CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.013; 68th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,330; of 17,787 indexed, latest versions
Container images: 1,638; deployed by those charts
Fix available: 8 of 8; affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,330 of 17,787 indexed charts deploy, on 1,638 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/protobufgolang	v1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more	1.33.0	1,638
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-81.module+el8.10.0+21962+8143777b	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+21962+8143777b	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+21962+8143777b	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+21962+8143777b	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.10.0+21974+acd2159c	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.4-1.module+el8.10.0+21995+81e8507c	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+21962+8143777b	1

OSV records: GHSA-8r3f-844c-mc37 RHSA-2024:4246
Also known as: GO-2024-2611

Charts affected

1,330 by stars

Chart

Latest

Affected images

Radar Score

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	google.golang.org/protobuf@v1.28.0	1.33.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	google.golang.org/protobuf@v1.28.0	1.33.0
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

8,555

cni-hostnickubesphere-stable

0.1.0

1 of 1 See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,437

cranekubesphere-stable

0.5.2

3 of 3 See more

crane kubesphere-stable 0.5.2

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	google.golang.org/protobuf@v1.27.1	1.33.0
gocrane/crane-scheduler-controller :0.1.23	a2d7e60576f9	google.golang.org/protobuf@v1.27.1	1.33.0
gocrane/craned :v0.5.1	a1400909118c	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

8,883

csi-qingcloudkubesphere-stable

1.4.0

5 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/protobuf@v1.25.0	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

12,402

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	google.golang.org/protobuf@v1.28.1	1.33.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	google.golang.org/protobuf@v1.28.1	1.33.0
grafana/grafana :9.5.2	39c849cebccc	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

18,316

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	google.golang.org/protobuf@v1.30.0	1.33.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

4,096

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	google.golang.org/protobuf@v1.31.0	1.33.0
inaccel/reef :latest	c967218739f3	google.golang.org/protobuf@v1.32.0	1.33.0

Open the chart page →

5,759

iomeshkubesphere-stable

1.1.0

22 of 25 See more

iomesh kubesphere-stable 1.1.0

22 of the 25 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	google.golang.org/protobuf@v1.26.1-0.20210525005349-febffdd88e85	1.33.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	google.golang.org/protobuf@v1.27.1	1.33.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	google.golang.org/protobuf@v1.26.0	1.33.0
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/deck :v0.1.0	a31e26b6ae22	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/livenessprobe :v2.8.0	560f01510f99	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/localpv-manager :v0.2.0	f13deacac3f4	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/operator :v1.1.0	60081c9b2f52	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	google.golang.org/protobuf@v1.28.0	1.33.0
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/protobuf@v1.30.0	1.33.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

48,665

IOMeshkubesphere-stable

1.2.0

22 of 25 See more

IOMesh kubesphere-stable 1.2.0

22 of the 25 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/csi-driver :v2.8.0	1a151f602451	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	google.golang.org/protobuf@v1.27.1	1.33.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	google.golang.org/protobuf@v1.26.0	1.33.0
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/deck :v0.2.0	282d6c419ed3	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/livenessprobe :v2.8.0	560f01510f99	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/localpv-manager :v0.2.0	f13deacac3f4	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	google.golang.org/protobuf@v1.25.0	1.33.0
iomesh/operator :v1.2.0	ba4dd6be7e59	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	google.golang.org/protobuf@v1.31.0	1.33.0
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	google.golang.org/protobuf@v1.28.1	1.33.0
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	google.golang.org/protobuf@v1.28.0	1.33.0
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	google.golang.org/protobuf@v1.30.0	1.33.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	google.golang.org/protobuf@v1.28.1	1.33.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

46,341

pulsarkubesphere-stable

2.7.13

1 of 3 See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

14,320

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

1,588

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,437

csi-neonsankubesphere-test

1.3.0

5 of 6 See more

csi-neonsan kubesphere-test 1.3.0

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/protobuf@v1.25.0	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

