CVE-2024-34156

High

Advisory

Published 6 Sept 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,322; of 17,797 indexed, latest versions
Container images: 2,781; deployed by those charts
Fix available: 9 of 10; affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 2,322 of 17,797 indexed charts deploy, on 2,781 images.

Affected package	Affected versions	Fixed in	Images
skopeorpm	2:1.11.2-0.1.el9, 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.11.2-0.3.module+el8.8.0+22332+2132e5c3, 2:1.16.1-2.el9_5	2
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-66.module+el8.8.0+22332+2132e5c3	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.15-4.module+el8.8.0+22332+2132e5c3	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.11-1.module+el8.8.0+22332+2132e5c3	1
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-3.el8_10	1
golang-1.19deb	1.19.8-2	no fix listed	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-1.module+el8.8.0+22332+2132e5c3	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.8.0+22332+2132e5c3	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.0-3.module+el8.8.0+22332+2132e5c3	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+134 more	1.22.7	2,781

OSV records: DEBIAN-CVE-2024-34156 RHSA-2024:11217 RHSA-2024:7135 RHSA-2024:7769 GO-2024-3106
Also known as: BIT-golang-2024-34156, RHSA-2024:7455, RHSA-2024:7821, RHSA-2024:8111

Charts affected

2,322 by stars

Chart

Latest

Affected images

Radar Score

skywalkingkubesphere-test

3.1.0

2 of 4 See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	stdlib@go1.13.3	1.22.7
apache/skywalking-ui :8.1.0	67d50e4deff4	stdlib@go1.13.3	1.22.7

Open the chart page →

18,062

kubeviouskubevious

1.2.2

3 of 7 See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
kubevious/ui :1.2.1	6233e84bdd59	stdlib@go1.19.1	1.22.7
library/mysql :8.0.30	3c1aab708f6e	stdlib@go1.16.7	1.22.7
redislabs/redisearch :2.4.14	33561794c5c8	stdlib@go1.16.7	1.22.7

Open the chart page →

14,228

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

4 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

4 of the 6 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.22.7
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.22.7
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.22.7
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.22.7

Open the chart page →

11,732

karporkusionstack

0.7.6

1 of 3 See more

karpor kusionstack 0.7.6

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.11	842975891182	stdlib@go1.20.12	1.22.7

Open the chart page →

3,311

loftloft

0.0.0-ci.14

1 of 1 See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	stdlib@go1.20.7	1.22.7

Open the chart page →

3,686

vcluster-k8sloft

0.0.0-ci.3

3 of 4 See more

vcluster-k8s loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	stdlib@go1.16.15	1.22.7
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	stdlib@go1.19.5	1.22.7
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	stdlib@go1.19.5	1.22.7

Open the chart page →

5,595

veleromesosphere

3.2.5

1 of 1 See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.26.4	a0a972324d93	stdlib@go1.19.8	1.22.7

Open the chart page →

1,871

kubecostmesosphere-stable

0.37.5

5 of 9 See more

kubecost mesosphere-stable 0.37.5

5 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.7	1a359d92f40e	stdlib@go1.20.1	1.22.7
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	stdlib@go1.21.5	1.22.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	stdlib@go1.21.4	1.22.7
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.22.7
quay.io/thanos/thanos :v0.36.1	e542959e1b36	stdlib@go1.21.13	1.22.7

Open the chart page →

17,823

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	stdlib@go1.17.2	1.22.7

Open the chart page →

2,750

helm-ai-kernelmindburn-labs

0.8.5

1 of 2 See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	stdlib@go1.22.5	1.22.7

Open the chart page →

2,175

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	stdlib@go1.19	1.22.7

Open the chart page →

3,803

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	stdlib@go1.13.8	1.22.7

Open the chart page →

5,067

kobotoolboxone-acre-fund

0.7.4

1 of 9 See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
enketo/enketo-express :3.0.4	dcad9c2273f6	stdlib@go1.17.1	1.22.7

Open the chart page →

18,543

secrets-injectoronepassword-connect

1.2.0

1 of 1 See more

secrets-injector onepassword-connect 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
1password/kubernetes-secrets-injector :1.0.2	5884757f7879	stdlib@go1.20.5	1.22.7

Open the chart page →

891

opentelemetry-ebpfopentelemetry-helm

0.1.7

1 of 4 See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

1 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
otel/opentelemetry-ebpf-k8s-watcher :v0.10.2	63a0d1dd2cac	stdlib@go1.20	1.22.7

Open the chart page →

2,582

oesopsmx

4.0.32

8 of 25 See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	stdlib@go1.15.5	1.22.7
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	stdlib@go1.15.5	1.22.7
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	stdlib@go1.17.2	1.22.7
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	stdlib@go1.16.15	1.22.7
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	stdlib@go1.20.3	1.22.7
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	stdlib@go1.19.1	1.22.7
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	stdlib@go1.22.2	1.22.7
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	stdlib@go1.13.1	1.22.7

