StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,344
of 17,787 indexed, latest versions
Container images
1,663
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,344 of 17,787 indexed charts deploy, on 1,663 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,663
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,344 by stars
ChartLatestAffected imagesRadar Score
hcloud-csi-driveratem181.5.11 of 6See more

hcloud-csi-driver atem18 1.5.1

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

6,495
okd-webhookav1o-chartsVerified publisher0.1.01 of 1See more

okd-webhook av1o-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

1,727
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/botkube:v1.0.0669e27a5d1af
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

5,074
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

6,948
kubeslice-workeraveshaVerified publisher1.5.01 of 14See more

kubeslice-worker avesha 1.5.0

1 of the 14 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.8.1f6717ce72a26
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,631
appmesh-jaegeraws1.0.31 of 1See more

appmesh-jaeger aws 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.2942822be7888b
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,480
aws-node-termination-handler-2aws0.2.02 of 2See more

aws-node-termination-handler-2 aws 0.2.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/controller:v2.0.0-beta9637c80dd23f
google.golang.org/protobuf@v1.27.1
1.33.0
public.ecr.aws/aws-ec2/aws-node-termination-handler-2/webhook:v2.0.0-beta86b0f7243250
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,952
aws-sigv4-proxy-admission-controlleraws0.1.21 of 1See more

aws-sigv4-proxy-admission-controller aws 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-sigv4-proxy-admission-controller:1.067b89ae52240
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

2,139
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

4,568
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

5,521
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
google.golang.org/protobuf@v1.25.0
1.33.0
fluxcd/source-controller:v0.10.031a8c79a6803
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

7,705
keptn-addonsazureorkestra0.1.02 of 4See more

keptn-addons azureorkestra 0.1.0

2 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
keptncontrib/prometheus-service:0.6.029969dd547de
google.golang.org/protobuf@v1.21.0
1.33.0
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

10,621
prometheusazureorkestra14.8.05 of 6See more

prometheus azureorkestra 14.8.0

5 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0
prom/pushgateway:v1.3.18305a33fb80a
google.golang.org/protobuf@v1.23.0
1.33.0
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
google.golang.org/protobuf@v1.21.0
1.33.0
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
google.golang.org/protobuf@v1.23.0
1.33.0
quay.io/prometheus/prometheus:v2.26.038d40a760569
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

9,661
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

5,860
prometheus-blackbox-exporterbackbox-exporter7.8.01 of 1See more

prometheus-blackbox-exporter backbox-exporter 7.8.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.23.0ca04aa9d9093
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,494
backlokto-operatorbacklokto0.0.11 of 1See more

backlokto-operator backlokto 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
piblokto/backlokto-operator:v0.0.20963cda71e393
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

694
trident-operatorberyju-org21.10.01 of 1See more

trident-operator beryju-org 21.10.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
netapp/trident-operator:21.10.049cfe552d9c2
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,072
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

7,239
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

5,108
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

8,004
mx-notifierbicarus-labs1.1.91 of 1See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bicarus/mx-notifier:1.1.8bed688d16762
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

3,760
wg-access-serverbicarus-labs0.9.91 of 1See more

wg-access-server bicarus-labs 0.9.9

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bicarus/wg-access-server:v0.8.206cab48e9334
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

2,748
bitpokebitpokeVerified publisher1.8.191 of 1See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,318
stackbitpokeVerified publisher0.12.46 of 6See more

stack bitpoke 0.12.4

6 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
google.golang.org/protobuf@v1.26.0
1.33.0
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
google.golang.org/protobuf@v1.26.0
1.33.0
bitpoke/stack-default-backend:latestc5eed1ddf692
google.golang.org/protobuf@v1.26.0
1.33.0
bitpoke/wordpress-operator:v0.12.27fb3aad37b5f
google.golang.org/protobuf@v1.26.0
1.33.0
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
google.golang.org/protobuf@v1.28.1
1.33.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.3.0549e71a6ca24
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

9,897
wordpress-operatorbitpokeVerified publisher0.12.41 of 1See more

wordpress-operator bitpoke 0.12.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitpoke/wordpress-operator:v0.12.421284d1df473
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,123
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

10,171
prometheus-domain-exporterblackbox-domain-exporter1.0.01 of 1See more

prometheus-domain-exporter blackbox-domain-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bulich/domain-exporter:latest6d0b780f7c7b
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,408
firehoseblip-firehoseVerified publisher0.0.183 of 11See more

firehose blip-firehose 0.0.18

3 of the 11 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
blipai/deckard:0.0.28737d5d19a312
google.golang.org/protobuf@v1.28.1
1.33.0
hashicorp/vault:1.15.26b4e5dadf082
google.golang.org/protobuf@v1.31.0
1.33.0
hashicorp/vault-k8s:1.3.15d74a885ae3e
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

13,499
jaegerbook-k8sinfra-v23.4.03 of 5See more

jaeger book-k8sinfra-v2 3.4.0

3 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
google.golang.org/protobuf@v1.32.0
1.33.0
jaegertracing/jaeger-collector:1.53.07f1269222903
google.golang.org/protobuf@v1.32.0
1.33.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

19,291
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

6,035
metallbbook-k8sinfra-v20.13.102 of 3See more

metallb book-k8sinfra-v2 0.13.10

2 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.13.101b33357b3595
google.golang.org/protobuf@v1.30.0
1.33.0
quay.io/metallb/speaker:v0.13.1000406ccb1fa0
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

