StackRadar

CVE-2024-24786

High

Advisory

Published 5 Mar 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,344
of 17,787 indexed, latest versions
Container images
1,663
deployed by those charts
Fix available
8 of 8
affected packages

Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON

Carried by container images the latest versions of 1,344 of 17,787 indexed charts deploy, on 1,663 images.

Affected packageAffected versionsFixed inImages
google.golang.org/protobufgolangv1.21.0, v1.22.0, v1.23.0, v1.24.0+14 more1.33.01,663
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-81.module+el8.10.0+21962+8143777b1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+21962+8143777b1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+21962+8143777b1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+21962+8143777b1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.10.0+21974+acd2159c1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.4-1.module+el8.10.0+21995+81e8507c1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+21962+8143777b1
OSV records
GHSA-8r3f-844c-mc37RHSA-2024:4246
Also known as
GO-2024-2611

Charts affected

1,344 by stars
ChartLatestAffected imagesRadar Score
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

3,034
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

4,786
kafka-operatormesosphere-stable0.25.11 of 2See more

kafka-operator mesosphere-stable 0.25.1

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/banzaicloud/kafka-operator:v0.25.113dcbc7ebfc6
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,241
karmamesosphere-stable2.0.31 of 1See more

karma mesosphere-stable 2.0.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
lmierzwa/karma:v0.70d417abe7ddb5
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

1,966
knativemesosphere-stable1.10.87 of 7See more

knative mesosphere-stable 1.10.8

7 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
google.golang.org/protobuf@v1.28.1
1.33.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
google.golang.org/protobuf@v1.28.1
1.33.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
google.golang.org/protobuf@v1.28.1
1.33.0
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
google.golang.org/protobuf@v1.28.1
1.33.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
google.golang.org/protobuf@v1.28.1
1.33.0
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping-webhook:v1.10.27368aaddf2be
google.golang.org/protobuf@v1.28.1
1.33.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,479
kommandermesosphere-stable0.39.215 of 29See more

kommander mesosphere-stable 0.39.2

15 of the 29 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
jimmidyson/configmap-reload:v0.5.0904d08e9f701
google.golang.org/protobuf@v1.23.0
1.33.0
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
google.golang.org/protobuf@v1.25.0
1.33.0
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
google.golang.org/protobuf@v1.25.0
1.33.0
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
google.golang.org/protobuf@v1.25.0
1.33.0
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
google.golang.org/protobuf@v1.25.0
1.33.0
mesosphere/kommander-licensing-controller-manager:v0.21.28e18bbe407f7
google.golang.org/protobuf@v1.25.0
1.33.0
mesosphere/kommander-licensing-webhook:v0.21.2265edcd2a1ca
google.golang.org/protobuf@v1.25.0
1.33.0
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
google.golang.org/protobuf@v1.24.0
1.33.0
prom/prometheus:v2.19.2cd134bd4fca0
google.golang.org/protobuf@v1.24.0
1.33.0
thanosio/thanos:v0.19.088276fcd1491
google.golang.org/protobuf@v1.25.0
1.33.0
thanosio/thanos:v0.15.0b12d5c31bf5a
google.golang.org/protobuf@v1.24.0
1.33.0
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
google.golang.org/protobuf@v1.25.0
1.33.0
quay.io/kubernetes-multicluster/kubefed:v0.7.06d56f69b15a3
google.golang.org/protobuf@v1.25.0
1.33.0
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
google.golang.org/protobuf@v1.21.0
1.33.0
quay.io/thanos/thanos:v0.17.1e362f02ed304
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

68,330
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

9,543
veleromesosphere-stable3.2.51 of 1See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,871
cortexmetakube0.6.01 of 2See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.9.05d1c2cf4c538
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

4,107
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

8,940
wg-access-servermglants0.4.71 of 1See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

2,745
gogsmhio0.9.21 of 2See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
gogs/gogs:0.12.1420d53bb7277
google.golang.org/protobuf@v1.21.0
1.33.0

Open the chart page →

3,230
kube-agent-chartmiddleware-labsVerified publisher0.1.21 of 1See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/agent-kube-go:dev17369c4cd390
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,799
middleware-odigosmiddleware-labsVerified publisher0.2.414 of 6See more

middleware-odigos middleware-labs 0.2.41

4 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/odigos-autoscaler:middleware-test-0.0.14aac0389614e4
google.golang.org/protobuf@v1.27.1
1.33.0
ghcr.io/middleware-labs/odigos-instrumentor:middleware-test-0.0.104ae1fc698a5
google.golang.org/protobuf@v1.27.1
1.33.0
ghcr.io/middleware-labs/odigos-odiglet:middleware-test-0.0.103c8c835ecee
google.golang.org/protobuf@v1.28.1
1.33.0
ghcr.io/middleware-labs/odigos-scheduler:middleware-test-0.0.109741c86aee7
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

