StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,342
of 17,790 indexed, latest versions
Container images
1,661
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,342 of 17,790 indexed charts deploy, on 1,661 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,661
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,342 by stars
ChartLatestAffected imagesRadar Score
loki-proxygroundcover0.1.11 of 1See more

loki-proxy groundcover 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/loki-proxy:0.1.1783d550ad813
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,175
hakoniwahakoniwa0.1.01 of 1See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

338
matrix-media-repohalkeye1.0.51 of 1See more

matrix-media-repo halkeye 1.0.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,455
cert-manager-webhook-arvanhbahadorzadeh0.1.11 of 1See more

cert-manager-webhook-arvan hbahadorzadeh 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hbahadorzadeh/cert-manager-webhook-arvan:latestbf9756b3bc47
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

3,022
kubernetes-event-exporterhbahadorzadeh0.1.01 of 1See more

kubernetes-event-exporter hbahadorzadeh 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

2,630
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

23,472
hello_worldcharthellohelm0.1.01 of 1See more

hello_worldchart hellohelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
dockerdaemon0901/rolldice:v14e5bfe179c7e
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

848
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

4,547
logging-stackhelm-charts-alexis-carbillet0.1.04 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

4 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.25.1a136c6208aa3
google.golang.org/protobuf@v1.27.1
1.33.0
grafana/loki:2.6.11ee60f980950
google.golang.org/protobuf@v1.27.1
1.33.0
grafana/loki:2.8.2b1da1d23037e
google.golang.org/protobuf@v1.28.1
1.33.0
grafana/loki-canary:2.6.1ab2a2569307b
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.05 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

5 of the 11 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
google.golang.org/protobuf@v1.31.0
1.33.0
quay.io/prometheus/alertmanager:v0.26.0361db356b330
google.golang.org/protobuf@v1.30.0
1.33.0
quay.io/prometheus/node-exporter:v1.7.04cb2b9019f17
google.golang.org/protobuf@v1.31.0
1.33.0
quay.io/prometheus/pushgateway:v1.6.2979a69ab4a40
google.golang.org/protobuf@v1.31.0
1.33.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.1af8220f53493
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

9,461
aws-ebs-csi-driverhelm-charts-nr2.17.46 of 6See more

aws-ebs-csi-driver helm-charts-nr 2.17.4

6 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/external-attacher:v4.1.0-eks-1-25-latest701eea03388c
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/external-provisioner:v3.4.0-eks-1-25-latest460ee1a59fea
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/external-resizer:v1.7.0-eks-1-25-lateste711da25e7a0
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/livenessprobe:v2.9.0-eks-1-25-latest8a305e162caa
google.golang.org/protobuf@v1.28.1
1.33.0
public.ecr.aws/eks-distro/kubernetes-csi/node-driver-registrar:v2.7.0-eks-1-25-latestf4345e67df8f
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

6,485
aws-service-events-exporterhelm-charts-nr1.0.71 of 1See more

aws-service-events-exporter helm-charts-nr 1.0.7

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
thomasnyambati/aws-service-events-exporter:1.0.01e18a0944ceb
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

1,299
aws-service-quotas-exporterhelm-charts-nr0.1.41 of 1See more

aws-service-quotas-exporter helm-charts-nr 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
thoughtmachine/aws-service-quotas-exporter:v1.3.2c6065ba55c72
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

771
cortex-gatewayhelm-charts-nr0.1.91 of 1See more

cortex-gateway helm-charts-nr 0.1.9

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
goelankit/cortex-gateway:v1.1.00d9a82dcf026
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

2,234
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,969
gripmockhelm-charts-nr1.1.31 of 1See more

gripmock helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
tkpd/gripmock:1.10.174441dadcfbd
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,793
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

3,451
k8s-event-loggerhelm-charts-nr1.1.91 of 1See more

k8s-event-logger helm-charts-nr 1.1.9

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
maxrocketinternet/k8s-event-logger:2.111224534789d
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

864
kube-benchhelm-charts-nr0.1.171 of 1See more

kube-bench helm-charts-nr 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,623
node-local-dnshelm-charts-nr2.1.41 of 1See more

node-local-dns helm-charts-nr 2.1.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,128
prometheus-locust-exporterhelm-charts-nr1.2.31 of 1See more

prometheus-locust-exporter helm-charts-nr 1.2.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
containersol/locust_exporter:v0.4.1a914972d19ad
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

1,276
prometheus-soti-mobicontrol-exporterhelm-charts-nr1.0.31 of 1See more

prometheus-soti-mobicontrol-exporter helm-charts-nr 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
maxrocketinternet/soti-mobicontrol-exporter:0.61a281b76efa3
google.golang.org/protobuf@v1.21.0
1.33.0

