CVE-2024-34156

High

Advisory

Published 6 Sept 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.011; 65th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,479; of 17,844 indexed, latest versions
Container images: 2,905; deployed by those charts
Fix available: 9 of 10; affected packages

Red Hat Security Advisory: skopeo security update

Carried by container images the latest versions of 2,479 of 17,844 indexed charts deploy, on 2,905 images.

Affected package	Affected versions	Fixed in	Images
skopeorpm	2:1.11.2-0.1.el9, 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c	2:1.11.2-0.3.module+el8.8.0+22332+2132e5c3, 2:1.16.1-2.el9_5	2
containers-commonrpm	2:1-64.module+el8.8.0+18571+eed59fc4	2:1-66.module+el8.8.0+22332+2132e5c3	1
criurpm	3.15-4.module+el8.8.0+19044+f9982fd8	0:3.15-4.module+el8.8.0+22332+2132e5c3	1
fuse-overlayfsrpm	1.11-1.module+el8.8.0+18634+9a268292	0:1.11-1.module+el8.8.0+22332+2132e5c3	1
git-lfsrpm	2.13.3-3.el8_6	0:3.4.1-3.el8_10	1
golang-1.19deb	1.19.8-2	no fix listed	1
libslirprpm	4.4.0-1.module+el8.8.0+18060+3f21f2cc	0:4.4.0-1.module+el8.8.0+22332+2132e5c3	1
runcrpm	1:1.1.4-1.module+el8.8.0+18060+3f21f2cc	1:1.1.12-1.module+el8.8.0+22332+2132e5c3	1
slirp4netnsrpm	1.2.0-2.module+el8.8.0+18060+3f21f2cc	0:1.2.0-3.module+el8.8.0+22332+2132e5c3	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+137 more	1.22.7	2,905

OSV records: DEBIAN-CVE-2024-34156 RHSA-2024:11217 RHSA-2024:7135 RHSA-2024:7769 GO-2024-3106
Also known as: BIT-golang-2024-34156, RHSA-2024:7455, RHSA-2024:7821, RHSA-2024:8111

Charts affected

2,479 by stars

Chart

Latest

Affected images

Radar Score

coreinstill-ai

0.1.75

3 of 15 See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
groundnuty/k8s-wait-for :v2.0	c14d7271e401	stdlib@go1.19.3	1.22.7
library/influxdb :2.3.0-alpine	d7f5dd5f70e2	stdlib@go1.18.3	1.22.7
library/registry :2.8.3	a3d8aaa63ed8	stdlib@go1.20.8	1.22.7

Open the chart page →

32,066

jenkins-operatorjenkins

0.8.1

1 of 1 See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	stdlib@go1.15.6	1.22.7

Open the chart page →

2,207

calibre-webk8s-home-lab-repo

9.1.1

1 of 1 See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	stdlib@go1.17.8	1.22.7

Open the chart page →

5,005

wireguardk8s-home-lab-repo

1.6.0

1 of 1 See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	stdlib@go1.18.5	1.22.7

Open the chart page →

7,705

k8s-sftp-gcsk8s-sftp-gcs

0.1.4

1 of 1 See more

k8s-sftp-gcs k8s-sftp-gcs 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
danuk/k8s-sftp-gcs :latest	dd0e6585c44f	stdlib@go1.18.4	1.22.7

Open the chart page →

1,607

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
library/postgres :11	5d2aa4a7b5f9	stdlib@go1.16.7	1.22.7

Open the chart page →

2,377

kubebadgeskubebadges

0.1.3

1 of 2 See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
neosu/kubebadges :v0.0.5	256530d8e5c6	stdlib@go1.21.3	1.22.7

Open the chart page →

1,565

pyroscopekubeblocks

0.2.92

1 of 1 See more

pyroscope kubeblocks 0.2.92

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
apecloud/pyroscope :0.37.2	dbca95a15bc1	stdlib@go1.19.6	1.22.7

