CVE-2024-34156

High

Advisory

Published 6 Sept 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,322; of 17,797 indexed, latest versions
Container images: 2,781; deployed by those charts
Fix available: 9 of 10; affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 2,322 of 17,797 indexed charts deploy, on 2,781 images.

Affected package	Affected versions	Fixed in	Images
skopeorpm	2:1.11.2-0.1.el9, 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.11.2-0.3.module+el8.8.0+22332+2132e5c3, 2:1.16.1-2.el9_5	2
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-66.module+el8.8.0+22332+2132e5c3	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.15-4.module+el8.8.0+22332+2132e5c3	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.11-1.module+el8.8.0+22332+2132e5c3	1
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-3.el8_10	1
golang-1.19deb	1.19.8-2	no fix listed	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-1.module+el8.8.0+22332+2132e5c3	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.8.0+22332+2132e5c3	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.0-3.module+el8.8.0+22332+2132e5c3	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+134 more	1.22.7	2,781

OSV records: DEBIAN-CVE-2024-34156 RHSA-2024:11217 RHSA-2024:7135 RHSA-2024:7769 GO-2024-3106
Also known as: BIT-golang-2024-34156, RHSA-2024:7455, RHSA-2024:7821, RHSA-2024:8111

Charts affected

2,322 by stars

Chart

Latest

Affected images

Radar Score

clearml-servingallegroai

1.6.2

6 of 9 See more

clearml-serving allegroai 1.6.2

6 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	stdlib@go1.19.6	1.22.7
bitnamilegacy/zookeeper :3.8.1-debian-11-r6	dba59d740e13	stdlib@go1.18.2	1.22.7
grafana/grafana :9.4.3	76dcf36e7d2a	stdlib@go1.19.4	1.22.7
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.22.7
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	stdlib@go1.19.4	1.22.7
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	stdlib@go1.19.4	1.22.7

Open the chart page →

17,898

pact-brokeralmorgv

0.1.0

1 of 1 See more

pact-broker almorgv 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
pactfoundation/pact-broker :2.79.1.1	12861b0bd4d9	stdlib@go1.14.4	1.22.7

Open the chart page →

4,998

mariadbalphani-helm-charts

10.10.3

1 of 1 See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
library/mariadb :10.10.2	bfc25a68e113	stdlib@go1.16.7	1.22.7

Open the chart page →

8,395

soft-servealphani-helm-charts

0.4.0

1 of 1 See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
charmcli/soft-serve :v0.4.0	39523c1a6ba8	stdlib@go1.18.5	1.22.7

Open the chart page →

3,120

smockerandrcuns

0.0.4

1 of 1 See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
andrcuns/smocker :0.18.5	b4a8eb20581a	stdlib@go1.18.10	1.22.7

Open the chart page →

2,173

upcloud-csiankra-charts

0.4.0

7 of 8 See more

upcloud-csi ankra-charts 0.4.0

7 of the 8 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.13	7a319b15cfc9	stdlib@go1.20.4	1.22.7
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	stdlib@go1.17.3	1.22.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	stdlib@go1.17.3	1.22.7
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	stdlib@go1.17.3	1.22.7
registry.k8s.io/sig-storage/csi-resizer :v1.4.0	9ebbf9f023e7	stdlib@go1.17.3	1.22.7
registry.k8s.io/sig-storage/csi-snapshotter :v4.2.1	818f35653f2e	stdlib@go1.16.2	1.22.7
registry.k8s.io/sig-storage/snapshot-controller :v4.2.1	95587f8777d7	stdlib@go1.16.2	1.22.7

Open the chart page →

14,973

annotations-exporterannotations-exporter

0.5.0

1 of 1 See more

annotations-exporter annotations-exporter 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/alex123012/annotations-exporter :v0.5.0	4c2b8dbc798e	stdlib@go1.19.3	1.22.7

Open the chart page →

1,150

alazanteon

0.12.0

1 of 1 See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ddosify/alaz :v0.12.0	ea602056d9ce	stdlib@go1.22.5	1.22.7

Open the chart page →

3,403

anteonanteon

2.6.4

5 of 13 See more

anteon anteon 2.6.4

5 of the 13 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs :3.64	634b094b2183	stdlib@go1.22.1	1.22.7
ddosify/selfhosted_hammer :2.0.0	181965edb12e	stdlib@go1.18.1	1.22.7
library/influxdb :2.6.1-alpine	44a366dd7724	stdlib@go1.19.4	1.22.7
library/redis :7.2.4-alpine	c8bb255c3559	stdlib@go1.18.2	1.22.7
prom/prometheus :v2.37.9	8176adea328e	stdlib@go1.19.11	1.22.7

Open the chart page →

22,442

gateway-helmappscode

0.0.0-latest

1 of 2 See more

gateway-helm appscode 0.0.0-latest

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/gateway :v0.0.1	a8a144f14889	stdlib@go1.20.5	1.22.7

