CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.013; 68th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,344; of 17,787 indexed, latest versions
Container images: 1,663; deployed by those charts
Fix available: 8 of 8; affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,344 of 17,787 indexed charts deploy, on 1,663 images.

Affected package	Affected versions	Fixed in	Images
google.golang.org/protobufgolang	v1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more	1.33.0	1,663
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-81.module+el8.10.0+21962+8143777b	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.18-5.module+el8.10.0+21962+8143777b	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.13-1.module+el8.10.0+21962+8143777b	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-2.module+el8.10.0+21962+8143777b	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.10.0+21974+acd2159c	1
skopeorpm	2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.14.4-1.module+el8.10.0+21995+81e8507c	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.3-1.module+el8.10.0+21962+8143777b	1

OSV records: GHSA-8r3f-844c-mc37 RHSA-2024:4246
Also known as: GO-2024-2611

Charts affected

1,344 by stars

Chart

Latest

Affected images

Radar Score

devtron-operatorromholdings

0.23.3

5 of 11 See more

devtron-operator romholdings 0.23.3

5 of the 11 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/devtron/authenticator :e414faff-393-13273	c8958d9533c7	google.golang.org/protobuf@v1.27.1	1.33.0
quay.io/devtron/dex :v2.30.2	2e4c14d1b444	google.golang.org/protobuf@v1.25.0	1.33.0
quay.io/devtron/kubectl :latest	2ad610626658	google.golang.org/protobuf@v1.28.0	1.33.0
quay.io/devtron/migrator :v4.16.2	fbeaef7a8566	google.golang.org/protobuf@v1.28.1	1.33.0
quay.io/devtron/postgres_exporter :v0.10.1	3ea136843b2e	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0

Open the chart page →

31,447

dgraphromholdings

0.0.20

1 of 1 See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v21.12.0	3b55ea83fffe	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

11,957

jcmhproxy-ingressromholdings

0.14.6

1 of 1 See more

jcmhproxy-ingress romholdings 0.14.6

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

1,379

kube-prometheus-stackromholdings

19.3.0

3 of 6 See more

kube-prometheus-stack romholdings 19.3.0

3 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
grafana/grafana :8.2.5	00568d89c4f8	google.golang.org/protobuf@v1.27.1	1.33.0
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	google.golang.org/protobuf@v1.26.0	1.33.0
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0

Open the chart page →

8,645

securityromholdings

0.2.2

1 of 1 See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,435

winter-soldierromholdings

0.10.6

1 of 1 See more

winter-soldier romholdings 0.10.6

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

1,176

zincromholdings

0.1.2

1 of 1 See more

zinc romholdings 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

1,507

controllerrookout

0.2.56

1 of 1 See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

1,960

datastorerookout

0.1.48

1 of 1 See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rookout/data-on-prem :latest	51c0fce64467	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

1,941

operatorrookout

0.0.20

1 of 2 See more

operator rookout 0.0.20

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rookout/k8s-operator :latest	0d083f3ef1a7	google.golang.org/protobuf@v1.24.0	1.33.0

Open the chart page →

2,209

rookout-hybridrookout

0.3.1

2 of 2 See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rookout/controller :latest	4451a6f6b8ec	google.golang.org/protobuf@v1.31.0	1.33.0
rookout/data-on-prem :latest	51c0fce64467	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

3,901

chainrss3

0.1.28

5 of 8 See more

chain rss3 0.1.28

5 of the 8 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rss3/op-batcher :d2c5ced00901227473fc196fda838191f0cb4e02	e8adc09d9c07	google.golang.org/protobuf@v1.31.0	1.33.0
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	google.golang.org/protobuf@v1.27.1	1.33.0
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	google.golang.org/protobuf@v1.31.0	1.33.0
rss3/op-proposer :d2c5ced00901227473fc196fda838191f0cb4e02	96672897ba9e	google.golang.org/protobuf@v1.31.0	1.33.0
rss3/proxyd :d2c5ced00901227473fc196fda838191f0cb4e02	8d9a44c650fa	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

8,528

op-batcherrss3

0.1.0

1 of 2 See more

op-batcher rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

1,251

op-proposerrss3

0.1.0

1 of 2 See more

op-proposer rss3 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

1,251

vsl-chainrss3

0.1.0

4 of 7 See more

vsl-chain rss3 0.1.0

4 of the 7 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rss3/op-batcher :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	dae8a5bdd7a6	google.golang.org/protobuf@v1.31.0	1.33.0
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	google.golang.org/protobuf@v1.27.1	1.33.0
rss3/op-node :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	45b91380bbe7	google.golang.org/protobuf@v1.31.0	1.33.0
rss3/op-proposer :a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a	a4059dd32c48	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

