StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,330
of 17,787 indexed, latest versions
Container images
1,638
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,330 of 17,787 indexed charts deploy, on 1,638 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,638
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,330 by stars
ChartLatestAffected imagesRadar Score
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,812
bc-depositorykubebb0.0.31 of 1See more

bc-depository kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,940
bc-explorerkubebb0.0.31 of 1See more

bc-explorer kubebb 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,940
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,267
cluster-componentkubebb0.2.24 of 4See more

cluster-component kubebb 0.2.2

4 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/cert-manager-cainjector:v1.8.0f83cd256229b
google.golang.org/protobuf@v1.27.1
1.33.0
kubebb/cert-manager-controller:v1.8.020509de4b399
google.golang.org/protobuf@v1.27.1
1.33.0
kubebb/cert-manager-webhook:v1.8.060d3cba0c267
google.golang.org/protobuf@v1.27.1
1.33.0
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

8,160
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,988
ingress-nginxkubebb4.7.02 of 2See more

ingress-nginx kubebb 4.7.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
google.golang.org/protobuf@v1.30.0
1.33.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,099
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

1,749
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,938
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
google.golang.org/protobuf@v1.28.1
1.33.0
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,459
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

6,490
tekton-operatorkubebb0.64.02 of 2See more

tekton-operator kubebb 0.64.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
google.golang.org/protobuf@v1.28.1
1.33.0
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

2,406
u4a-componentkubebb0.2.106 of 8See more

u4a-component kubebb 0.2.10

6 of the 8 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubebb/capsule-ce:v0.1.2-20221122a3dba2a95cef
google.golang.org/protobuf@v1.26.0
1.33.0
kubebb/iam-controller:v0.2.0-202401288ffbfa2d67e9
google.golang.org/protobuf@v1.28.0
1.33.0
kubebb/iam-provider:v0.2.0-202401280ba03fcee3a7
google.golang.org/protobuf@v1.28.0
1.33.0
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
google.golang.org/protobuf@v1.26.0
1.33.0
kubebb/oidc-server:v0.2.02b5894ef1e2f
google.golang.org/protobuf@v1.28.0
1.33.0
kubebb/resource-viewer:v0.2.065bb40b353db
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

13,819
weaviatekubebb16.3.01 of 1See more

weaviate kubebb 16.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
semitechnologies/weaviate:1.19.17a00d226f063
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,869
argo-workflowskubeblocksVerified publisher0.40.142 of 2See more

argo-workflows kubeblocks 0.40.14

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/protobuf@v1.31.0
1.33.0
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,871
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

2,299
chaos-meshkubeblocksVerified publisher2.7.24 of 4See more

chaos-mesh kubeblocks 2.7.2

4 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
google.golang.org/protobuf@v1.27.1
1.33.0
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
google.golang.org/protobuf@v1.31.0
1.33.0
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
google.golang.org/protobuf@v1.31.0
1.33.0
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

13,497
ciliumkubeblocksVerified publisher1.15.12 of 2See more

cilium kubeblocks 1.15.1

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/protobuf@v1.31.0
1.33.0
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

5,075
dt-platformkubeblocksVerified publisher0.1.21 of 1See more

dt-platform kubeblocks 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apecloud/dt-platform:0.1.1d48bcbd38066
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

879
geminikubeblocksVerified publisher0.13.41 of 8See more

gemini kubeblocks 0.13.4

1 of the 8 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

3,103
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

3,561
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,082
kubetrankubeblocksVerified publisher0.1.01 of 1See more

kubetran kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apecloud/kubetran-platform:latest32bd92c7f7fa
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,207
lokikubeblocksVerified publisher5.39.03 of 5See more

loki kubeblocks 5.39.0

3 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/agent-operator:v0.34.1045c9125634c
google.golang.org/protobuf@v1.30.0
1.33.0
grafana/loki:2.9.26074e01dbe03
google.golang.org/protobuf@v1.31.0
1.33.0
grafana/loki-canary:2.9.24249db29b992
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

5,841
metrics-serverkubeblocksVerified publisher3.12.01 of 1See more

metrics-server kubeblocks 3.12.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

1,131
nvidia-gpu-exporterkubeblocksVerified publisher0.3.11 of 1See more

nvidia-gpu-exporter kubeblocks 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
utkuozdemir/nvidia_gpu_exporter:0.3.0149f9e7e7aa3
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

4,462
openebskubeblocksVerified publisher3.10.03 of 3See more

openebs kubeblocks 3.10.0

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
google.golang.org/protobuf@v1.28.0
1.33.0
openebs/node-disk-operator:2.1.06afe2123c457
google.golang.org/protobuf@v1.28.0
1.33.0
openebs/provisioner-localpv:3.5.0aea39e49bb97
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

