StackRadar

CVE-2024-35255

Medium

Advisory

Published 11 Jun 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
156
of 17,781 indexed, latest versions
Container images
161
deployed by those charts
Fix available
7 of 7
affected packages

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Carried by container images the latest versions of 156 of 17,781 indexed charts deploy, on 161 images.

Affected packageAffected versionsFixed inImages
github.com/Azure/azure-sdk-for-go/sdk/azidentitygolangv0.9.1, v0.10.0, v0.13.2, v1.1.0+8 more1.6.0-beta.4.0.20240610221955-50774cd97099117
@azure/identitynpm1.0.3, 1.5.0, 1.5.2, 2.0.4+3 more4.2.115
azure-identitymaven1.1.0, 1.4.4, 1.11.1, 1.11.2+1 more1.12.212
azure-identitypypi1.9.0, 1.10.0, 1.12.0, 1.13.0+2 more1.16.112
Azure.Identitynuget1.3.0, 1.6.0, 1.7.0, 1.10.01.11.45
Microsoft.Identity.Clientnuget4.54.14.60.41
msal4jmaven1.15.01.15.11
OSV records
GHSA-m5vv-6r4h-3vj9
Also known as
GO-2024-2918, PYSEC-2026-1209

Charts affected

156 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
azure-identity@1.15.0
1.16.1

Open the chart page →

11,367
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,367
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

16,251
linkerd-vizlinkerd2-edgeVerified publisher30.14.11-edge1 of 5See more

linkerd-viz linkerd2-edge 30.14.11-edge

1 of the 5 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,346
prometheus-operatorarldkaVerified publisher13.0.11 of 2See more

prometheus-operator arldka 13.0.1

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.73.204f2b98d71ef
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,107
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
@azure/identity@2.1.0
4.2.1

Open the chart page →

5,639
sorry-cypresssorry-cypressVerified publisher1.20.01 of 4See more

sorry-cypress sorry-cypress 1.20.0

1 of the 4 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
agoldis/sorry-cypress-director:2.5.1110228ecd353b
@azure/identity@2.0.5
4.2.1

Open the chart page →

4,285
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

17,245
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
@azure/identity@2.1.0
4.2.1

Open the chart page →

4,515
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

14,240
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
azure-identity@1.11.1
1.12.2

Open the chart page →

7,930
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

14,094
coder-observabilitycoder-observabilityVerified publisher0.7.35 of 21See more

coder-observability coder-observability 0.7.3

5 of the 21 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
grafana/loki:3.1.0d947e68a84d9
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
grafana/loki-canary:3.1.039baf6d67f85
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

24,700
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
azure-identity@1.13.0
1.16.1

Open the chart page →

14,546
kubecostmesosphere-stable0.37.54 of 9See more

kubecost mesosphere-stable 0.37.5

4 of the 9 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.2
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus-operator/prometheus-config-reloader:v0.69.17bbe804260f3
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/thanos/thanos:v0.36.1e542959e1b36
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

17,693
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
@azure/identity@1.5.2
4.2.1

Open the chart page →

7,776
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,346
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

15,477
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.1.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

10,315
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:9.4.376dcf36e7d2a
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

17,877
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,898
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,042
finops-stackcert-managerVerified publisher0.0.57 of 12See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

12,562
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:8.3.5cd7cb4345aa7
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

7,583
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
azure-identity@1.12.0
1.16.1

Open the chart page →

2,713
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
azure-identity@1.14.0
1.16.1

Open the chart page →

11,205
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
azure-identity@1.11.2
1.12.2

Open the chart page →

5,398
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
Azure.Identity@1.6.0
1.11.4

Open the chart page →

6,940
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

15,383
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
@azure/identity@2.0.4
4.2.1

Open the chart page →

5,079
temporalglasskubeVerified publisher0.45.2-gk.13 of 14See more

temporal glasskube 0.45.2-gk.1

3 of the 14 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

16,346
phlaregrafana0.5.41 of 1See more

phlare grafana 0.5.4

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/phlare:0.5.1330f990cdad9
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,084
carettagroundcover0.0.161 of 3See more

caretta groundcover 0.0.16

1 of the 3 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

6,799
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

13,610
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
@azure/identity@2.1.0
4.2.1

Open the chart page →

4,196
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
azure-identity@1.10.0
1.16.1

Open the chart page →

11,764
joylive-injectorjoyliveOfficialVerified publisher1.3.51 of 2See more

joylive-injector joylive 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,273
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

4,389
mlflow-controllermlflow-deployment-controller0.1.81 of 2See more

mlflow-controller mlflow-deployment-controller 0.1.8

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
azure-identity@1.12.0
1.16.1

Open the chart page →

8,957
spirephilips-labsVerified publisher0.12.21 of 6See more

spire philips-labs 0.12.2

1 of the 6 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

7,236
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,835
prometheusromanow-helm-chartsVerified publisher1.7.21 of 1See more

prometheus romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,143
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.1.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

4,238
smallest-self-hostsmallest-self-hostVerified publisher0.2.22 of 12See more

smallest-self-host smallest-self-host 0.2.2

2 of the 12 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus-operator/prometheus-operator:v0.74.06b3f6d8b4c0a
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

7,685
artifact-hubsoftonic1.19.02 of 8See more

artifact-hub softonic 1.19.0

2 of the 8 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
artifacthub/scanner:v1.19.0323d026e78c3
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

14,491
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,022
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

3,165
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,828
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

28,131
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
chrislusf/seaweedfs:3.56ed80f00fde46
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

25,669

Container images carrying it

161 by charts deploying them

A fixed version is listed for 7 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:6.12781369df9994
azure-identity@1.9.0
1.16.1
3
grafana/grafana:8.2.500568d89c4f8
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099
3
grafana/grafana:11.0.00dc5a246ab16
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
3
agoldis/sorry-cypress-director:2.5.1110228ecd353b
@azure/identity@2.0.5
4.2.1
2
apache/nifi-registry:1.26.07cdfd8deec92
azure-identity@1.11.2
1.12.2
2
governify/dashboard:lateste83a17ba5038
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/grafana:9.2.4057896e23443
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/grafana:11.1.0079600c9517b
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/grafana:8.5.042d3e6bc1865
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/grafana:11.1.4886b56d5534e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/loki:3.1.0d947e68a84d9
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
2
prom/prometheus:v2.52.05c435642ca4d
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
Azure.Identity@1.7.0
1.11.4
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
1
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Azure.Identity@1.3.0
1.11.4
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Azure.Identity@1.3.0
1.11.4
1
alpine/k8s:1.30.0bd01dae02676
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
apache/airflow:2.8.4-python3.964e58748b6b9
azure-identity@1.15.0
1.16.1
1
apache/airflow:2.8.1e5560ad0b86e
azure-identity@1.15.0
1.16.1
1
apache/druid:29.0.10cef139b6bf1
azure-identity@1.11.1
1.12.2
1
apache/nifi-registry:1.27.063b8e3e40742
azure-identity@1.11.2
1.12.2
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
aquasec/trivy:0.43.1944a04445179
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
1
btungut/azure-keyvault-secret-operator:1.7.04a072e2edf71
Azure.Identity@1.10.0
Microsoft.Identity.Client@4.54.1
1.11.4
4.60.4
1
chrislusf/seaweedfs:3.56ed80f00fde46
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
azure-identity@1.11.1
1.12.2
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
azure-identity@1.1.0
1.12.2
1
darthsim/imgproxy:v3.15.040f6eb807444
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
devopsfaith/krakend:2.6.34c678c224f67
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
directus/directus:11.1.0e3c8bb975350
@azure/identity@3.4.2
4.2.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.