Open the chart page →

1,616

skywalkingkubesphere-test

3.1.0

2 of 4 See more

skywalking kubesphere-test 3.1.0

2 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.1.0-es7	641237e0299b	stdlib@go1.13.3	1.22.7
apache/skywalking-ui :8.1.0	67d50e4deff4	stdlib@go1.13.3	1.22.7

Open the chart page →

18,062

kubeviouskubevious

1.2.2

3 of 7 See more

kubevious kubevious 1.2.2

3 of the 7 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
kubevious/ui :1.2.1	6233e84bdd59	stdlib@go1.19.1	1.22.7
library/mysql :8.0.30	3c1aab708f6e	stdlib@go1.16.7	1.22.7
redislabs/redisearch :2.4.14	33561794c5c8	stdlib@go1.16.7	1.22.7

Open the chart page →

14,417

kubeservice-lxcfs-webhookkubservice-charts

1.6.0

4 of 6 See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

4 of the 6 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.13.1	72072d492b43	stdlib@go1.20.8	1.22.7
quay.io/jetstack/cert-manager-controller :v1.13.1	6b83f55bd99e	stdlib@go1.20.8	1.22.7
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	stdlib@go1.20.8	1.22.7
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	stdlib@go1.20.8	1.22.7

Open the chart page →

59,622

karporkusionstack

0.7.6

1 of 3 See more

karpor kusionstack 0.7.6

1 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.11	842975891182	stdlib@go1.20.12	1.22.7

Open the chart page →

3,344

loftloft

0.0.0-ci.14

1 of 1 See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	stdlib@go1.20.7	1.22.7

Open the chart page →

3,691

vcluster-k8sloft

0.0.0-ci.3

3 of 4 See more

vcluster-k8s loft 0.0.0-ci.3

3 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.k8s.io/etcd :3.5.6-0	dd75ec974b0a	stdlib@go1.16.15	1.22.7
registry.k8s.io/kube-apiserver :v1.26.1	99e1ed9fbc8a	stdlib@go1.19.5	1.22.7
registry.k8s.io/kube-controller-manager :v1.26.1	40adecbe3a40	stdlib@go1.19.5	1.22.7

Open the chart page →

5,617

lumigo-operatorlumigo-operator

69.0.0

1 of 8 See more

lumigo-operator lumigo-operator 69.0.0

1 of the 8 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/prometheus/node-exporter :v1.8.2	4032c6d5bfd7	stdlib@go1.22.5	1.22.7

Open the chart page →

7,845

veleromesosphere

3.2.5

1 of 1 See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.26.4	a0a972324d93	stdlib@go1.19.8	1.22.7

Open the chart page →

1,875

kubecostmesosphere-stable

0.37.5

5 of 9 See more

kubecost mesosphere-stable 0.37.5

5 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.7	1a359d92f40e	stdlib@go1.20.1	1.22.7
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	stdlib@go1.21.5	1.22.7
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	stdlib@go1.21.4	1.22.7
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.22.7
quay.io/thanos/thanos :v0.36.1	e542959e1b36	stdlib@go1.21.13	1.22.7

Open the chart page →

18,245

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	stdlib@go1.17.2	1.22.7

Open the chart page →

2,755

helm-ai-kernelmindburn-labs

0.8.5

1 of 2 See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	stdlib@go1.22.5	1.22.7

Open the chart page →

2,198

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	stdlib@go1.19	1.22.7

Open the chart page →

3,878

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	stdlib@go1.13.8	1.22.7

Open the chart page →

5,126

mstreamnicholaswilde

2.1.2

1 of 1 See more

mstream nicholaswilde 2.1.2

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/mstream :version-v5.2.5	22c012bcc43c	stdlib@go1.15.5	1.22.7

