StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,330
of 17,781 indexed, latest versions
Container images
1,638
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,330 of 17,781 indexed charts deploy, on 1,638 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,638
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,330 by stars
ChartLatestAffected imagesRadar Score
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

1,445
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.11.031c02aac089a
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

23,894
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
google.golang.org/protobuf@v1.30.0
1.33.0
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

2,883
aws-for-fluent-bitaws0.2.01 of 1See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit:3.2.1a480a1241720
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

252
vpafairwinds-stableVerified publisher5.0.11 of 4See more

vpa fairwinds-stable 5.0.1

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,233
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,059
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,367
rocketchatrocketchat-server7.0.21 of 12See more

rocketchat rocketchat-server 7.0.2

1 of the 12 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

12,279
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,103
solr-operatorapache-solrVerified publisher0.9.11 of 3See more

solr-operator apache-solr 0.9.1

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
pravega/zookeeper-operator:0.2.15b2bc4042fdd8
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

2,943
chaos-meshchaos-meshVerified publisher2.8.41 of 4See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

6,342
atlantisatlantis6.15.01 of 1See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,891
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

3,475
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

2,453
milvusmilvus4.0.314 of 5See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
google.golang.org/protobuf@v1.27.1
1.33.0
milvusdb/milvus:v2.2.13a3a55e1c1497
google.golang.org/protobuf@v1.30.0
1.33.0
milvusdb/milvus-config-tool:v0.1.12212dfb61401
google.golang.org/protobuf@v1.26.0
1.33.0
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

32,259
signozsignoz0.141.12 of 5See more

signoz signoz 0.141.1

2 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.21.2cd9252644ce0
google.golang.org/protobuf@v1.26.0
1.33.0
altinity/metrics-exporter:0.21.2df3d57215356
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

7,568
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

2,119
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
rancher/kubectl:v1.25.085a0d1148784
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

9,864
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,086
prometheus-msteamsprometheus-msteams1.3.61 of 1See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

941
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

4,154
oncallgrafana1.16.56 of 12See more

oncall grafana 1.16.5

6 of the 12 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.8.0e7b6203ccb37
google.golang.org/protobuf@v1.27.1
1.33.0
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
google.golang.org/protobuf@v1.27.1
1.33.0
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
google.golang.org/protobuf@v1.27.1
1.33.0
quay.io/jetstack/cert-manager-webhook:v1.8.0fd798a5a773e
google.golang.org/protobuf@v1.27.1
1.33.0
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
google.golang.org/protobuf@v1.28.0
1.33.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

11,384
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,556
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,918
hostpath-provisionerrimusz0.2.131 of 1See more

hostpath-provisioner rimusz 0.2.13

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/rimusz/hostpath-provisioner:v0.2.587f0398ec7ff
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

2,039
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

12,746
kube-starrockskube-starrocksOfficialVerified publisher1.11.71 of 1See more

kube-starrocks kube-starrocks 1.11.7

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
starrocks/operator:v1.11.78c20435a7579
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

556
linkerd-jaegerlinkerd2Verified publisher30.12.112 of 4See more

linkerd-jaeger linkerd2 30.12.11

2 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.3104d224a9999b
google.golang.org/protobuf@v1.27.1
1.33.0
otel/opentelemetry-collector:0.59.0ee9da0b08d83
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

4,405
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

6,854
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

5,173
glasskube-operatorglasskubeOfficialVerified publisher0.12.22 of 3See more

glasskube-operator glasskube 0.12.2

2 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
google.golang.org/protobuf@v1.31.0
1.33.0
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

11,933
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,346
vertical-pod-autoscalercluster-autoscaler0.12.01 of 4See more

vertical-pod-autoscaler cluster-autoscaler 0.12.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,062
aws-ebs-csi-driverdeliveryheroVerified publisher2.17.46 of 6See more

aws-ebs-csi-driver deliveryhero 2.17.4

6 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

6,483
loki-simple-scalablegrafana1.8.112 of 3See more

loki-simple-scalable grafana 1.8.11

2 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
google.golang.org/protobuf@v1.27.1
1.33.0
grafana/loki:2.6.11ee60f980950
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

6,470
prometheus-operatorarldkaVerified publisher13.0.11 of 2See more

prometheus-operator arldka 13.0.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,107
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.0.08a3a33cad0bd
google.golang.org/protobuf@v1.22.0
1.33.0

Open the chart page →

12,237
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.24.061d866e93b56
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

3,025
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

4,167
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

7,857
jaeger-all-in-onejaeger-all-in-oneVerified publisher0.1.121 of 1See more

jaeger-all-in-one jaeger-all-in-one 0.1.12

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.55f6b5d09073f1
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

1,216
purelbpurelb0.0.0-106-ipv6-lbip-052cedab1 of 2See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,413
kubeviewcowboysysopVerified publisher6.0.01 of 1See more

kubeview cowboysysop 6.0.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:0.1.31f8e7cd7325a3
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,513
devtron-operatordevtron0.23.35 of 11See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/protobuf@v1.27.1
1.33.0
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/protobuf@v1.25.0
1.33.0
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/protobuf@v1.28.0
1.33.0
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/protobuf@v1.28.1
1.33.0
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

32,902
drone-runner-kubedroneVerified publisher0.1.101 of 1See more

drone-runner-kube drone 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,067
temporallemontechVerified publisher0.37.05 of 13See more

temporal lemontech 0.37.0

5 of the 13 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0
prom/pushgateway:v1.4.2a684e7c830a4
google.golang.org/protobuf@v1.26.0
1.33.0
temporalio/server:1.22.4c0a44c26397b
google.golang.org/protobuf@v1.31.0
1.33.0
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