6,044

vsl-rpcrss3

0.3.4

2 of 4 See more

vsl-rpc rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	google.golang.org/protobuf@v1.27.1	1.33.0
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

4,611

vsl-sequencerrss3

0.3.4

2 of 4 See more

vsl-sequencer rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
rss3/op-geth :rss3-main-1ecad30	26148aa1bc52	google.golang.org/protobuf@v1.27.1	1.33.0
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

4,611

caddysagikazarmark

0.0.14

1 of 1 See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
library/caddy :2.4.5	874405536b3e	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,960

tusdsagikazarmark

0.1.2

1 of 1 See more

tusd sagikazarmark 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
tusproject/tusd :v1.10.0	1e457b59fd5b	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

1,545

knative-helm-operatorsalaboy

1.9.0

2 of 2 See more

knative-helm-operator salaboy 1.9.0

2 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/operator/cmd/webhookdigest-pinned	6c5c90cdf707	google.golang.org/protobuf@v1.28.0	1.33.0
gcr.io/knative-releases/knative.dev/serving/cmd/default-domaindigest-pinned	5e0429b70299	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

2,339

uptime-kumasarab97

0.1.5

1 of 1 See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.22.1	0b55bcb83a1c	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

4,744

opentelemetry-collectorsb-helm-charts

0.3.0

1 of 1 See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	google.golang.org/protobuf@v1.32.0	1.33.0

Open the chart page →

1,721

pushgatewaysb-helm-charts

0.3.0

1 of 1 See more

pushgateway sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

1,172

ed-traefikscaleway-charts

0.2.0

1 of 1 See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
library/traefik :v1.7.34	5d47b7bb2546	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

2,133

ed-traefik2scaleway-charts

0.2.0

1 of 1 See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
library/traefik :2.5.6	2f603f8d3abe	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

3,160

cert-manager-webhook-cloudnsschichtel

1.2.0

1 of 1 See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns :1.1.0	1020638bbe23	google.golang.org/protobuf@v1.32.0	1.33.0

Open the chart page →

1,396

cosischichtel

0.1.0

1 of 1 See more

cosi schichtel 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/objectstorage-controller :v20221027-v0.1.1-8-g300019f	a84b574e8027	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

1,309

crproxyschichtel

0.1.4

1 of 1 See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/daocloud/crproxy/crproxy :v0.8.0	ee1eb3c9c9a1	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

1,378

unifi-protectschichtel

0.10.1

1 of 1 See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
markdegroot/unifi-protect-arm64 :latest	d8445f2a0de6	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

5,582

cert-manager-desec-webhookschmitzis

0.0.1

1 of 1 See more

cert-manager-desec-webhook schmitzis 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
su541/cert-manager-desec-webhook :latest	371ee33f83c1	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

1,770

cert-manager-webhook-bunnyschmitzis

0.1.1

1 of 1 See more

cert-manager-webhook-bunny schmitzis 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/schmitzis/cert-manager-webhook-bunny :latest	125e31c8e85a	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

1,498

icinga2-masterschmitzis

0.2.0

1 of 6 See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
grafana/grafana :8.0.3	696823fbc561	google.golang.org/protobuf@v1.26.0	1.33.0

Open the chart page →

3,731

version-checkerschmitzis

0.2.2

1 of 1 See more

version-checker schmitzis 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/jetstack/version-checker :v0.2.1	5f6f8ba0b671	google.golang.org/protobuf@v1.24.0	1.33.0

Open the chart page →

3,023

cernboxsciencebox

0.0.4

1 of 6 See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

2,330

centralbrainsciencemesh

0.0.3

4 of 5 See more

centralbrain sciencemesh 0.0.3

4 of the 5 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	google.golang.org/protobuf@v1.25.0	1.33.0
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	google.golang.org/protobuf@v1.23.0	1.33.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	google.golang.org/protobuf@v1.22.0	1.33.0
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	google.golang.org/protobuf@v1.24.0	1.33.0

