StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,344
of 17,787 indexed, latest versions
Container images
1,663
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,344 of 17,787 indexed charts deploy, on 1,663 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,663
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,344 by stars
ChartLatestAffected imagesRadar Score
stash-enterpriseappscodeVerified publisher0.42.01 of 4See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/pushgateway:v1.4.2a684e7c830a4
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,620
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

5,231
cert-exporterarzu3.0.11 of 1See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
joeelliott/cert-exporter:v2.7.0b4acd14642d0
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

2,819
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

10,731
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
assistiot/distributed_broker:1.0.033e02dad168f
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
assistiot/logging_auditing:1.0.0790dbb198e86
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

77,802
cso-proxyav1o-chartsVerified publisher0.1.31 of 1See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

4,298
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,391
kube-image-webhookav1o-chartsVerified publisher0.1.31 of 1See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,729
prismav1o-chartsVerified publisher0.3.11 of 1See more

prism av1o-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.gitlab.com/av1o/go-prism:4fdcff7d3870c28e5f024b6947cb552d4b956ee27a6f84b81c4e
google.golang.org/protobuf@v1.21.0
1.33.0

Open the chart page →

1,276
chirpstackbeeinventor0.1.103 of 5See more

chirpstack beeinventor 0.1.10

3 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
chirpstack/chirpstack-application-server:3.17.6e0b23dfd24d6
google.golang.org/protobuf@v1.25.0
1.33.0
chirpstack/chirpstack-gateway-bridge:3.13.2ce3f2cdca8a9
google.golang.org/protobuf@v1.25.0
1.33.0
chirpstack/chirpstack-network-server:3.16.1c98d7fe06bce
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

7,807
livekit-serverbeeinventor1.0.01 of 2See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.0.08391fd1b834f
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,602
cloudflare-tunnel-operatorbeezlabs0.2.01 of 1See more

cloudflare-tunnel-operator beezlabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/beezlabs-org/cloudflare-tunnel-operator:v0.1.09afcd070940f
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

1,595
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,900
aramid-indexerbiatec-repoVerified publisher3.9.01 of 5See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

13,513
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

7,239
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

5,108
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

7,239
prometheus-airbyte-exporterbotify-helm-chartsVerified publisher0.7.11 of 1See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

2,908
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,042
fluxcd-webuiccowleyVerified publisher0.0.21 of 2See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
adrianberger/fluxcd-webui:latest76848c0d2780
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,509
cert-manager-webhook-arvancloudcert-manager-webhook-arvancloudVerified publisher0.1.11 of 1See more

cert-manager-webhook-arvancloud cert-manager-webhook-arvancloud 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/mohammadv184/cert-manager-webhook-arvancloud:latest179bee5ef8b2
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,067
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
google.golang.org/protobuf@v1.21.0
1.33.0

Open the chart page →

10,873
cloudbees-sidecar-injectorcloudbees2.3.32 of 2See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
cloudbees/cert-requester:2.3.31d44fb4f799b
google.golang.org/protobuf@v1.24.0
1.33.0
cloudbees/sidecar-injector:2.3.38f102ef0383a
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

3,268
cloudflow-enterprise-componentscloudflow-helm-charts0.0.0-NIGHTLY011220202 of 9See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

2 of the 9 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
google.golang.org/protobuf@v1.23.0
1.33.0
prom/prometheus:v2.21.0d43417c260e5
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

4,256
cnpg-sandboxcloudnative-pgVerified publisher0.6.13 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

3 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/grafana:8.3.5cd7cb4345aa7
google.golang.org/protobuf@v1.27.1
1.33.0
ghcr.io/cloudnative-pg/cloudnative-pg:1.17.14dd365800b62
google.golang.org/protobuf@v1.28.1
1.33.0
quay.io/prometheus-operator/prometheus-operator:v0.54.0be2aef39a2f8
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

7,583
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell-operator:v0.8.9e43ad91f0684
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

3,958
cosmo-controller-managercosmoVerified publisher0.9.01 of 2See more

cosmo-controller-manager cosmo 0.9.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,927
cosmo-dashboardcosmoVerified publisher0.9.11 of 1See more

cosmo-dashboard cosmo 0.9.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,939
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

6,473
revadcs3orgOfficialVerified publisher1.6.11 of 1See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,704
cubefscubefs3.2.05 of 10See more

cubefs cubefs 3.2.0

5 of the 10 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/cubefs/cfs-csi-driver:3.2.0.150.08723616a976a
google.golang.org/protobuf@v1.26.0
1.33.0
registry.k8s.io/sig-storage/csi-attacher:v3.4.08b9c313c05f5
google.golang.org/protobuf@v1.27.1
1.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.5.04fd21f36075b
google.golang.org/protobuf@v1.27.1
1.33.0
registry.k8s.io/sig-storage/csi-provisioner:v2.2.204c55b93a032
google.golang.org/protobuf@v1.26.0
1.33.0
registry.k8s.io/sig-storage/csi-resizer:v1.3.06e0546563b18
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

15,891
CubeUniversecubeuniverseVerified publisher0.1.01 of 1See more

CubeUniverse cubeuniverse 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
tksky1/cubeuniverse:0.1alphaec7b889f380f
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,837
extendeddaemonsetdatadogVerified publisher0.3.31 of 1See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
datadog/extendeddaemonset:v0.8.0513a4377aed5
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,759
dbrepodbrepo1.13.32 of 25See more

dbrepo dbrepo 1.13.3

2 of the 25 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
google.golang.org/protobuf@v1.31.0
1.33.0
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