18,475

csi-qingcloudkubesphere-test

1.4.0

5 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	google.golang.org/protobuf@v1.26.0	1.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	google.golang.org/protobuf@v1.25.0	1.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

12,402

online-boutiquekubesphere-test

0.1.0

7 of 11 See more

online-boutique kubesphere-test 0.1.0

7 of the 11 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	google.golang.org/protobuf@v1.25.0	1.33.0
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

26,018

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	google.golang.org/protobuf@v1.23.0	1.33.0
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

4,329

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	google.golang.org/protobuf@v1.23.0	1.33.0

Open the chart page →

2,784

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

4,439

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

4,763

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

1,815

kubiya-runnerkubiya-helm-charts

0.9.4

2 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	google.golang.org/protobuf@v1.28.1	1.33.0
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

20,204

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	google.golang.org/protobuf@v1.32.0	1.33.0

Open the chart page →

3,421

kuperatorkusionstack

0.7.4

1 of 1 See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kusionstack/kuperator :v0.7.4	d2f72ae1d2f2	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

978

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

1,879

sample-operatorkusionstack

0.1.2

1 of 1 See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
chaerr/kridge :demo-operator-v0.1.2	66833deec017	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

2,463

metadockvalitetsit

0.0.7

2 of 2 See more

metadoc kvalitetsit 0.0.7

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kvalitetsit/metadoc-app :main	e89e351733ad	google.golang.org/protobuf@v1.26.0	1.33.0
kvalitetsit/metadoc-web :main	f57e7553f5bd	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

4,026

nsp-prometheus-exporterkvalitetsit

1.0.19

1 of 2 See more

nsp-prometheus-exporter kvalitetsit 1.0.19

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kvalitetsit/nsp-prometheus-exporter :1.0.19	0b397ff954ec	google.golang.org/protobuf@v1.23.0	1.33.0

Open the chart page →

2,063

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	google.golang.org/protobuf@v1.23.0	1.33.0

Open the chart page →

26,356

lagoon-docker-hostlagoon-charts

0.7.0

1 of 1 See more

lagoon-docker-host lagoon-charts 0.7.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

2,113

metallblectures-k8sinfra

0.10.2

2 of 2 See more

metallb lectures-k8sinfra 0.10.2

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.10.2	21164241c045	google.golang.org/protobuf@v1.25.0	1.33.0
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

5,406

prometheuslectures-k8sinfra

15.8.5

5 of 6 See more

prometheus lectures-k8sinfra 15.8.5

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	google.golang.org/protobuf@v1.23.0	1.33.0
prom/pushgateway :v1.4.2	a684e7c830a4	google.golang.org/protobuf@v1.26.0	1.33.0
quay.io/prometheus/alertmanager :v0.23.0	9ab73a421b65	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0
quay.io/prometheus/prometheus :v2.37.0	56e7f18e05dd	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

9,092

prometheusleechistest

11.6.0

2 of 6 See more

prometheus leechistest 11.6.0

2 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.19.0	bfad037f95e5	google.golang.org/protobuf@v1.24.0	1.33.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	google.golang.org/protobuf@v1.22.0	1.33.0

Open the chart page →

8,484

trivy-serverlemontech

0.1.0

1 of 1 See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.32.0	973d0df16189	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

4,271

kltlifecycle-toolkit

0.2.6

4 of 4 See more

klt lifecycle-toolkit 0.2.6

4 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/keptn/certificate-operator :v1.1.0	8fdd311a6d33	google.golang.org/protobuf@v1.28.1	1.33.0
ghcr.io/keptn/lifecycle-operator :v0.8.2	487bfc37c4b4	google.golang.org/protobuf@v1.31.0	1.33.0
ghcr.io/keptn/metrics-operator :v0.8.2	acf22310e9dd	google.golang.org/protobuf@v1.31.0	1.33.0
ghcr.io/keptn/scheduler :v0.8.2	0f7d277bb2b2	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