Open the chart page →

108,354

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	stdlib@go1.18.3	1.22.7
ipfs/ipfs-cluster :1.0.2	1511f6d57994	stdlib@go1.18.3	1.22.7

Open the chart page →

3,771

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	stdlib@go1.22.4	1.22.7

Open the chart page →

1,004

plecopleco

0.24.0

1 of 1 See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	stdlib@go1.21.6	1.22.7

Open the chart page →

1,353

ipmi-exporterpnnl-miscscripts

0.1.15

1 of 1 See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	stdlib@go1.13.10	1.22.7

Open the chart page →

2,994

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	stdlib@go1.20.3	1.22.7

Open the chart page →

1,949

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	stdlib@go1.15.1	1.22.7
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	stdlib@go1.15.3	1.22.7
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	stdlib@go1.14.12	1.22.7
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	stdlib@go1.14.4	1.22.7

Open the chart page →

12,134

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	stdlib@go1.15	1.22.7

Open the chart page →

2,731

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.22.7

Open the chart page →

13,692

satisfactory-serversatisfactory

0.1.6

1 of 1 See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.10	e103700ae6ae	stdlib@go1.18.1	1.22.7

Open the chart page →

3,476

seaweedfs-csi-driverseaweedfs-csi-driver

0.2.38

5 of 7 See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.38

5 of the 7 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	stdlib@go1.20.3	1.22.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	stdlib@go1.20.3	1.22.7
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	stdlib@go1.20.3	1.22.7
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	stdlib@go1.20.3	1.22.7
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	stdlib@go1.20.3	1.22.7

Open the chart page →

5,321

lldapself-hosters-by-night

0.5.2

1 of 2 See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/lldap/lldap :2025-05-19	3de697c3ba57	stdlib@go1.18.2	1.22.7

Open the chart page →

3,441

appshini4i

0.4.0

1 of 1 See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.10.2	1474027c3166	stdlib@go1.22.2	1.22.7

Open the chart page →

537

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	stdlib@go1.20	1.22.7

Open the chart page →

1,670

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	stdlib@go1.14.2	1.22.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	stdlib@go1.14.2	1.22.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	stdlib@go1.14.2	1.22.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	stdlib@go1.14.2	1.22.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	stdlib@go1.14.2	1.22.7

Open the chart page →

12,537

sn-platformstreamnative

1.11.44

6 of 9 See more

sn-platform streamnative 1.11.44

6 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.22.7
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	stdlib@go1.20.4	1.22.7
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	stdlib@go1.17.11	1.22.7
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	stdlib@go1.19.4	1.22.7
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.22.7
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	stdlib@go1.19.7	1.22.7

Open the chart page →

15,620

thingsboard-clusterthingsboard-cluster-betta

0.2.26

3 of 6 See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	stdlib@go1.20.5	1.22.7
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	stdlib@go1.19.12	1.22.7
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.22.7

Open the chart page →

14,578

feedbacksystemthm-mni-ii

0.47.1

6 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

6 of the 10 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	stdlib@go1.21.5	1.22.7
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.22.7
bitnamilegacy/mysql :8.0.35-debian-11-r2	be03e8ea6129	stdlib@go1.21.5	1.22.7
library/docker :20.10.21-dind	3153fa63f546	stdlib@go1.18.7	1.22.7
thmmniii/fbs-qcm-frontend :v1.27.1	a347f7f4d144	stdlib@go1.20.12	1.22.7
thmmniii/fbs-runner :v1.27.1	86105349c1a3	stdlib@go1.20.11	1.22.7

Open the chart page →

28,692

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	stdlib@go1.14.4	1.22.7

Open the chart page →

4,145

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	stdlib@go1.14.4	1.22.7
library/traefik :v2.5	7d5a6ae66572	stdlib@go1.17.6	1.22.7
traefik/mesh :v1.4.8	cf071f3e165c	stdlib@go1.19	1.22.7

Open the chart page →

9,271

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	stdlib@go1.19.6	1.22.7
quay.io/argoproj/argocd :v2.8.6	acaf37352569	stdlib@go1.20.4	1.22.7

Open the chart page →

10,382

vouchvouch

3.2.0

1 of 1 See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	stdlib@go1.18.10	1.22.7

Open the chart page →

1,035

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	stdlib@go1.20.7	1.22.7

Open the chart page →

1,350

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	stdlib@go1.18.5	1.22.7

Open the chart page →

2,245

wallarm-sidecarwallarm

6.13.1

1 of 3 See more

wallarm-sidecar wallarm 6.13.1

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	stdlib@go1.22.2	1.22.7

Open the chart page →

965

wasmcloud-chartwasmcloud-chart

0.7.2

1 of 2 See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	stdlib@go1.21.5	1.22.7