8,370
middleware-visionmiddleware-labsVerified publisher0.2.654 of 6See more

middleware-vision middleware-labs 0.2.65

4 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/vision-autoscaler:middleware-test-0.0.231f7f89bc6585
google.golang.org/protobuf@v1.27.1
1.33.0
ghcr.io/middleware-labs/vision-instrumentor:middleware-test-0.0.4dfa5907170c4
google.golang.org/protobuf@v1.27.1
1.33.0
ghcr.io/middleware-labs/vision-odiglet:middleware-test-0.0.3bce34c98668e
google.golang.org/protobuf@v1.28.1
1.33.0
ghcr.io/middleware-labs/vision-scheduler:middleware-test-0.0.33609a075c825
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

8,361
mw-kube-agentmiddleware-labsVerified publisher0.1.21 of 1See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:master056f0953763d
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,594
mimirmimir0.1.101 of 1See more

mimir mimir 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/heimops/mimir-operator:latest4e1a3ef1fe82
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

382
minio-operatorminio-operator4.3.71 of 2See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

6,085
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

10,639
standard-application-stackmintel11.4.11 of 12See more

standard-application-stack mintel 11.4.1

1 of the 12 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
library/docker:20.10-dindaf96c680a7e1
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

10,515
jupyterhubmizzoukube0.0.1-set.by.chartpress1 of 7See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

1,883
cert-manager-webhook-duckdnsmmontesVerified publisher1.2.31 of 1See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ebrianne/cert-manager-webhook-duckdns:v1.2.39cd17700c9ec
google.golang.org/protobuf@v1.24.0
1.33.0

Open the chart page →

2,847
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

7,775
echoperatormmontesVerified publisher0.0.21 of 1See more

echoperator mmontes 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/mmontes11/echoperator:v0.0.4a544a71c6e3b
google.golang.org/protobuf@v1.26.0-rc.1
1.33.0

Open the chart page →

1,826
corednsmoikot1.13.31 of 1See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
coredns/coredns:1.7.073ca82b4ce82
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

2,547
smartthings-metricsmoikot0.1.01 of 1See more

smartthings-metrics moikot 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
moikot/smartthings-metrics:0.1.08625f53aa9b7
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

1,744
smartthings-metrics-feat-log-detailsmoikot0.0.921 of 1See more

smartthings-metrics-feat-log-details moikot 0.0.92

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
moikot/smartthings-metrics:feat-log-detailsfb8565140106
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

1,732
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

2,470
backendmojaloop0.1.02 of 6See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/kafka-exporter-archived:1.3.2e527fbf75dce
google.golang.org/protobuf@v1.27.1
1.33.0
bitnamilegacy/mysqld-exporter:0.13.0a7e14cc919cb
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

16,111
mongodb-query-exportermongodb-query-exporterVerified publisher5.1.01 of 1See more

mongodb-query-exporter mongodb-query-exporter 5.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/raffis/mongodb-query-exporter:v5.1.0ca6ac8a5b329
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

989
mqtt-loggermoreillonVerified publisher0.3.11 of 5See more

mqtt-logger moreillon 0.3.1

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

10,998
backupmorremeyer4.0.01 of 1See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
restic/restic:0.15.2579e4e6a4931
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

2,295
hcloud-ccm-networksmorremeyer2.0.01 of 1See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.16.08c07e6d7a76c
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,739
hcloud-csi-drivermorremeyer3.0.06 of 6See more

hcloud-csi-driver morremeyer 3.0.0

6 of the 6 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:v2.3.2b7ed90d5fab2
google.golang.org/protobuf@v1.28.1
1.33.0
registry.k8s.io/sig-storage/csi-attacher:v4.1.008721106b949
google.golang.org/protobuf@v1.28.1
1.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.7.04a4cae5118c4
google.golang.org/protobuf@v1.28.1
1.33.0
registry.k8s.io/sig-storage/csi-provisioner:v3.4.0e468dddcd275
google.golang.org/protobuf@v1.28.1
1.33.0
registry.k8s.io/sig-storage/csi-resizer:v1.7.03a7bdf5d1057
google.golang.org/protobuf@v1.28.1
1.33.0
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

7,145
chirpstackmosquitto-helm-chart0.5.03 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

3 of the 8 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
chirpstack/chirpstack-application-server:3fb7667fe037f
google.golang.org/protobuf@v1.28.1
1.33.0
chirpstack/chirpstack-network-server:3c0bbbb7a3f1e
google.golang.org/protobuf@v1.28.1
1.33.0
oliver006/redis_exporter:v1.14.0d55e056987af
google.golang.org/protobuf@v1.23.0
1.33.0

Open the chart page →

25,989
chirpstack-event-forwardmosquitto-helm-chart0.1.21 of 1See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward:v0.1.223dc6274cc4b
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