4,658

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	google.golang.org/protobuf@v1.23.0	1.33.0

Open the chart page →

4,418

op-scim-bridgelifen

1.0.3

1 of 2 See more

op-scim-bridge lifen 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0

Open the chart page →

2,777

op-scim-bridgelifen-charts

1.0.3

1 of 2 See more

op-scim-bridge lifen-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
1password/scim :v2.3.1	29d0c6cb67eb	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0

Open the chart page →

2,777

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

10,716

livekit-recorderlivekit-server

0.3.13

1 of 1 See more

livekit-recorder livekit-server 0.3.13

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
livekit/livekit-recorder :v0.3.13	ecf1409c75e0	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,129

patch-operatorloafoe

0.11.3

1 of 2 See more

patch-operator loafoe 0.11.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	google.golang.org/protobuf@v1.24.0	1.33.0

Open the chart page →

4,904

solgateloafoe

0.0.12

1 of 1 See more

solgate loafoe 0.0.12

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loafoe/solgate :v0.0.12	b3256cbc7b68	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

2,101

weather-app-chartlocal-weatherapp

0.1.0

1 of 4 See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
youssef11gaber10/deployment-auth-go :latest	6597b26959d2	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

5,905

devpod-proloft

0.0.0-ci.4-do-not-use

1 of 1 See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

3,225

kioskloft

0.2.11

1 of 1 See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
kiosksh/kiosk :0.2.11	501725ba2025	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

3,086

license-serverloft

0.6.0

1 of 1 See more

license-server loft 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/license-server :0.6.0	69ce001bb4b0	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

803

loft-agentloft

3.2.4

1 of 1 See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

2,444

loft-direct-cluster-endpointloft

1.14.0

1 of 1 See more

loft-direct-cluster-endpoint loft 1.14.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
loftsh/directclusterendpoint :1.14.0	310cc7d690f5	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

3,112

vcluster-control-planeloft

0.0.0-ci.4-do-not-use

1 of 1 See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

3,225

vcluster-proloft

0.0.0-ci-run.10

2 of 2 See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	google.golang.org/protobuf@v1.28.1	1.33.0
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