10,489
prometheuskubeblocksVerified publisher15.16.16 of 6See more

prometheus kubeblocks 15.16.1

6 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0
prom/pushgateway:v1.4.33496e0f85943
google.golang.org/protobuf@v1.26.0
1.33.0
quay.io/prometheus/alertmanager:v0.24.0088464f949de
google.golang.org/protobuf@v1.26.0
1.33.0
quay.io/prometheus/node-exporter:v1.3.1f2269e73124d
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
quay.io/prometheus/prometheus:v2.39.14748e26f9369
google.golang.org/protobuf@v1.28.1
1.33.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.5.009a36e2be1db
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

10,302
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

9,249
snapshot-controllerkubeblocksVerified publisher1.7.21 of 1See more

snapshot-controller kubeblocks 1.7.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/snapshot-controller:v6.2.198bab4eaf23c
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,128
victoria-metrics-alertkubeblocksVerified publisher0.8.3-reload2 of 3See more

victoria-metrics-alert kubeblocks 0.8.3-reload

2 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0
quay.io/prometheus/alertmanager:v0.25.0fd4d9a3dd1fd
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

3,715
kubeclaritykubeclarity2.23.32 of 5See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
google.golang.org/protobuf@v1.30.0
1.33.0
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

5,496
kubelet-summary-exporterkubelet-summary-exporter1.0.01 of 1See more

kubelet-summary-exporter kubelet-summary-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/salesforce/kubelet-summary-exporter:sha-c2bf90d377e09d2dd72
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,015
log-generatorkube-loggingVerified publisher0.6.01 of 1See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/log-generator:v0.6.08324bbc0ec08
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,269
logging-demokube-loggingVerified publisher4.0.31 of 1See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/kube-logging/log-generator:v0.4.105aa441b20aa
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,267
log-socketkube-loggingVerified publisher0.1.21 of 1See more

log-socket kube-logging 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/log-socket:latesta514736d2d4d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

1,220
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,157
lokikube-opsVerified publisher1.7.31 of 1See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/kube-ops/loki:2.2.14fbd63194674
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

2,646
promtailkube-opsVerified publisher1.5.11 of 2See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/kube-ops/promtail:2.2.134de6387233b
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,149
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
google.golang.org/protobuf@v1.29.1
1.33.0

Open the chart page →

3,622
servicegatewaykubernetes-replicator2.3.31 of 1See more

servicegateway kubernetes-replicator 2.3.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/mittwald/servicegateway:v2.3.3fa948df30d44
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

624
api-serverkubeshop0.11.161 of 2See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:0.11.160ad97f07a78b
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,417
kusk-gatewaykubeshop0.0.651 of 2See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway:v1.5.48b5bfd57a3ce
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

1,615
kusk-gateway-apikubeshop0.1.282 of 2See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubeshop/kusk-gateway-api:v1.5.4126c713cf7d8
google.golang.org/protobuf@v1.28.0
1.33.0
kubeshop/kusk-gateway-api-websocket:v1.5.43b4f8345ca5c
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

2,308
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,554
apisix-dashboardkubesphereVerified publisher0.3.01 of 1See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apache/apisix-dashboard:2.9.0c010ea7d1694
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,518
apisix-ingress-controllerkubesphereVerified publisher0.8.01 of 2See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:1.3.0412f92cde0b3
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

2,409
harborkubesphereVerified publisher1.9.35 of 11See more

harbor kubesphere 1.9.3

5 of the 11 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
goharbor/chartmuseum-photon:v2.5.36ab3ca28e9e5
google.golang.org/protobuf@v1.27.1
1.33.0
goharbor/harbor-core:v2.5.386bf3031f4a7
google.golang.org/protobuf@v1.27.1
1.33.0
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
google.golang.org/protobuf@v1.27.1
1.33.0
goharbor/harbor-registryctl:v2.5.37f82ed1e2635
google.golang.org/protobuf@v1.27.1
1.33.0
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

17,798
pvc-autoresizerkubesphereVerified publisher0.1.01 of 1See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubesphere/pvc-autoresizer:v0.19a18a16c7b87
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,562
storageclass-accessorkubesphereVerified publisher0.1.01 of 1See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubesphere/storageclass-accessor:v0.1.1eac8f273a9b6
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,509

