CVE-2023-45288

High

Advisory

Published 3 Apr 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.920; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,155; of 17,803 indexed, latest versions
Container images: 2,572; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 2,155 of 17,803 indexed charts deploy, on 2,572 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.2.0-3.el8_9	1
golang-1.19deb	1.19.8-2	no fix listed	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+189 more	0.23.0	1,907
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+124 more	1.21.9	2,480

OSV records: DEBIAN-CVE-2023-45288 RHSA-2024:2699 GHSA-4v7x-pqxf-cx7m GO-2024-2687
Also known as: BIT-golang-2023-45288, RHSA-2024:4546

Charts affected

2,155 by stars

Chart

Latest

Affected images

Radar Score

pulsarv2milvus-helm

2.7.8

2 of 4 See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a stdlib@go1.13.10	0.23.0 1.21.9
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.23.0 1.21.9

Open the chart page →

15,875

mimirmimir

0.1.10

1 of 1 See more

mimir mimir 0.1.10

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/heimops/mimir-operator :latest	4e1a3ef1fe82	golang.org/x/net@v0.17.0	0.23.0

Open the chart page →

382

zkapps-dashboardmina

0.1.2

1 of 2 See more

zkapps-dashboard mina 0.1.2

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/postgres :12-alpine	7c8f48705831	stdlib@go1.18.2	1.21.9

Open the chart page →

1,670

minio-operatorminio-operator

4.3.7

1 of 2 See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.17.4	0.23.0 1.21.9

Open the chart page →

6,087

aws-api-gateway-operatormintel

0.1.2

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/net@v0.4.0 stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

10,732

standard-application-stackmintel

11.5.0

1 of 12 See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/net@v0.4.0 stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

10,642

jupyterhubmizzoukube

0.0.1-set.by.chartpress

1 of 7 See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.23.0 1.21.9

Open the chart page →

1,896

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.13	0.23.0 1.21.9

Open the chart page →

2,854

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.13.14	0.23.0 1.21.9

Open the chart page →

7,799

echoperatormmontes

0.0.2

1 of 1 See more

echoperator mmontes 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

1,827

mariadbmmontes

0.3.0

1 of 1 See more

mariadb mmontes 0.3.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mariadb :10.7.3	07e06f2e7ae9	stdlib@go1.16.7	1.21.9

Open the chart page →

10,127

mongodbmmontes

0.5.0

1 of 1 See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mongo :4.4.13	05678ae4e5e1	stdlib@go1.16.7	1.21.9

Open the chart page →

7,164

basic-git-servermoikot

0.0.2

1 of 1 See more

basic-git-server moikot 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
moikot/basic-git-server :0.0.2	0d941bd30ffa	stdlib@go1.14.9	1.21.9

Open the chart page →

2,955

corednsmoikot

1.13.3

1 of 1 See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e stdlib@go1.14.4	0.23.0 1.21.9

Open the chart page →

2,555

smartthings-metricsmoikot

0.1.0

1 of 1 See more

smartthings-metrics moikot 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.13	0.23.0 1.21.9

Open the chart page →

1,744

smartthings-metrics-feat-log-detailsmoikot

0.0.92

1 of 1 See more

smartthings-metrics-feat-log-details moikot 0.0.92

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :feat-log-details	fb8565140106	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.14.15	0.23.0 1.21.9

Open the chart page →

1,732

docker-registrymoinologics

0.1.1

1 of 1 See more

docker-registry moinologics 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/registry :2	a3d8aaa63ed8	stdlib@go1.20.8	1.21.9

Open the chart page →

550

pritunl-vpnmoinologics

0.0.1

1 of 1 See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
goofball222/pritunl :1.32.3602.80	7bf26032dfce	golang.org/x/net@v0.7.0 stdlib@go1.18.7	0.23.0 1.21.9

Open the chart page →

2,470

backendmojaloop

0.1.0

4 of 6 See more

backend mojaloop 0.1.0

4 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	stdlib@go1.18.2	1.21.9
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.23.0 1.21.9
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.16.4	0.23.0 1.21.9
bitnamilegacy/zookeeper :3.7.2-debian-11-r5	cbf54314c401	stdlib@go1.21.5	1.21.9