5,085

Container images carrying it

1,638 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	google.golang.org/protobuf@v1.26.0	1.33.0	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	google.golang.org/protobuf@v1.32.0	1.33.0	2
containersol/locust_exporter :v0.4.1	a914972d19ad	google.golang.org/protobuf@v1.23.0	1.33.0	2
crate/crate_adapter :latest	b8d89fa5d19b	google.golang.org/protobuf@v1.26.0	1.33.0	2
cs3org/revad :v1.19.0	3b57a34a7dfd	google.golang.org/protobuf@v1.28.0	1.33.0	2
cs3org/revad :v1.24.0	e80a4d67b352	google.golang.org/protobuf@v1.28.1	1.33.0	2
datawire/aes :1.14.4	8588eafe6862	google.golang.org/protobuf@v1.25.0	1.33.0	2
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	google.golang.org/protobuf@v1.25.0	1.33.0	2
drone/drone-runner-kube :1.0.0-rc.3	4359bf2bb3dc	google.golang.org/protobuf@v1.26.0	1.33.0	2
garugaru/aws-cloudwatch-exporter :latest	541852cafda5	google.golang.org/protobuf@v1.23.0	1.33.0	2
goelankit/cortex-gateway :v1.1.0	0d9a82dcf026	google.golang.org/protobuf@v1.28.0	1.33.0	2
governify/dashboard :latest	e83a17ba5038	google.golang.org/protobuf@v1.27.1	1.33.0	2
grafana/agent-operator :v0.25.1	a136c6208aa3	google.golang.org/protobuf@v1.27.1	1.33.0	2
grafana/grafana :9.2.4	057896e23443	google.golang.org/protobuf@v1.28.1	1.33.0	2
grafana/grafana :8.5.0	42d3e6bc1865	google.golang.org/protobuf@v1.27.1	1.33.0	2
grafana/grafana :7.3.5	511bc20bfcd1	google.golang.org/protobuf@v1.25.0	1.33.0	2
grafana/loki :2.5.0	f9ef133793af	google.golang.org/protobuf@v1.27.1	1.33.0	2
hashicorp/consul :1.14.2	e38576edcdfd	google.golang.org/protobuf@v1.28.1	1.33.0	2
hashicorp/consul-k8s-control-plane :1.0.2	538a3436398d	google.golang.org/protobuf@v1.28.1	1.33.0	2
hashicorp/vault :1.8.3	4db614d40d0e	google.golang.org/protobuf@v1.25.0	1.33.0	2
hashicorp/vault :1.15.2	6b4e5dadf082	google.golang.org/protobuf@v1.31.0	1.33.0	2
hashicorp/vault :1.12.1	8de4d5f31b38	google.golang.org/protobuf@v1.28.1	1.33.0	2
hashicorp/vault-k8s :1.3.1	5d74a885ae3e	google.golang.org/protobuf@v1.31.0	1.33.0	2
hashicorp/vault-k8s :1.1.0	844337076b72	google.golang.org/protobuf@v1.28.1	1.33.0	2
hashicorp/vault-k8s :0.13.1	bebb03e8e800	google.golang.org/protobuf@v1.26.0	1.33.0	2
honestica/kube-iptables-tailer :master-91	a393242fb939	google.golang.org/protobuf@v1.23.0	1.33.0	2
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	google.golang.org/protobuf@v1.31.0	1.33.0	2
inaccel/daemon :latest	093e1ea90ab8	google.golang.org/protobuf@v1.31.0	1.33.0	2
inaccel/reef :latest	c967218739f3	google.golang.org/protobuf@v1.32.0	1.33.0	2
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	google.golang.org/protobuf@v1.27.1	1.33.0	2
iomesh/csi-provisioner :v3.0.0	f9508460b273	google.golang.org/protobuf@v1.26.0	1.33.0	2
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	google.golang.org/protobuf@v1.28.1	1.33.0	2
iomesh/livenessprobe :v2.8.0	560f01510f99	google.golang.org/protobuf@v1.28.1	1.33.0	2
iomesh/localpv-manager :v0.2.0	f13deacac3f4	google.golang.org/protobuf@v1.28.1	1.33.0	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	google.golang.org/protobuf@v1.25.0	1.33.0	2
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	google.golang.org/protobuf@v1.28.1	1.33.0	2
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	google.golang.org/protobuf@v1.28.0	1.33.0	2
istio/proxyv2 :1.18.0	757d28c24100	google.golang.org/protobuf@v1.30.0	1.33.0	2
istio/proxyv2 :1.10.3	a78b7a165744	google.golang.org/protobuf@v1.26.0	1.33.0	2
jaegertracing/all-in-one :1.31	04d224a9999b	google.golang.org/protobuf@v1.27.1	1.33.0	2
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	google.golang.org/protobuf@v1.24.0	1.33.0	2
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	google.golang.org/protobuf@v1.28.1	1.33.0	2
kubernetesui/dashboard :v2.2.0	148991563e37	google.golang.org/protobuf@v1.25.0	1.33.0	2
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	google.golang.org/protobuf@v1.26.0	1.33.0	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	google.golang.org/protobuf@v1.28.0	1.33.0	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	google.golang.org/protobuf@v1.32.0	1.33.0	2
library/influxdb :2.6.1-alpine	44a366dd7724	google.golang.org/protobuf@v1.28.1	1.33.0	2
library/traefik :v2.5	7d5a6ae66572	google.golang.org/protobuf@v1.27.1	1.33.0	2
maxrocketinternet/soti-mobicontrol-exporter :0.6	1a281b76efa3	google.golang.org/protobuf@v1.21.0	1.33.0	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	google.golang.org/protobuf@v1.24.0	1.33.0	2