Open the chart page →

4,411

kobotoolboxone-acre-fund

0.7.4

1 of 9 See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
enketo/enketo-express :3.0.4	dcad9c2273f6	stdlib@go1.17.1	1.22.7

Open the chart page →

19,827

secrets-injectoronepassword-connect

1.2.0

1 of 1 See more

secrets-injector onepassword-connect 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
1password/kubernetes-secrets-injector :1.0.2	5884757f7879	stdlib@go1.20.5	1.22.7

Open the chart page →

894

opentelemetry-ebpfopentelemetry-helm

0.1.7

1 of 4 See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

1 of the 4 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
otel/opentelemetry-ebpf-k8s-watcher :v0.10.2	63a0d1dd2cac	stdlib@go1.20	1.22.7

Open the chart page →

2,587

oesopsmx

4.0.32

6 of 25 See more

oes opsmx 4.0.32

6 of the 25 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/awsgit :v2-openssh	0d21ba756f44	stdlib@go1.17.2	1.22.7
quay.io/opsmxpublic/awsgit :v3-js	15a6faada3d4	stdlib@go1.16.15	1.22.7
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	stdlib@go1.20.3	1.22.7
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	stdlib@go1.19.1	1.22.7
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	stdlib@go1.22.2	1.22.7
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	stdlib@go1.13.1	1.22.7

Open the chart page →

102,839

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	stdlib@go1.18.3	1.22.7
ipfs/ipfs-cluster :1.0.2	1511f6d57994	stdlib@go1.18.3	1.22.7

Open the chart page →

3,789

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	stdlib@go1.22.4	1.22.7

Open the chart page →

1,023

plecopleco

0.24.0

1 of 1 See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	stdlib@go1.21.6	1.22.7

Open the chart page →

1,355

ipmi-exporterpnnl-miscscripts

0.1.15

1 of 1 See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	stdlib@go1.13.10	1.22.7

Open the chart page →

3,049

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	stdlib@go1.20.3	1.22.7

Open the chart page →

1,961

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	stdlib@go1.15.1	1.22.7
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	stdlib@go1.15.3	1.22.7
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	stdlib@go1.14.12	1.22.7
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	stdlib@go1.14.4	1.22.7

Open the chart page →

12,137

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	stdlib@go1.15	1.22.7

Open the chart page →

2,729

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
library/postgres :16.2	4aea012537ed	stdlib@go1.18.2	1.22.7

Open the chart page →

13,233

wordpress-hardenedriotkit-org

2.0.0

2 of 2 See more

wordpress-hardened riotkit-org 2.0.0

2 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/riotkit-org/waf-proxy :snapshot	683656fdace2	stdlib@go1.18.3	1.22.7
ghcr.io/riotkit-org/wordpress-hardened :v2.0	edc6b69873be	stdlib@go1.17.9	1.22.7

Open the chart page →

6,647

satisfactory-serversatisfactory

0.1.6

1 of 1 See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.10	e103700ae6ae	stdlib@go1.18.1	1.22.7

Open the chart page →

3,624

seaweedfs-csi-driverseaweedfs-csi-driver

0.2.38

5 of 7 See more

seaweedfs-csi-driver seaweedfs-csi-driver 0.2.38

5 of the 7 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	stdlib@go1.20.3	1.22.7
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	stdlib@go1.20.3	1.22.7
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	stdlib@go1.20.3	1.22.7
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	stdlib@go1.20.3	1.22.7
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	stdlib@go1.20.3	1.22.7

Open the chart page →

5,389

lldapself-hosters-by-night

0.5.2

1 of 2 See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/lldap/lldap :2025-05-19	3de697c3ba57	stdlib@go1.18.2	1.22.7

Open the chart page →

3,579

appshini4i

0.4.0

1 of 1 See more

app shini4i 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.10.2	1474027c3166	stdlib@go1.22.2	1.22.7