Open the chart page →

16,329

reporting-nifi-processor-svcmojaloop

0.0.2

1 of 3 See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.21.9

Open the chart page →

6,236

mongodb-query-exportermongodb-query-exporter

5.1.0

1 of 1 See more

mongodb-query-exporter mongodb-query-exporter 5.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/raffis/mongodb-query-exporter :v5.1.0	ca6ac8a5b329	stdlib@go1.20.5	1.21.9

Open the chart page →

989

camera-viewermoreillon

0.2.1

1 of 4 See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.23.0 1.21.9

Open the chart page →

11,700

face-recognitionmoreillon

0.2.4

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.23.0 1.21.9

Open the chart page →

8,565

mqtt-loggermoreillon

0.3.1

2 of 5 See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9 stdlib@go1.19.6	0.23.0 1.21.9
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.17.10	0.23.0 1.21.9

Open the chart page →

11,025

user-manager-mongodbmoreillon

0.6.2

1 of 4 See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.23.0 1.21.9

Open the chart page →

25,873

backupmorremeyer

4.0.0

1 of 1 See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
restic/restic :0.15.2	579e4e6a4931	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.23.0 1.21.9

Open the chart page →

2,303

hcloud-ccm-networksmorremeyer

2.0.0

1 of 1 See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.23.0 1.21.9

Open the chart page →

1,753

hcloud-csi-drivermorremeyer

3.0.0

6 of 6 See more

hcloud-csi-driver morremeyer 3.0.0

6 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-csi-driver :v2.3.2	b7ed90d5fab2	golang.org/x/net@v0.7.0 stdlib@go1.19.7	0.23.0 1.21.9
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	golang.org/x/net@v0.4.0 stdlib@go1.19	0.23.0 1.21.9
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	golang.org/x/net@v0.4.0 stdlib@go1.19	0.23.0 1.21.9
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	golang.org/x/net@v0.4.0 stdlib@go1.19	0.23.0 1.21.9
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	golang.org/x/net@v0.4.0 stdlib@go1.19	0.23.0 1.21.9
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	golang.org/x/net@v0.4.0 stdlib@go1.19	0.23.0 1.21.9

Open the chart page →

7,187

chirpstackmosquitto-helm-chart

0.5.0

3 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

3 of the 8 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/net@v0.0.0-20220726230323-06994584191e stdlib@go1.19.3	0.23.0 1.21.9
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	golang.org/x/net@v0.8.0 stdlib@go1.19.3	0.23.0 1.21.9
oliver006/redis_exporter :v1.14.0	d55e056987af	stdlib@go1.15.6	1.21.9

Open the chart page →

96,742

chirpstack-event-forwardmosquitto-helm-chart

0.1.2

1 of 1 See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.17.10	0.23.0 1.21.9

Open the chart page →

1,854

replacermosquitto-helm-chart

0.2.0

2 of 3 See more

replacer mosquitto-helm-chart 0.2.0

2 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.17.7	0.23.0 1.21.9
ghcr.io/liangyuanpeng/waitfor :v1.0.0	ca5a98cbed32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.7	0.23.0 1.21.9

Open the chart page →

3,931

configmapsecretsmozilla

0.0.1

1 of 1 See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.16.1	0.23.0 1.21.9

Open the chart page →

2,110

tianjimsgbyte

0.1.17

1 of 2 See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
moonrailgun/tianji :1.11.2	b528c8f8fcc4	stdlib@go1.20.12	1.21.9

Open the chart page →

4,572

ms-hello-webms-hello-test

0.1.0

1 of 1 See more

ms-hello-web ms-hello-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
irakli/ms-web-hello :latest	966a4bfefe27	stdlib@go1.19.2	1.21.9

Open the chart page →

755

devops-demomungari-development-charts

1.0.4

1 of 4 See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591 stdlib@go1.18.4	0.23.0 1.21.9

Open the chart page →

9,019

approuvezmvisonneau

0.1.1

1 of 1 See more

approuvez mvisonneau 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/mvisonneau/approuvez :v0.1.0	441da62e6cb3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a stdlib@go1.15.6	0.23.0 1.21.9

Open the chart page →

1,978

unpollermvisonneau

0.1.0

1 of 1 See more

unpoller mvisonneau 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
golift/unifi-poller :v2.9.2	585a29a06d05	golang.org/x/net@v0.15.0 stdlib@go1.21.0	0.23.0 1.21.9

