StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,345
of 17,790 indexed, latest versions
Container images
1,665
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,345 of 17,790 indexed charts deploy, on 1,665 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,665
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,345 by stars
ChartLatestAffected imagesRadar Score
podinfoflagger6.1.41 of 1See more

podinfo flagger 6.1.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/stefanprodan/podinfo:6.1.3f25ebb9c6788
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,815
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

6,150
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

5,355
mission-control-tenantflanksourceVerified publisher1.0.923 of 3See more

mission-control-tenant flanksource 1.0.92

3 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
google.golang.org/protobuf@v1.27.1
1.33.0
rancher/k3s:v1.28.2-k3s18c2599ecfca8
google.golang.org/protobuf@v1.30.0
1.33.0
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

5,709
fluent-operatorfluent-operatorVerified publisher0.1.01 of 2See more

fluent-operator fluent-operator 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubesphere/fluent-operator:v1.0.2702df77228c6
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,631
flyte-depsflyte1.16.81 of 3See more

flyte-deps flyte 1.16.8

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

2,245
csp-reporterfoomoVerified publisher2.2.01 of 1See more

csp-reporter foomo 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
foomo/csp-reporter:1.3.0e436da524785
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,408
forkliftforklift0.1.42 of 2See more

forklift forklift 0.1.4

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wuhan005/forklift:daemon4e6da210e449
google.golang.org/protobuf@v1.28.1
1.33.0
wuhan005/forklift:controllerbfbe82d59850
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,814
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

4,650
forwardforward1.3.11 of 1See more

forward forward 1.3.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
udhos/forward:1.1.312e120d39fdb
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,212
maxscalefour-allportalVerified publisher4.1.161 of 3See more

maxscale four-allportal 4.1.16

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/mysqld-exporter:0.14.0-debian-11-r10304768b637c94
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

6,610
aptlyg0dscookie0.4.01 of 2See more

aptly g0dscookie 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

3,482
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
google.golang.org/protobuf@v1.21.0
1.33.0

Open the chart page →

7,986
smarter-device-managergabe565Verified publisher0.5.21 of 1See more

smarter-device-manager gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

1,226
galoygaloymoney0.34.74 of 24See more

galoy galoymoney 0.34.7

4 of the 24 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
google.golang.org/protobuf@v1.28.0
1.33.0
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/protobuf@v1.31.0
1.33.0
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/protobuf@v1.30.0
1.33.0
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

8,700
galoy-depsgaloymoney0.10.207 of 9See more

galoy-deps galoymoney 0.10.20

7 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.5.24c94e8f8924e
google.golang.org/protobuf@v1.28.0
1.33.0
quay.io/jetstack/cert-manager-cainjector:v1.14.39395dec77fcf
google.golang.org/protobuf@v1.32.0
1.33.0
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/protobuf@v1.32.0
1.33.0
quay.io/jetstack/cert-manager-startupapicheck:v1.14.3df8677135139
google.golang.org/protobuf@v1.32.0
1.33.0
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/protobuf@v1.32.0
1.33.0
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
google.golang.org/protobuf@v1.30.0
1.33.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

11,982
galoygaloymoney20.34.74 of 24See more

galoy galoymoney2 0.34.7

4 of the 24 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:v2.0c14d7271e401
google.golang.org/protobuf@v1.28.0
1.33.0
oryd/hydra:v2.2.02c93beb5e5f2
google.golang.org/protobuf@v1.31.0
1.33.0
oryd/kratos:v1.0.0d06fc5845f63
google.golang.org/protobuf@v1.30.0
1.33.0
oryd/oathkeeper:v0.40.6e8cb9b79a89c
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

8,700
galoy-depsgaloymoney20.10.207 of 9See more

galoy-deps galoymoney2 0.10.20

7 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ayushsobti/kube-monkey:v0.5.24c94e8f8924e
google.golang.org/protobuf@v1.28.0
1.33.0
quay.io/jetstack/cert-manager-cainjector:v1.14.39395dec77fcf
google.golang.org/protobuf@v1.32.0
1.33.0
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
google.golang.org/protobuf@v1.32.0
1.33.0
quay.io/jetstack/cert-manager-startupapicheck:v1.14.3df8677135139
google.golang.org/protobuf@v1.32.0
1.33.0
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
google.golang.org/protobuf@v1.32.0
1.33.0
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
google.golang.org/protobuf@v1.30.0
1.33.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230407543c40fd0939
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

11,982
dendritegeek-cookbookVerified publisher6.4.01 of 1See more

dendrite geek-cookbook 6.4.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/matrix-org/dendrite-monolith:v0.9.43267d27d392f
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,143
gatusgeek-cookbookVerified publisher1.1.21 of 1See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
twinproduction/gatus:v3.8.049dc0d9b2e2c
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

1,881
gotifygeek-cookbookVerified publisher1.2.21 of 1See more

gotify geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
gotify/server:2.1.409c79bc1e403
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,132
maddygeek-cookbookVerified publisher3.2.01 of 1See more

maddy geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
foxcpp/maddy:v0.5.28fa2bd8f6830
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,630
minifluxgeek-cookbookVerified publisher5.2.01 of 2See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
miniflux/miniflux:2.0.36e2fb990dae74
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,430
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,243
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

19,544
rtsp-to-webgeek-cookbookVerified publisher2.2.21 of 1See more

rtsp-to-web geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/deepch/rtsptoweb:v2.2.0f9de3a1a5deb
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

1,467
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/caddy:2.2.0-alpine7367adca165f
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

