StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,344
of 17,787 indexed, latest versions
Container images
1,663
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,344 of 17,787 indexed charts deploy, on 1,663 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,663
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,344 by stars
ChartLatestAffected imagesRadar Score
stash-enterpriseappscodeVerified publisher0.42.01 of 4See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,620
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

5,231
cert-exporterarzu3.0.11 of 1See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
joeelliott/cert-exporter:v2.7.0b4acd14642d0
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

2,819
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

10,731
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
assistiot/distributed_broker:1.0.033e02dad168f
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
assistiot/logging_auditing:1.0.0790dbb198e86
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

77,802
cso-proxyav1o-chartsVerified publisher0.1.31 of 1See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

4,298
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,391
kube-image-webhookav1o-chartsVerified publisher0.1.31 of 1See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,729
prismav1o-chartsVerified publisher0.3.11 of 1See more

prism av1o-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.gitlab.com/av1o/go-prism:4fdcff7d3870c28e5f024b6947cb552d4b956ee27a6f84b81c4e
google.golang.org/protobuf@v1.21.0
1.33.0

Open the chart page →

1,276
chirpstackbeeinventor0.1.103 of 5See more

chirpstack beeinventor 0.1.10

3 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
chirpstack/chirpstack-application-server:3.17.6e0b23dfd24d6
google.golang.org/protobuf@v1.25.0
1.33.0
chirpstack/chirpstack-gateway-bridge:3.13.2ce3f2cdca8a9
google.golang.org/protobuf@v1.25.0
1.33.0
chirpstack/chirpstack-network-server:3.16.1c98d7fe06bce
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

7,807
livekit-serverbeeinventor1.0.01 of 2See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.0.08391fd1b834f
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,602
cloudflare-tunnel-operatorbeezlabs0.2.01 of 1See more

cloudflare-tunnel-operator beezlabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/beezlabs-org/cloudflare-tunnel-operator:v0.1.09afcd070940f
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

1,595
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,900
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

13,513
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

7,239
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

5,108
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

7,239
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

2,908
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,042
fluxcd-webuiccowleyVerified publisher0.0.21 of 2See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
adrianberger/fluxcd-webui:latest76848c0d2780
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,509
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,067
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
google.golang.org/protobuf@v1.21.0
1.33.0

Open the chart page →

10,873
cloudbees-sidecar-injectorcloudbees2.3.32 of 2See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
cloudbees/cert-requester:2.3.31d44fb4f799b
google.golang.org/protobuf@v1.24.0
1.33.0
cloudbees/sidecar-injector:2.3.38f102ef0383a
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

3,268
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220202 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

2 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
google.golang.org/protobuf@v1.23.0
1.33.0
prom/prometheus:v2.21.0d43417c260e5
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

4,256
cnpg-sandboxcloudnative-pgVerified publisher0.6.13 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

3 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/grafana:8.3.5cd7cb4345aa7
google.golang.org/protobuf@v1.27.1
1.33.0
ghcr.io/cloudnative-pg/cloudnative-pg:1.17.14dd365800b62
google.golang.org/protobuf@v1.28.1
1.33.0
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

7,583
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell-operator:v0.8.9e43ad91f0684
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

3,958
cosmo-controller-managercosmoVerified publisher0.9.01 of 2See more

cosmo-controller-manager cosmo 0.9.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,927
cosmo-dashboardcosmoVerified publisher0.9.11 of 1See more

cosmo-dashboard cosmo 0.9.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,939
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

6,473
revadcs3orgOfficialVerified publisher1.6.11 of 1See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,704
cubefscubefs3.2.05 of 10See more

cubefs cubefs 3.2.0

5 of the 10 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/cubefs/cfs-csi-driver:3.2.0.150.08723616a976a
google.golang.org/protobuf@v1.26.0
1.33.0
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
google.golang.org/protobuf@v1.27.1
1.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.04fd21f36075b
google.golang.org/protobuf@v1.27.1
1.33.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/protobuf@v1.26.0
1.33.0
registry.k8s.io/sig-storage/csi-resizer:v1.3.06e0546563b18
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