Open the chart page →

1,190

danboorumy0n

0.0.2

1 of 1 See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	stdlib@go1.18	1.21.9

Open the chart page →

97,407

danbooru-stackmy0n

0.0.3

1 of 4 See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	stdlib@go1.18	1.21.9

Open the chart page →

97,407

authmya

22.4.3

1 of 1 See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.13.7	0.23.0 1.21.9

Open the chart page →

2,381

clickhousemya

0.2403.1

1 of 1 See more

clickhouse mya 0.2403.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.21.9

Open the chart page →

3,611

cognativemya

0.2403.3

3 of 3 See more

cognative mya 0.2403.3

3 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.2	ed9640bfff07	stdlib@go1.19.10	1.21.9
grafana/grafana :10.4.0	f9811e4e687f	golang.org/x/net@v0.20.0 stdlib@go1.21.8	0.23.0 1.21.9
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.23.0 1.21.9

Open the chart page →

7,396

giteamya

23.12.5

1 of 1 See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
gitea/gitea :1.21.6	ac73e0da341f	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.23.0 1.21.9

Open the chart page →

3,436

redismya

22.4.10

1 of 2 See more

redis mya 22.4.10

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.21.9

Open the chart page →

1,050

redis-queuemya

22.4.6

1 of 2 See more

redis-queue mya 22.4.6

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.21.9

Open the chart page →

1,050

redis-raftmya

22.5.4

1 of 2 See more

redis-raft mya 22.5.4

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.21.9

Open the chart page →

1,050

myhelmappmyhelmapp

0.1.1

1 of 1 See more

myhelmapp myhelmapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
tobirachel/node-project3 :v1	7d9f37154994	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.17.5	0.23.0 1.21.9

Open the chart page →

3,368

Practica_4_helmmy-heml-app

0.1.0

3 of 7 See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.23.0 1.21.9
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.21.9
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.21.9

Open the chart page →

27,906

influxdbmy-personal-influxdb2

0.1.0

1 of 1 See more

influxdb my-personal-influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/influxdb :2.7	b8d940ca9376	stdlib@go1.18.2	1.21.9

