StackRadar

CVE-2024-28180

Medium

Advisory

Published 7 Mar 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.020
79th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
423
of 17,787 indexed, latest versions
Container images
403
deployed by those charts
Fix available
3 of 4
affected packages

Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)

Carried by container images the latest versions of 423 of 17,787 indexed charts deploy, on 403 images.

Affected packageAffected versionsFixed inImages
gopkg.in/square/go-jose.v2golangv2.0.0-20180411045311-89060dee6a84, v2.2.2, v2.3.0, v2.3.1+5 moreno fix listed361
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.23.0.369
gopkg.in/go-jose/go-jose.v2golangv2.6.12.6.33
libgpg-errorrpm1.29-1.81.29-150000.3.3.11
OSV records
GHSA-c5q2-7r4c-mv6gSUSE-SU-2024:2754-1
Also known as
GO-2024-2631

Charts affected

423 by stars
ChartLatestAffected imagesRadar Score
llo-docker-operatoreclipse-aeriosVerified publisher1.0.01 of 2See more

llo-docker-operator eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,187
llo-k8seclipse-aeriosVerified publisher1.1.01 of 2See more

llo-k8s eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed

Open the chart page →

2,158
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,995
grafanaedu5.3.01 of 1See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

3,191
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,237
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.16.02c8f8c357ff8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

3,946
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

8,648
epinio-uiepinioVerified publisher1.7.21 of 1See more

epinio-ui epinio 1.7.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,684
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed

Open the chart page →

7,366
admin-console-operatorepmdedpVerified publisher2.14.01 of 2See more

admin-console-operator epmdedp 2.14.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
epamedp/edp-admin-console:2.14.0616c678ba3e7
gopkg.in/square/go-jose.v2@v2.3.0
no fix listed

Open the chart page →

4,308
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

1,259
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

20,987
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/go-jose/go-jose.v2@v2.6.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
2.6.3
no fix listed

Open the chart page →

1,736
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

13,491
did-helperfiware0.1.221 of 1See more

did-helper fiware 0.1.22

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/seamware/did-helper:0.6.0799c5f566952
github.com/go-jose/go-jose/v3@v3.0.1-0.20221117193127-916db76e8214
3.0.3

Open the chart page →

454
grafanaflagger1.7.01 of 1See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
grafana/grafana:7.3.46d42886b3ebe
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

3,365
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

5,684
flyte-depsflyte1.16.81 of 3See more

flyte-deps flyte 1.16.8

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
kubernetesui/dashboard:v2.2.0148991563e37
gopkg.in/square/go-jose.v2@v2.4.1
no fix listed

Open the chart page →

2,245
galoygaloymoney0.34.73 of 24See more

galoy galoymoney 0.34.7

3 of the 24 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
oryd/kratos:v1.0.0d06fc5845f63
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
oryd/oathkeeper:v0.40.6e8cb9b79a89c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

8,679
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

11,961
galoygaloymoney20.34.73 of 24See more

galoy galoymoney2 0.34.7

3 of the 24 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
oryd/kratos:v1.0.0d06fc5845f63
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
oryd/oathkeeper:v0.40.6e8cb9b79a89c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

8,679
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

11,961
gatusgeek-cookbookVerified publisher1.1.21 of 1See more

gatus geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
twinproduction/gatus:v3.8.049dc0d9b2e2c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

1,881
minifluxgeek-cookbookVerified publisher5.2.01 of 2See more

miniflux geek-cookbook 5.2.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
miniflux/miniflux:2.0.36e2fb990dae74
gopkg.in/square/go-jose.v2@v2.5.0
no fix listed

Open the chart page →

2,430
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,236
searxgeek-cookbookVerified publisher5.6.21 of 4See more

searx geek-cookbook 5.6.2

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/caddy:2.2.0-alpine7367adca165f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