50,281
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,969
gripmockdeliveryheroVerified publisher1.1.31 of 1See more

gripmock deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
tkpd/gripmock:1.10.174441dadcfbd
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,793
kubedashdevopstalesOfficialVerified publisher4.0.02 of 8See more

kubedash devopstales 4.0.0

2 of the 8 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
prom/statsd-exporter:v0.22.48be660470961
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0
sosedoff/pgweb:latesta5256d416e2e
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

9,239
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

5,599
dnsmasqdevplayer0Verified publisher0.1.51 of 2See more

dnsmasq devplayer0 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/devplayer0/kubelan:0.2.3b776dae45d08
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

3,392
calicodevtron0.1.13 of 4See more

calico devtron 0.1.1

3 of the 4 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:kube-controllers-v3.19.12ff71ba65cd7
google.golang.org/protobuf@v1.25.0
1.33.0
quay.io/devtron/calico-networking:cni-v3.19.151f294c56842
google.golang.org/protobuf@v1.25.0
1.33.0
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

10,073
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

6,237
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

2,238
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hipages/php-fpm_exporter:2.2.09b5be9d3d955
google.golang.org/protobuf@v1.28.0
1.33.0

Open the chart page →

3,539
dnation-pingdnationcloud0.1.94 of 5See more

dnation-ping dnationcloud 0.1.9

4 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
google.golang.org/protobuf@v1.25.0
1.33.0
jimmidyson/configmap-reload:v0.4.017d34fd73f9e
google.golang.org/protobuf@v1.23.0
1.33.0
prom/blackbox-exporter:v0.18.01ffc3f109eb3
google.golang.org/protobuf@v1.21.0
1.33.0
prom/prometheus:v2.21.0d43417c260e5
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

10,454
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,576
thermitedollarshaveclubOfficialVerified publisher0.1.171 of 1See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
dollarshaveclub/thermite:0.0.31663cbf25fcfe
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

2,732
karmadoubanVerified publisher1.9.21 of 1See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/prymitive/karma:v0.85d06892218680
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,017
dragonfly-stackdragonflyVerified publisher0.1.24 of 7See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
google.golang.org/protobuf@v1.31.0
1.33.0
dragonflyoss/manager:v2.1.49c3ef7f10698d
google.golang.org/protobuf@v1.31.0
1.33.0
dragonflyoss/scheduler:v2.1.49523785c77787
google.golang.org/protobuf@v1.31.0
1.33.0
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

18,402
nydus-snapshotterdragonflyVerified publisher0.0.101 of 2See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

3,658

Container images carrying it

1,663 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/uswitch/kiam:v4.0be3a5846922d
google.golang.org/protobuf@v1.25.0
1.33.0
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.11826b984e75d4
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.gitlab.com/arm-research/smarter/smarter-device-manager:v1.20.7864fc338571e
google.golang.org/protobuf@v1.25.0
1.33.0
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
google.golang.org/protobuf@v1.27.1
1.33.0
1
registry.gitlab.com/av1o/go-prism:4fdcff7d3870c28e5f024b6947cb552d4b956ee27a6f84b81c4e
google.golang.org/protobuf@v1.21.0
1.33.0
1
registry.gitlab.com/av1o/okd-webhook:v0.1.028c3e5eb2650
google.golang.org/protobuf@v1.25.0
1.33.0
1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator:0.0.1779454fea06c
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.gitlab.com/bitspur/rock8s/images/kube-commands:3.1880ef8ceffc92
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.gitlab.com/bitspur/rock8s/resource-binding-operator:0.1.063cf51392ce7
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.gitlab.com/dyff/workflows-informer:0.4.4bfbadc49635d
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
google.golang.org/protobuf@v1.27.1
1.33.0
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
google.golang.org/protobuf@v1.25.0
1.33.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.28.0026f63d9ed42
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.k8s.io/e2e-test-images/agnhost:2.40af7e3857d877
google.golang.org/protobuf@v1.27.1
1.33.0
1
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
google.golang.org/protobuf@v1.32.0
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
google.golang.org/protobuf@v1.30.0
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.4.044d1d0e9f19c
google.golang.org/protobuf@v1.32.0
1.33.0
1
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.3.0549e71a6ca24
google.golang.org/protobuf@v1.26.0
1.33.0
1
registry.k8s.io/kas-network-proxy/proxy-server:v0.0.37c2f596cae3c6
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.8.05658d0011a41
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.8.2ec5732e28f15
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
google.golang.org/protobuf@v1.32.0
1.33.0
1
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.11.1e6a43c83ab16
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/sig-storage/csi-attacher:v4.1.008721106b949
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/sig-storage/csi-attacher:v3.5.0dd245051317e
google.golang.org/protobuf@v1.27.1
1.33.0
1
registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.7.080b9ba94aa2a
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.12cddcc716c19
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.7.04a4cae5118c4
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.6.2a13bff2ed69a
google.golang.org/protobuf@v1.28.0
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.9.0cd21e19cd8bb
google.golang.org/protobuf@v1.31.0
1.33.0
1
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.0.1e07f914c32f0
google.golang.org/protobuf@v1.24.0
1.33.0
1
registry.k8s.io/sig-storage/csi-provisioner:v3.4.0e468dddcd275
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/sig-storage/csi-provisioner:v3.3.0ee3b525d5b89
google.golang.org/protobuf@v1.28.1
1.33.0
1
registry.k8s.io/sig-storage/csi-resizer:v1.7.03a7bdf5d1057
google.golang.org/protobuf@v1.28.1
1.33.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.