Open the chart page →

3,485

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	stdlib@go1.17.4	1.22.7

Open the chart page →

6,086

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	stdlib@go1.18.1	1.22.7
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	stdlib@go1.18.2	1.22.7
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	stdlib@go1.18.2	1.22.7
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	stdlib@go1.18.2	1.22.7

Open the chart page →

10,047

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	stdlib@go1.13.8	1.22.7

Open the chart page →

4,714

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	stdlib@go1.18.4	1.22.7

Open the chart page →

4,050

yet-another-cloudwatch-exporteryet-another-cloudwatch-exporter

0.38.0

1 of 1 See more

yet-another-cloudwatch-exporter yet-another-cloudwatch-exporter 0.38.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	stdlib@go1.22.4	1.22.7

Open the chart page →

923

adcs-issueradcs-issuer

3.0.2

1 of 1 See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
djkormo/adcs-issuer :2.1.2	9f34e87e7586	stdlib@go1.22.6	1.22.7

Open the chart page →

829

agentareaagentarea

0.0.18

2 of 16 See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
agentarea/agentarea-mcp-manager :latest	efe23cef3727	stdlib@go1.22.5	1.22.7
agentarea/agentarea-mcp-runner :latest	d3c209a5d531	stdlib@go1.19.8	1.22.7

Open the chart page →

15,048

alertmanager-discordalertmanagerdiscord

0.3.2

1 of 1 See more

alertmanager-discord alertmanagerdiscord 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
speckle/alertmanager-discord :latest	f6221ff308e9	stdlib@go1.22.4	1.22.7

Open the chart page →

420

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	stdlib@go1.18.1	1.22.7

Open the chart page →

12,148

Container images carrying it

2,781 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/tigera/operator :v1.15.1	c6591da87aa8	stdlib@go1.15.2	1.22.7	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	stdlib@go1.13.15	1.22.7	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	stdlib@go1.13.8	1.22.7	1
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	stdlib@go1.18.10	1.22.7	1
quay.io/wi_stefan/dsba-db-migrations :0.0.12	5b986cd14a08	stdlib@go1.18.9	1.22.7	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	stdlib@go1.19.1	1.22.7	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	stdlib@go1.16.4	1.22.7	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	stdlib@go1.18.1	1.22.7	1
registry.gitlab.com/av1o/go-prism :4fdcff7d3870c28e5f024b6947cb552d4b956ee2	7a6f84b81c4e	stdlib@go1.16.2	1.22.7	1
registry.gitlab.com/av1o/okd-webhook :v0.1.0	28c3e5eb2650	stdlib@go1.16	1.22.7	1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	stdlib@go1.19.10	1.22.7	1
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	stdlib@go1.20.8	1.22.7	1
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	stdlib@go1.19.13	1.22.7	1
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	stdlib@go1.14.2	1.22.7	1
registry.gitlab.com/dyff/workflows-informer :0.4.4	bfbadc49635d	stdlib@go1.20.14	1.22.7	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.22.7	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	stdlib@go1.16.14	1.22.7	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	stdlib@go1.21.0	1.22.7	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	stdlib@go1.15.15	1.22.7	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	stdlib@go1.20.7	1.22.7	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	stdlib@go1.23.0	1.22.7	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	stdlib@go1.21.7	1.22.7	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	stdlib@go1.22.3	1.22.7	1
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	stdlib@go1.18.3	1.22.7	1
registry.k8s.io/gateway-api/admission-server :v0.7.1	fe43ee5176a8	stdlib@go1.19.9	1.22.7	1
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.22.7	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	stdlib@go1.20.10	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	stdlib@go1.19.4	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.10.0	42b3f0e5d084	stdlib@go1.22.0	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.8.0	744ae2afd433	stdlib@go1.20.1	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	stdlib@go1.20.1	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	stdlib@go1.22.2	1.22.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.0	44d1d0e9f19c	stdlib@go1.21.6	1.22.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.3.0	549e71a6ca24	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	stdlib@go1.19.6	1.22.7	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	stdlib@go1.19	1.22.7	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	stdlib@go1.21.7	1.22.7	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	stdlib@go1.19	1.22.7	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	stdlib@go1.20.11	1.22.7	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	stdlib@go1.21.7	1.22.7	1
registry.k8s.io/kube-scheduler :v1.23.14	3e149d206076	stdlib@go1.17.13	1.22.7	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	stdlib@go1.21.11	1.22.7	1
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	stdlib@go1.19	1.22.7	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	stdlib@go1.19.4	1.22.7	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	stdlib@go1.19.7	1.22.7	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	stdlib@go1.21.6	1.22.7	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	stdlib@go1.21.8	1.22.7	1