7,470
vikunjageek-cookbookVerified publisher6.2.02 of 4See more

vikunja geek-cookbook 6.2.0

2 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/caddy:2.4.2-alpinefbc51bcf1ab0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
vikunja/api:0.17.18cba0520bf8c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

6,893
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

16,834
gnp-stackgnp-stack0.0.51 of 14See more

gnp-stack gnp-stack 0.0.5

1 of the 14 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

7,662
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

2,215
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

24,360
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3

Open the chart page →

47,117
mimir-openshift-experimentalgrafana2.1.01 of 4See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

17,759
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed

Open the chart page →

14,312
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3

Open the chart page →

23,472
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,969
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

3,451
cert-managerhomeenterpriseinc1.10.11 of 3See more

cert-manager homeenterpriseinc 1.10.1

1 of the 3 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.10.11143471c90db
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

4,720
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

3,615
cac-systemhuangchengwu-helm-chart0.1.02 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

2 of the 9 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
quay.io/jetstack/cert-manager-controller:v1.12.04a9d0264055b
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

11,190
influxdbinfluxdb20.1.01 of 1See more

influxdb influxdb2 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
library/influxdb:latestf75e48af0598
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,237
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

10,542
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

2,645
consulintelVerified publisher0.8.11 of 2See more

consul intel 0.8.1

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,389
evi-consulintelVerified publisher3.0.31 of 2See more

evi-consul intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/consul:1.14.2e38576edcdfd
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

5,389
evi-kesintelVerified publisher3.0.31 of 1See more

evi-kes intel 3.0.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/kes:2023-04-03T16-41-28Zf93c2d9088df
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

1,758
evi-miniointelVerified publisher3.0.31 of 2See more

evi-minio intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

7,457
evi-vaultintelVerified publisher3.0.31 of 2See more

evi-vault intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
hashicorp/vault:1.12.18de4d5f31b38
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed

Open the chart page →

4,478
kesintelVerified publisher0.8.31 of 1See more

kes intel 0.8.3

1 of the 1 container images this version deploys carry CVE-2024-28180.

Container imageDigestPackageFixed in
minio/kes:v0.22.255f3aef5803e
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed

Open the chart page →

3,570

Container images carrying it

403 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
gopkg.in/square/go-jose.v2@v2.0.0-20180411045311-89060dee6a84
no fix listed
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
gopkg.in/square/go-jose.v2@v2.0.0-20180411045311-89060dee6a84
no fix listed
1
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
gcr.io/projectsigstore/cosigned784518ff3ee7
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
gopkg.in/square/go-jose.v2@v2.3.1
no fix listed
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/appscode/kube-rbac-proxy:v0.15.0d8cc6ffb9819
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
ghcr.io/cfcontainerizationbot/kubecf-kubectl:v1.19.261daa1bba5cb
libgpg-error@1.29-1.8
1.29-150000.3.3.1
1
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
github.com/go-jose/go-jose/v3@v3.0.0
3.0.3
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/doodlescheduling/k8svault-controller:v0.2.0627e5e211766
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/go-jose/go-jose.v2@v2.6.1
3.0.3
2.6.3
1
ghcr.io/external-secrets/external-secrets:v0.3.1156a1ea4490ba
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.5.1
3.0.3
no fix listed
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
gopkg.in/square/go-jose.v2@v2.4.0
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/netsoc/webspaced:0.5.1edc238a538a0
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
gopkg.in/square/go-jose.v2@v2.2.2
no fix listed
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/platform-mesh/platform-mesh/virtual-workspaces:v0.17.0bb2ee6241719
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.3
1
ghcr.io/quenchworks/images/influxdb27493623806c
gopkg.in/square/go-jose.v2@v2.5.1
no fix listed
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-jose/go-jose/v3@v3.0.0
gopkg.in/square/go-jose.v2@v2.6.0
3.0.3
no fix listed
1
ghcr.io/spiffe/spire-controller-manager:0.2.25e90b2d092df
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
gopkg.in/square/go-jose.v2@v2.6.0
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.