StackRadar

CVE-2024-28180

Medium

Advisory

Published 7 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
413
of 17,781 indexed, latest versions
Container images
395
deployed by those charts
Fix available
3 of 4
affected packages

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Carried by container images the latest versions of 413 of 17,781 indexed charts deploy, on 395 images.

Affected packageAffected versionsFixed inImages
gopkg.in/square/go-jose.v2golangv2.0.0-20180411045311-89060dee6a84, v2.2.2, v2.3.0, v2.3.1+5 moreno fix listed353
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.23.0.368
gopkg.in/go-jose/go-jose.v2golangv2.6.12.6.33
libgpg-errorrpm1.29-1.81.29-150000.3.3.11
OSV records
GHSA-c5q2-7r4c-mv6gSUSE-SU-2024:2754-1
Also known as
GO-2024-2631

Charts affected

413 by stars
ChartLatestAffected imagesRadar Score
ipfs-clusterparadeum-teamVerified publisher0.0.191 of 2See more

ipfs-cluster paradeum-team 0.0.19

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ipfs/go-ipfs:v0.13.117259397f587
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,757
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

1,942
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

12,125
sn-platformstreamnative1.11.442 of 9See more

sn-platform streamnative 1.11.44

2 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

15,477
feedbacksystemthm-mni-iiVerified publisher0.47.12 of 10See more

feedbacksystem thm-mni-ii 0.47.1

2 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
thmmniii/fbs-runner:v1.27.186105349c1a3
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

28,534
maeshtraefikOfficialVerified publisher2.1.21 of 7See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
containous/maesh:v1.3.2587162516502
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

4,136
traefik-meshtraefikOfficialVerified publisher4.1.12 of 7See more

traefik-mesh traefik 4.1.1

2 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
traefik/mesh:v1.4.8cf071f3e165c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

9,257
argocdtwomartensVerified publisher0.1.12 of 3See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

10,315
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.4.376dcf36e7d2a
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

17,877
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

22,202
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

5,222
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,391
chirpstackbeeinventor0.1.101 of 5See more

chirpstack beeinventor 0.1.10

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
chirpstack/chirpstack-application-server:3.17.6e0b23dfd24d6
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

7,807
livekit-serverbeeinventor1.0.01 of 2See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.0.08391fd1b834f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,602
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.3.5cd7cb4345aa7
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

7,583
cosmo-controller-managercosmoVerified publisher0.9.01 of 2See more

cosmo-controller-manager cosmo 0.9.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

1,927
cosmo-dashboardcosmoVerified publisher0.9.11 of 1See more

cosmo-dashboard cosmo 0.9.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

1,939
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

6,473
revadcs3orgOfficialVerified publisher1.6.11 of 1See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

1,704
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,969
clairdevtron0.1.141 of 2See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,237
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,238
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

10,454
dragonfly-stackdragonflyVerified publisher0.1.23 of 7See more

dragonfly-stack dragonfly 0.1.2

3 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
dragonflyoss/scheduler:v2.1.49523785c77787
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

18,376
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.89.0995f17004231
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

15,383
dexgabibbo974.0.41 of 1See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,391
gboxgboxVerified publisher1.0.51 of 2See more

gbox gbox 1.0.5

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gboxproxy/gbox:v1.0.63a9f4a711d5c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,521
filebrowsergeek-cookbookVerified publisher1.4.21 of 1See more

filebrowser geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.18.04fcd47af573c
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

3,474
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,556
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

5,079
temporalglasskubeVerified publisher0.45.2-gk.13 of 14See more

temporal glasskube 0.45.2-gk.1

3 of the 14 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/server:1.25.08a5798191dea
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/ui:2.30.25c2a3645d09c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

16,346
armada-operatorgresearch0.7.01 of 2See more

armada-operator gresearch 0.7.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
kubebuilder/kube-rbac-proxy:v0.16.03c4f708c6204
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,567
carettagroundcover0.0.161 of 3See more

caretta groundcover 0.0.16

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,799
terraform-cloud-operatorhashicorpVerified publisher2.5.01 of 2See more

terraform-cloud-operator hashicorp 2.5.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.0754ab2a723c8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,463
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

13,610
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

4,196
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

4,300
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,421
ingressistio1.10.31 of 1See more

ingress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,421
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,701
netbirdkitstream-netbird0.7.01 of 3See more

netbird kitstream-netbird 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
netbirdio/netbird-server:0.77.1e71f39cefcd9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,291
juicefskubesphere-stable0.16.21 of 4See more

juicefs kubesphere-stable 0.16.2

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.20.043978fc60798
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

2,489
kube-vault-controllerkube-vault-controller1.2.01 of 1See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

1,550
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.12 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

2 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

7,087
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.01 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

5,941
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.21 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

6,872
linstorkvaps1.14.01 of 11See more

linstor kvaps 1.14.0

1 of the 11 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

15,547
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2024-01-18T22-51-28Z551682a57a94
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

5,576
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

4,389

Container images carrying it

395 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
datawire/aes:1.13.62beb65062c8b
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
datawire/aes:3.11.195ec30b3c732
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
defactops/defactops-ui:1.0.16825cdf9ba706
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
devopsfaith/krakend:2.6.34c678c224f67
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
devopsfaith/krakend:2.7.09219cda867e2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
dexidp/dex:v2.39.1-distroless43655afd1a8f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
dollarshaveclub/furan2:master14a257836529
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
dragonflyoss/scheduler:v2.1.49523785c77787
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
epamedp/edp-admin-console:2.14.0616c678ba3e7
gopkg.in/square/go-jose.v2@v2.3.0
no fix listed
1
epamedp/edp-headlamp:0.25.093417e18bb1a
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
filebrowser/filebrowser:v2.18.04fcd47af573c
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
flashcatcloud/nightingale:8.5.1421acb36181b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
flomesh/osm-edge-bootstrap:1.3.9b188e128cbfe
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
flomesh/osm-edge-controller:1.3.9add7a4da4622
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
flomesh/osm-edge-injector:1.3.947287e3ad324
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
goalert/goalert:v0.32.008d57388b0cb
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
goharbor/harbor-acceld:0.2.13451103a6c8d8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
goharbor/harbor-core:v2.9.06412d679fdc3
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
goharbor/harbor-core:v2.5.386bf3031f4a7
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/agent:v0.40.3f6cbec9409be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
grafana/grafana:6.6.0052147d7e0ec
gopkg.in/square/go-jose.v2@v2.3.0
no fix listed
1
grafana/grafana:10.1.50679e877ba20
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
grafana/grafana:7.5.609bb407e26ab
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:7.3.315b977f5207d
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
1
grafana/grafana:9.4.71a359d92f40e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
grafana/grafana:9.5.239c849cebccc
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
grafana/grafana:8.0.3696823fbc561
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:10.2.36b5b37eb35bb
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
grafana/grafana:7.3.46d42886b3ebe
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
1
grafana/grafana:7.2.1733842cca5bd
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
1
grafana/grafana:9.4.376dcf36e7d2a
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:10.3.38640e5038e83
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
grafana/grafana:9.1.19746858c20e6
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:9.0.1a738d0744784
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:6.5.1befcd84da2c1
gopkg.in/square/go-jose.v2@v2.3.0
no fix listed
1
grafana/grafana:8.3.5cd7cb4345aa7
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:8.3.4cf81d2c753c8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:7.4.5d322192ed2fa
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:8.5.3ecc1b80b8ca2
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:10.4.0f9811e4e687f
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
hashicorp/boundary:0.8.1fb70bd9210ff
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/consul:1.17.0712fe02d2f84
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.