3,857
prometheusbook-k8sinfra-v226.0.11 of 6See more

prometheus book-k8sinfra-v2 26.0.1

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

3,244
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,396
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,400
fluobuttahtoastVerified publisher0.1.01 of 1See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/flatcar/flatcar-linux-update-operator:v0.10.0-rc1f9063e20b1f6
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,298
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,772
kubevirt-managerbuttahtoastVerified publisher0.1.31 of 1See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,497
ct-singlecalltelemetry0.8.42 of 7See more

ct-single calltelemetry 0.8.4

2 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
google.golang.org/protobuf@v1.26.0
1.33.0
natsio/prometheus-nats-exporter:0.10.016048afb67a5
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

10,442
stablecalltelemetry0.7.12 of 9See more

stable calltelemetry 0.7.1

2 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
natsio/nats-box:0.11.09fbf7bf684e4
google.golang.org/protobuf@v1.26.0
1.33.0
natsio/prometheus-nats-exporter:0.10.016048afb67a5
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,702
stable-hacalltelemetry0.11.41 of 7See more

stable-ha calltelemetry 0.11.4

1 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.2e808e0644ce1
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

4,705
bucket-clonercamptocamp31.0.41 of 1See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
camptocamp/bucket-cloner:latestacfafc308d88
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

4,518
getconfigcamptocamp30.1.11 of 1See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

2,195
redisoperatorcamptocamp33.0.11 of 1See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/spotahome/redis-operator:latest8c772955184e
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,193
s3-exportercamptocamp32.2.01 of 1See more

s3-exporter camptocamp3 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ribbybibby/s3-exporter:v0.5.0998184c51a00
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

1,183
snyk-exportercamptocamp30.1.41 of 1See more

snyk-exporter camptocamp3 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/lunarway/snyk_exporter:v1.11.155e5cc5aaa0a
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

1,079
ssl-exportercamptocamp30.1.01 of 1See more

ssl-exporter camptocamp3 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ribbybibby/ssl-exporter:2.4.2718abe7f5e79
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

1,632
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,330
freebox-exportercaptnbpVerified publisher1.0.01 of 1See more

freebox-exporter captnbp 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
captnbp/freebox-exporter:1.0.0-r01600c5a253e0
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

717
stigatroncarbide-charts0.4.11 of 10See more

stigatron carbide-charts 0.4.1

1 of the 10 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
natsio/nats-box:0.14.1a67913df95f1
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

4,423

Container images carrying it

1,663 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/karpenter/controller:v0.19.3f0e5ab60b2df
google.golang.org/protobuf@v1.28.1
1.33.0
1
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
google.golang.org/protobuf@v1.30.0
1.33.0
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
google.golang.org/protobuf@v1.26.0
1.33.0
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
google.golang.org/protobuf@v1.27.1
1.33.0
1
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/aerokube/keygen:1.0.1578934444f04
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/aerokube/moon:2.5.1a8837b00ba1c
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/aerokube/moon-conf:2.5.19ca307b30080
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/argoprojlabs/argocd-extension-metrics:v1.0.30d614816c4b7
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/argoprojlabs/argocd-operator:v0.4.0cf8faa986789
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
google.golang.org/protobuf@v1.25.0
1.33.0
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/bentoml/yatai:1.1.13a5dc9d91de0d
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/bentoml/yatai-deployment:1.1.212342cfe8c2a9
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/cilium/tetragon-operator:v0.8.34ab8e6604204
google.golang.org/protobuf@v1.28.0
1.33.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
google.golang.org/protobuf@v1.30.0
containers-common@2:1-64.module+el8.8.0+18571+eed59fc4
criu@3.15-4.module+el8.8.0+19044+f9982fd8
fuse-overlayfs@1.11-1.module+el8.8.0+18634+9a268292
libslirp@4.4.0-1.module+el8.8.0+18060+3f21f2cc
runc@1:1.1.4-1.module+el8.8.0+18060+3f21f2cc
skopeo@2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c
slirp4netns@1.2.0-2.module+el8.8.0+18060+3f21f2cc
1.33.0
2:1-81.module+el8.10.0+21962+8143777b
0:3.18-5.module+el8.10.0+21962+8143777b
0:1.13-1.module+el8.10.0+21962+8143777b
0:4.4.0-2.module+el8.10.0+21962+8143777b
1:1.1.12-1.module+el8.10.0+21974+acd2159c
2:1.14.4-1.module+el8.10.0+21995+81e8507c
0:1.2.3-1.module+el8.10.0+21962+8143777b
1
quay.io/coreos/etcd:v3.5.11842975891182
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
google.golang.org/protobuf@v1.25.0
1.33.0
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
google.golang.org/protobuf@v1.25.0
1.33.0
1
quay.io/evl.ms/pgbouncer-exporter:0.4.074f919b78494
google.golang.org/protobuf@v1.23.0
1.33.0
1
quay.io/evryfs/github-actions-runner-operator:v0.11.16b084e0bd082
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/fiware/envoy-configmap-updater:0.4.39eabc3f3e1e2
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/fiware/vcverifier:6.21.15f9aa6a9c385
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/fiware/vcverifier:2.0.1cd36290dc849
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/flomesh/osm-edge-preinstall-ubi8:1.2.1f94282a9cfec
google.golang.org/protobuf@v1.28.1
1.33.0
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
google.golang.org/protobuf@v1.31.0
1.33.0
1
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
google.golang.org/protobuf@v1.27.1
1.33.0
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
google.golang.org/protobuf@v1.30.0
1.33.0
1
quay.io/groundcover/caretta:v0.0.16ed8f5118e3a4
google.golang.org/protobuf@v1.28.1
1.33.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.