14,893
netris-controllernetrisai2.8.22 of 14See more

netris-controller netrisai 2.8.2

2 of the 14 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
google.golang.org/protobuf@v1.23.0
1.33.0
netrisai/controller-grpc:4.6.0.00753178bf173c2
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

30,326
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

17,245
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

5,630

Container images carrying it

1,638 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0
14
prom/pushgateway:v1.4.2a684e7c830a4
google.golang.org/protobuf@v1.26.0
1.33.0
8
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
google.golang.org/protobuf@v1.32.0
1.33.0
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
google.golang.org/protobuf@v1.22.0
1.33.0
8
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/protobuf@v1.27.1
1.33.0
7
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
google.golang.org/protobuf@v1.27.1
1.33.0
6
quay.io/devtron/dex:v2.30.22e4c14d1b444
google.golang.org/protobuf@v1.25.0
1.33.0
6
quay.io/devtron/kubectl:latest2ad610626658
google.golang.org/protobuf@v1.28.0
1.33.0
6
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
google.golang.org/protobuf@v1.28.1
1.33.0
6
quay.io/devtron/postgres_exporter:v0.10.13ea136843b2e
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
6
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
google.golang.org/protobuf@v1.21.0
1.33.0
6
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.0:v2.8.1f6717ce72a26
google.golang.org/protobuf@v1.28.1
1.33.0
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
google.golang.org/protobuf@v1.31.0
1.33.0
5
natsio/nats-box:0.14.1a67913df95f1
google.golang.org/protobuf@v1.31.0
1.33.0
5
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
google.golang.org/protobuf@v1.28.1
1.33.0
5
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
google.golang.org/protobuf@v1.26.0
1.33.0
5
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
google.golang.org/protobuf@v1.31.0
1.33.0
5
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/protobuf@v1.26.0
1.33.0
5
registry.k8s.io/sig-storage/csi-provisioner:v3.5.0d078dc174323
google.golang.org/protobuf@v1.30.0
1.33.0
5
csiplugin/csi-attacher:v3.2.160ab9b3e6a03
google.golang.org/protobuf@v1.26.0
1.33.0
4
csiplugin/csi-node-driver-registrar:v2.2.02dee3fe5fe86
google.golang.org/protobuf@v1.26.0
1.33.0
4
grafana/loki:2.6.11ee60f980950
google.golang.org/protobuf@v1.27.1
1.33.0
4
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
google.golang.org/protobuf@v1.32.0
1.33.0
4
jaegertracing/jaeger-collector:1.53.07f1269222903
google.golang.org/protobuf@v1.32.0
1.33.0
4
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
google.golang.org/protobuf@v1.32.0
1.33.0
4
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
google.golang.org/protobuf@v1.23.0
1.33.0
4
jimmidyson/configmap-reload:v0.8.05af9d3041d12
google.golang.org/protobuf@v1.28.1
1.33.0
4
rss3/op-geth:rss3-main-1ecad3026148aa1bc52
google.golang.org/protobuf@v1.27.1
1.33.0
4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
google.golang.org/protobuf@v1.30.0
1.33.0
4
quay.io/jetstack/cert-manager-cainjector:v1.13.172072d492b43
google.golang.org/protobuf@v1.31.0
1.33.0
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
google.golang.org/protobuf@v1.31.0
1.33.0
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
google.golang.org/protobuf@v1.31.0
1.33.0
4
quay.io/jetstack/cert-manager-webhook:v1.13.148ea4a77dfa7
google.golang.org/protobuf@v1.31.0
1.33.0
4
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
google.golang.org/protobuf@v1.28.1
1.33.0
4
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
google.golang.org/protobuf@v1.28.1
1.33.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20220916-gd32f8c34339c5b2e3310d
google.golang.org/protobuf@v1.26.0
1.33.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
google.golang.org/protobuf@v1.26.0
1.33.0
4
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.1.164d8c73dca98
google.golang.org/protobuf@v1.26.0
1.33.0
4
argoproj/argocd:v1.8.1830e86cacefd
google.golang.org/protobuf@v1.25.0
1.33.0
3
caddy/ingress:v0.2.118d1366fc0e9
google.golang.org/protobuf@v1.31.0
1.33.0
3
ciscolabs/rtsp-server:latestb59fc10bb821
google.golang.org/protobuf@v1.28.0
1.33.0
3
csiplugin/csi-resizer:v1.2.036c31f7e1f43
google.golang.org/protobuf@v1.26.0
1.33.0
3
csiplugin/csi-snapshotter:v4.0.051f2dfde5bcc
google.golang.org/protobuf@v1.25.0
1.33.0
3
dgraph/dgraph:v21.12.03b55ea83fffe
google.golang.org/protobuf@v1.26.0
1.33.0
3
grafana/grafana:8.2.500568d89c4f8
google.golang.org/protobuf@v1.27.1
1.33.0
3
grafana/promtail:2.4.2626900031c4e
google.golang.org/protobuf@v1.27.1
1.33.0
3
groundnuty/k8s-wait-for:v2.0c14d7271e401
google.golang.org/protobuf@v1.28.0
1.33.0
3
library/docker:20.10-dind:20-dindaf96c680a7e1
google.golang.org/protobuf@v1.28.1
1.33.0
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
google.golang.org/protobuf@v1.23.0
1.33.0
3

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.