StackRadar

CVE-2024-28180

Medium

Advisory

Published 7 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
413
of 17,781 indexed, latest versions
Container images
395
deployed by those charts
Fix available
3 of 4
affected packages

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Carried by container images the latest versions of 413 of 17,781 indexed charts deploy, on 395 images.

Affected packageAffected versionsFixed inImages
gopkg.in/square/go-jose.v2golangv2.0.0-20180411045311-89060dee6a84, v2.2.2, v2.3.0, v2.3.1+5 moreno fix listed353
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.23.0.368
gopkg.in/go-jose/go-jose.v2golangv2.6.12.6.33
libgpg-errorrpm1.29-1.81.29-150000.3.3.11
OSV records
GHSA-c5q2-7r4c-mv6gSUSE-SU-2024:2754-1
Also known as
GO-2024-2631

Charts affected

413 by stars
ChartLatestAffected imagesRadar Score
voice-biometricslumenvox2.0.11 of 26See more

voice-biometrics lumenvox 2.0.1

1 of the 26 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:v2.57d5a6ae66572
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

70,741
traefik-forward-authmesosphere0.3.101 of 2See more

traefik-forward-auth mesosphere 0.3.10

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
mesosphere/traefik-forward-auth:3.1.05456581d7b76
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

5,308
miniomilvus8.0.171 of 1See more

minio milvus 8.0.17

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

6,915
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.230b60b6565ab2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

37,373
kubernetes-dashboard-proxyosc0.7.22 of 4See more

kubernetes-dashboard-proxy osc 0.7.2

2 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.7.02e500d29e9d5
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/oauth2-proxy/oauth2-proxy:v7.1.3ecd26b74a01f
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

6,005
patch-operatorpatch-operator0.1.111 of 2See more

patch-operator patch-operator 0.1.11

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

7,807
spirephilips-labsVerified publisher0.12.23 of 6See more

spire philips-labs 0.12.2

3 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
ghcr.io/spiffe/spire-controller-manager:0.2.25e90b2d092df
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

7,236
kubernetes-dashboardpyalive-cdmswebappVerified publisher5.8.01 of 1See more

kubernetes-dashboard pyalive-cdmswebapp 5.8.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.6.1290bebc3cd96
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,662
cloudflare-tunnelrlex0.8.01 of 1See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2023.10.0c18744ae1767
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

1,684
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,835
scienceboxsciencebox0.0.71 of 17See more

sciencebox sciencebox 0.0.7

1 of the 17 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

6,587
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

4,052
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

5,118
external-secrets-operatorslamdev0.0.151 of 1See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
slamdev/external-secrets-operator:0.0.8855f6625dda4
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

2,301
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
artifacthub/hub:v1.19.0111918d8c399
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

14,491
gloosolo-gloo-edge0.0.0-fork3 of 5See more

gloo solo-gloo-edge 0.0.0-fork

3 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/solo-io/certgen:0.0.0-forkb17a8c7d1f32
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

9,224
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,022
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ipfs/kubo:v0.24.0e3de33bd746b
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

4,661
statpingstatping0.1.141 of 1See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
gopkg.in/square/go-jose.v2@v2.5.0
no fix listed

Open the chart page →

3,371
Grafanasurajwarbhe-grafana0.1.01 of 1See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
surajwarbhe/grafana:v185248611e9f1
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

2,597
goalerttokens-studioVerified publisher0.0.51 of 2See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
goalert/goalert:v0.32.008d57388b0cb
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

1,469
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.5.1
3.0.3
no fix listed

Open the chart page →

3,165
boundaryundergridVerified publisher0.1.01 of 3See more

boundary undergrid 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/boundary:0.8.1fb70bd9210ff
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

4,957
frpswenerme1.0.11 of 1See more

frps wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
wener/frps:v0.37.05c92cc9e8597
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

3,359
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

10,090
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

12,473
akeyless-gatewayakeyless-services-helmVerified publisher3.5.31 of 2See more

akeyless-gateway akeyless-services-helm 3.5.3

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
akeyless/gateway:5.3.13d2e7dce5eb9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,522
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

