CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.013; 68th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,330; of 17,787 indexed, latest versions
Container images: 1,638; deployed by those charts
Fix available: 8 of 8; affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,330 of 17,787 indexed charts deploy, on 1,638 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/protobufgolang	v1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more	1.33.0	1,638
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-81.module+el8.10.0+21962+8143777b	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+21962+8143777b	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+21962+8143777b	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+21962+8143777b	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.10.0+21974+acd2159c	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.4-1.module+el8.10.0+21995+81e8507c	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+21962+8143777b	1

OSV records: GHSA-8r3f-844c-mc37 RHSA-2024:4246
Also known as: GO-2024-2611

Charts affected

1,330 by stars

Chart

Latest

Affected images

Radar Score

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	google.golang.org/protobuf@v1.28.0	1.33.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	google.golang.org/protobuf@v1.28.0	1.33.0
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

8,555

cni-hostnickubesphere-stable

0.1.0

1 of 1 See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,437

cranekubesphere-stable

0.5.2

3 of 3 See more

crane kubesphere-stable 0.5.2

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	google.golang.org/protobuf@v1.27.1	1.33.0
gocrane/crane-scheduler-controller :0.1.23	a2d7e60576f9	google.golang.org/protobuf@v1.27.1	1.33.0
gocrane/craned :v0.5.1	a1400909118c	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

8,883

csi-qingcloudkubesphere-stable

1.4.0

5 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/protobuf@v1.25.0	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

12,402

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	google.golang.org/protobuf@v1.28.1	1.33.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	google.golang.org/protobuf@v1.28.1	1.33.0
grafana/grafana :9.5.2	39c849cebccc	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

18,316

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	google.golang.org/protobuf@v1.30.0	1.33.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

4,096

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	google.golang.org/protobuf@v1.31.0	1.33.0
inaccel/reef :latest	c967218739f3	google.golang.org/protobuf@v1.32.0	1.33.0

Open the chart page →

5,759

iomeshkubesphere-stable

1.1.0

22 of 25 See more

iomesh kubesphere-stable 1.1.0

22 of the 25 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	google.golang.org/protobuf@v1.26.1-0.20210525005349-febffdd88e85	1.33.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	google.golang.org/protobuf@v1.27.1	1.33.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	google.golang.org/protobuf@v1.26.0	1.33.0
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/deck :v0.1.0	a31e26b6ae22	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/livenessprobe :v2.8.0	560f01510f99	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/localpv-manager :v0.2.0	f13deacac3f4	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/operator :v1.1.0	60081c9b2f52	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	google.golang.org/protobuf@v1.28.0	1.33.0
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/protobuf@v1.30.0	1.33.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

48,665

IOMeshkubesphere-stable

1.2.0

22 of 25 See more

IOMesh kubesphere-stable 1.2.0

22 of the 25 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/csi-driver :v2.8.0	1a151f602451	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	google.golang.org/protobuf@v1.27.1	1.33.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	google.golang.org/protobuf@v1.26.0	1.33.0
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/deck :v0.2.0	282d6c419ed3	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/livenessprobe :v2.8.0	560f01510f99	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/localpv-manager :v0.2.0	f13deacac3f4	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/operator :v1.2.0	ba4dd6be7e59	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	google.golang.org/protobuf@v1.28.0	1.33.0
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/protobuf@v1.30.0	1.33.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

46,341

pulsarkubesphere-stable

2.7.13

1 of 3 See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

14,320

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

1,588

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,437

csi-neonsankubesphere-test

1.3.0

5 of 6 See more

csi-neonsan kubesphere-test 1.3.0

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/protobuf@v1.25.0	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

18,475

csi-qingcloudkubesphere-test

1.4.0

5 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/protobuf@v1.25.0	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

12,402

online-boutiquekubesphere-test

0.1.0

7 of 11 See more

online-boutique kubesphere-test 0.1.0

7 of the 11 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

26,018

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	google.golang.org/protobuf@v1.23.0	1.33.0
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

4,329

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	google.golang.org/protobuf@v1.23.0	1.33.0

Open the chart page →

2,784

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

4,439

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

4,763

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

1,815

kubiya-runnerkubiya-helm-charts

0.9.4

2 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	google.golang.org/protobuf@v1.28.1	1.33.0
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

20,204

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	google.golang.org/protobuf@v1.32.0	1.33.0

Open the chart page →

3,421

kuperatorkusionstack

0.7.4

1 of 1 See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kusionstack/kuperator :v0.7.4	d2f72ae1d2f2	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

978

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

1,879

sample-operatorkusionstack

0.1.2

1 of 1 See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
chaerr/kridge :demo-operator-v0.1.2	66833deec017	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

2,463

metadockvalitetsit

0.0.7

2 of 2 See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-app :main	e89e351733ad	google.golang.org/protobuf@v1.26.0	1.33.0
kvalitetsit/metadoc-web :main	f57e7553f5bd	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

4,026

nsp-prometheus-exporterkvalitetsit

1.0.19

1 of 2 See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	google.golang.org/protobuf@v1.23.0	1.33.0

Open the chart page →

2,063

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	google.golang.org/protobuf@v1.23.0	1.33.0

Open the chart page →

26,356

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

2,113

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	google.golang.org/protobuf@v1.25.0	1.33.0
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

5 of 6 See more

prometheus lectures-k8sinfra 15.8.5

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	google.golang.org/protobuf@v1.23.0	1.33.0
prom/pushgateway :v1.4.2	a684e7c830a4	google.golang.org/protobuf@v1.26.0	1.33.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