1,854
replacermosquitto-helm-chart0.2.01 of 3See more

replacer mosquitto-helm-chart 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/waitfor:v1.0.0ca5a98cbed32
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,931
configmapsecretsmozilla0.0.11 of 1See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
mzinc/configmapsecret-controller:v0.5.1eebbcbf2d1f7
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

2,109
approuvezmvisonneau0.1.11 of 1See more

approuvez mvisonneau 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
ghcr.io/mvisonneau/approuvez:v0.1.0441da62e6cb3
google.golang.org/protobuf@v1.25.0
1.33.0

Open the chart page →

1,971
unpollermvisonneau0.1.01 of 1See more

unpoller mvisonneau 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
golift/unifi-poller:v2.9.2585a29a06d05
google.golang.org/protobuf@v1.30.0
1.33.0

Open the chart page →

1,190
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
google.golang.org/protobuf@v1.32.0
1.33.0
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
google.golang.org/protobuf@v1.32.0
1.33.0

Open the chart page →

7,348
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
google.golang.org/protobuf@v1.31.0
1.33.0

Open the chart page →

3,429
redismyaVerified publisher22.4.101 of 2See more

redis mya 22.4.10

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/oliver006/redis_exporter:v1.35.1908dbee5c546
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,050
redis-queuemyaVerified publisher22.4.61 of 2See more

redis-queue mya 22.4.6

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/oliver006/redis_exporter:v1.35.1908dbee5c546
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,050
redis-raftmyaVerified publisher22.5.41 of 2See more

redis-raft mya 22.5.4

1 of the 2 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
quay.io/oliver006/redis_exporter:v1.35.1908dbee5c546
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

1,050
myhelmappmyhelmapp0.1.11 of 1See more

myhelmapp myhelmapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
tobirachel/node-project3:v17d9f37154994
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

3,359
fargate-sidecar-injectormziyaboVerified publisher0.1.51 of 1See more

fargate-sidecar-injector mziyabo 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
mziyabo/fargate-eks-sidecar-injector:latest3067dce17983
google.golang.org/protobuf@v1.28.1
1.33.0

Open the chart page →

1,393
nats-kafkanatsVerified publisher0.15.41 of 1See more

nats-kafka nats 0.15.4

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
natsio/nats-kafka:1.4.2bb241956b0dc
google.golang.org/protobuf@v1.25.1-0.20200805231151-a709e31e5d12
1.33.0

Open the chart page →

1,731
nats-operatornatsVerified publisher0.8.31 of 1See more

nats-operator nats 0.8.3

1 of the 1 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
natsio/nats-operator:0.8.31261dae38389
google.golang.org/protobuf@v1.26.0
1.33.0

Open the chart page →

2,353
papergirlneoskop3.2.61 of 5See more

papergirl neoskop 3.2.6

1 of the 5 container images this version deploys carry CVE-2024-24786.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
google.golang.org/protobuf@v1.27.1
1.33.0

Open the chart page →

6,982

Container images carrying it

1,663 by charts deploying them

A fixed version is listed for 8 of the 8 affected packages.

