StackRadar

CVE-2024-34156

High

Advisory

Published 6 Sept 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.011
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,376
of 17,805 indexed, latest versions
Container images
2,818
deployed by those charts
Fix available
9 of 10
affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 2,376 of 17,805 indexed charts deploy, on 2,818 images.

Affected packageAffected versionsFixed inImages
skopeorpm2:1.11.2-0.1.el9, 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.11.2-0.3.module+el8.8.0+22332+2132e5c3, 2:1.16.1-2.el9_52
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-66.module+el8.8.0+22332+2132e5c31
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.15-4.module+el8.8.0+22332+2132e5c31
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.11-1.module+el8.8.0+22332+2132e5c31
git-lfsrpm2.13.3-3.el8_60:3.4.1-3.el8_101
golang-1.19deb1.19.8-2no fix listed1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-1.module+el8.8.0+22332+2132e5c31
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc1:1.1.12-1.module+el8.8.0+22332+2132e5c31
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.0-3.module+el8.8.0+22332+2132e5c31
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+135 more1.22.72,818
OSV records
DEBIAN-CVE-2024-34156RHSA-2024:11217RHSA-2024:7135RHSA-2024:7769GO-2024-3106
Also known as
BIT-golang-2024-34156, RHSA-2024:7455, RHSA-2024:7821, RHSA-2024:8111

Charts affected

2,376 by stars
ChartLatestAffected imagesRadar Score
piraeusdtrdnk-helm-chartsVerified publisher2.2.01 of 1See more

piraeus dtrdnk-helm-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
quay.io/piraeusdatastore/piraeus-operator:v2.2.0ec4022c8b0e3
stdlib@go1.18.10
1.22.7

Open the chart page →

1,042
tempo-operatordtrdnk-helm-chartsVerified publisher0.0.31 of 2See more

tempo-operator dtrdnk-helm-charts 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/grafana/tempo-operator/tempo-operator:v0.4.02627be646391
stdlib@go1.21.0
1.22.7

Open the chart page →

893
temporaldtrdnk-helm-chartsVerified publisher0.35.08 of 13See more

temporal dtrdnk-helm-charts 0.35.0

8 of the 13 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
stdlib@go1.13.4
1.22.7
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.22.7
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.22.7
temporalio/admin-tools:1.22.4258958fe2ff2
stdlib@go1.20.10
1.22.7
temporalio/server:1.22.4c0a44c26397b
stdlib@go1.20.11
1.22.7
temporalio/ui:2.16.2af9c9349708f
stdlib@go1.20.5
1.22.7
quay.io/prometheus/alertmanager:v0.23.09ab73a421b65
stdlib@go1.16.7
1.22.7
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
stdlib@go1.17.3
1.22.7

Open the chart page →

20,261
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
stdlib@go1.22.6
1.22.7

Open the chart page →

3,513
dumpstoredumpstore0.1.11 of 2See more

dumpstore dumpstore 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
stdlib@go1.20.12
1.22.7

Open the chart page →

4,263
duplicacyduplicacy0.1.21 of 2See more

duplicacy duplicacy 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
drumsergio/duplicacy-container:0.1.0dd3ee9703969
stdlib@go1.21.13
1.22.7

Open the chart page →

2,424
applause-btnduyet0.1.31 of 1See more

applause-btn duyet 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
duyetdev/applause-btn:latest25e59d223eaa
stdlib@go1.14.9
1.22.7

Open the chart page →

2,637
commentoduyet0.2.01 of 2See more

commento duyet 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
registry.gitlab.com/commento/commento:v1.8.0e0ab1fc86761
stdlib@go1.14.2
1.22.7

Open the chart page →

2,680
ai-scale-authdysnixVerified publisher0.1.12 of 3See more

ai-scale-auth dysnix 0.1.1

2 of the 3 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
alex6021710/ai-scale-auth:latest6c7a47e470c3
stdlib@go1.16.12
1.22.7
alex6021710/ai-scale-migrator:latest744b8a924f35
stdlib@go1.17.2
1.22.7

Open the chart page →

6,157
ai-scale-doerdysnixVerified publisher0.1.01 of 1See more

ai-scale-doer dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
alex6021710/ai-scale-doer:latest31e533cf7cd3
stdlib@go1.16.10
1.22.7

Open the chart page →

2,808
ai-scale-providerdysnixVerified publisher0.1.01 of 1See more

ai-scale-provider dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
alex6021710/ai-scale-provider:latest5837d9b30cc7
stdlib@go1.15.8
1.22.7