9,092

prometheusleechistest

11.6.0

2 of 6 See more

prometheus leechistest 11.6.0

2 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.19.0	bfad037f95e5	google.golang.org/protobuf@v1.24.0	1.33.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	google.golang.org/protobuf@v1.22.0	1.33.0

Open the chart page →

8,484

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

4,271

kltlifecycle-toolkit

0.2.6

4 of 4 See more

klt lifecycle-toolkit 0.2.6

4 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v1.1.0	8fdd311a6d33	google.golang.org/protobuf@v1.28.1	1.33.0
ghcr.io/keptn/lifecycle-operator :v0.8.2	487bfc37c4b4	google.golang.org/protobuf@v1.31.0	1.33.0
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	google.golang.org/protobuf@v1.31.0	1.33.0
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

4,658

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	google.golang.org/protobuf@v1.23.0	1.33.0

Open the chart page →

4,418

op-scim-bridgelifen

1.0.3

1 of 2 See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0

Open the chart page →

2,777

op-scim-bridgelifen-charts

1.0.3

1 of 2 See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0

Open the chart page →

2,777

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

10,716

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,129

patch-operatorloafoe

0.11.3

1 of 2 See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/protobuf@v1.24.0	1.33.0

Open the chart page →

4,904

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

2,101

weather-app-chartlocal-weatherapp

0.1.0

1 of 4 See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
youssef11gaber10/deployment-auth-go :latest	6597b26959d2	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

5,905

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

3,225

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

3,086

license-serverloft

0.6.0

1 of 1 See more

license-server loft 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

803

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

2,444

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

3,112

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

3,225

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	google.golang.org/protobuf@v1.28.1	1.33.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

5,085

Container images carrying it

1,638 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
oryd/hydra :v2.2.0	2c93beb5e5f2	google.golang.org/protobuf@v1.31.0	1.33.0	3
prom/prometheus :v2.19.0	bfad037f95e5	google.golang.org/protobuf@v1.24.0	1.33.0	3
prom/pushgateway :v1.3.1	8305a33fb80a	google.golang.org/protobuf@v1.23.0	1.33.0	3
prom/statsd-exporter :v0.18.0	d23aca343b86	google.golang.org/protobuf@v1.24.0	1.33.0	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	google.golang.org/protobuf@v1.31.0	1.33.0	3
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	google.golang.org/protobuf@v1.26.0	1.33.0	3
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	google.golang.org/protobuf@v1.28.1	1.33.0	3
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	google.golang.org/protobuf@v1.25.0	1.33.0	3
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	google.golang.org/protobuf@v1.29.1	1.33.0	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	google.golang.org/protobuf@v1.28.0	1.33.0	3
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	google.golang.org/protobuf@v1.25.0	1.33.0	3
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	google.golang.org/protobuf@v1.25.0	1.33.0	3
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	google.golang.org/protobuf@v1.25.0	1.33.0	3
quay.io/devtron/clair :4.3.6	75fb847ac045	google.golang.org/protobuf@v1.26.0	1.33.0	3
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0	3
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	google.golang.org/protobuf@v1.27.1	1.33.0	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	google.golang.org/protobuf@v1.31.0	1.33.0	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	google.golang.org/protobuf@v1.25.0	1.33.0	3
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	google.golang.org/protobuf@v1.31.0	1.33.0	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	google.golang.org/protobuf@v1.28.1	1.33.0	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	google.golang.org/protobuf@v1.29.1	1.33.0	3
quay.io/devtron/nats-box :latest	48cdd3054b20	google.golang.org/protobuf@v1.28.1	1.33.0	3
quay.io/devtron/prometheus-nats-exporter :0.9.0	94044746cbce	google.golang.org/protobuf@v1.25.0	1.33.0	3
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	google.golang.org/protobuf@v1.27.1	1.33.0	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	google.golang.org/protobuf@v1.30.0	1.33.0	3
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	google.golang.org/protobuf@v1.26.0	1.33.0	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	google.golang.org/protobuf@v1.28.1	1.33.0	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	google.golang.org/protobuf@v1.30.0	1.33.0	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	google.golang.org/protobuf@v1.23.0	1.33.0	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	google.golang.org/protobuf@v1.30.0	1.33.0	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0	3
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	google.golang.org/protobuf@v1.26.0	1.33.0	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	google.golang.org/protobuf@v1.28.1	1.33.0	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	google.golang.org/protobuf@v1.25.0	1.33.0	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	google.golang.org/protobuf@v1.27.1	1.33.0	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	google.golang.org/protobuf@v1.29.0	1.33.0	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/protobuf@v1.24.0	1.33.0	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	google.golang.org/protobuf@v1.28.1	1.33.0	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	google.golang.org/protobuf@v1.30.0	1.33.0	3
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	google.golang.org/protobuf@v1.28.1	1.33.0	3
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	google.golang.org/protobuf@v1.28.1	1.33.0	3
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	google.golang.org/protobuf@v1.28.1	1.33.0	3
1password/scim :v2.3.1	29d0c6cb67eb	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	google.golang.org/protobuf@v1.26.0	1.33.0	2
altinity/metrics-exporter :0.21.2	df3d57215356	google.golang.org/protobuf@v1.26.0	1.33.0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	google.golang.org/protobuf@v1.31.0	1.33.0	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	google.golang.org/protobuf@v1.28.0	1.33.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	google.golang.org/protobuf@v1.27.1	1.33.0	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	google.golang.org/protobuf@v1.28.1	1.33.0	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	google.golang.org/protobuf@v1.26.0	1.33.0	2