Container images carrying it

1,638 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
google.golang.org/protobuf@v1.26.0
1.33.0
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
google.golang.org/protobuf@v1.32.0
1.33.0
2
containersol/locust_exporter:v0.4.1a914972d19ad
google.golang.org/protobuf@v1.23.0
1.33.0
2
crate/crate_adapter:latestb8d89fa5d19b
google.golang.org/protobuf@v1.26.0
1.33.0
2
cs3org/revad:v1.19.03b57a34a7dfd
google.golang.org/protobuf@v1.28.0
1.33.0
2
cs3org/revad:v1.24.0e80a4d67b352
google.golang.org/protobuf@v1.28.1
1.33.0
2
datawire/aes:1.14.48588eafe6862
google.golang.org/protobuf@v1.25.0
1.33.0
2
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
google.golang.org/protobuf@v1.25.0
1.33.0
2
drone/drone-runner-kube:1.0.0-rc.34359bf2bb3dc
google.golang.org/protobuf@v1.26.0
1.33.0
2
garugaru/aws-cloudwatch-exporter:latest541852cafda5
google.golang.org/protobuf@v1.23.0
1.33.0
2
goelankit/cortex-gateway:v1.1.00d9a82dcf026
google.golang.org/protobuf@v1.28.0
1.33.0
2
governify/dashboard:lateste83a17ba5038
google.golang.org/protobuf@v1.27.1
1.33.0
2
grafana/agent-operator:v0.25.1a136c6208aa3
google.golang.org/protobuf@v1.27.1
1.33.0
2
grafana/grafana:9.2.4057896e23443
google.golang.org/protobuf@v1.28.1
1.33.0
2
grafana/grafana:8.5.042d3e6bc1865
google.golang.org/protobuf@v1.27.1
1.33.0
2
grafana/grafana:7.3.5511bc20bfcd1
google.golang.org/protobuf@v1.25.0
1.33.0
2
grafana/loki:2.5.0f9ef133793af
google.golang.org/protobuf@v1.27.1
1.33.0
2
hashicorp/consul:1.14.2e38576edcdfd
google.golang.org/protobuf@v1.28.1
1.33.0
2
hashicorp/consul-k8s-control-plane:1.0.2538a3436398d
google.golang.org/protobuf@v1.28.1
1.33.0
2
hashicorp/vault:1.8.34db614d40d0e
google.golang.org/protobuf@v1.25.0
1.33.0
2
hashicorp/vault:1.15.26b4e5dadf082
google.golang.org/protobuf@v1.31.0
1.33.0
2
hashicorp/vault:1.12.18de4d5f31b38
google.golang.org/protobuf@v1.28.1
1.33.0
2
hashicorp/vault-k8s:1.3.15d74a885ae3e
google.golang.org/protobuf@v1.31.0
1.33.0
2
hashicorp/vault-k8s:1.1.0844337076b72
google.golang.org/protobuf@v1.28.1
1.33.0
2
hashicorp/vault-k8s:0.13.1bebb03e8e800
google.golang.org/protobuf@v1.26.0
1.33.0
2
honestica/kube-iptables-tailer:master-91a393242fb939
google.golang.org/protobuf@v1.23.0
1.33.0
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
google.golang.org/protobuf@v1.31.0
1.33.0
2
inaccel/daemon:latest093e1ea90ab8
google.golang.org/protobuf@v1.31.0
1.33.0
2
inaccel/reef:latestc967218739f3
google.golang.org/protobuf@v1.32.0
1.33.0
2
iomesh/csi-node-driver-registrar:v2.5.086f58b0a2106
google.golang.org/protobuf@v1.27.1
1.33.0
2
iomesh/csi-provisioner:v3.0.0f9508460b273
google.golang.org/protobuf@v1.26.0
1.33.0
2
iomesh/csi-snapshotter:v6.2.2becc53e25b96
google.golang.org/protobuf@v1.28.1
1.33.0
2
iomesh/livenessprobe:v2.8.0560f01510f99
google.golang.org/protobuf@v1.28.1
1.33.0
2
iomesh/localpv-manager:v0.2.0f13deacac3f4
google.golang.org/protobuf@v1.28.1
1.33.0
2
iomesh/node-disk-exporter:1.8.0f03148764f38
google.golang.org/protobuf@v1.25.0
1.33.0
2
iomesh/snapshot-controller:v6.2.2fb95b65bb88f
google.golang.org/protobuf@v1.28.1
1.33.0
2
iomesh/zookeeper-operator:0.2.159b38b5c7a61d
google.golang.org/protobuf@v1.28.0
1.33.0
2
istio/proxyv2:1.18.0757d28c24100
google.golang.org/protobuf@v1.30.0
1.33.0
2
istio/proxyv2:1.10.3a78b7a165744
google.golang.org/protobuf@v1.26.0
1.33.0
2
jaegertracing/all-in-one:1.3104d224a9999b
google.golang.org/protobuf@v1.27.1
1.33.0
2
jettech/kube-webhook-certgen:v1.5.0fb7c2cd46ccf
google.golang.org/protobuf@v1.24.0
1.33.0
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
google.golang.org/protobuf@v1.28.1
1.33.0
2
kubernetesui/dashboard:v2.2.0148991563e37
google.golang.org/protobuf@v1.25.0
1.33.0
2
kubespheredev/kube-webhook-certgen:v1.1.123a03c9c381f
google.golang.org/protobuf@v1.26.0
1.33.0
2
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
google.golang.org/protobuf@v1.28.0
1.33.0
2
langgenius/dify-sandbox:0.2.009b7e8705673
google.golang.org/protobuf@v1.32.0
1.33.0
2
library/influxdb:2.6.1-alpine44a366dd7724
google.golang.org/protobuf@v1.28.1
1.33.0
2
library/traefik:v2.57d5a6ae66572
google.golang.org/protobuf@v1.27.1
1.33.0
2
maxrocketinternet/soti-mobicontrol-exporter:0.61a281b76efa3
google.golang.org/protobuf@v1.21.0
1.33.0
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
google.golang.org/protobuf@v1.24.0
1.33.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.