Open the chart page →

2,186
ai-scale-saverdysnixVerified publisher0.1.01 of 1See more

ai-scale-saver dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
alex6021710/ai-scale-saver:latestf73e8d60fd03
stdlib@go1.17
1.22.7

Open the chart page →

2,143
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
stdlib@go1.21.10
1.22.7

Open the chart page →

9,445
bitcoinddysnixVerified publisher0.4.31 of 2See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
stdlib@go1.22.2
1.22.7

Open the chart page →

2,000
bordysnixVerified publisher0.0.81 of 1See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
0xpolygon/bor:1.3.7396d3de26d8b
stdlib@go1.22.1
1.22.7

Open the chart page →

1,381
gke-upgrade-notification-handlerdysnixVerified publisher0.1.11 of 1See more

gke-upgrade-notification-handler dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
dysnix/gke-upgrade-notification-handler:latestc166f958f86a
stdlib@go1.17.7
1.22.7

Open the chart page →

2,097
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
grafana/grafana:7.4.5d322192ed2fa
stdlib@go1.15.6
1.22.7

Open the chart page →

5,168
heimdalldysnixVerified publisher0.0.11 of 1See more

heimdall dysnix 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
0xpolygon/heimdall:1.0.134ddf259993c
stdlib@go1.20.5
1.22.7

Open the chart page →

1,374
local-path-provisionerdysnixVerified publisher0.0.201 of 1See more

local-path-provisioner dysnix 0.0.20

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.20d5999b20a1b1
stdlib@go1.16.6
1.22.7

Open the chart page →

2,926
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
stdlib@go1.16.12
1.22.7

Open the chart page →

5,056
servicemonitor-appsdysnixVerified publisher0.1.01 of 1See more

servicemonitor-apps dysnix 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ethpandaops/ethereum-metrics-exporter:0.21.0d1780db2e286
stdlib@go1.18.10
1.22.7

Open the chart page →

1,579
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
stdlib@go1.13.10
1.22.7

Open the chart page →

7,266
echoappechoapp0.1.01 of 1See more

echoapp echoapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
hashicorp/http-echo:1.0.0fcb75f691c8b
stdlib@go1.21.1
1.22.7

Open the chart page →

550
aeros-orchestrator-overlayeclipse-aeriosVerified publisher2.0.01 of 2See more

aeros-orchestrator-overlay eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
masipcat/wireguard-go:latest696206e5954d
stdlib@go1.20.14
1.22.7

Open the chart page →

1,195
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
stdlib@go1.22.3
1.22.7

Open the chart page →

1,427
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
stdlib@go1.18.2
1.22.7

Open the chart page →

4,677
iotaeclipse-aeriosVerified publisher1.0.22 of 4See more

iota eclipse-aerios 1.0.2

2 of the 4 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
iotaledger/hornet:2.001206f1ba89c
stdlib@go1.21.10
1.22.7
iotaledger/inx-dashboard:1.012c669cb8748
stdlib@go1.21.1
1.22.7

Open the chart page →

13,669
llo-apieclipse-aeriosVerified publisher1.0.01 of 1See more

llo-api eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
eclipseaerios/llo-api:1.2.0ab7a04182191
stdlib@go1.21.13
1.22.7

Open the chart page →

931
llo-docker-operatoreclipse-aeriosVerified publisher1.0.01 of 2See more

llo-docker-operator eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
stdlib@go1.19.4
1.22.7

Open the chart page →

2,194
llo-k8seclipse-aeriosVerified publisher1.1.02 of 2See more

llo-k8s eclipse-aerios 1.1.0

2 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
eclipseaerios/llo-k8s-operator:1.4.12b2c0cf26fd2
stdlib@go1.21.13
1.22.7
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
stdlib@go1.19.4
1.22.7

Open the chart page →

2,166
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
timescale/timescaledb-postgis:latest-pg127758704d4a14
stdlib@go1.14
1.22.7

Open the chart page →

11,485
openfaas2eclipse-aeriosVerified publisher12.0.54 of 6See more

openfaas2 eclipse-aerios 12.0.5

4 of the 6 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.5ced93c701875
stdlib@go1.19.10
1.22.7
prom/prometheus:v2.51.24f6c47e39a90
stdlib@go1.22.2
1.22.7
ghcr.io/openfaasltd/jetstream-queue-worker:0.3.37d96366e208b1
stdlib@go1.22.1
1.22.7
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.22.7

Open the chart page →

6,844
openldap-stack-haeclipse-aeriosVerified publisher4.1.21 of 4See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
eclipseaerios/openldap:2.6.30208743f315e
stdlib@go1.18.2
1.22.7

Open the chart page →

7,539
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
stdlib@go1.21.12
1.22.7

