CVE-2023-45288

High

Advisory

Published 3 Apr 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.920; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,154; of 17,797 indexed, latest versions
Container images: 2,571; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 2,154 of 17,797 indexed charts deploy, on 2,571 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.2.0-3.el8_9	1
golang-1.19deb	1.19.8-2	no fix listed	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+189 more	0.23.0	1,907
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+123 more	1.21.9	2,479

OSV records: DEBIAN-CVE-2023-45288 RHSA-2024:2699 GHSA-4v7x-pqxf-cx7m GO-2024-2687
Also known as: BIT-golang-2023-45288, RHSA-2024:4546

Charts affected

2,154 by stars

Chart

Latest

Affected images

Radar Score

dex-serverdex-server

1.19.1

1 of 3 See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.23.0 1.21.9

Open the chart page →

2,246

digispoof-interfacedigispoof-interface

1.0.0

1 of 3 See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9 stdlib@go1.13.10	0.23.0 1.21.9

Open the chart page →

7,788

matomodigitalist-open-cloud-matomo

12.0.20

1 of 3 See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
hipages/php-fpm_exporter :2.2.0	9b5be9d3d955	stdlib@go1.17.10	1.21.9

Open the chart page →

3,539

dnation-pingdnationcloud

0.1.9

4 of 5 See more

dnation-ping dnationcloud 0.1.9

4 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70 stdlib@go1.15.5	0.23.0 1.21.9
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.21.9
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9 stdlib@go1.15.2	0.23.0 1.21.9
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.15.2	0.23.0 1.21.9

Open the chart page →

10,470

docker-in-dockerdocker-in-docker

0.0.3

1 of 2 See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/docker :24.0.2-dind	1d148deae16a	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.23.0 1.21.9

Open the chart page →

2,585

thermitedollarshaveclub

0.1.17

1 of 1 See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.1	0.23.0 1.21.9

Open the chart page →

2,739

archerydouban

0.4.3

2 of 6 See more

archery douban 0.4.3

2 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
hanchuanchuan/goinception :latest	b3c0dd26fb50	stdlib@go1.22.1	1.21.9
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.6	0.23.0 1.21.9

Open the chart page →

5,861

karmadouban

1.9.2

1 of 1 See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.3	0.23.0 1.21.9

Open the chart page →

2,018

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	stdlib@go1.21.4	1.21.9

Open the chart page →

10,918

dragonfly-stackdragonfly

0.1.2

4 of 7 See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.23.0 1.21.9
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.23.0 1.21.9
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0 stdlib@go1.21.1	0.23.0 1.21.9
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

18,593

nydus-snapshotterdragonfly

0.0.10

1 of 2 See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0 stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

3,669

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	stdlib@go1.20.12	1.21.9

Open the chart page →

5,813

glideeinstack

0.0.2

1 of 1 See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.23.0 1.21.9

Open the chart page →

1,335

elchi-discoveryelchi

1.0.0

1 of 1 See more

elchi-discovery elchi 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
jhonbrownn/elchi-discovery :latest	8f6551ecc98c	golang.org/x/net@v0.13.0	0.23.0

Open the chart page →

638

elchi-stackelchi

1.13.0

3 of 10 See more

elchi-stack elchi 1.13.0

3 of the 10 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.21.9
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/net@v0.18.0 stdlib@go1.21.4	0.23.0 1.21.9
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0 stdlib@go1.21.1	0.23.0 1.21.9

Open the chart page →

15,567

navidromeemmas-charts

0.0.6

1 of 1 See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/net@v0.18.0 stdlib@go1.21.0	0.23.0 1.21.9

Open the chart page →

2,130

enbuildenbuild

0.0.50

1 of 6 See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.21.9

Open the chart page →

31,718

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.17.2	0.23.0 1.21.9

Open the chart page →

2,266

httpbingoestahn

0.1.1

1 of 1 See more

httpbingo estahn 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
mccutchen/go-httpbin :v2.2.2	5994403ef75b	stdlib@go1.16.2	1.21.9

Open the chart page →

1,359

genesis-generatorethereum-helm-charts

0.2.3

1 of 2 See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
skylenet/ethereum-genesis-generator :latest	210353ce7c89	stdlib@go1.17.13	1.21.9