Open the chart page →

1,096

scannerappscode

2026.1.15

2 of 3 See more

scanner appscode 2026.1.15

2 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
rancher/kine :v0.11.4	12889bbcd1e8	stdlib@go1.21.5	1.22.7
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	stdlib@go1.20.2	1.22.7

Open the chart page →

5,308

stash-enterpriseappscode

0.42.0

1 of 4 See more

stash-enterprise appscode 0.42.0

1 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	stdlib@go1.16.9	1.22.7

Open the chart page →

3,628

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	stdlib@go1.17.6	1.22.7

Open the chart page →

5,253

cert-exporterarzu

3.0.1

1 of 1 See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
joeelliott/cert-exporter :v2.7.0	b4acd14642d0	stdlib@go1.14.15	1.22.7

Open the chart page →

2,819

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	stdlib@go1.18.2	1.22.7

Open the chart page →

17,984

siemassist-iot-cybersecurity-monitroting-siem

0.1.0

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	stdlib@go1.14.12	1.22.7

Open the chart page →

10,753

dltbrokerassist-iot-distributed-broker

0.2.0

4 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

4 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
assistiot/distributed_broker :1.0.0	33e02dad168f	stdlib@go1.17.13	1.22.7
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	stdlib@go1.18.10	1.22.7
hyperledger/fabric-peer :2.4	6ff36af21eb1	stdlib@go1.18.10	1.22.7
hyperledger/fabric-tools :2.4	b1194f509085	stdlib@go1.18.10	1.22.7

Open the chart page →

78,035

dltloggingassist-iot-logging-auditing

0.2.0

4 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

4 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
assistiot/logging_auditing :1.0.0	790dbb198e86	stdlib@go1.17.13	1.22.7
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	stdlib@go1.18.10	1.22.7
hyperledger/fabric-peer :2.4	6ff36af21eb1	stdlib@go1.18.10	1.22.7
hyperledger/fabric-tools :2.4	b1194f509085	stdlib@go1.18.10	1.22.7

Open the chart page →

78,016

deployautoml

0.1.0

2 of 3 See more

deploy automl 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
amd64/mysql :5.7	e20a653e0f51	stdlib@go1.18.2	1.22.7
muonsoft/openapi-mock :latest	c9afe1295484	stdlib@go1.20.2	1.22.7

Open the chart page →

2,947

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	stdlib@go1.17.5	1.22.7

Open the chart page →

4,315

dex-k8sav1o-charts

0.2.1

1 of 1 See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	stdlib@go1.16.2	1.22.7

Open the chart page →

3,398

kube-image-webhookav1o-charts

0.1.3

1 of 1 See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	stdlib@go1.18.1	1.22.7

Open the chart page →

3,738

prismav1o-charts

0.3.1

1 of 1 See more

prism av1o-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.gitlab.com/av1o/go-prism :4fdcff7d3870c28e5f024b6947cb552d4b956ee2	7a6f84b81c4e	stdlib@go1.16.2	1.22.7

Open the chart page →

1,276

generic-appb3o

0.1.6

1 of 1 See more

generic-app b3o 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
containous/whoami :latest	7d6a3c8f9147	stdlib@go1.14	1.22.7

Open the chart page →

1,280

db-backupballe-petersen

0.1.4

1 of 1 See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
tobiasbp/db-backup :0.0.3	14bee6e33a26	stdlib@go1.13.10	1.22.7

Open the chart page →

4,821

chirpstackbeeinventor

0.1.10

3 of 5 See more

chirpstack beeinventor 0.1.10

3 of the 5 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3.17.6	e0b23dfd24d6	stdlib@go1.17.8	1.22.7
chirpstack/chirpstack-gateway-bridge :3.13.2	ce3f2cdca8a9	stdlib@go1.17.5	1.22.7
chirpstack/chirpstack-network-server :3.16.1	c98d7fe06bce	stdlib@go1.17.8	1.22.7

Open the chart page →

7,821

livekit-serverbeeinventor

1.0.0

1 of 2 See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.0.0	8391fd1b834f	stdlib@go1.17.10	1.22.7

Open the chart page →

2,609

cloudflare-tunnel-operatorbeezlabs

0.2.0

1 of 1 See more

cloudflare-tunnel-operator beezlabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/beezlabs-org/cloudflare-tunnel-operator :v0.1.0	9afcd070940f	stdlib@go1.17.12	1.22.7

Open the chart page →

1,595

helm-dashboardbeluga-cloud

2.4.0

1 of 1 See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard :1.3.3	9ab9a675c405	stdlib@go1.20.8	1.22.7