Open the chart page →

540

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	stdlib@go1.20	1.22.7

Open the chart page →

1,702

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	stdlib@go1.14.2	1.22.7
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	stdlib@go1.14.2	1.22.7
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	stdlib@go1.14.2	1.22.7
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	stdlib@go1.14.2	1.22.7
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	stdlib@go1.14.2	1.22.7

Open the chart page →

12,530

sn-platformstreamnative

1.11.45

6 of 9 See more

sn-platform streamnative 1.11.45

6 of the 9 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.22.7
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	stdlib@go1.20.4	1.22.7
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	stdlib@go1.17.11	1.22.7
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	stdlib@go1.19.4	1.22.7
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.22.7
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	stdlib@go1.19.7	1.22.7

Open the chart page →

72,725

thingsboard-clusterthingsboard-cluster-betta

0.2.26

3 of 6 See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

3 of the 6 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	stdlib@go1.20.5	1.22.7
bitnamilegacy/redis :7.2.1-debian-11-r0	fa288394f402	stdlib@go1.19.12	1.22.7
bitnamilegacy/zookeeper :3.9.0-debian-11-r11	10ed1ea3c8d1	stdlib@go1.19.12	1.22.7

Open the chart page →

14,960

feedbacksystemthm-mni-ii

0.48.0

6 of 14 See more

feedbacksystem thm-mni-ii 0.48.0

6 of the 14 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	stdlib@go1.21.5	1.22.7
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.22.7
bitnamilegacy/mysql :8.0.35-debian-11-r2	be03e8ea6129	stdlib@go1.21.5	1.22.7
library/docker :20.10.21-dind	3153fa63f546	stdlib@go1.18.7	1.22.7
ghcr.io/thm-mni-ii/fbs-qcm-frontend :v2.0.1	28c98d86ed77	stdlib@go1.20.12	1.22.7
ghcr.io/thm-mni-ii/fbs-runner :v2.0.1	5d7506dce446	stdlib@go1.20.11	1.22.7

Open the chart page →

25,439

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	stdlib@go1.14.4	1.22.7

Open the chart page →

4,150

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	stdlib@go1.14.4	1.22.7
library/traefik :v2.5	7d5a6ae66572	stdlib@go1.17.6	1.22.7
traefik/mesh :v1.4.8	cf071f3e165c	stdlib@go1.19	1.22.7

Open the chart page →

9,311

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	stdlib@go1.19.6	1.22.7
quay.io/argoproj/argocd :v2.8.6	acaf37352569	stdlib@go1.20.4	1.22.7

Open the chart page →

10,611

vouchvouch

3.2.0

1 of 1 See more

vouch vouch 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
quay.io/vouch/vouch-proxy :0.39	d34e220de3cf	stdlib@go1.18.10	1.22.7

Open the chart page →

1,041

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	stdlib@go1.20.7	1.22.7

Open the chart page →

1,360

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2024-34156.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	stdlib@go1.18.5	1.22.7