15,891
CubeUniversecubeuniverseVerified publisher0.1.01 of 1See more

CubeUniverse cubeuniverse 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
tksky1/cubeuniverse:0.1alphaec7b889f380f
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,837
extendeddaemonsetdatadogVerified publisher0.3.31 of 1See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
datadog/extendeddaemonset:v0.8.0513a4377aed5
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,759
dbrepodbrepo1.13.32 of 25See more

dbrepo dbrepo 1.13.3

2 of the 25 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
google.golang.org/protobuf@v1.31.0
1.33.0
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

50,281
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,969
gripmockdeliveryheroVerified publisher1.1.31 of 1See more

gripmock deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
tkpd/gripmock:1.10.174441dadcfbd
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,793
kubedashdevopstalesOfficialVerified publisher4.0.02 of 8See more

kubedash devopstales 4.0.0

2 of the 8 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.22.48be660470961
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
sosedoff/pgweb:latesta5256d416e2e
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

9,239
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

5,599
dnsmasqdevplayer0Verified publisher0.1.51 of 2See more

dnsmasq devplayer0 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/kubelan:0.2.3b776dae45d08
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,392
calicodevtron0.1.13 of 4See more

calico devtron 0.1.1

3 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
google.golang.org/protobuf@v1.25.0
1.33.0
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
google.golang.org/protobuf@v1.25.0
1.33.0
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

10,073
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

6,237
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,238
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hipages/php-fpm_exporter:2.2.09b5be9d3d955
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

3,539
dnation-pingdnationcloud0.1.94 of 5See more

dnation-ping dnationcloud 0.1.9

4 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
google.golang.org/protobuf@v1.25.0
1.33.0
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
google.golang.org/protobuf@v1.23.0
1.33.0
prom/blackbox-exporter:v0.18.01ffc3f109eb3
google.golang.org/protobuf@v1.21.0
1.33.0
prom/prometheus:v2.21.0d43417c260e5
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

10,454
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,576
thermitedollarshaveclubOfficialVerified publisher0.1.171 of 1See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
dollarshaveclub/thermite:0.0.31663cbf25fcfe
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,732
karmadoubanVerified publisher1.9.21 of 1See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/prymitive/karma:v0.85d06892218680
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,017
dragonfly-stackdragonflyVerified publisher0.1.24 of 7See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
google.golang.org/protobuf@v1.31.0
1.33.0
dragonflyoss/manager:v2.1.49c3ef7f10698d
google.golang.org/protobuf@v1.31.0
1.33.0
dragonflyoss/scheduler:v2.1.49523785c77787
google.golang.org/protobuf@v1.31.0
1.33.0
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