Open the chart page →

1,644
prometheus-statsd-exporterhelm-charts-nr0.1.51 of 1See more

prometheus-statsd-exporter helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.18.0d23aca343b86
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

1,315
toxiproxyhelm-charts-nr1.3.91 of 2See more

toxiproxy helm-charts-nr 1.3.9

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/shopify/toxiproxy:2.7.0fc2d40f4904c
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

598
goshimmerhiveroad0.2.141 of 1See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
iotaledger/goshimmer:v0.8.6b02a8f77474f
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,544
cratedb-adapterhmdmph0.1.01 of 1See more

cratedb-adapter hmdmph 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
crate/crate_adapter:latestb8d89fa5d19b
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,913
printserverhmediadeVerified publisher1.0.22 of 4See more

printserver hmediade 1.0.2

2 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
google.golang.org/protobuf@v1.31.0
1.33.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

10,918
imageproxyhmphuVerified publisher0.1.11 of 1See more

imageproxy hmphu 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
willnorris/imageproxy:latest21d0c90f4c31
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,140
cert-managerhomeenterpriseinc1.10.13 of 3See more

cert-manager homeenterpriseinc 1.10.1

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-cainjector:v1.10.1b5657161d2c2
google.golang.org/protobuf@v1.28.1
1.33.0
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
google.golang.org/protobuf@v1.28.1
1.33.0
quay.io/jetstack/cert-manager-webhook:v1.10.164121721c665
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

4,720
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

3,615
cac-systemhuangchengwu-helm-chart0.1.07 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

7 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
google.golang.org/protobuf@v1.28.1
1.33.0
quay.io/jetstack/cert-manager-cainjector:v1.12.0e0a5b06b231c
google.golang.org/protobuf@v1.30.0
1.33.0
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
google.golang.org/protobuf@v1.30.0
1.33.0
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
google.golang.org/protobuf@v1.30.0
1.33.0
quay.io/jetstack/cert-manager-webhook:v1.12.0ec4306b243d9
google.golang.org/protobuf@v1.30.0
1.33.0
quay.io/metallb/controller:v0.13.101b33357b3595
google.golang.org/protobuf@v1.30.0
1.33.0
quay.io/metallb/speaker:v0.13.1000406ccb1fa0
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

11,190
prometheushuangchengwu-helm-chart0.1.01 of 3See more

prometheus huangchengwu-helm-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:9.2.0133d35d2c263
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

16,482
skywalking-v1huangchengwu-helm-chart0.1.01 of 4See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.9.1b4ec8c18d079
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

20,727
tdenginehuangchengwu-helm-chart3.0.21 of 1See more

tdengine huangchengwu-helm-chart 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
tdengine/tdengine:3.0.2.24140a4021ddb
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

3,753
vcverifieri4trustVerified publisher1.0.231 of 1See more

vcverifier i4trust 1.0.23

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/fiware/vcverifier:2.0.1cd36290dc849
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,784
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,902
ikigaiikigai-chartVerified publisher0.0.93 of 58See more

ikigai ikigai-chart 0.0.9

3 of the 58 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kuberay/operator:v1.0.04e6ac8a3a2c4
google.golang.org/protobuf@v1.27.1
1.33.0
rabbitmqoperator/cluster-operator:2.6.08651dd3cec51
google.golang.org/protobuf@v1.31.0
1.33.0
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

37,844
kore-boardimprowisedVerified publisher0.5.83 of 4See more

kore-board improwised 0.5.8

3 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
google.golang.org/protobuf@v1.28.0
1.33.0
ghcr.io/kore3lab/kore-board.metrics-scraper:v0.5.547f88b18fb7c
google.golang.org/protobuf@v1.26.0
1.33.0
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

16,226
fpga-cloudinaccelVerified publisher1.2.23 of 3See more

fpga-cloud inaccel 1.2.2

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
inaccel/cloud-init:latesta5d3d0af05c1
google.golang.org/protobuf@v1.32.0
1.33.0
inaccel/device-selector:latest44b4f274f40b
google.golang.org/protobuf@v1.31.0
1.33.0
inaccel/kubevirt-hack:latestbdfd61803a70
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

3,152
fpga-operatorinaccelVerified publisher2.8.22 of 7See more

fpga-operator inaccel 2.8.2

2 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
inaccel/daemon:latest093e1ea90ab8
google.golang.org/protobuf@v1.31.0
1.33.0
inaccel/reef:latestc967218739f3
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

5,759
chronografinfluxdata1.2.61 of 1See more

chronograf influxdata 1.2.6

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/chronograf:1.9.496d8a3f65a4f
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,198
l2gethinfradao0.0.11 of 1See more

l2geth infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ethereumoptimism/l2geth:0.5.315577036dc36d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,659
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