Open the chart page →

3,136

ipfs-clusterethereum-helm-charts

0.1.14

2 of 3 See more

ipfs-cluster ethereum-helm-charts 0.1.14

2 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ipfs/kubo :latest	63f5502f7a01	stdlib@go1.19.8	1.21.9
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.19.3	0.23.0 1.21.9

Open the chart page →

4,633

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	stdlib@go1.19.8	1.21.9

Open the chart page →

11,534

event-exporterevent-exporter

0.1.17

1 of 1 See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
kubestar/event-exporter :latest	656606941255	golang.org/x/net@v0.17.0 stdlib@go1.20.14	0.23.0 1.21.9

Open the chart page →

1,210

events-exporterevents-exporter

0.0.4

1 of 1 See more

events-exporter events-exporter 0.0.4

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.19.5	0.23.0 1.21.9

Open the chart page →

2,135

github-actions-runner-operatorevryfs-oss

2.8.1

1 of 1 See more

github-actions-runner-operator evryfs-oss 2.8.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/net@v0.12.0 stdlib@go1.21.1	0.23.0 1.21.9

Open the chart page →

1,236

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.14.2	0.23.0 1.21.9

Open the chart page →

3,618

ecr-cleanupfairwinds-stable

1.2.8

1 of 1 See more

ecr-cleanup fairwinds-stable 1.2.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
danielfm/kube-ecr-cleanup-controller :0.1.10	12485563b1d0	golang.org/x/net@v0.7.0 stdlib@go1.19.6	0.23.0 1.21.9

Open the chart page →

1,004

featurehubfeaturehub

4.1.6

3 of 7 See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/nats :2.10.5-alpine	85319e5e541b	stdlib@go1.21.4	1.21.9
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.23.0 1.21.9
natsio/nats-server-config-reloader :0.13.0	b3359eeb10bf	stdlib@go1.20.5	1.21.9

Open the chart page →

8,248

fission-corefission-charts

1.14.1

3 of 3 See more

fission-core fission-charts 1.14.1

3 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
fission/fission-bundle :1.14.1	3fcfd8a0fa5d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.14	0.23.0 1.21.9
fission/pre-upgrade-checks :1.14.1	fa0f24cdb9cd	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.15.14	0.23.0 1.21.9
fission/reporter :1.14.1	04c6e06af175	stdlib@go1.15.14	1.21.9

Open the chart page →

7,107

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.23.0 1.21.9

Open the chart page →

3,314

free5gcfree5gc

0.1.3

11 of 12 See more

free5gc free5gc 0.1.3

11 of the 12 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
free5gc/amf :v3.4.3	1bc96ff5a2a6	stdlib@go1.21.8	1.21.9
free5gc/ausf :v3.4.3	687ff4daf5da	stdlib@go1.21.8	1.21.9
free5gc/chf :v3.4.3	e2a4dd98a4ed	stdlib@go1.21.8	1.21.9
free5gc/nrf :v3.4.3	99e46b860efb	stdlib@go1.21.8	1.21.9
free5gc/nssf :v3.4.3	dfe8c68c04b4	stdlib@go1.21.8	1.21.9
free5gc/pcf :v3.4.3	f712e8ecd927	stdlib@go1.21.8	1.21.9
free5gc/smf :v3.4.3	60e38baa4b10	stdlib@go1.21.8	1.21.9
free5gc/udm :v3.4.3	2f68df062a50	stdlib@go1.21.8	1.21.9
free5gc/udr :v3.4.3	c0783bcdcbdc	stdlib@go1.21.8	1.21.9
free5gc/upf :v3.4.3	b6b362a39fdd	stdlib@go1.21.8	1.21.9
free5gc/webui :v3.4.3	9adeb18492cb	stdlib@go1.21.8	1.21.9

Open the chart page →

10,711

fsmfsm

0.2.11

2 of 5 See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
flomesh/fsm-ingress-pipy :0.2.11	cc39c96711c4	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.23.0 1.21.9
flomesh/fsm-manager :0.2.11	22f849c70b25	golang.org/x/net@v0.10.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

4,227

dexgabibbo97

4.0.4

1 of 1 See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb stdlib@go1.16.2	0.23.0 1.21.9

Open the chart page →

3,398

gboxgbox

1.0.5

1 of 2 See more

gbox gbox 1.0.5

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
gboxproxy/gbox :v1.0.6	3a9f4a711d5c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.23.0 1.21.9