Open the chart page →

2,908

prometheus-airbyte-exporterbotify-helm-charts

0.7.1

1 of 1 See more

prometheus-airbyte-exporter botify-helm-charts 0.7.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/botify-labs/airbyte_exporter :2.3.0	2105b1f33013	stdlib@go1.21.6	1.22.7

Open the chart page →

2,926

boundaryboundary-chart

0.3.12

1 of 1 See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
hashicorp/boundary :0.15.3	339b78b61750	stdlib@go1.21.8	1.22.7

Open the chart page →

1,630

brpservicebrpservice

1.1.0

1 of 4 See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/brpservice-php :latest	c17f1ba17d36	stdlib@go1.13.10	1.22.7

Open the chart page →

7,840

bucket-backup-restorebucket-backup-restore

0.1.0

1 of 2 See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	stdlib@go1.21.4	1.22.7

Open the chart page →

2,049

agentbuildkite

0.6.4

1 of 1 See more

agent buildkite 0.6.4

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
buildkite/agent :3.25.0	aec38cfaae0e	stdlib@go1.14.7	1.22.7

Open the chart page →

2,670

blackbox-exportercamptocamp3

1.0.0

1 of 1 See more

blackbox-exporter camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.25.0	b04a9fef4fa0	stdlib@go1.22.2	1.22.7

Open the chart page →

913

capsulecapsule

0.14.6

1 of 2 See more

capsule capsule 0.14.6

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	stdlib@go1.22.5	1.22.7

Open the chart page →

1,238

capsule-proxycapsule-proxy

0.14.1

1 of 2 See more

capsule-proxy capsule-proxy 0.14.1

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
clastix/kubectl :v1.31	22918a06c253	stdlib@go1.22.5	1.22.7

Open the chart page →

1,226

fluxcd-webuiccowley

0.0.2

1 of 2 See more

fluxcd-webui ccowley 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
adrianberger/fluxcd-webui :latest	76848c0d2780	stdlib@go1.16.2	1.22.7

Open the chart page →

3,511

celestia-nodecelestia-node

0.1.7

1 of 1 See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	stdlib@go1.23.0	1.22.7

Open the chart page →

1,810

finops-stackcert-manager

0.0.5

7 of 12 See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.3	b23b588cf7cb	stdlib@go1.22.4	1.22.7
ghcr.io/kyverno/background-controller :v1.12.5	06ed5db6cd33	stdlib@go1.21.12	1.22.7
ghcr.io/kyverno/cleanup-controller :v1.12.5	b914032ef9ad	stdlib@go1.21.12	1.22.7
ghcr.io/kyverno/kyverno :v1.12.5	a61c7022abcf	stdlib@go1.21.12	1.22.7
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	stdlib@go1.21.12	1.22.7
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	stdlib@go1.21.12	1.22.7
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	stdlib@go1.21.12	1.22.7

Open the chart page →

12,611

cert-manager-webhook-gandicert-manager-webhook-gandi

0.6.0

1 of 1 See more

cert-manager-webhook-gandi cert-manager-webhook-gandi 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/sintef/cert-manager-webhook-gandi :0.6.0	6819b34ccac8	stdlib@go1.22.0	1.22.7

Open the chart page →

1,031

passbolt-hachristianhuth

6.0.1

1 of 4 See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
passbolt/passbolt :3.4.0-ce-non-root	655547e17263	stdlib@go1.14.4	1.22.7

Open the chart page →

10,964

access-managerckotzbauer

0.14.3

1 of 1 See more

access-manager ckotzbauer 0.14.3

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/ckotzbauer/access-managerdigest-pinned	dd584fcda0ff	stdlib@go1.22.1	1.22.7

Open the chart page →

643

cloudbees-sidecar-injectorcloudbees

2.3.3

2 of 2 See more

cloudbees-sidecar-injector cloudbees 2.3.3

2 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
cloudbees/cert-requester :2.3.3	1d44fb4f799b	stdlib@go1.20.1	1.22.7
cloudbees/sidecar-injector :2.3.3	8f102ef0383a	stdlib@go1.20.1	1.22.7

Open the chart page →

3,268

cloudflow-enterprise-componentscloudflow-helm-charts

0.0.0-NIGHTLY01122020

2 of 9 See more

cloudflow-enterprise-components cloudflow-helm-charts 0.0.0-NIGHTLY01122020

2 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.4.0	17d34fd73f9e	stdlib@go1.14.4	1.22.7
prom/prometheus :v2.21.0	d43417c260e5	stdlib@go1.15.2	1.22.7

Open the chart page →

4,265

cnpg-sandboxcloudnative-pg

0.6.1

3 of 6 See more

cnpg-sandbox cloudnative-pg 0.6.1

3 of the 6 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
grafana/grafana :8.3.5	cd7cb4345aa7	stdlib@go1.17.6	1.22.7
ghcr.io/cloudnative-pg/cloudnative-pg :1.17.1	4dd365800b62	stdlib@go1.18.6	1.22.7
quay.io/prometheus-operator/prometheus-operator :v0.54.0	be2aef39a2f8	stdlib@go1.17.6	1.22.7