7,476
torrservergeek-cookbookVerified publisher1.2.21 of 1See more

torrserver geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
smailkoz/torrserver:1.0.1117b52d15de8f0
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,165
vikunjageek-cookbookVerified publisher6.2.02 of 4See more

vikunja geek-cookbook 6.2.0

2 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/caddy:2.4.2-alpinefbc51bcf1ab0
google.golang.org/protobuf@v1.26.0
1.33.0
vikunja/api:0.17.18cba0520bf8c
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

6,893
webhook-receivergeek-cookbookVerified publisher0.0.11 of 1See more

webhook-receiver geek-cookbook 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/geek-cookbook/webhook-receiver:2.8.172e7e77f8091
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,368
asynqmongeneral-helm-chartsVerified publisher0.0.11 of 1See more

asynqmon general-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hibiken/asynqmon:latestac80bcffd2f9
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

751
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

4,558
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
google.golang.org/protobuf@v1.26.0
1.33.0
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

16,854
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
litestream/litestream:0.3c5a1e1b01916
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

9,071
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,478
github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporterVerified publisher0.2.151 of 1See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

896
gitlab-goproxygitlab-goproxy0.2.21 of 1See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
google.golang.org/protobuf@v1.29.1
1.33.0

Open the chart page →

1,332
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,616
prometheus-container-resource-exportergkarthiks0.3.11 of 1See more

prometheus-container-resource-exporter gkarthiks 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
gkarthics/container-resource-exporter:latest6799af333e8a
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

2,218
gorsegorse-io0.4.23 of 4See more

gorse gorse-io 0.4.2

3 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
zhenghaoz/gorse-master:0.4.12033046b432ec
google.golang.org/protobuf@v1.28.1
1.33.0
zhenghaoz/gorse-server:0.4.1239c565685b01
google.golang.org/protobuf@v1.28.1
1.33.0
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

4,401
gotwaygotwayVerified publisher0.8.01 of 1See more

gotway gotway 0.8.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/gotway/gotway:v0.0.137ed73c1979ee
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

1,826
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

22,587
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

24,379
ingress-nginxgpg-dev4.9.02 of 2See more

ingress-nginx gpg-dev 4.9.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
google.golang.org/protobuf@v1.31.0
1.33.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,316
jaegergpg-dev3.3.33 of 5See more

jaeger gpg-dev 3.3.3

3 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jaegertracing/jaeger-agent:1.53.00214a0ef24b1
google.golang.org/protobuf@v1.32.0
1.33.0
jaegertracing/jaeger-collector:1.53.07f1269222903
google.golang.org/protobuf@v1.32.0
1.33.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

19,311
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
kubernetesui/dashboard-metrics-scraper:1.1.17747d363c9fe
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

6,078
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:1.53.060e65bfffe1f
google.golang.org/protobuf@v1.32.0
1.33.0
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

49,362
prometheus-operator-admission-webhookgpg-dev0.18.11 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20221220-controller-v1.5.1-58-g787ea74b64d99688e5573
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,685
mimir-openshift-experimentalgrafana2.1.03 of 4See more

mimir-openshift-experimental grafana 2.1.0

3 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/mimir:2.0.080c1a8eb24dd
google.golang.org/protobuf@v1.27.1
1.33.0
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
google.golang.org/protobuf@v1.23.0
1.33.0
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

17,780
snyk-exportergrafana0.1.01 of 1See more

snyk-exporter grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/snyk_exporter:v1.4.1d3c9093401ca
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

669

Container images carrying it

1,665 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/tigera/operator:v1.20.1379efe0c2541
google.golang.org/protobuf@v1.25.0
1.33.0
1
quay.io/tigera/operator:v1.15.1c6591da87aa8
google.golang.org/protobuf@v1.25.0
1.33.0
1
quay.io/uswitch/kiam:v4.0be3a5846922d
google.golang.org/protobuf@v1.25.0
1.33.0
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
google.golang.org/protobuf@v1.25.0
1.33.0
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
google.golang.org/protobuf@v1.27.1
1.33.0
1
registry.gitlab.com/av1o/go-prism:4fdcff7d3870c28e5f024b6947cb552d4b956ee27a6f84b81c4e
google.golang.org/protobuf@v1.21.0
1.33.0
1
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
google.golang.org/protobuf@v1.25.0
1.33.0
1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator:0.0.1779454fea06c
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.gitlab.com/bitspur/rock8s/resource-binding-operator:0.1.063cf51392ce7
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.gitlab.com/dyff/workflows-informer:0.4.4bfbadc49635d
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
google.golang.org/protobuf@v1.27.1
1.33.0
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
google.golang.org/protobuf@v1.25.0
1.33.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.k8s.io/e2e-test-images/agnhost:2.40af7e3857d877
google.golang.org/protobuf@v1.27.1
1.33.0
1
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
google.golang.org/protobuf@v1.32.0
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.044d1d0e9f19c
google.golang.org/protobuf@v1.32.0
1.33.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.3.0549e71a6ca24
google.golang.org/protobuf@v1.26.0
1.33.0
1
registry.k8s.io/kas-network-proxy/proxy-server:v0.0.37c2f596cae3c6
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.8.05658d0011a41
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.8.2ec5732e28f15
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
google.golang.org/protobuf@v1.32.0
1.33.0
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/sig-storage/csi-attacher:v4.1.008721106b949
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/sig-storage/csi-attacher:v3.5.0dd245051317e
google.golang.org/protobuf@v1.27.1
1.33.0
1
registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.7.080b9ba94aa2a
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.12cddcc716c19
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.7.04a4cae5118c4
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.2a13bff2ed69a
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.0cd21e19cd8bb
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.0.1e07f914c32f0
google.golang.org/protobuf@v1.24.0
1.33.0
1
registry.k8s.io/sig-storage/csi-provisioner:v3.4.0e468dddcd275
google.golang.org/protobuf@v1.28.1
1.33.0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.