Open the chart page →

2,528

adguard-homegeek-cookbook

5.5.2

1 of 2 See more

adguard-home geek-cookbook 5.5.2

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.7	b9974aed13d0	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.17.9	0.23.0 1.21.9

Open the chart page →

1,742

alertmanager-botgeek-cookbook

6.4.2

1 of 1 See more

alertmanager-bot geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
metalmatze/alertmanager-bot :0.4.3	426bc2ca7586	golang.org/x/net@v0.0.0-20181213202711-891ebc4b82d6 stdlib@go1.13.15	0.23.0 1.21.9

Open the chart page →

3,587

bazarrgeek-cookbook

10.6.2

1 of 1 See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	stdlib@go1.16.8	1.21.9

Open the chart page →

17,432

filebrowsergeek-cookbook

1.4.2

1 of 1 See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
filebrowser/filebrowser :v2.18.0	4fcd47af573c	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b stdlib@go1.16.9	0.23.0 1.21.9

Open the chart page →

3,474

focalboardgeek-cookbook

4.4.2

1 of 1 See more

focalboard geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
mattermost/focalboard :0.9.0	31078df7a3c8	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.5	0.23.0 1.21.9

Open the chart page →

3,632

influxdb-exportergeek-cookbook

1.2.2

1 of 1 See more

influxdb-exporter geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
prom/influxdb-exporter :v0.9.0	f63fd77c05ee	stdlib@go1.17.8	1.21.9

Open the chart page →

1,051

network-ups-toolsgeek-cookbook

6.4.2

1 of 1 See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/network-ups-tools :v2.7.4-2479-g86a32237	cbd5d4cc1245	stdlib@go1.15	1.21.9

Open the chart page →

14,013

otel-collectorgeek-cookbook

1.2.2

1 of 1 See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.46.0	ba173aa85f3f	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.7	0.23.0 1.21.9

Open the chart page →

2,568

owncastgeek-cookbook

3.4.2

1 of 1 See more

owncast geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
gabekangas/owncast :0.0.7	97461aedb580	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758 stdlib@go1.15.2	0.23.0 1.21.9

Open the chart page →

3,167

protonmail-bridgegeek-cookbook

5.4.2

1 of 1 See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.15.12	0.23.0 1.21.9

Open the chart page →

8,048

prowlarrgeek-cookbook

4.5.2

1 of 1 See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	stdlib@go1.16.8	1.21.9

Open the chart page →

11,624

sabnzbdgeek-cookbook

9.4.2

1 of 1 See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sabnzbd :v3.3.1	c2d6e775db5a	stdlib@go1.15	1.21.9

Open the chart page →

10,295

sambageek-cookbook

6.2.2

1 of 1 See more

samba geek-cookbook 6.2.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/crazy-max/samba :4.15.5	bed6f4ec2e82	stdlib@go1.17.2	1.21.9

Open the chart page →

2,318

sonarrgeek-cookbook

16.3.2

1 of 1 See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	stdlib@go1.18.4	1.21.9

Open the chart page →

13,147

stashgeek-cookbook

3.4.2

1 of 1 See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
stashapp/stash :latest	24dbd7607174	golang.org/x/net@v0.0.0-20200822124328-c89045814202 stdlib@go1.13.15	0.23.0 1.21.9

Open the chart page →

15,910

uptime-kumageek-cookbook

1.4.2

1 of 1 See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.17.1	a4eab252e5a2	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.17.5	0.23.0 1.21.9