Open the chart page →

7,597

pgbenchcloudnative-pg

0.1.0

1 of 1 See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/postgresql :14.5	b3b30d04b362	stdlib@go1.16.7	1.22.7

Open the chart page →

2,714

bastioncloudposse

0.2.0

1 of 2 See more

bastion cloudposse 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
cloudposse/bastion :latest	0d9507e8a760	stdlib@go1.13.3	1.22.7

Open the chart page →

1,579

cloudttycloudtty

0.8.9

1 of 2 See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/cloudtty/cloudshell-operator :v0.8.9	e43ad91f0684	stdlib@go1.21.11	1.22.7

Open the chart page →

3,994

cluster-setupcluster-setup

1.5.0

2 of 8 See more

cluster-setup cluster-setup 1.5.0

2 of the 8 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	stdlib@go1.18.2	1.22.7
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	stdlib@go1.22.2	1.22.7

Open the chart page →

10,121

Container images carrying it

2,781 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/tigera/operator :v1.15.1	c6591da87aa8	stdlib@go1.15.2	1.22.7	1
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	stdlib@go1.13.15	1.22.7	1
quay.io/uswitch/kiam :v4.0	be3a5846922d	stdlib@go1.13.8	1.22.7	1
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	stdlib@go1.18.10	1.22.7	1
quay.io/wi_stefan/dsba-db-migrations :0.0.12	5b986cd14a08	stdlib@go1.18.9	1.22.7	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.11	826b984e75d4	stdlib@go1.19.1	1.22.7	1
registry.gitlab.com/arm-research/smarter/smarter-device-manager :v1.20.7	864fc338571e	stdlib@go1.16.4	1.22.7	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	stdlib@go1.18.1	1.22.7	1
registry.gitlab.com/av1o/go-prism :4fdcff7d3870c28e5f024b6947cb552d4b956ee2	7a6f84b81c4e	stdlib@go1.16.2	1.22.7	1
registry.gitlab.com/av1o/okd-webhook :v0.1.0	28c3e5eb2650	stdlib@go1.16	1.22.7	1
registry.gitlab.com/bitspur/rock8s/easy-olm-operator :0.0.1	779454fea06c	stdlib@go1.19.10	1.22.7	1
registry.gitlab.com/bitspur/rock8s/images/kube-commands :3.18	80ef8ceffc92	stdlib@go1.20.8	1.22.7	1
registry.gitlab.com/bitspur/rock8s/resource-binding-operator :0.1.0	63cf51392ce7	stdlib@go1.19.13	1.22.7	1
registry.gitlab.com/commento/commento :v1.8.0	e0ab1fc86761	stdlib@go1.14.2	1.22.7	1
registry.gitlab.com/dyff/workflows-informer :0.4.4	bfbadc49635d	stdlib@go1.20.14	1.22.7	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	stdlib@go1.15.8	1.22.7	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	stdlib@go1.16.14	1.22.7	1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker :main	f91b602ca572	stdlib@go1.21.0	1.22.7	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	stdlib@go1.15.15	1.22.7	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	stdlib@go1.20.7	1.22.7	1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	stdlib@go1.23.0	1.22.7	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	stdlib@go1.21.7	1.22.7	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	stdlib@go1.22.3	1.22.7	1
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	stdlib@go1.18.3	1.22.7	1
registry.k8s.io/gateway-api/admission-server :v0.7.1	fe43ee5176a8	stdlib@go1.19.9	1.22.7	1
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.22.7	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	stdlib@go1.20.10	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	stdlib@go1.19.4	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.10.0	42b3f0e5d084	stdlib@go1.22.0	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.8.0	744ae2afd433	stdlib@go1.20.1	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	stdlib@go1.20.1	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	stdlib@go1.22.2	1.22.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.0	44d1d0e9f19c	stdlib@go1.21.6	1.22.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.3.0	549e71a6ca24	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	stdlib@go1.19.6	1.22.7	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	stdlib@go1.19	1.22.7	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	stdlib@go1.21.7	1.22.7	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	stdlib@go1.19	1.22.7	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	stdlib@go1.20.11	1.22.7	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	stdlib@go1.21.7	1.22.7	1
registry.k8s.io/kube-scheduler :v1.23.14	3e149d206076	stdlib@go1.17.13	1.22.7	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	stdlib@go1.21.11	1.22.7	1
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	stdlib@go1.19	1.22.7	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	stdlib@go1.19.4	1.22.7	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	stdlib@go1.19.7	1.22.7	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	stdlib@go1.21.6	1.22.7	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	stdlib@go1.21.8	1.22.7	1