CVE-2023-45288

High

Advisory

Published 3 Apr 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.920; 100th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,155; of 17,787 indexed, latest versions
Container images: 2,572; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 2,155 of 17,787 indexed charts deploy, on 2,572 images.

Affected package	Affected versions	Fixed in	Images
git-lfsrpm	2.13.3-3.el8_6	0:3.2.0-3.el8_9	1
golang-1.19deb	1.19.8-2	no fix listed	1
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+189 more	0.23.0	1,906
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+123 more	1.21.9	2,480

OSV records: DEBIAN-CVE-2023-45288 RHSA-2024:2699 GHSA-4v7x-pqxf-cx7m GO-2024-2687
Also known as: BIT-golang-2023-45288, RHSA-2024:4546

Charts affected

2,155 by stars

Chart

Latest

Affected images

Radar Score

wordpressdevops

0.12.0

1 of 4 See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.3	0abf60f81588	stdlib@go1.16.7	1.21.9

Open the chart page →

13,036

kyvernodevopstales

2.5.1

2 of 2 See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/kyverno/kyverno :v1.7.1	9c73f1841ebc	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.23.0 1.21.9
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	golang.org/x/net@v0.0.0-20220412020605-290c469a71a5 stdlib@go1.17.9	0.23.0 1.21.9

Open the chart page →

4,722

pushproxdevopstales

0.1.6

2 of 2 See more

pushprox devopstales 0.1.6

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
rancher/pushprox-client :v0.1.0-rancher2-client	a41cd716c412	stdlib@go1.16.4	1.21.9
rancher/pushprox-proxy :v0.1.0-rancher2-proxy	3126395b966c	stdlib@go1.16.4	1.21.9

Open the chart page →

3,754

devopsweeklydevopsweekly

2.1.0

1 of 1 See more

devopsweekly devopsweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/devopsweekly :v2.1.0	46625567fb60	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2 stdlib@go1.17.13	0.23.0 1.21.9

Open the chart page →

1,217

lxd8sdevplayer0

0.5.1

2 of 2 See more

lxd8s devplayer0 0.5.1

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e stdlib@go1.16.5	0.23.0 1.21.9
ghcr.io/devplayer0/lxd8s :0.3.1	e159ba41aede	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0 stdlib@go1.17	0.23.0 1.21.9

Open the chart page →

5,431

octolxddevplayer0

0.1.1

1 of 1 See more

octolxd devplayer0 0.1.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/octolxd :0.1.1	19b18fd97eab	stdlib@go1.16.6	1.21.9

Open the chart page →

2,525

argocddevtron

1.8.1

2 of 3 See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.23.0 1.21.9
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.9	0.23.0 1.21.9

Open the chart page →

10,468

argocd-certificate-refreshdevtron

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.17.13	0.23.0 1.21.9

Open the chart page →

12,999

argo-workflowdevtron

0.1.6

1 of 1 See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.23.0 1.21.9

Open the chart page →

1,580

calertdevtron

0.0.1

1 of 1 See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.21.9

Open the chart page →

4,688

devtron-enterprisedevtron

48.0.0

14 of 28 See more

devtron-enterprise devtron 48.0.0

14 of the 28 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.23.0 1.21.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.21.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.23.0 1.21.9
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.15	0.23.0 1.21.9
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.23.0 1.21.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.23.0 1.21.9
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.21.9
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.19.2	0.23.0 1.21.9
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.21.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.21.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.23.0 1.21.9
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.21.9
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	stdlib@go1.21.5	1.21.9

Open the chart page →

66,542

devtron-in-clustercddevtron

0.10.2

2 of 2 See more

devtron-in-clustercd devtron 0.10.2

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.23.0 1.21.9
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.23.0 1.21.9

Open the chart page →

5,041

devtron-logs-dumpdevtron

0.1.0

1 of 1 See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.23.0 1.21.9

Open the chart page →

4,969

dgraphdevtron

0.0.20

1 of 1 See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.23.0 1.21.9

Open the chart page →

11,957

discord-alertmanagerdevtron

0.10.0

1 of 1 See more

discord-alertmanager devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/discord-alertmanager :ceceb475-65-352	03586419ca31	stdlib@go1.18.1	1.21.9