Open the chart page →

5,088

Container images carrying it

2,571 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
mcr.microsoft.com/oss/kubernetes-csi/csi-attacher :v2.2.0	f55f30876129	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.14	0.23.0 1.21.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-node-driver-registrar :v2.0.1	fc5d14e9f26f	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15	0.23.0 1.21.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-provisioner :v1.6.1	667b1b1ea1e4	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553 stdlib@go1.15.2	0.23.0 1.21.9	1
mcr.microsoft.com/oss/kubernetes-csi/csi-resizer :v1.1.0	7997e0f236bc	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.2	0.23.0 1.21.9	1
mcr.microsoft.com/oss/kubernetes-csi/livenessprobe :v2.2.0	b7d82802cca8	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.6	0.23.0 1.21.9	1
public.ecr.aws/aws-ec2/amazon-ec2-metadata-mock :v1.11.2	dd02d3569da0	stdlib@go1.17.13	1.21.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	golang.org/x/net@v0.2.0 stdlib@go1.19.5	0.23.0 1.21.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller :v2.0.0-beta	9637c80dd23f	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.3	0.23.0 1.21.9	1
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook :v2.0.0-beta	86b0f7243250	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f stdlib@go1.19.3	0.23.0 1.21.9	1
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller :1.0	67b89ae52240	golang.org/x/net@v0.0.0-20200707034311-ab3426394381 stdlib@go1.15.3	0.23.0 1.21.9	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-2021.08.13.20.34-linux-amd64	02aed3370fce	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.23.0 1.21.9	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r2-35-g41dc61e-2022.12.16.20.38	363bd65cd707	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.8	0.23.0 1.21.9	1
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.8	0.23.0 1.21.9	1
public.ecr.aws/boundless-software/switchblade :release-v0.0.19-lcm	01d8413d5075	golang.org/x/net@v0.21.0	0.23.0	1
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/net@v0.5.0 stdlib@go1.20	0.23.0 1.21.9	1
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.13	0.23.0 1.21.9	1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7 stdlib@go1.15.15	0.23.0 1.21.9	1
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4 stdlib@go1.14.9	0.23.0 1.21.9	1
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	golang.org/x/net@v0.1.0 stdlib@go1.19.3	0.23.0 1.21.9	1
public.ecr.aws/neuron/neuron-device-plugin :2.23.30.0	75a6d5ce3bd3	stdlib@go1.20.4	1.21.9	1
public.ecr.aws/neuron/neuron-scheduler :2.23.30.0	4cd274463e6b	stdlib@go1.20.4	1.21.9	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	stdlib@go1.20.2	1.21.9	1
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/net@v0.17.0 stdlib@go1.20.12	0.23.0 1.21.9	1
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	stdlib@go1.21.6	1.21.9	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.5	0.23.0 1.21.9	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.1	0.23.0 1.21.9	1
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	golang.org/x/net@v0.17.0 stdlib@go1.21.5	0.23.0 1.21.9	1
quay.io/aerokube/keygen :1.0.1	578934444f04	golang.org/x/net@v0.8.0 stdlib@go1.20.5	0.23.0 1.21.9	1
quay.io/aerokube/moon :2.5.1	a8837b00ba1c	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.23.0 1.21.9	1
quay.io/aerokube/moon-conf :2.5.1	9ca307b30080	golang.org/x/net@v0.7.0 stdlib@go1.20.4	0.23.0 1.21.9	1
quay.io/aerokube/moon-ui :2.0.5	89990b146824	golang.org/x/net@v0.11.0 stdlib@go1.20.5	0.23.0 1.21.9	1
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/net@v0.20.0 stdlib@go1.20.12	0.23.0 1.21.9	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	golang.org/x/net@v0.0.0-20220621193019-9d032be2e588 stdlib@go1.16.5	0.23.0 1.21.9	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/net@v0.17.0 stdlib@go1.20.4	0.23.0 1.21.9	1
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.23.0 1.21.9	1
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	golang.org/x/net@v0.10.0	0.23.0	1
quay.io/argoprojlabs/argocd-operator :v0.4.0	cf8faa986789	golang.org/x/net@v0.0.0-20220621193019-9d032be2e588 stdlib@go1.18.4	0.23.0 1.21.9	1
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.23.0 1.21.9	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.15.12	0.23.0 1.21.9	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4 stdlib@go1.18.4	0.23.0 1.21.9	1
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0 stdlib@go1.20.7	0.23.0 1.21.9	1
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.23.0 1.21.9	1
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/net@v0.17.0 stdlib@go1.21.3	0.23.0 1.21.9	1
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/net@v0.21.0 stdlib@go1.21.7	0.23.0 1.21.9	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a stdlib@go1.17.5	0.23.0 1.21.9	1
quay.io/chriscowley/openldap_exporter :v2.1.1	6c308e9732e1	stdlib@go1.15.7	1.21.9	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.23.0 1.21.9	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/net@v0.19.0 stdlib@go1.21.6	0.23.0 1.21.9	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.19.2	0.23.0 1.21.9	1
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de stdlib@go1.18.3	0.23.0 1.21.9	1