StackRadar

CVE-2024-28180

Medium

Advisory

Published 7 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
413
of 17,781 indexed, latest versions
Container images
395
deployed by those charts
Fix available
3 of 4
affected packages

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Carried by container images the latest versions of 413 of 17,781 indexed charts deploy, on 395 images.

Affected packageAffected versionsFixed inImages
gopkg.in/square/go-jose.v2golangv2.0.0-20180411045311-89060dee6a84, v2.2.2, v2.3.0, v2.3.1+5 moreno fix listed353
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.23.0.368
gopkg.in/go-jose/go-jose.v2golangv2.6.12.6.33
libgpg-errorrpm1.29-1.81.29-150000.3.3.11
OSV records
GHSA-c5q2-7r4c-mv6gSUSE-SU-2024:2754-1
Also known as
GO-2024-2631

Charts affected

413 by stars
ChartLatestAffected imagesRadar Score
actions-runner-controlleractions-runner-controller0.23.71 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,883
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,103
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,453
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

32,259
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

4,086
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.8.0e1642bf8e933
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

16,251
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
netbirdio/management:0.45.10c9994b393ea
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

8,390
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

5,173
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

11,933
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

12,237
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

4,167
dex-k8s-authenticatorsagikazarmarkVerified publisher0.0.31 of 1See more

dex-k8s-authenticator sagikazarmark 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
mintel/dex-k8s-authenticator:1.4.0caf71cee7b9a
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

2,791
devtron-operatordevtron0.23.33 of 11See more

devtron-operator devtron 0.23.3

3 of the 11 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

32,902
temporallemontechVerified publisher0.37.02 of 13See more

temporal lemontech 0.37.0

2 of the 13 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
temporalio/server:1.22.4c0a44c26397b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

14,893
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

17,245
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

5,630
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.15.02c7b120590cb
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

9,868
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

6,849
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,515
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

17,263
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
library/traefik:2.5.47d0228d19042
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

52,919
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

14,094
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/go-jose/go-jose.v2@v2.6.1
3.0.3
2.6.3

Open the chart page →

1,981
flyteflyte1.16.81 of 11See more

flyte flyte 1.16.8

1 of the 11 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

3,281
kubeflowkubeflow1.6.24 of 45See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
istio/proxyv2:1.14.1df69c1a7af7c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

96,941
vclustermainVerified publisher0.17.02 of 10See more

vcluster main 0.17.0

2 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
registry.k8s.io/kube-apiserver:v1.25.0f6902791fb9a
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
registry.k8s.io/kube-controller-manager:v1.25.066ce7d460e53
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

11,552
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

19,337
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

13,562
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

9,052
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,884
cert-managerchoerodon1.8.21 of 4See more

cert-manager choerodon 1.8.2

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.8.2a20c44021a5d
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

7,775
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
quay.io/minio/minio:RELEASE.2022-09-17T00-09-45Zc3d20bc2ea08
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

24,700
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

17,404
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

3,451
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

7,579
statpinggeek-cookbookVerified publisher6.2.01 of 2See more

statping geek-cookbook 6.2.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
statping/statping:v0.90.74e874da513a5c
gopkg.in/square/go-jose.v2@v2.5.0
no fix listed

Open the chart page →

3,371
traefik-forward-authgeek-cookbookVerified publisher2.2.21 of 1See more

traefik-forward-auth geek-cookbook 2.2.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:2.2.0e875194d67e2
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

2,234
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
netbirdio/netbird-server:0.78.13086534361a1
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,962
frpc-ingressinfinity-server0.4.11 of 1See more

frpc-ingress infinity-server 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
springhack/frpc_ingress:latest4aceb821da88
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

2,622
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/influxdb:2.3.0-alpined7f5dd5f70e2
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

30,816
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

7,273
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
kubevious/ui:1.2.16233e84bdd59
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

14,204
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

11,582
karporkusionstackVerified publisher0.7.61 of 3See more

karpor kusionstack 0.7.6

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
kusionstack/karpor:v0.6.4b707d3bf0abd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

3,295
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

3,675
vcluster-k8sloftVerified publisher0.0.0-ci.32 of 4See more

vcluster-k8s loft 0.0.0-ci.3

2 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

5,570
vcluster-platformloftVerified publisher4.12.01 of 1See more

vcluster-platform loft 4.12.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

744
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

17,693
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

3,793
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2020-12-03T05-49-24Z053f103f4894
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

107,811

Container images carrying it

395 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
ghcr.io/cfcontainerizationbot/kubecf-kubectl:v1.19.261daa1bba5cb
libgpg-error@1.29-1.8
1.29-150000.3.3.1
1
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/go-jose/go-jose.v2@v2.6.1
3.0.3
2.6.3
1
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.5.1
3.0.3
no fix listed
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
gopkg.in/square/go-jose.v2@v2.4.0
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/netsoc/webspaced:0.5.1edc238a538a0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces:v0.17.0bb2ee6241719
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/quenchworks/images/influxdb49591c907fa2
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/spiffe/spire-controller-manager:0.2.25e90b2d092df
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.5.1
3.0.3
no fix listed
1
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.