Open the chart page →

2,245

Container images carrying it

2,905 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/e2e-test-images/agnhost :2.40	af7e3857d877	stdlib@go1.18.3	1.22.7	1
registry.k8s.io/gateway-api/admission-server :v0.7.1	fe43ee5176a8	stdlib@go1.19.9	1.22.7	1
registry.k8s.io/git-sync/git-sync :v3.6.9	6fa9042f6128	stdlib@go1.20.6	1.22.7	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	stdlib@go1.20.10	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.6.4	15be4666c530	stdlib@go1.19.4	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.10.0	42b3f0e5d084	stdlib@go1.22.0	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.3.1	54f7fe2c6c5a	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.2.1	5516d103a9c2	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.8.0	744ae2afd433	stdlib@go1.20.1	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.7.0	7612338342a1	stdlib@go1.20.1	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.3.0	d1707ca76d3b	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	stdlib@go1.22.2	1.22.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.0	44d1d0e9f19c	stdlib@go1.21.6	1.22.7	1
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.3.0	549e71a6ca24	stdlib@go1.18.2	1.22.7	1
registry.k8s.io/kas-network-proxy/proxy-server :v0.0.37	c2f596cae3c6	stdlib@go1.19.6	1.22.7	1
registry.k8s.io/kube-apiserver :v1.25.0	f6902791fb9a	stdlib@go1.19	1.22.7	1
registry.k8s.io/kubebuilder/kube-rbac-proxy :v0.16.0	771a9a173e03	stdlib@go1.21.7	1.22.7	1
registry.k8s.io/kube-controller-manager :v1.25.0	66ce7d460e53	stdlib@go1.19	1.22.7	1
registry.k8s.io/kube-scheduler :v1.26.11	0684e23172d9	stdlib@go1.20.11	1.22.7	1
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	stdlib@go1.21.7	1.22.7	1
registry.k8s.io/kube-scheduler :v1.23.14	3e149d206076	stdlib@go1.17.13	1.22.7	1
registry.k8s.io/kube-scheduler :v1.28.11	46cf7475c8da	stdlib@go1.21.11	1.22.7	1
registry.k8s.io/kube-scheduler :v1.25.0	9330c53feca7	stdlib@go1.19	1.22.7	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.0	5658d0011a41	stdlib@go1.19.4	1.22.7	1
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.8.2	ec5732e28f15	stdlib@go1.19.7	1.22.7	1
registry.k8s.io/metrics-server/metrics-server :v0.7.0	1c0419326500	stdlib@go1.21.6	1.22.7	1
registry.k8s.io/metrics-server/metrics-server :v0.7.1	db3800085a09	stdlib@go1.21.8	1.22.7	1
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.11.1	e6a43c83ab16	stdlib@go1.20.4	1.22.7	1
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	stdlib@go1.19	1.22.7	1
registry.k8s.io/sig-storage/csi-attacher :v4.5.1	9dcd469f02bb	stdlib@go1.21.5	1.22.7	1
registry.k8s.io/sig-storage/csi-external-health-monitor-controller :v0.7.0	80b9ba94aa2a	stdlib@go1.18	1.22.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.9.1	2cddcc716c19	stdlib@go1.20.5	1.22.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	stdlib@go1.19	1.22.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.2	a13bff2ed69a	stdlib@go1.19	1.22.7	1
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.0.1	e07f914c32f0	stdlib@go1.15	1.22.7	1
registry.k8s.io/sig-storage/csi-provisioner :v5.0.2	7b9cdb5830d0	stdlib@go1.22.5	1.22.7	1
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	stdlib@go1.19	1.22.7	1
registry.k8s.io/sig-storage/csi-provisioner :v3.3.0	ee3b525d5b89	stdlib@go1.18	1.22.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	stdlib@go1.19	1.22.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.6.0	425d8f1b7693	stdlib@go1.18	1.22.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.10.1	4ecda2818f6d	stdlib@go1.21.5	1.22.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.3.0	6e0546563b18	stdlib@go1.16.2	1.22.7	1
registry.k8s.io/sig-storage/csi-resizer :v1.12.0	ab774734705a	stdlib@go1.22.5	1.22.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v6.1.0	291334908ddf	stdlib@go1.18	1.22.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v8.0.2	5f051159c95f	stdlib@go1.22.5	1.22.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v4.2.1	818f35653f2e	stdlib@go1.16.2	1.22.7	1
registry.k8s.io/sig-storage/csi-snapshotter :v5.0.1	89e900a160a9	stdlib@go1.17.3	1.22.7	1
registry.k8s.io/sig-storage/hostpathplugin :v1.9.0	92257881c1d6	stdlib@go1.18	1.22.7	1
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	stdlib@go1.19	1.22.7	1
registry.k8s.io/sig-storage/livenessprobe :v2.11.0	82adbebdf5d5	stdlib@go1.20.5	1.22.7	1