.9	1
tusproject/tusd :v1.10.0	1e457b59fd5b	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.19.2	0.23.0 1.21.9	1
tusproject/tusd :v1.13.0	f8088058b80f	golang.org/x/net@v0.14.0 stdlib@go1.21.0	0.23.0 1.21.9	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.21.7	0.23.0 1.21.9	1
twinproduction/aws-eks-asg-rolling-update-handler :v1.7.0	8f38c206972e	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.23.0 1.21.9	1
twinproduction/gatus :v3.8.0	49dc0d9b2e2c	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.1	0.23.0 1.21.9	1
ubercadence/server :0.23.2	2ac5491d13bb	golang.org/x/net@v0.0.0-20201031054903-ff519b6c9102 stdlib@go1.13.6	0.23.0 1.21.9	1
udhos/forward :1.1.3	12e120d39fdb	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.23.0 1.21.9	1
udhos/prime :1.0.0	e432012dd34a	stdlib@go1.20.4	1.21.9	1