StackRadar

CVE-2024-28180

Medium

Advisory

Published 7 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
413
of 17,781 indexed, latest versions
Container images
395
deployed by those charts
Fix available
3 of 4
affected packages

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Carried by container images the latest versions of 413 of 17,781 indexed charts deploy, on 395 images.

Affected packageAffected versionsFixed inImages
gopkg.in/square/go-jose.v2golangv2.0.0-20180411045311-89060dee6a84, v2.2.2, v2.3.0, v2.3.1+5 moreno fix listed353
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.23.0.368
gopkg.in/go-jose/go-jose.v2golangv2.6.12.6.33
libgpg-errorrpm1.29-1.81.29-150000.3.3.11
OSV records
GHSA-c5q2-7r4c-mv6gSUSE-SU-2024:2754-1
Also known as
GO-2024-2631

Charts affected

413 by stars
ChartLatestAffected imagesRadar Score
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,396
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

1,400
getconfigcamptocamp30.1.11 of 1See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,195
cert-utils-operatorcert-utils-operator1.3.121 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

7,776
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

16,389
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

7,104
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

20,900
openbankingcloudentity0.1.91 of 6See more

openbanking cloudentity 0.1.9

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cloudentity/openbanking-quickstart-configuration:1.11.18a1890eb8265
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

18,040
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

25,151
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,921
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

18,293
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
bitnamilegacy/rmq-messaging-topology-operator:1.7.1-scratch-r33c26208691a1
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,531
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

19,338
traefik-forward-authcolearendt0.0.151 of 1See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:269a2c985d2c5
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

2,234
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

3,181
cortezacorteza1.0.121 of 3See more

corteza corteza 1.0.12

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

8,368
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

4,644
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

3,672
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,973
csghubcsghubVerified publisher2.4.33 of 34See more

csghub csghub 2.4.3

3 of the 34 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

11,335
miniod4nVerified publisher5.2.11 of 2See more

minio d4n 5.2.1

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,629
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,509
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,722
argocddevtron1.8.12 of 3See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

68,240
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,039
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

11,909
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,645
argocddevtron-labs1.8.12 of 3See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

10,466
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

68,240
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,039
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

32,902
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

11,909
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,645
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

21,641
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,046
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

3,659
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.04 of 13See more

temporal dtrdnk-helm-charts 0.35.0

4 of the 13 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
temporalio/admin-tools:1.22.4258958fe2ff2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/server:1.22.4c0a44c26397b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/ui:2.16.2af9c9349708f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

20,205
ai-scale-saverdysnixVerified publisher0.1.01 of 1See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
alex6021710/ai-scale-saver:latestf73e8d60fd03
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,136
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.4.5d322192ed2fa
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,161
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,296
llo-docker-operatoreclipse-aeriosVerified publisher1.0.01 of 2See more

llo-docker-operator eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,187
llo-k8seclipse-aeriosVerified publisher1.1.01 of 2See more

llo-k8s eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,158
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,981

Container images carrying it

395 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
library/influxdb:latestf75e48af0598
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/traefik:v2.11.00a5157f742d2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
library/traefik:v2.10.11489caffaedb
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
library/traefik:2.10.61957e3314f43
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
library/traefik:2.5.62f603f8d3abe
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
library/traefik:v1.7.345d47b7bb2546
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
library/traefik:2.5.47d0228d19042
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
library/traefik:2.4.8eda951fd29a8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
library/traefik:2.2.8f5af5a5ce17f
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
library/vault:1.13.3f98ac9dd97b0
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
linuxserver/cloud9:latest45c5fe102ff3
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
livekit/ingress:v1.2.21ab01641b366
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
livekit/livekit-recorder:v0.3.13ecf1409c75e0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
livekit/livekit-server:v1.0.08391fd1b834f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
loftsh/directclusterendpoint:1.14.0310cc7d690f5
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
longhornio/longhorn-manager:v1.2.3dca34321452c
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
louislam/uptime-kuma:1.23.1396510915e6be
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
louislam/uptime-kuma:1.18.5a84767d7934f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
matrixdb/kubebuilder_kube-rbac-proxy:v0.12.0ed3c7e6291e8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
mesosphere/dex-k8s-authenticator:v1.4.1-d2iqf3d9982cc2fd
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
1
mesosphere/traefik-forward-auth:3.1.05456581d7b76
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
miniflux/miniflux:2.0.36e2fb990dae74
gopkg.in/square/go-jose.v2@v2.5.0
no fix listed
1
minio/kes:v0.22.255f3aef5803e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
minio/kes:2023-04-03T16-41-28Zf93c2d9088df
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
minio/minio:RELEASE.2024-05-28T17-19-04Z391d1d45fdbe
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
minio/minio:RELEASE.2024-01-18T22-51-28Z551682a57a94
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
minio/minio:RELEASE.2020-09-17T04-49-20Ze2b7b633c250
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
minio/minio:RELEASE.2020-01-03T19-12-21Zf00aa6ef2b72
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
netbirdio/management:0.45.10c9994b393ea
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
netbirdio/netbird-server:0.78.13086534361a1
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
netbirdio/netbird-server:0.77.1e71f39cefcd9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
oryd/kratos:v1.1.08f15006a080d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
otel/opentelemetry-collector-contrib:0.89.0995f17004231
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.