18,402
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

3,658

Container images carrying it

1,663 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
uffizzi/uffizzi-cluster-operator:v1.4.514e528bbd926
google.golang.org/protobuf@v1.28.1
1.33.0
1
uffizzi/uffizzi-cluster-operator:v1.6.55ca448a08783
google.golang.org/protobuf@v1.28.1
1.33.0
1
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
1
vearch/vearch:3.3.40768af33f9d9
google.golang.org/protobuf@v1.30.0
1.33.0
1
velero/velero:v1.9.0277fbfaf8dcf
google.golang.org/protobuf@v1.26.0
1.33.0
1
velero/velero:v1.8.18d784580931c
google.golang.org/protobuf@v1.27.1
1.33.0
1
velero/velero-plugin-for-aws:v1.5.03d2ea7aab32d
google.golang.org/protobuf@v1.27.1
1.33.0
1
vikunja/api:0.17.18cba0520bf8c
google.golang.org/protobuf@v1.25.0
1.33.0
1
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
google.golang.org/protobuf@v1.31.0
1.33.0
1
vmware/kube-fluentd-operator:latestf028c138a5f4
google.golang.org/protobuf@v1.30.0
1.33.0
1
voltha/bbsim:1.16.7d90403d58016
google.golang.org/protobuf@v1.27.1
1.33.0
1
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
google.golang.org/protobuf@v1.27.1
1.33.0
1
voltha/bbsim-sadis-server:0.4.0762b272d439e
google.golang.org/protobuf@v1.27.1
1.33.0
1
vultr/cert-manager-webhook-vultr:v0.1.0541c3e0aec58
google.golang.org/protobuf@v1.24.0
1.33.0
1
vultr/vultr-cloud-controller-manager:v0.3.01806f17d620c
google.golang.org/protobuf@v1.25.0
1.33.0
1
vultr/vultr-csi:v0.3.041d26735d437
google.golang.org/protobuf@v1.27.1
1.33.0
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
google.golang.org/protobuf@v1.30.0
1.33.0
1
wallarm/ingress-ruby:4.2.1-195ea2632326c
google.golang.org/protobuf@v1.26.0
1.33.0
1
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
google.golang.org/protobuf@v1.26.0
1.33.0
1
wallarm/kong-kubernetes-ingress-controller:2.8b55ff6cecbd5
google.golang.org/protobuf@v1.28.1
1.33.0
1
wavefronthq/prometheus-storage-adapter:latestded77b38c7c6
google.golang.org/protobuf@v1.30.0
1.33.0
1
wavefronthq/wavefront-hpa-adapter:0.9.12af5fef9a4768
google.golang.org/protobuf@v1.26.0
1.33.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
google.golang.org/protobuf@v1.23.0
1.33.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
google.golang.org/protobuf@v1.28.1
1.33.0
1
wazuh/wazuh-manager:4.14.45a065930682d
google.golang.org/protobuf@v1.23.0
1.33.0
1
wazuh/wazuh-manager:4.14.3f09282d281f6
google.golang.org/protobuf@v1.23.0
1.33.0
1
wener/frpc:v0.37.0cc9fd4da44c0
google.golang.org/protobuf@v1.23.0
1.33.0
1
wener/frps:v0.37.05c92cc9e8597
google.golang.org/protobuf@v1.23.0
1.33.0
1
willnorris/imageproxy:latest21d0c90f4c31
google.golang.org/protobuf@v1.27.1
1.33.0
1
wuhan005/forklift:daemon4e6da210e449
google.golang.org/protobuf@v1.28.1
1.33.0
1
wuhan005/forklift:controllerbfbe82d59850
google.golang.org/protobuf@v1.28.1
1.33.0
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
google.golang.org/protobuf@v1.26.0
1.33.0
1
youssef11gaber10/deployment-auth-go:latest6597b26959d2
google.golang.org/protobuf@v1.30.0
1.33.0
1
zufardhiyaulhaq/community-operator-v2:v1.0.07f1bbbe114eb
google.golang.org/protobuf@v1.28.0
1.33.0
1
zufardhiyaulhaq/ngrok-operator:v1.3.07cf2ae3fb1fb
google.golang.org/protobuf@v1.26.0
1.33.0
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
google.golang.org/protobuf@v1.25.0
1.33.0
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
google.golang.org/protobuf@v1.28.1
1.33.0
1
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
google.golang.org/protobuf@v1.21.0
1.33.0
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
google.golang.org/protobuf@v1.23.0
1.33.0
1
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
google.golang.org/protobuf@v1.26.0
1.33.0
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
google.golang.org/protobuf@v1.27.1
1.33.0
1
gcr.io/google-samples/microservices-demo/cartservice:v0.2.3566733b4d2d5
google.golang.org/protobuf@v1.25.0
1.33.0
1
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
google.golang.org/protobuf@v1.25.0
1.33.0
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
google.golang.org/protobuf@v1.25.0
1.33.0
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
google.golang.org/protobuf@v1.25.0
1.33.0
1
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
google.golang.org/protobuf@v1.25.0
1.33.0
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
google.golang.org/protobuf@v1.25.0
1.33.0
1
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
google.golang.org/protobuf@v1.25.0
1.33.0
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
google.golang.org/protobuf@v1.26.0
1.33.0
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
google.golang.org/protobuf@v1.26.0
1.33.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.