StackRadar

CVE-2024-28180

Medium

Advisory

Published 7 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
413
of 17,781 indexed, latest versions
Container images
395
deployed by those charts
Fix available
3 of 4
affected packages

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Carried by container images the latest versions of 413 of 17,781 indexed charts deploy, on 395 images.

Affected packageAffected versionsFixed inImages
gopkg.in/square/go-jose.v2golangv2.0.0-20180411045311-89060dee6a84, v2.2.2, v2.3.0, v2.3.1+5 moreno fix listed353
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.23.0.368
gopkg.in/go-jose/go-jose.v2golangv2.6.12.6.33
libgpg-errorrpm1.29-1.81.29-150000.3.3.11
OSV records
GHSA-c5q2-7r4c-mv6gSUSE-SU-2024:2754-1
Also known as
GO-2024-2631

Charts affected

413 by stars
ChartLatestAffected imagesRadar Score
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,396
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

1,400
getconfigcamptocamp30.1.11 of 1See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,195
cert-utils-operatorcert-utils-operator1.3.121 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

7,776
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
chaosnative/cle-auth-server:2.7.072ee352bc333
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

16,389
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.11.0d429b6d696e0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

7,104
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

20,900
openbankingcloudentity0.1.91 of 6See more

openbanking cloudentity 0.1.9

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cloudentity/openbanking-quickstart-configuration:1.11.18a1890eb8265
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

18,040
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

25,151
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,921
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

18,293
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
bitnamilegacy/rmq-messaging-topology-operator:1.7.1-scratch-r33c26208691a1
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,531
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

19,338
traefik-forward-authcolearendt0.0.151 of 1See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
thomseddon/traefik-forward-auth:269a2c985d2c5
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

2,234
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

3,181
cortezacorteza1.0.121 of 3See more

corteza corteza 1.0.12

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

8,368
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

4,644
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

3,672
electric-mailcryptexlabsVerified publisher0.0.11 of 5See more

electric-mail cryptexlabs 0.0.1

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,973
purple-piecryptexlabsVerified publisher0.0.11 of 4See more

purple-pie cryptexlabs 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.34db614d40d0e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,973
csghubcsghubVerified publisher2.4.33 of 34See more

csghub csghub 2.4.3

3 of the 34 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

11,335
miniod4nVerified publisher5.2.11 of 2See more

minio d4n 5.2.1

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-06-04T19-20-08Zc6b68f158628
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,629
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,509
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,722
argocddevtron1.8.12 of 3See more

argocd devtron 1.8.1

2 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

68,240
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,039
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

11,909
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,645
argocddevtron-labs1.8.12 of 3See more

argocd devtron-labs 1.8.1

2 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
quay.io/dexidp/dex:v2.25.07bcf286807b8
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

10,466
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

68,240
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.0.7aa4da00c5b96
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,039
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
quay.io/devtron/dex:v2.30.22e4c14d1b444
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

32,902
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

11,909
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

8,645
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

21,641
furan2dollarshaveclubVerified publisher0.2.01 of 1See more

furan2 dollarshaveclub 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
dollarshaveclub/furan2:master14a257836529
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,046
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

3,659
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.04 of 13See more

temporal dtrdnk-helm-charts 0.35.0

4 of the 13 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed
temporalio/admin-tools:1.22.4258958fe2ff2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/server:1.22.4c0a44c26397b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
temporalio/ui:2.16.2af9c9349708f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

20,205
ai-scale-saverdysnixVerified publisher0.1.01 of 1See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
alex6021710/ai-scale-saver:latestf73e8d60fd03
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,136
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.4.5d322192ed2fa
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,161
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,296
llo-docker-operatoreclipse-aeriosVerified publisher1.0.01 of 2See more

llo-docker-operator eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,187
llo-k8seclipse-aeriosVerified publisher1.1.01 of 2See more

llo-k8s eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,158
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,981

Container images carrying it

395 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
ghcr.io/cfcontainerizationbot/kubecf-kubectl:v1.19.261daa1bba5cb
libgpg-error@1.29-1.8
1.29-150000.3.3.1
1
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/go-jose/go-jose.v2@v2.6.1
3.0.3
2.6.3
1
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.5.1
3.0.3
no fix listed
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
gopkg.in/square/go-jose.v2@v2.4.0
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/netsoc/webspaced:0.5.1edc238a538a0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces:v0.17.0bb2ee6241719
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/quenchworks/images/influxdb49591c907fa2
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/spiffe/spire-controller-manager:0.2.25e90b2d092df
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.5.1
3.0.3
no fix listed
1
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.