StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,330
of 17,787 indexed, latest versions
Container images
1,638
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,330 of 17,787 indexed charts deploy, on 1,638 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,638
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,330 by stars
ChartLatestAffected imagesRadar Score
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,812
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,940
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,940
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,267
cluster-componentkubebb0.2.24 of 4See more

cluster-component kubebb 0.2.2

4 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/cert-manager-cainjector:v1.8.0f83cd256229b
google.golang.org/protobuf@v1.27.1
1.33.0
kubebb/cert-manager-controller:v1.8.020509de4b399
google.golang.org/protobuf@v1.27.1
1.33.0
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
google.golang.org/protobuf@v1.27.1
1.33.0
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

8,160
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,988
ingress-nginxkubebb4.7.02 of 2See more

ingress-nginx kubebb 4.7.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
google.golang.org/protobuf@v1.30.0
1.33.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,099
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

1,749
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,938
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
google.golang.org/protobuf@v1.28.1
1.33.0
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,459
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

6,490
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
google.golang.org/protobuf@v1.28.1
1.33.0
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

2,406
u4a-componentkubebb0.2.106 of 8See more

u4a-component kubebb 0.2.10

6 of the 8 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/capsule-ce:v0.1.2-20221122a3dba2a95cef
google.golang.org/protobuf@v1.26.0
1.33.0
kubebb/iam-controller:v0.2.0-202401288ffbfa2d67e9
google.golang.org/protobuf@v1.28.0
1.33.0
kubebb/iam-provider:v0.2.0-202401280ba03fcee3a7
google.golang.org/protobuf@v1.28.0
1.33.0
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
google.golang.org/protobuf@v1.26.0
1.33.0
kubebb/oidc-server:v0.2.02b5894ef1e2f
google.golang.org/protobuf@v1.28.0
1.33.0
kubebb/resource-viewer:v0.2.065bb40b353db
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

13,819
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,869
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/protobuf@v1.31.0
1.33.0
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,871
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

2,299
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
google.golang.org/protobuf@v1.27.1
1.33.0
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
google.golang.org/protobuf@v1.31.0
1.33.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
google.golang.org/protobuf@v1.31.0
1.33.0
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

13,497
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/protobuf@v1.31.0
1.33.0
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

5,075
dt-platformkubeblocksVerified publisher0.1.21 of 1See more

dt-platform kubeblocks 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apecloud/dt-platform:0.1.1d48bcbd38066
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

879
geminikubeblocksVerified publisher0.13.41 of 8See more

gemini kubeblocks 0.13.4

1 of the 8 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

3,103
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

3,561
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,082
kubetrankubeblocksVerified publisher0.1.01 of 1See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apecloud/kubetran-platform:latest32bd92c7f7fa
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,207
lokikubeblocksVerified publisher5.39.03 of 5See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.34.1045c9125634c
google.golang.org/protobuf@v1.30.0
1.33.0
grafana/loki:2.9.26074e01dbe03
google.golang.org/protobuf@v1.31.0
1.33.0
grafana/loki-canary:2.9.24249db29b992
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

5,841
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

1,131
nvidia-gpu-exporterkubeblocksVerified publisher0.3.11 of 1See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

4,462
openebskubeblocksVerified publisher3.10.03 of 3See more

openebs kubeblocks 3.10.0

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
google.golang.org/protobuf@v1.28.0
1.33.0
openebs/node-disk-operator:2.1.06afe2123c457
google.golang.org/protobuf@v1.28.0
1.33.0
openebs/provisioner-localpv:3.5.0aea39e49bb97
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

10,489
prometheuskubeblocksVerified publisher15.16.16 of 6See more

prometheus kubeblocks 15.16.1

6 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0
prom/pushgateway:v1.4.33496e0f85943
google.golang.org/protobuf@v1.26.0
1.33.0
quay.io/prometheus/alertmanager:v0.24.0088464f949de
google.golang.org/protobuf@v1.26.0
1.33.0
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
quay.io/prometheus/prometheus:v2.39.14748e26f9369
google.golang.org/protobuf@v1.28.1
1.33.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