Open the chart page →

3,915

phonebook-chartmy-phonebook-chart

0.1.0

1 of 3 See more

phonebook-chart my-phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9

Open the chart page →

3,032

Container images carrying it

2,572 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/cosmo-workspace/cosmo-controller-manager :v0.9.0	8c7fa5552028	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.23.0 1.21.9	1
ghcr.io/cosmo-workspace/cosmo-dashboard :v0.9.1	6a1c4a81a924	golang.org/x/net@v0.10.0 stdlib@go1.20.5	0.23.0 1.21.9	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	stdlib@go1.21.8	1.21.9	1
ghcr.io/crazy-max/samba :4.15.5	bed6f4ec2e82	stdlib@go1.17.2	1.21.9	1
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9	1
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.4	0.23.0 1.21.9	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.23.0 1.21.9	1
ghcr.io/debridmediamanager/zurg-testing :v0.9.3-final	5c47ef99443a	golang.org/x/net@v0.20.0	0.23.0	1
ghcr.io/decayofmind/kube-better-node :master	ccd2ce03b682	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.16.6	0.23.0 1.21.9	1
ghcr.io/deepch/rtsptoweb :v2.2.0	f9de3a1a5deb	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.23.0	1
ghcr.io/devhatro/clamav-api :1.0.2	ff0cd9db78d3	stdlib@go1.20.14	1.21.9	1
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.17	0.23.0 1.21.9	1
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	stdlib@go1.16.6	1.21.9	1
ghcr.io/dexidp/dex :v2.35.3	13964b29d63e	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.2	0.23.0 1.21.9	1
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/net@v0.11.0 stdlib@go1.19.6	0.23.0 1.21.9	1
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/net@v0.0.0-20210908191846-a5e095526f91 stdlib@go1.17.5	0.23.0 1.21.9	1
ghcr.io/djcass44/gitlab-goproxy :v0.1.8	a43323732181	golang.org/x/net@v0.10.0 stdlib@go1.21.0	0.23.0 1.21.9	1
ghcr.io/dodevops/azure-advanced-backup :0.4.0	1041d4449e49	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.17.9	0.23.0 1.21.9	1
ghcr.io/dodevops/scalyr-k8snode-manager :latest	fc39fcdd3968	stdlib@go1.18.1	1.21.9	1
ghcr.io/donkie/spoolman :0.24.0	42135965c42d	stdlib@go1.19.8	1.21.9	1
ghcr.io/doodlescheduling/k8s-pause :v0.1.1	6b3215e37738	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.8	0.23.0 1.21.9	1
ghcr.io/doodlescheduling/k8svault-controller :v0.2.0	627e5e211766	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea stdlib@go1.16.15	0.23.0 1.21.9	1
ghcr.io/douban/qiniu-exporter :main	d1da3bcfad7d	stdlib@go1.19.5	1.21.9	1
ghcr.io/dysnix/bitnami/mongodb :4.4.11-debian-10-r5	073116e61007	stdlib@go1.16.12	1.21.9	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781 stdlib@go1.16.7	0.23.0 1.21.9	1
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.23.0 1.21.9	1
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	stdlib@go1.19.8	1.21.9	1
ghcr.io/epinio/epinio-ui :v1.7.1-0.0.1	d3de52dfb0b4	golang.org/x/net@v0.0.0-20220826154423-83b083e8dc8b stdlib@go1.20	0.23.0 1.21.9	1
ghcr.io/estahn/k8s-image-swapper :1.5.10	2f5be9cde5f9	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.23.0 1.21.9	1
ghcr.io/eugenmayer/whatsmyip :0.0.1	4b6700cc0e2d	stdlib@go1.22.1	1.21.9	1
ghcr.io/eumel8/rancher-servicemonitor :0.2.1	f34428cac187	golang.org/x/net@v0.22.0 stdlib@go1.22.1	0.23.0 1.21.9	1
ghcr.io/external-secrets/external-secrets :v0.3.11	56a1ea4490ba	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.5	0.23.0 1.21.9	1
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	golang.org/x/net@v0.10.0 stdlib@go1.20.6	0.23.0 1.21.9	1
ghcr.io/ferama/rospo :v0.12.0	ab40c1745534	golang.org/x/net@v0.20.0 stdlib@go1.21.6	0.23.0 1.21.9	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.17.8	0.23.0 1.21.9	1
ghcr.io/fernferret/mediawiki-backup :v0.2.2	bbef381294ed	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.19.5	0.23.0 1.21.9	1
ghcr.io/fikaworks/grgate :v0.6.3	7104f60d8972	stdlib@go1.20.2	1.21.9	1
ghcr.io/flanksource/postgres :17.6-497383c	ebcf66281fc1	stdlib@go1.19.8	1.21.9	1
ghcr.io/flatcar/flatcar-linux-update-operator :v0.10.0-rc1	f9063e20b1f6	golang.org/x/net@v0.8.0 stdlib@go1.20.6	0.23.0 1.21.9	1
ghcr.io/flohansen/dasher-server :latest	7cde8c3fa2d1	golang.org/x/net@v0.22.0	0.23.0	1
ghcr.io/fluxcd/flagger-loadtester :0.39.0	6a8546993cb5	golang.org/x/net@v0.0.0-20181017193950-04a2e542c03f	0.23.0	1
ghcr.io/formancehq/console :console-on.v1.1.1	a4d32c2f68b3	stdlib@go1.20.12	1.21.9	1
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/net@v0.0.0-20220927171203-f486391704dc stdlib@go1.19.1	0.23.0 1.21.9	1
ghcr.io/formancehq/ledger :v1.9.2	03c1ddbda33b	golang.org/x/net@v0.4.0 stdlib@go1.18.10	0.23.0 1.21.9	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver :1.9.0	324f9b7b689c	golang.org/x/net@v0.17.0 stdlib@go1.22.0	0.23.0 1.21.9	1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver :1.9.0	cdba39e3f3d0	golang.org/x/net@v0.17.0 stdlib@go1.22.0	0.23.0 1.21.9	1
ghcr.io/g0dscookie/aptly :latest	edd095d3c0ee	stdlib@go1.18.3	1.21.9	1
ghcr.io/g0dscookie/icinga2 :2.13.5	da81246ccfc9	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d stdlib@go1.18.1	0.23.0 1.21.9	1
ghcr.io/gabe565/limo :latest	6dfdbc9853bb	stdlib@go1.20.12	1.21.9	1
ghcr.io/gabe565/matrimony :latest	d39a9d7c3e1b	stdlib@go1.22.0	1.21.9	1