Open the chart page →

9,829
chartecr-toke-renew0.1.51 of 1See more

chart ecr-toke-renew 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
itzmanish/ecr-token-renew:latest02154d1c05b5
stdlib@go1.16.6
1.22.7

Open the chart page →

2,819
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
stdlib@go1.16.7
1.22.7

Open the chart page →

11,041
grafanaedu5.3.01 of 1See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.22.7

Open the chart page →

3,199
prometheusedu11.6.04 of 6See more

prometheus edu 11.6.0

4 of the 6 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
prom/alertmanager:v0.20.07e4e9f7a0954
stdlib@go1.13.5
1.22.7
prom/prometheus:v2.19.0bfad037f95e5
stdlib@go1.14.4
1.22.7
prom/pushgateway:v1.2.00a9031142481
stdlib@go1.13.8
1.22.7
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.22.7

Open the chart page →

8,494
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
stdlib@go1.13.10
1.22.7

Open the chart page →

7,338
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.22.7

Open the chart page →

30,749
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
stdlib@go1.13.10
1.22.7

Open the chart page →

7,521
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
stdlib@go1.16.3
1.22.7

Open the chart page →

8,069
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
stdlib@go1.19
1.22.7

Open the chart page →

92,584
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
stdlib@go1.22.2
1.22.7

Open the chart page →

1,068
Navidromeemmas-chartsVerified publisher0.0.41 of 1See more

Navidrome emmas-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
deluan/navidrome:0.49.311a24da08977
stdlib@go1.19.5
1.22.7

Open the chart page →

2,838
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
stdlib@go1.21.0
1.22.7

Open the chart page →

2,261
cost-reportempathyco0.7.81 of 1See more

cost-report empathyco 0.7.8

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
empathyco/cost-report:0.0.124f1e26eaacbf
stdlib@go1.15.15
1.22.7

Open the chart page →

1,168
deadman-switchempathyco0.0.21 of 1See more

deadman-switch empathyco 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
gcr.io/pingcap-public/deadmansswitch:1.04861d81aa528
stdlib@go1.16.3
1.22.7

Open the chart page →

1,259
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
prometheuscommunity/elasticsearch-exporter:v1.3.0fe735268fbdc
stdlib@go1.16.9
1.22.7

Open the chart page →

10,670
yace-exporterempathyco0.1.01 of 1See more

yace-exporter empathyco 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container imageDigestPackageFixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter:v0.32.0-alpha71e24278a049
stdlib@go1.17.3
1.22.7

Open the chart page →

1,642

Container images carrying it

2,818 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/csi-provisioner:v3.3.0ee3b525d5b89
stdlib@go1.18
1.22.7
1
registry.k8s.io/sig-storage/csi-resizer:v1.7.03a7bdf5d1057
stdlib@go1.19
1.22.7
1
registry.k8s.io/sig-storage/csi-resizer:v1.6.0425d8f1b7693
stdlib@go1.18
1.22.7
1
registry.k8s.io/sig-storage/csi-resizer:v1.10.14ecda2818f6d
stdlib@go1.21.5
1.22.7
1
registry.k8s.io/sig-storage/csi-resizer:v1.3.06e0546563b18
stdlib@go1.16.2
1.22.7
1
registry.k8s.io/sig-storage/csi-resizer:v1.12.0ab774734705a
stdlib@go1.22.5
1.22.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v6.1.0291334908ddf
stdlib@go1.18
1.22.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v8.0.25f051159c95f
stdlib@go1.22.5
1.22.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v4.2.1818f35653f2e
stdlib@go1.16.2
1.22.7
1
registry.k8s.io/sig-storage/csi-snapshotter:v5.0.189e900a160a9
stdlib@go1.17.3
1.22.7
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
stdlib@go1.18
1.22.7
1
registry.k8s.io/sig-storage/livenessprobe:v2.9.02b10b24dafdc
stdlib@go1.19
1.22.7
1
registry.k8s.io/sig-storage/livenessprobe:v2.11.082adbebdf5d5
stdlib@go1.20.5
1.22.7
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
stdlib@go1.15
1.22.7
1
registry.k8s.io/sig-storage/snapshot-controller:v4.2.195587f8777d7
stdlib@go1.16.2
1.22.7
1
registry.k8s.io/sig-storage/snapshot-controller:v6.2.198bab4eaf23c
stdlib@go1.19
1.22.7
1
registry.k8s.io/sig-storage/snapshot-controller:v6.3.1ce6ca3c0e30b
stdlib@go1.20.5
1.22.7
1
registry.k8s.io/sig-storage/volume-data-source-validator:v1.0.0d35884236461
stdlib@go1.17.3
1.22.7
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.