StackRadar

CVE-2024-21664

Medium

Advisory

Published 9 Jan 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.009
57th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
56
of 17,781 indexed, latest versions
Container images
58
deployed by those charts
Fix available
2 of 2
affected packages

Parsing JSON serialized payload without protected field can lead to segfault

Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 58 images.

Affected packageAffected versionsFixed inImages
github.com/lestrrat-go/jwxgolangv1.1.5, v1.1.7, v1.2.0, v1.2.1+10 more1.2.2853
github.com/lestrrat-go/jwx/v2golangv2.0.8, v2.0.11, v2.0.162.0.195
OSV records
GHSA-pvcr-v8j8-j5q3
Also known as
GO-2024-2454

Charts affected

56 by stars
ChartLatestAffected imagesRadar Score
external-secretsstakaterVerified publisher0.3.12-40dbdfc1 of 1See more

external-secrets stakater 0.3.12-40dbdfc

1 of the 1 container images this version deploys carry CVE-2024-21664.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
github.com/lestrrat-go/jwx@v1.2.1
1.2.28

Open the chart page →

2,081
traefik-jwt-decodetraefik-jwt-decode0.1.01 of 1See more

traefik-jwt-decode traefik-jwt-decode 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-21664.

Container imageDigestPackageFixed in
simonschneider/traefik-jwt-decode:latestd674ac370f80
github.com/lestrrat-go/jwx@v1.2.6
1.2.28

Open the chart page →

1,310
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-21664.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/lestrrat-go/jwx@v1.2.25
1.2.28

Open the chart page →

4,960
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-21664.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
github.com/lestrrat-go/jwx@v1.2.25
1.2.28

Open the chart page →

6,232
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-21664.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/lestrrat-go/jwx@v1.2.7
1.2.28

Open the chart page →

6,138
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2024-21664.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/lestrrat-go/jwx@v1.2.27
1.2.28

Open the chart page →

14,983

Container images carrying it

58 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
istio/proxyv2:1.18.0757d28c24100
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
2
istio/proxyv2:1.10.3a78b7a165744
github.com/lestrrat-go/jwx@v1.1.5
1.2.28
2
minio/operator:v4.3.754393e03f3b2
github.com/lestrrat-go/jwx@v1.2.0
1.2.28
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
github.com/lestrrat-go/jwx@v1.2.26
1.2.28
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
github.com/lestrrat-go/jwx@v1.2.26
1.2.28
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
github.com/lestrrat-go/jwx@v1.2.26
1.2.28
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
2
bitnamilegacy/minio:2023.12.230b60b6565ab2
github.com/lestrrat-go/jwx@v1.2.27
1.2.28
1
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
github.com/lestrrat-go/jwx@v1.2.27
1.2.28
1
casbin/casdoor:v1.224.066f836ef778b
github.com/lestrrat-go/jwx@v1.2.21
1.2.28
1
deluan/navidrome:0.49.311a24da08977
github.com/lestrrat-go/jwx/v2@v2.0.8
2.0.19
1
deluan/navidrome:0.50.02cf4442b0099
github.com/lestrrat-go/jwx/v2@v2.0.16
2.0.19
1
deluan/navidrome:0.43.04e9ae3bff6aa
github.com/lestrrat-go/jwx@v1.2.0
1.2.28
1
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
inseefrlab/shelly:cloudshell31f04ca7436b
github.com/lestrrat-go/jwx@v1.2.27
1.2.28
1
instill/api-gateway:9bfdc88b53eaa51c523
github.com/lestrrat-go/jwx/v2@v2.0.11
2.0.19
1
istio/operator:1.10.3655eefa11c84
github.com/lestrrat-go/jwx@v1.1.5
1.2.28
1
istio/operator:1.12.06cfce8a071b9
github.com/lestrrat-go/jwx@v1.2.0
1.2.28
1
istio/operator:1.18.270f9d1fe5fff
github.com/lestrrat-go/jwx@v1.2.26
1.2.28
1
istio/pilot:1.16.0ac0284d75ec9
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
istio/pilot:1.17.1ce9d87606701
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
istio/pilot:1.15.2db08d6963975
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
istio/pilot:1.10.3e7e110a421c2
github.com/lestrrat-go/jwx@v1.1.5
1.2.28
1
istio/proxyv2:1.14.1df69c1a7af7c
github.com/lestrrat-go/jwx@v1.2.23
1.2.28
1
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
github.com/lestrrat-go/jwx@v1.2.14
1.2.28
1
minio/mc:RELEASE.2024-01-16T16-06-34Z591b097ea2d4
github.com/lestrrat-go/jwx@v1.2.27
1.2.28
1
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/lestrrat-go/jwx@v1.2.7
1.2.28
1
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/lestrrat-go/jwx@v1.2.27
1.2.28
1
minio/minio:RELEASE.2024-01-18T22-51-28Z551682a57a94
github.com/lestrrat-go/jwx@v1.2.27
1.2.28
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
github.com/lestrrat-go/jwx@v1.2.26
1.2.28
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
minio/operator:v5.0.9170b154d2c61
github.com/lestrrat-go/jwx@v1.2.26
1.2.28
1
sarwansharma/minio:v359d1da9385d1
github.com/lestrrat-go/jwx@v1.2.19
1.2.28
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
simonschneider/traefik-jwt-decode:latestd674ac370f80
github.com/lestrrat-go/jwx@v1.2.6
1.2.28
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
github.com/lestrrat-go/jwx@v1.2.0
1.2.28
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
github.com/lestrrat-go/jwx@v1.2.0
1.2.28
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/lestrrat-go/jwx@v1.2.26
1.2.28
1
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
github.com/lestrrat-go/jwx/v2@v2.0.11
2.0.19
1
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
github.com/lestrrat-go/jwx@v1.2.1
1.2.28
1
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
github.com/lestrrat-go/jwx@v1.1.7
1.2.28
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
github.com/lestrrat-go/jwx/v2@v2.0.8
2.0.19
1
quay.io/fiware/vcverifier:2.0.1cd36290dc849
github.com/lestrrat-go/jwx@v1.2.25
1.2.28
1
quay.io/minio/mc:RELEASE.2024-01-11T05-49-32Z026ae522febc
github.com/lestrrat-go/jwx@v1.2.27
1.2.28
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.