10,302
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

9,249
snapshot-controllerkubeblocksVerified publisher1.7.21 of 1See more

snapshot-controller kubeblocks 1.7.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v6.2.198bab4eaf23c
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,128
victoria-metrics-alertkubeblocksVerified publisher0.8.3-reload2 of 3See more

victoria-metrics-alert kubeblocks 0.8.3-reload

2 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

3,715
kubeclaritykubeclarity2.23.32 of 5See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
google.golang.org/protobuf@v1.30.0
1.33.0
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

5,496
kubelet-summary-exporterkubelet-summary-exporter1.0.01 of 1See more

kubelet-summary-exporter kubelet-summary-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/salesforce/kubelet-summary-exporter:sha-c2bf90d377e09d2dd72
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,015
log-generatorkube-loggingVerified publisher0.6.01 of 1See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/log-generator:v0.6.08324bbc0ec08
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,269
logging-demokube-loggingVerified publisher4.0.31 of 1See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/log-generator:v0.4.105aa441b20aa
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,267
log-socketkube-loggingVerified publisher0.1.21 of 1See more

log-socket kube-logging 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/log-socket:latesta514736d2d4d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

1,220
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,157
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

2,646
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,149
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
google.golang.org/protobuf@v1.29.1
1.33.0

Open the chart page →

3,622
servicegatewaykubernetes-replicator2.3.31 of 1See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/mittwald/servicegateway:v2.3.3fa948df30d44
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

624
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:0.11.160ad97f07a78b
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,417
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

1,615
kusk-gateway-apikubeshop0.1.282 of 2See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-api:v1.5.4126c713cf7d8
google.golang.org/protobuf@v1.28.0
1.33.0
kubeshop/kusk-gateway-api-websocket:v1.5.43b4f8345ca5c
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

2,308
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,554
apisix-dashboardkubesphereVerified publisher0.3.01 of 1See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apache/apisix-dashboard:2.9.0c010ea7d1694
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,518
apisix-ingress-controllerkubesphereVerified publisher0.8.01 of 2See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:1.3.0412f92cde0b3
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

2,409
harborkubesphereVerified publisher1.9.35 of 11See more

harbor kubesphere 1.9.3

5 of the 11 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
google.golang.org/protobuf@v1.27.1
1.33.0
goharbor/harbor-core:v2.5.386bf3031f4a7
google.golang.org/protobuf@v1.27.1
1.33.0
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
google.golang.org/protobuf@v1.27.1
1.33.0
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
google.golang.org/protobuf@v1.27.1
1.33.0
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

17,798
pvc-autoresizerkubesphereVerified publisher0.1.01 of 1See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubesphere/pvc-autoresizer:v0.19a18a16c7b87
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,562
storageclass-accessorkubesphereVerified publisher0.1.01 of 1See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubesphere/storageclass-accessor:v0.1.1eac8f273a9b6
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,509