Open the chart page →

951

jcmhproxy-ingressdevtron

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron 0.14.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

1,379

kube-prometheus-stackdevtron

19.3.0

3 of 6 See more

kube-prometheus-stack devtron 19.3.0

3 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.23.0 1.21.9
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.23.0 1.21.9
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.23.0 1.21.9

Open the chart page →

8,645

migration-incluster-cddevtron

0.10.0

1 of 1 See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.21.9

Open the chart page →

3,699

securitydevtron

0.2.2

1 of 1 See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.16.10	0.23.0 1.21.9

Open the chart page →

2,435

winter-soldierdevtron

0.10.6

1 of 1 See more

winter-soldier devtron 0.10.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

1,176

zincdevtron

0.1.2

1 of 1 See more

zinc devtron 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

1,507

argocddevtron-labs

1.8.1

2 of 3 See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127 stdlib@go1.14.12	0.23.0 1.21.9
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7 stdlib@go1.14.9	0.23.0 1.21.9

Open the chart page →

10,468

argocd-certificate-refreshdevtron-labs

0.10.8

1 of 1 See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10 stdlib@go1.17.13	0.23.0 1.21.9

Open the chart page →

12,999

argo-workflowdevtron-labs

0.1.6

1 of 1 See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0 stdlib@go1.19.8	0.23.0 1.21.9

Open the chart page →

1,580

calertdevtron-labs

0.0.1

1 of 1 See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	stdlib@go1.18	1.21.9

Open the chart page →

4,688

calicodevtron-labs

0.1.1

4 of 4 See more

calico devtron-labs 0.1.1

4 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.23.0 1.21.9
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.23.0 1.21.9
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.2	0.23.0 1.21.9
quay.io/devtron/calico-networking :pod2daemon-flexvol-v3.19.1	c1f36b6e18e0	stdlib@go1.15.2	1.21.9

Open the chart page →

10,073

clairdevtron-labs

0.1.14

1 of 2 See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d stdlib@go1.17.6	0.23.0 1.21.9

Open the chart page →

6,237

devtron-enterprisedevtron-labs

48.0.0

14 of 28 See more

devtron-enterprise devtron-labs 48.0.0

14 of the 28 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.23.0 1.21.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.21.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.23.0 1.21.9
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0 stdlib@go1.20.10	0.23.0 1.21.9
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b stdlib@go1.14.15	0.23.0 1.21.9
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.23.0 1.21.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.23.0 1.21.9
quay.io/devtron/nats :2.9.3-alpine	f0cf3c3ab495	stdlib@go1.19.2	1.21.9
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c stdlib@go1.19.2	0.23.0 1.21.9
quay.io/devtron/nats-server-config-reloader :0.6.2	b5252e783fb2	stdlib@go1.15.14	1.21.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.21.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.23.0 1.21.9
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	stdlib@go1.16.15	1.21.9
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	stdlib@go1.21.5	1.21.9

Open the chart page →

66,542

devtron-in-clustercddevtron-labs

0.10.2

2 of 2 See more

devtron-in-clustercd devtron-labs 0.10.2

2 of the 2 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924 stdlib@go1.15.7	0.23.0 1.21.9
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0 stdlib@go1.20.7	0.23.0 1.21.9

Open the chart page →

5,041

devtron-logs-dumpdevtron-labs

0.1.0

1 of 1 See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0 stdlib@go1.20.4	0.23.0 1.21.9

Open the chart page →

4,969

devtron-operatordevtron-labs

0.23.3

7 of 11 See more

devtron-operator devtron-labs 0.23.3

7 of the 11 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.23.0 1.21.9
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.21.9
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.23.0 1.21.9
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.23.0 1.21.9
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.23.0 1.21.9
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.21.9
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.23.0 1.21.9

Open the chart page →

31,447

dgraphdevtron-labs

0.0.20

1 of 1 See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974 stdlib@go1.17.3	0.23.0 1.21.9

Open the chart page →

11,957

jcmhproxy-ingressdevtron-labs

0.14.6

1 of 1 See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0 stdlib@go1.19.13	0.23.0 1.21.9