Open the chart page →

9,754

sealed-secrets-uisealed-secrets-ui

0.0.8

1 of 1 See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

4,570

hermitcrabseal-io

0.1.4

1 of 2 See more

hermitcrab seal-io 0.1.4

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
sealio/terraform-deployer :v1.5.7-seal.1	b0389d9848a5	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

4,883

seaweedfs-operatorseaweedfs-operator

1.5.8

1 of 3 See more

seaweedfs-operator seaweedfs-operator 1.5.8

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

2,092

aws-secretssecretsprovider

0.1.0

1 of 1 See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	google.golang.org/protobuf@v1.25.0	1.33.0

Open the chart page →

2,213

secret-syncsecret-sync

0.1.11

1 of 1 See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
csepulvedab/secret-sync :0.5	227a6f2b0ff8	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

1,442

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	google.golang.org/protobuf@v1.27.1	1.33.0

Open the chart page →

2,407

influxdb_exportersectionme

0.0.2

1 of 1 See more

influxdb_exporter sectionme 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/prometheus/influxdb-exporter :v0.10.0	3854d8af7bd4	google.golang.org/protobuf@v1.28.0	1.33.0

Open the chart page →

922

seldon-core-analyticsseldon

1.17.1

1 of 8 See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.18.1	5880ec936055	google.golang.org/protobuf@v1.21.0	1.33.0

Open the chart page →

10,733

cortezasergiotocalini

1.0.1

1 of 1 See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
cortezaproject/corteza :2024.9.6	0bcdcbcd3c63	google.golang.org/protobuf@v1.32.0	1.33.0

Open the chart page →

3,325

miniosergiotocalini

1.0.0

1 of 1 See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	google.golang.org/protobuf@v1.31.0	1.33.0

Open the chart page →

4,203

service-binding-operatorservice-binding-operator-helm-chart

1.4.1

1 of 1 See more

service-binding-operator service-binding-operator-helm-chart 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/redhat-developer/servicebinding-operatordigest-pinned	16286ac84ddd	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

796

serviceexampleserviceexample

0.1.0

1 of 5 See more

serviceexample serviceexample 0.1.0

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.13.5	59cf2e949181	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

5,449

service-exampleservice-example-1

0.1.0

2 of 7 See more

service-example service-example-1 0.1.0

2 of the 7 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.13.3	c507bd7e3831	google.golang.org/protobuf@v1.28.1	1.33.0
natsio/prometheus-nats-exporter :0.10.1	bce728062c4f	google.golang.org/protobuf@v1.28.1	1.33.0

Open the chart page →

9,074

ccx-monitoringseveralnines

0.6.21

2 of 7 See more

ccx-monitoring severalnines 0.6.21

2 of the 7 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	google.golang.org/protobuf@v1.30.0	1.33.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

7,709

apache-shardingsphere-operator-chartsshardingsphere

0.3.0

1 of 2 See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container image	Digest	Package	Fixed in
apache/shardingsphere-operator :0.3.0	ffe68d6b99c0	google.golang.org/protobuf@v1.30.0	1.33.0