Container images carrying it

1,638 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/protobuf@v1.31.0
1.33.0
3
prom/prometheus:v2.19.0bfad037f95e5
google.golang.org/protobuf@v1.24.0
1.33.0
3
prom/pushgateway:v1.3.18305a33fb80a
google.golang.org/protobuf@v1.23.0
1.33.0
3
prom/statsd-exporter:v0.18.0d23aca343b86
google.golang.org/protobuf@v1.24.0
1.33.0
3
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
google.golang.org/protobuf@v1.31.0
1.33.0
3
ghcr.io/devplayer0/kubelan:0.2.3b776dae45d08
google.golang.org/protobuf@v1.26.0
1.33.0
3
public.ecr.aws/zinclabs/zinc:latestfefa9ee7256a
google.golang.org/protobuf@v1.28.1
1.33.0
3
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
google.golang.org/protobuf@v1.25.0
1.33.0
3
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
google.golang.org/protobuf@v1.29.1
1.33.0
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
google.golang.org/protobuf@v1.28.0
1.33.0
3
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
google.golang.org/protobuf@v1.25.0
1.33.0
3
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
google.golang.org/protobuf@v1.25.0
1.33.0
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
google.golang.org/protobuf@v1.25.0
1.33.0
3
quay.io/devtron/clair:4.3.675fb847ac045
google.golang.org/protobuf@v1.26.0
1.33.0
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
google.golang.org/protobuf@v1.27.1
1.33.0
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
google.golang.org/protobuf@v1.31.0
1.33.0
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
google.golang.org/protobuf@v1.25.0
1.33.0
3
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
google.golang.org/protobuf@v1.31.0
1.33.0
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
google.golang.org/protobuf@v1.28.1
1.33.0
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
google.golang.org/protobuf@v1.29.1
1.33.0
3
quay.io/devtron/nats-box:latest48cdd3054b20
google.golang.org/protobuf@v1.28.1
1.33.0
3
quay.io/devtron/prometheus-nats-exporter:0.9.094044746cbce
google.golang.org/protobuf@v1.25.0
1.33.0
3
quay.io/devtron/winter-soldier:abf5a822-196-14744093844c46c19
google.golang.org/protobuf@v1.27.1
1.33.0
3
quay.io/metallb/controller:v0.13.101b33357b3595
google.golang.org/protobuf@v1.30.0
1.33.0
3
quay.io/oliver006/redis_exporter:v1.35.1908dbee5c546
google.golang.org/protobuf@v1.26.0
1.33.0
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
google.golang.org/protobuf@v1.28.1
1.33.0
3
quay.io/prometheus/alertmanager:v0.26.0361db356b330
google.golang.org/protobuf@v1.30.0
1.33.0
3
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
google.golang.org/protobuf@v1.23.0
1.33.0
3
quay.io/prometheus/node-exporter:v1.6.181f94e50ea37
google.golang.org/protobuf@v1.30.0
1.33.0
3
quay.io/prometheus/node-exporter:v1.2.2a990408ed288
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
3
quay.io/prometheus-operator/prometheus-operator:v0.50.0ab4f480f2cc6
google.golang.org/protobuf@v1.26.0
1.33.0
3
quay.io/prometheus/prometheus:v2.41.01a3e9a878e50
google.golang.org/protobuf@v1.28.1
1.33.0
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
google.golang.org/protobuf@v1.25.0
1.33.0
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
google.golang.org/protobuf@v1.27.1
1.33.0
3
quay.io/prometheus/prometheus:v2.43.0f5c29683a301
google.golang.org/protobuf@v1.29.0
1.33.0
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
google.golang.org/protobuf@v1.24.0
1.33.0
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
google.golang.org/protobuf@v1.28.1
1.33.0
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
google.golang.org/protobuf@v1.30.0
1.33.0
3
registry.k8s.io/sig-storage/csi-attacher:v4.3.04eb73137b663
google.golang.org/protobuf@v1.28.1
1.33.0
3
registry.k8s.io/sig-storage/csi-resizer:v1.8.02e2b44393539
google.golang.org/protobuf@v1.28.1
1.33.0
3
registry.k8s.io/sig-storage/livenessprobe:v2.10.04dc0b87ccd69
google.golang.org/protobuf@v1.28.1
1.33.0
3
1password/scim:v2.3.129d0c6cb67eb
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
2
altinity/clickhouse-operator:0.21.2cd9252644ce0
google.golang.org/protobuf@v1.26.0
1.33.0
2
altinity/metrics-exporter:0.21.2df3d57215356
google.golang.org/protobuf@v1.26.0
1.33.0
2
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
google.golang.org/protobuf@v1.31.0
1.33.0
2
ayushsobti/kube-monkey:v0.5.24c94e8f8924e
google.golang.org/protobuf@v1.28.0
1.33.0
2
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
google.golang.org/protobuf@v1.27.1
1.33.0
2
bitnamilegacy/kubectl:1.26.4a0a972324d93
google.golang.org/protobuf@v1.28.1
1.33.0
2
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
google.golang.org/protobuf@v1.26.0
1.33.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.