Open the chart page →

1,379

kube-prometheus-stackdevtron-labs

19.3.0

3 of 6 See more

kube-prometheus-stack devtron-labs 19.3.0

3 of the 6 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.17	0.23.0 1.21.9
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b stdlib@go1.16	0.23.0 1.21.9
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.7	0.23.0 1.21.9

Open the chart page →

8,645

migration-incluster-cddevtron-labs

0.10.0

1 of 1 See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.21.9

Open the chart page →

3,699

securitydevtron-labs

0.2.2

1 of 1 See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d stdlib@go1.16.10	0.23.0 1.21.9

Open the chart page →

2,435

winter-soldierdevtron-labs

0.10.6

1 of 1 See more

winter-soldier devtron-labs 0.10.6

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.18.10	0.23.0 1.21.9

Open the chart page →

1,176

zincdevtron-labs

0.1.2

1 of 1 See more

zinc devtron-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b stdlib@go1.19.7	0.23.0 1.21.9

Open the chart page →

1,507

eoloplannerdfa-amm-eoloplanner

0.1.0

1 of 7 See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
oscarsotosanchez/weatherservice :v1.0	911ec961d10b	stdlib@go1.15.6	1.21.9

Open the chart page →

27,608

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/net@v0.20.0 stdlib@go1.20.6	0.23.0 1.21.9

Open the chart page →

19,063

digital-mobiusdigital-mobius

0.1.4

1 of 1 See more

digital-mobius digital-mobius 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
qoveryrd/digital-mobius :0.1.4	b30a9398a83c	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7 stdlib@go1.15.5	0.23.0 1.21.9

Open the chart page →

2,287

directusdirectus

0.9.10

1 of 4 See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
directus/directus :11.1.0	e3c8bb975350	stdlib@go1.20.7	1.21.9

Open the chart page →

4,551

adventurelogdjjudas21

0.1.1

1 of 3 See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
postgis/postgis :15-3.3	a2fc46b52819	stdlib@go1.18.2	1.21.9

Open the chart page →

7,480

hammonddjjudas21

0.3.9

1 of 1 See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.20.6	0.23.0 1.21.9

Open the chart page →

1,806

smokepingdjjudas21

0.1.3

1 of 1 See more

smokeping djjudas21 0.1.3

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
linuxserver/smokeping :2.8.2	b7f906899cd3	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.23.0

Open the chart page →

2,053

spoolmandjjudas21

0.1.8

1 of 1 See more

spoolman djjudas21 0.1.8

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ghcr.io/donkie/spoolman :0.24.0	42135965c42d	stdlib@go1.19.8	1.21.9

Open the chart page →

1,777

uptime-kumadjjudas21

1.5.18

1 of 1 See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.23.12	bc6f244ecf27	golang.org/x/net@v0.19.0 stdlib@go1.19.6	0.23.0 1.21.9

Open the chart page →

4,217

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

2 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	golang.org/x/net@v0.0.0-20221017152216-f25eb7ecb193 stdlib@go1.19.2	0.23.0 1.21.9
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/net@v0.1.0 stdlib@go1.19.2	0.23.0 1.21.9

Open the chart page →

21,455

ssl-exporterdnationcloud

1.2.1

1 of 1 See more

ssl-exporter dnationcloud 1.2.1

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
ribbybibby/ssl-exporter :2.4.2	718abe7f5e79	golang.org/x/net@v0.0.0-20220708220712-1185a9018129 stdlib@go1.18.3	0.23.0 1.21.9

Open the chart page →

1,632

snmp-exporterdniel

0.0.2

1 of 1 See more

snmp-exporter dniel 0.0.2

1 of the 1 container images this version deploys carry CVE-2023-45288.