Open the chart page →

1,698

Container images carrying it

1,663 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/openshift/origin-cli :4.8	bb5e052770e5	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0	2
quay.io/prometheus/blackbox-exporter :v0.24.0	3af31f8bd1ad	google.golang.org/protobuf@v1.30.0	1.33.0	2
quay.io/prometheus/node-exporter :v1.3.0	23ff46c728b9	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0	2
quay.io/prometheus/node-exporter :v1.0.0	8a3a33cad0bd	google.golang.org/protobuf@v1.22.0	1.33.0	2
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	google.golang.org/protobuf@v1.26.0-rc.1	1.33.0	2
quay.io/prometheus-operator/prometheus-config-reloader :v0.67.0	14feefde1b80	google.golang.org/protobuf@v1.31.0	1.33.0	2
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	google.golang.org/protobuf@v1.25.0	1.33.0	2
quay.io/prometheus/prometheus :v2.22.1	b899dbd1b901	google.golang.org/protobuf@v1.24.0	1.33.0	2
quay.io/prometheus/prometheus :v2.47.0	c5dd35038287	google.golang.org/protobuf@v1.31.0	1.33.0	2
quay.io/prometheus/prometheus :v2.36.2	df0cd5887887	google.golang.org/protobuf@v1.28.0	1.33.0	2
quay.io/prometheus/pushgateway :v1.6.2	979a69ab4a40	google.golang.org/protobuf@v1.31.0	1.33.0	2
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	google.golang.org/protobuf@v1.27.1	1.33.0	2
registry.k8s.io/ingress-nginx/controller :v1.9.4	5b161f051d01	google.golang.org/protobuf@v1.31.0	1.33.0	2
registry.k8s.io/ingress-nginx/controller :v1.9.5	b3aba22b1da8	google.golang.org/protobuf@v1.31.0	1.33.0	2
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	google.golang.org/protobuf@v1.26.0	1.33.0	2
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	google.golang.org/protobuf@v1.28.1	1.33.0	2
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	google.golang.org/protobuf@v1.28.1	1.33.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	google.golang.org/protobuf@v1.28.0	1.33.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	google.golang.org/protobuf@v1.28.1	1.33.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.1	af8220f53493	google.golang.org/protobuf@v1.30.0	1.33.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.6.0	bdab4e49d71d	google.golang.org/protobuf@v1.28.1	1.33.0	2
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.10.0	ec5d6f6be228	google.golang.org/protobuf@v1.30.0	1.33.0	2
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	google.golang.org/protobuf@v1.27.1	1.33.0	2
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	google.golang.org/protobuf@v1.28.0	1.33.0	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.1	0103eee7c35e	google.golang.org/protobuf@v1.27.1	1.33.0	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	google.golang.org/protobuf@v1.27.1	1.33.0	2
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	google.golang.org/protobuf@v1.28.0	1.33.0	2
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	google.golang.org/protobuf@v1.27.1	1.33.0	2
registry.k8s.io/sig-storage/csi-resizer :v1.5.0	8f7520bd957e	google.golang.org/protobuf@v1.27.1	1.33.0	2
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	google.golang.org/protobuf@v1.27.1	1.33.0	2
registry.k8s.io/sig-storage/csi-resizer :v1.9.0	f1f352df9787	google.golang.org/protobuf@v1.30.0	1.33.0	2
registry.k8s.io/sig-storage/csi-snapshotter :v6.0.1	ad16874e2140	google.golang.org/protobuf@v1.27.1	1.33.0	2
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	google.golang.org/protobuf@v1.28.1	1.33.0	2
0xpolygon/heimdall :1.0.1	34ddf259993c	google.golang.org/protobuf@v1.28.1	1.33.0	1
1password/connect-api :1.7.2	6aa94cf713f9	google.golang.org/protobuf@v1.31.0	1.33.0	1
1password/kubernetes-secrets-injector :1.0.2	5884757f7879	google.golang.org/protobuf@v1.30.0	1.33.0	1
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	google.golang.org/protobuf@v1.31.0	1.33.0	1
absaoss/terraform-controller :v0.0.20	ad538a1285a0	google.golang.org/protobuf@v1.25.0	1.33.0	1
adrianberger/fluxcd-webui :latest	76848c0d2780	google.golang.org/protobuf@v1.25.0	1.33.0	1
akeyless/base-rhel :0.0.1	4ba8900a0061	google.golang.org/protobuf@v1.30.0	1.33.0	1
alex6021710/ai-scale-auth :latest	6c7a47e470c3	google.golang.org/protobuf@v1.27.1	1.33.0	1
alex6021710/ai-scale-doer :latest	31e533cf7cd3	google.golang.org/protobuf@v1.27.1	1.33.0	1
alex6021710/ai-scale-migrator :latest	744b8a924f35	google.golang.org/protobuf@v1.27.1	1.33.0	1
alex6021710/ai-scale-provider :latest	5837d9b30cc7	google.golang.org/protobuf@v1.27.1	1.33.0	1
alex6021710/ai-scale-saver :latest	f73e8d60fd03	google.golang.org/protobuf@v1.27.1	1.33.0	1
alpine/k8s :1.22.6	00ac10bcb759	google.golang.org/protobuf@v1.27.1	1.33.0	1
alpine/k8s :1.27.3	21b24e6bf801	google.golang.org/protobuf@v1.30.0	1.33.0	1
alpine/k8s :1.31.10	6dbe6f391eda	google.golang.org/protobuf@v1.28.1	1.33.0	1
alpine/k8s :1.31.13	7a319b15cfc9	google.golang.org/protobuf@v1.28.1	1.33.0	1
alpine/k8s :1.32.4	7e1e7d5b7a96	google.golang.org/protobuf@v1.28.1	1.33.0	1