StackRadar

CVE-2024-28180

Medium

Advisory

Published 7 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
413
of 17,781 indexed, latest versions
Container images
395
deployed by those charts
Fix available
3 of 4
affected packages

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Carried by container images the latest versions of 413 of 17,781 indexed charts deploy, on 395 images.

Affected packageAffected versionsFixed inImages
gopkg.in/square/go-jose.v2golangv2.0.0-20180411045311-89060dee6a84, v2.2.2, v2.3.0, v2.3.1+5 moreno fix listed353
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.23.0.368
gopkg.in/go-jose/go-jose.v2golangv2.6.12.6.33
libgpg-errorrpm1.29-1.81.29-150000.3.3.11
OSV records
GHSA-c5q2-7r4c-mv6gSUSE-SU-2024:2754-1
Also known as
GO-2024-2631

Charts affected

413 by stars
ChartLatestAffected imagesRadar Score
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,396
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

1,400
getconfigcamptocamp30.1.11 of 1See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,195
cert-utils-operatorcert-utils-operator1.3.121 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

7,776
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

16,389
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

7,104
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

20,900
openbankingcloudentity0.1.91 of 6See more

openbanking cloudentity 0.1.9

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cloudentity/openbanking-quickstart-configuration:1.11.18a1890eb8265
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

18,040
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

25,151
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,921
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

18,293
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
bitnamilegacy/rmq-messaging-topology-operator:1.7.1-scratch-r33c26208691a1
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,531
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

19,338
traefik-forward-authcolearendt0.0.151 of 1See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:269a2c985d2c5
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

2,234
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

3,181
cortezacorteza1.0.121 of 3See more

corteza corteza 1.0.12

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

8,368
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

4,644
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

3,672
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,973
csghubcsghubVerified publisher2.4.33 of 34See more

csghub csghub 2.4.3

3 of the 34 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

11,335
miniod4nVerified publisher5.2.11 of 2See more

minio d4n 5.2.1

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,629
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,509
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,722
argocddevtron1.8.12 of 3See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

68,240
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,039
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

11,909
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,645
argocddevtron-labs1.8.12 of 3See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

10,466
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

68,240
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,039
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

32,902
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

11,909
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,645
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

21,641
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,046
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

3,659
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.04 of 13See more

temporal dtrdnk-helm-charts 0.35.0

4 of the 13 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
temporalio/admin-tools:1.22.4258958fe2ff2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/server:1.22.4c0a44c26397b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/ui:2.16.2af9c9349708f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

20,205
ai-scale-saverdysnixVerified publisher0.1.01 of 1See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
alex6021710/ai-scale-saver:latestf73e8d60fd03
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,136
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.4.5d322192ed2fa
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,161
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,296
llo-docker-operatoreclipse-aeriosVerified publisher1.0.01 of 2See more

llo-docker-operator eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,187
llo-k8seclipse-aeriosVerified publisher1.1.01 of 2See more

llo-k8s eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,158
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,981

Container images carrying it

395 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
hashicorp/consul:1.15.3ddff34041c5c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/vault:1.15.40b01ed3924e6
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
hashicorp/vault:1.14.0b2177a8bfe85
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
hashicorp/vault:1.8.4dfc3500beb0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/waypoint:0.11.397d521a27498
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
inseefrlab/shelly:cloudshell31f04ca7436b
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
intel/multimodal-data-visualization:3.03426deb77337
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ipfs/go-ipfs:v0.13.117259397f587
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ipfs/kubo:v0.17.0803fac58ba15
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ipfs/kubo:v0.24.0e3de33bd746b
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/operator:1.10.3655eefa11c84
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/operator:1.12.06cfce8a071b9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
istio/pilot:1.10.0294ca55bd1cc
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
istio/pilot:1.17.1ce9d87606701
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
istio/pilot:1.15.2db08d6963975
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
istio/pilot:1.10.3e7e110a421c2
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
juicedata/juicefs-csi-driver:v0.20.043978fc60798
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
kubebb/cert-manager-controller:v1.8.020509de4b399
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
kubebb/iam-provider:v0.2.0-202401280ba03fcee3a7
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
kubebb/oidc-server:v0.2.02b5894ef1e2f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubebuilder/kube-rbac-proxy:v0.16.03c4f708c6204
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubernetesui/dashboard:v2.6.1290bebc3cd96
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubernetesui/dashboard:v2.7.02e500d29e9d5
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubevious/ui:1.2.16233e84bdd59
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
kusionstack/karpor:v0.6.4b707d3bf0abd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
library/caddy:2.660fb54d36b4b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
library/caddy:2.2.0-alpine7367adca165f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/caddy:2.4.5874405536b3e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/caddy:2.4.2-alpinefbc51bcf1ab0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/influxdb:2.8571eb4514977
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/influxdb:2.7.4-alpinea10d46445d68
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/influxdb:2.0.8ba10ac9ba17a
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
library/influxdb:2.3.0-alpined7f5dd5f70e2
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.