Container image	Digest	Package	Fixed in
prom/snmp-exporter :v0.20.0	9d226d7de223	golang.org/x/net@v0.0.0-20200625001655-4c5254603344 stdlib@go1.15.8	0.23.0 1.21.9

Open the chart page →

2,126

Container images carrying it

2,572 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mysql :5.7	4bc6bc963e6d	stdlib@go1.18.2	1.21.9	22
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.21.9	14
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	golang.org/x/net@v0.7.0 stdlib@go1.18.10	0.23.0 1.21.9	13
library/mysql :8.0.28	fc77d54cacef	stdlib@go1.16.7	1.21.9	11
library/mongo :5.0.6-focal	8e70544b6c76	stdlib@go1.16.7	1.21.9	10
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.16.9	0.23.0 1.21.9	8
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/net@v0.20.0 stdlib@go1.21.7	0.23.0 1.21.9	8
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.23.0 1.21.9	8
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb stdlib@go1.15.5	0.23.0 1.21.9	7
wurstmeister/kafka :latest	2d4bbf9cc83d	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f stdlib@go1.17.10	0.23.0 1.21.9	7
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0 stdlib@go1.19.12	0.23.0 1.21.9	6
grafana/grafana :7.0.3	d72946c8e5d5	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2 stdlib@go1.14.3	0.23.0 1.21.9	6
library/registry :2 :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.21.9	6
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63 stdlib@go1.18.2	0.23.0 1.21.9	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	stdlib@go1.20.12	1.21.9	6
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420 stdlib@go1.16.6	0.23.0 1.21.9	6
quay.io/devtron/kubectl :latest	2ad610626658	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b stdlib@go1.18.5	0.23.0 1.21.9	6
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	golang.org/x/net@v0.10.0 stdlib@go1.19.9	0.23.0 1.21.9	6
quay.io/devtron/postgres :14.9	1b594392f7cb	stdlib@go1.18.2	1.21.9	6
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5 stdlib@go1.17.6	0.23.0 1.21.9	6
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120 stdlib@go1.14.4	0.23.0 1.21.9	6
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/net@v0.22.0 stdlib@go1.21.8	0.23.0 1.21.9	6
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0 :v2.8.1	f6717ce72a26	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.23.0 1.21.9	6
bitnamilegacy/kubectl :1.29.2	c74b703deed2	golang.org/x/net@v0.19.0 stdlib@go1.21.7	0.23.0 1.21.9	5
containous/whoami :latest :v1.5.0	7d6a3c8f9147	stdlib@go1.14	1.21.9	5
library/postgres :12	2f2a8c2a7d10	stdlib@go1.18.2	1.21.9	5
library/redis :7.4.2-alpine :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.21.9	5
library/redis :5 :5.0	fc5ecd863862	stdlib@go1.16.7	1.21.9	5
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0 stdlib@go1.21.3	0.23.0 1.21.9	5
postgis/postgis :latest	01a6a70e41e6	stdlib@go1.18.2	1.21.9	5
prom/alertmanager :v0.20.0	7e4e9f7a0954	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.5	0.23.0 1.21.9	5
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80 stdlib@go1.13.1	0.23.0 1.21.9	5
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.21.9	5
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946 stdlib@go1.13.3	0.23.0 1.21.9	5
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985 stdlib@go1.16.7	0.23.0 1.21.9	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230407	543c40fd0939	golang.org/x/net@v0.7.0 stdlib@go1.20.1	0.23.0 1.21.9	5
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	golang.org/x/net@v0.16.0 stdlib@go1.21.3	0.23.0 1.21.9	5
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16.2	0.23.0 1.21.9	5
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0 stdlib@go1.20.3	0.23.0 1.21.9	5
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1 stdlib@go1.16	0.23.0 1.21.9	4
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4 stdlib@go1.16	0.23.0 1.21.9	4
grafana/grafana :6.7.1	1ff3999e0fc0	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478 stdlib@go1.13.4	0.23.0 1.21.9	4
grafana/loki :2.6.1	1ee60f980950	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd stdlib@go1.17.9	0.23.0 1.21.9	4
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.23.0 1.21.9	4
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.23.0 1.21.9	4
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110 stdlib@go1.18.10	0.23.0 1.21.9	4
jaegertracing/jaeger-agent :1.53.0	0214a0ef24b1	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.23.0 1.21.9	4
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	stdlib@go1.18.2	1.21.9	4
jaegertracing/jaeger-collector :1.53.0	7f1269222903	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.23.0 1.21.9	4
jaegertracing/jaeger-query :1.53.0	049bb0d64ea3	golang.org/x/net@v0.19.0 stdlib@go1.21.5	0.23.0 1.21.9	4