Container imageDigestPackageFixed inUsed by
cloudentity/openbanking-quickstart-bank:1.11.19402ec4b5016
google.golang.org/protobuf@v1.25.0
1.33.0
1
cloudentity/openbanking-quickstart-consent-admin-portal:1.11.1ee83cdd45b7b
google.golang.org/protobuf@v1.25.0
1.33.0
1
cloudentity/openbanking-quickstart-consent-page:1.11.15728654cecb7
google.golang.org/protobuf@v1.25.0
1.33.0
1
cloudentity/openbanking-quickstart-consent-self-service-portal:1.11.18ca94ae6acf4
google.golang.org/protobuf@v1.25.0
1.33.0
1
cloudentity/openbanking-quickstart-financroo-tpp:1.11.1c04eb10c77b7
google.golang.org/protobuf@v1.25.0
1.33.0
1
cloudflare/cloudflared:2023.10.0c18744ae1767
google.golang.org/protobuf@v1.28.1
1.33.0
1
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
google.golang.org/protobuf@v1.30.0
1.33.0
1
cmacrae/d2-prometheus-exporter:v0.1.0fc5fecba436e
google.golang.org/protobuf@v1.23.0
1.33.0
1
cockroachdb/cockroach-operator:v2.1.0983312754620
google.golang.org/protobuf@v1.23.0
1.33.0
1
codenotary/immudb:1.9.77c85d7cc4f22
google.golang.org/protobuf@v1.32.0
1.33.0
1
coderenvs/coder-service:1.44.61deffc4670e6
google.golang.org/protobuf@v1.28.1
1.33.0
1
coredns/coredns:1.7.073ca82b4ce82
google.golang.org/protobuf@v1.23.0
1.33.0
1
coredns/coredns:1.10.1a0ead06651cf
google.golang.org/protobuf@v1.28.1
1.33.0
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
google.golang.org/protobuf@v1.32.0
1.33.0
1
cortezaproject/corteza:2024.9.08eb7a26605c9
google.golang.org/protobuf@v1.32.0
1.33.0
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
google.golang.org/protobuf@v1.32.0
1.33.0
1
craftypath/sops-operator:v0.8.0402a0024c732
google.golang.org/protobuf@v1.26.0
1.33.0
1
crossplane/oam-kubernetes-runtime:v0.3.1-5.g11e189407b8b410dc76
google.golang.org/protobuf@v1.23.0
1.33.0
1
crowdfox/external-service-operator:v1.1.06fa7e8063d27
google.golang.org/protobuf@v1.25.0
1.33.0
1
csepulvedab/secret-sync:0.5227a6f2b0ff8
google.golang.org/protobuf@v1.28.0
1.33.0
1
csiplugin/snapshot-controller:v4.0.000fcc441ea9f
google.golang.org/protobuf@v1.25.0
1.33.0
1
ctrox/csi-s3:v1.2.0-rc.23c72862bea3c
google.golang.org/protobuf@v1.27.1
1.33.0
1
curtismager20/mcp-sync:3.8.23b5a057bc3cee
google.golang.org/protobuf@v1.31.0
1.33.0
1
danielfm/kube-ecr-cleanup-controller:0.1.1012485563b1d0
google.golang.org/protobuf@v1.26.0
1.33.0
1
danielqsj/kafka-exporter:v1.7.0e90b7ba06d97
google.golang.org/protobuf@v1.30.0
1.33.0
1
daprio/dashboard:0.14.07ba5d51e5b97
google.golang.org/protobuf@v1.28.1
1.33.0
1
daprio/injector:1.11.2763b9b70b0c8
google.golang.org/protobuf@v1.31.0
1.33.0
1
daprio/operator:1.11.2c584428aa12d
google.golang.org/protobuf@v1.31.0
1.33.0
1
daprio/placement:1.11.2d8e1446da996
google.golang.org/protobuf@v1.31.0
1.33.0
1
daprio/sentry:1.11.21f507c1a181b
google.golang.org/protobuf@v1.31.0
1.33.0
1
darthsim/imgproxy:v3.15.040f6eb807444
google.golang.org/protobuf@v1.28.1
1.33.0
1
datadog/extendeddaemonset:v0.8.0513a4377aed5
google.golang.org/protobuf@v1.25.0
1.33.0
1
datappeal/trino-exporter:latest325b91c2b09e
google.golang.org/protobuf@v1.24.0
1.33.0
1
datappeal/trino-loadbalancer:sha-950abbae6b5b9fdb2e6d
google.golang.org/protobuf@v1.28.0
1.33.0
1
datasaker/dsk-container-agent:latest08b52999f67b
google.golang.org/protobuf@v1.31.0
1.33.0
1
datasaker/dsk-k8s-agent:latest2542ee73be51
google.golang.org/protobuf@v1.31.0
1.33.0
1
datasaker/dsk-kube-state-agent:latestd6d2eb48589d
google.golang.org/protobuf@v1.31.0
1.33.0
1
datasaker/dsk-node-agent:latest1b95913b6729
google.golang.org/protobuf@v1.31.0
1.33.0
1
datasaker/dsk-process-agent:latest2f38720a637d
google.golang.org/protobuf@v1.31.0
1.33.0
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
google.golang.org/protobuf@v1.25.0
1.33.0
1
datawire/aes:1.13.62beb65062c8b
google.golang.org/protobuf@v1.25.0
1.33.0
1
datawire/emissary:2.0.2-ea9716efbdd24b
google.golang.org/protobuf@v1.25.0
1.33.0
1
deepflowce/deepflowio-init-grafana:v6.2.6.56b51a0206b04
google.golang.org/protobuf@v1.28.1
1.33.0
1
deepflowce/deepflow-server:v6.2.6.534fcc526dd59
google.golang.org/protobuf@v1.28.1
1.33.0
1
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
google.golang.org/protobuf@v1.28.1
1.33.0
1
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
google.golang.org/protobuf@v1.27.1
1.33.0
1
deluan/navidrome:0.49.311a24da08977
google.golang.org/protobuf@v1.28.1
1.33.0
1
deluan/navidrome:0.50.02cf4442b0099
google.golang.org/protobuf@v1.31.0
1.33.0
1
devopstales/trivy-operator:2.575136aa7a26e
google.golang.org/protobuf@v1.28.1
1.33.0
1
dexidp/dex:v2.39.1-distroless43655afd1a8f
google.golang.org/protobuf@v1.31.0
1.33.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.