10,542
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

2,645
consulintelVerified publisher0.8.12 of 2See more

consul intel 0.8.1

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
google.golang.org/protobuf@v1.28.1
1.33.0
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

5,389
evi-consulintelVerified publisher3.0.32 of 2See more

evi-consul intel 3.0.3

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
google.golang.org/protobuf@v1.28.1
1.33.0
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

5,389
evi-kesintelVerified publisher3.0.31 of 1See more

evi-kes intel 3.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
minio/kes:2023-04-03T16-41-28Zf93c2d9088df
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,758

Container images carrying it

1,661 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kluster-manager/cluster-proxy:latest27a5c64b7ea8
google.golang.org/protobuf@v1.30.0
1.33.0
1
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/kore3lab/kore-board.backend:v0.5.5455f6e7a26fd
google.golang.org/protobuf@v1.28.0
1.33.0
1
ghcr.io/kore3lab/kore-board.metrics-scraper:v0.5.547f88b18fb7c
google.golang.org/protobuf@v1.26.0
1.33.0
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
google.golang.org/protobuf@v1.28.0
1.33.0
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/kubedb/kubedb-dashboard:v0.16.07bfe1c07bd9b
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/kubedb/kubedb-ops-manager:v0.27.1ec36422b09af
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/kubedb/kubedb-provisioner:v0.40.242574f512837
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/kubedb/kubedb-schema-manager:v0.16.09518de37eed5
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/kubedb/kubedb-webhook-server:v0.16.2e24894e32cbc
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
google.golang.org/protobuf@v1.30.0
1.33.0
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
google.golang.org/protobuf@v1.27.1
1.33.0
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
google.golang.org/protobuf@v1.27.1
1.33.0
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
google.golang.org/protobuf@v1.30.0
1.33.0
1
ghcr.io/kube-logging/log-generator:v0.4.105aa441b20aa
google.golang.org/protobuf@v1.26.0
1.33.0
1
ghcr.io/kube-logging/log-generator:v0.6.08324bbc0ec08
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/kube-logging/logging-operator:4.2.20dd85dcb1f73
google.golang.org/protobuf@v1.30.0
1.33.0
1
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
google.golang.org/protobuf@v1.28.0
1.33.0
1
ghcr.io/kvaps/linstor-ha-controller:v1.14.08e7b44bbd123
google.golang.org/protobuf@v1.24.0
1.33.0
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
google.golang.org/protobuf@v1.25.0
1.33.0
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
google.golang.org/protobuf@v1.28.0
1.33.0
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
google.golang.org/protobuf@v1.28.0
1.33.0
1
ghcr.io/kyverno/policy-reporter:2.14.1e74c6bf33d1b
google.golang.org/protobuf@v1.30.0
1.33.0
1
ghcr.io/leoquote/tencentcloud-exporter:masterca51b6bb15dd
google.golang.org/protobuf@v1.28.0
1.33.0
1
ghcr.io/leoquote/tencentcloud-info-exporter:maind523c2c010cd
google.golang.org/protobuf@v1.26.0
1.33.0
1
ghcr.io/liangyuanpeng/chirpstack-event-forward:v0.1.223dc6274cc4b
google.golang.org/protobuf@v1.27.1
1.33.0
1
ghcr.io/liangyuanpeng/waitfor:v1.0.0ca5a98cbed32
google.golang.org/protobuf@v1.27.1
1.33.0
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/loft-sh/license-server:0.6.069ce001bb4b0
google.golang.org/protobuf@v1.30.0
1.33.0
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
google.golang.org/protobuf@v1.30.0
1.33.0
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi:1.5ded797477896
google.golang.org/protobuf@v1.26.0
1.33.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
google.golang.org/protobuf@v1.32.0
1.33.0
1
ghcr.io/matrix-org/dendrite-monolith:v0.9.43267d27d392f
google.golang.org/protobuf@v1.27.1
1.33.0
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
google.golang.org/protobuf@v1.31.0
1.33.0
1
ghcr.io/middleware-labs/odigos-autoscaler:middleware-test-0.0.14aac0389614e4
google.golang.org/protobuf@v1.27.1
1.33.0
1
ghcr.io/middleware-labs/odigos-instrumentor:middleware-test-0.0.104ae1fc698a5
google.golang.org/protobuf@v1.27.1
1.33.0
1
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
google.golang.org/protobuf@v1.28.1
1.33.0
1
ghcr.io/middleware-labs/odigos-scheduler:middleware-test-0.0.109741c86aee7
google.golang.org/protobuf@v1.27.1
1.33.0
1
ghcr.io/middleware-labs/vision-autoscaler:middleware-test-0.0.231f7f89bc6585
google.golang.org/protobuf@v1.27.1
1.33.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.