28,131
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

25,669
capi-ops-managerappscodeVerified publisher2024.8.141 of 2See more

capi-ops-manager appscode 2024.8.14

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

3,416
grafanaappscodeVerified publisher2026.9.111 of 1See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana:v2025.2.367d18880448c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,333
inbox-agentappscodeVerified publisher2026.6.21 of 2See more

inbox-agent appscode 2026.6.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,114
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,796
kubeform-provider-azureappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,716
kubeform-provider-gcpappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,743
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,043
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,569
statefulsetappscodeVerified publisher0.0.11 of 3See more

statefulset appscode 0.0.1

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,732
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.0.1a738d0744784
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,608
assemblylineassemblylineVerified publisher7.4.171 of 12See more

assemblyline assemblyline 7.4.17

1 of the 12 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-01-11T07-46-16Z796f75ea413b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

12,898
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,556
graph-nodeastria0.2.21 of 3See more

graph-node astria 0.2.2

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ipfs/kubo:v0.17.0803fac58ba15
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,495
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

6,908
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

5,521
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,191
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

5,823
wg-access-serverbicarus-labs0.9.91 of 1See more

wg-access-server bicarus-labs 0.9.9

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
bicarus/wg-access-server:v0.8.206cab48e9334
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,748
bitpokebitpokeVerified publisher1.8.191 of 1See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,312
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

10,145
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

13,459

Container images carrying it

395 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
datawire/aes:1.13.62beb65062c8b
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
datawire/aes:3.11.195ec30b3c732
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
defactops/defactops-ui:1.0.16825cdf9ba706
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
devopsfaith/krakend:2.6.34c678c224f67
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
devopsfaith/krakend:2.7.09219cda867e2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
dexidp/dex:v2.39.1-distroless43655afd1a8f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
dollarshaveclub/furan2:master14a257836529
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
dragonflyoss/scheduler:v2.1.49523785c77787
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
epamedp/edp-admin-console:2.14.0616c678ba3e7
gopkg.in/square/go-jose.v2@v2.3.0
no fix listed
1
epamedp/edp-headlamp:0.25.093417e18bb1a
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
filebrowser/filebrowser:v2.18.04fcd47af573c
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
filebrowser/filebrowser:v2.13.0c5d0a75a0041
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
flashcatcloud/nightingale:8.5.1421acb36181b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
flomesh/osm-edge-bootstrap:1.3.9b188e128cbfe
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
flomesh/osm-edge-controller:1.3.9add7a4da4622
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
flomesh/osm-edge-injector:1.3.947287e3ad324
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
gboxproxy/gbox:v1.0.63a9f4a711d5c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
goalert/goalert:v0.32.008d57388b0cb
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
goharbor/harbor-acceld:0.2.13451103a6c8d8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
goharbor/harbor-core:v2.9.06412d679fdc3
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
goharbor/harbor-core:v2.5.386bf3031f4a7
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/agent:v0.40.3f6cbec9409be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
grafana/grafana:6.6.0052147d7e0ec
gopkg.in/square/go-jose.v2@v2.3.0
no fix listed
1
grafana/grafana:10.1.50679e877ba20
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
grafana/grafana:7.5.609bb407e26ab
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:7.3.315b977f5207d
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
1
grafana/grafana:9.4.71a359d92f40e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
grafana/grafana:9.5.239c849cebccc
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
grafana/grafana:8.0.3696823fbc561
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:10.2.36b5b37eb35bb
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
grafana/grafana:7.3.46d42886b3ebe
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
1
grafana/grafana:7.2.1733842cca5bd
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
1
grafana/grafana:9.4.376dcf36e7d2a
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:10.3.38640e5038e83
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
grafana/grafana:9.1.19746858c20e6
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:9.0.1a738d0744784
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:6.5.1befcd84da2c1
gopkg.in/square/go-jose.v2@v2.3.0
no fix listed
1
grafana/grafana:8.3.5cd7cb4345aa7
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:8.3.4cf81d2c753c8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:7.4.5d322192ed2fa
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:8.5.3ecc1b80b8ca2
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
grafana/grafana:10.4.0f9811e4e687f
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
hashicorp/boundary:0.8.1fb70bd9210ff
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/consul:1.17.0712fe02d2f84
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.