StackRadar

CVE-2024-28180

Medium

Advisory

Published 7 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
413
of 17,781 indexed, latest versions
Container images
395
deployed by those charts
Fix available
3 of 4
affected packages

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Carried by container images the latest versions of 413 of 17,781 indexed charts deploy, on 395 images.

Affected packageAffected versionsFixed inImages
gopkg.in/square/go-jose.v2golangv2.0.0-20180411045311-89060dee6a84, v2.2.2, v2.3.0, v2.3.1+5 moreno fix listed353
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.23.0.368
gopkg.in/go-jose/go-jose.v2golangv2.6.12.6.33
libgpg-errorrpm1.29-1.81.29-150000.3.3.11
OSV records
GHSA-c5q2-7r4c-mv6gSUSE-SU-2024:2754-1
Also known as
GO-2024-2631

Charts affected

413 by stars
ChartLatestAffected imagesRadar Score
devtron-operatorromholdings0.23.33 of 11See more

devtron-operator romholdings 0.23.3

3 of the 11 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

32,902
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

11,909
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,645
caddysagikazarmarkVerified publisher0.0.141 of 1See more

caddy sagikazarmark 0.0.14

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/caddy:2.4.5874405536b3e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,960
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/influxdb:2.7b8d940ca9376
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

12,668
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

4,744
opentelemetry-collectorsb-helm-charts0.3.01 of 1See more

opentelemetry-collector sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

1,721
ed-traefikscaleway-charts0.2.01 of 1See more

ed-traefik scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:v1.7.345d47b7bb2546
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,133
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

3,160
cert-manager-webhook-cloudnsschichtelVerified publisher1.2.01 of 1See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

1,396
icinga2-masterschmitzis0.2.01 of 6See more

icinga2-master schmitzis 0.2.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.0.3696823fbc561
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,731
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,330
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.3.315b977f5207d
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

9,754
cloudflaredsectionmeVerified publisher2022.3.41 of 1See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,407
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

10,733
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/go-jose/go-jose/v3@v3.0.2
3.0.3

Open the chart page →

3,337
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

3,286
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,203
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

2,314
bytesafe-cesimcube1.0.41 of 3See more

bytesafe-ce simcube 1.0.4

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
bytesafe/bytesafe-ce:v1.0.4ee287384c005
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,494
mimirskyloud-helm-chartsVerified publisher5.5.11 of 5See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

10,651
gitlab-runnerslamdev0.0.11 of 1See more

gitlab-runner slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

9,196
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

3,462
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.9.06412d679fdc3
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

7,672
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,257
spinnakerspinnakerVerified publisher2.2.131 of 4See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

6,836
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,416
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

66,266
external-secretsstakaterVerified publisher0.3.12-40dbdfc1 of 1See more

external-secrets stakater 0.3.12-40dbdfc

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,081
vaultstakaterVerified publisher0.8.41 of 2See more

vault stakater 0.8.4

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.4dfc3500beb0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,864
cost-analyzerstatcan1.82.22 of 9See more

cost-analyzer statcan 1.82.2

2 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.5.609bb407e26ab
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
gopkg.in/square/go-jose.v2@v2.0.0-20180411045311-89060dee6a84
no fix listed

Open the chart page →

16,506
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

12,237
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

10,134
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

10,902
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

18,756
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,514
temporaltemporal0.28.94 of 13See more

temporal temporal 0.28.9

4 of the 13 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
temporalio/admin-tools:1.22.0836af062af30
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/server:1.22.0ddeebf8bad8f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/ui:2.16.2af9c9349708f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

21,005
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

18,908
grafanatnh5.3.01 of 1See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

3,191
tfy-cloudflaredtruefoundryVerified publisher0.5.01 of 2See more

tfy-cloudflared truefoundry 0.5.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,015
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,960
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

4,382
vineyard-operatorvineyardVerified publisher0.24.21 of 2See more

vineyard-operator vineyard 0.24.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

4,525
consulwarjiang1.3.02 of 2See more

consul warjiang 1.3.0

2 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/consul:1.17.0712fe02d2f84
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

4,060
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

6,232
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

4,086
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

3,174
frpcwenerme1.0.11 of 1See more

frpc wenerme 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
wener/frpc:v0.37.0cc9fd4da44c0
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

3,359
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

15,230

Container images carrying it

395 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
hashicorp/consul:1.15.3ddff34041c5c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/consul-k8s-control-plane:1.3.00e4452f0f265
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/vault:1.15.40b01ed3924e6
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
hashicorp/vault:1.14.0b2177a8bfe85
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
hashicorp/vault:1.8.4dfc3500beb0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hashicorp/waypoint:0.11.397d521a27498
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
inseefrlab/shelly:cloudshell31f04ca7436b
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
intel/multimodal-data-visualization:3.03426deb77337
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ipfs/go-ipfs:v0.13.117259397f587
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ipfs/kubo:v0.17.0803fac58ba15
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ipfs/kubo:v0.24.0e3de33bd746b
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/operator:1.10.3655eefa11c84
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/operator:1.12.06cfce8a071b9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
istio/operator:1.18.270f9d1fe5fff
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
istio/pilot:1.10.0294ca55bd1cc
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/pilot:1.16.0ac0284d75ec9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
istio/pilot:1.17.1ce9d87606701
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
istio/pilot:1.15.2db08d6963975
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
istio/pilot:1.10.3e7e110a421c2
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
istio/proxyv2:1.14.1df69c1a7af7c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
juicedata/juicefs-csi-driver:v0.20.043978fc60798
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
kubebb/cert-manager-controller:v1.8.020509de4b399
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
kubebb/iam-provider:v0.2.0-202401280ba03fcee3a7
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
kubebb/kube-oidc-proxy-ce:v0.3.0-2022100858d5efec568b
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
kubebb/oidc-server:v0.2.02b5894ef1e2f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubebuilder/kube-rbac-proxy:v0.16.03c4f708c6204
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubernetesui/dashboard:v2.6.1290bebc3cd96
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubernetesui/dashboard:v2.7.02e500d29e9d5
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kubevious/ui:1.2.16233e84bdd59
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
kusionstack/karpor:v0.6.4b707d3bf0abd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
library/caddy:2.660fb54d36b4b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
library/caddy:2.2.0-alpine7367adca165f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/caddy:2.4.5874405536b3e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/caddy:2.4.2-alpinefbc51bcf1ab0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/influxdb:2.8571eb4514977
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/influxdb:2.7.4-alpinea10d46445d68
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/influxdb:2.0.8ba10ac9ba17a
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
library/influxdb:2.3.0-alpined7f5dd5f70e2
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.