StackRadar

CVE-2024-35255

Medium

Advisory

Published 11 Jun 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
156
of 17,781 indexed, latest versions
Container images
161
deployed by those charts
Fix available
7 of 7
affected packages

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Carried by container images the latest versions of 156 of 17,781 indexed charts deploy, on 161 images.

Affected packageAffected versionsFixed inImages
github.com/Azure/azure-sdk-for-go/sdk/azidentitygolangv0.9.1, v0.10.0, v0.13.2, v1.1.0+8 more1.6.0-beta.4.0.20240610221955-50774cd97099117
@azure/identitynpm1.0.3, 1.5.0, 1.5.2, 2.0.4+3 more4.2.115
azure-identitymaven1.1.0, 1.4.4, 1.11.1, 1.11.2+1 more1.12.212
azure-identitypypi1.9.0, 1.10.0, 1.12.0, 1.13.0+2 more1.16.112
Azure.Identitynuget1.3.0, 1.6.0, 1.7.0, 1.10.01.11.45
Microsoft.Identity.Clientnuget4.54.14.60.41
msal4jmaven1.15.01.15.11
OSV records
GHSA-m5vv-6r4h-3vj9
Also known as
GO-2024-2918, PYSEC-2026-1209

Charts affected

156 by stars
ChartLatestAffected imagesRadar Score
docker-machine-operatorappscodeVerified publisher2024.7.91 of 1See more

docker-machine-operator appscode 2024.7.9

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,220
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
azure-identity@1.9.0
1.16.1

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
azure-identity@1.9.0
1.16.1

Open the chart page →

2,418
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:9.0.1a738d0744784
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

8,608
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
azure-identity@1.9.0
1.16.1

Open the chart page →

10,061
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

8,556
azure-app-exporterazure-app-exporterVerified publisher0.4.21 of 2See more

azure-app-exporter azure-app-exporter 0.4.2

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
azure-identity@1.12.0
1.16.1

Open the chart page →

1,790
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

13,459
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,859
kubernetes-azure-keyvault-secret-operatorbtungutVerified publisher1.7.01 of 1See more

kubernetes-azure-keyvault-secret-operator btungut 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
btungut/azure-keyvault-secret-operator:1.7.04a072e2edf71
Azure.Identity@1.10.0
Microsoft.Identity.Client@4.54.1
1.11.4
4.60.4

Open the chart page →

584
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,770
temporalcastaiVerified publisher0.54.23 of 14See more

temporal castai 0.54.2

3 of the 14 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.303 of 18See more

catalyst-agents catalyst-agents 0.1.30

3 of the 18 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/loki:3.0.0757b5fadf816
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
grafana/loki-canary:3.0.028d7c00588aa
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
grafana/tempo:2.5.0f0200a9bff6d
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

15,027
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
azure-identity@1.9.0
1.16.1

Open the chart page →

6,695
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
azure-identity@1.10.0
1.16.1

Open the chart page →

16,069
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.12 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

2 of the 7 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Azure.Identity@1.3.0
1.11.4
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Azure.Identity@1.3.0
1.11.4

Open the chart page →

10,091
cp-helm-chartscp-helm-charts0.6.16 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

6 of the 8 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
azure-identity@1.1.0
1.12.2
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
azure-identity@1.1.0
1.12.2
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
azure-identity@1.1.0
1.12.2
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
azure-identity@1.1.0
1.12.2
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
azure-identity@1.1.0
1.12.2
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
azure-identity@1.1.0
1.12.2

Open the chart page →

58,857
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
azure-identity@1.11.2
1.12.2

Open the chart page →

5,398
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

4,509
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

68,240
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

8,645
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

68,240
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

8,645
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
@azure/identity@3.4.2
4.2.1

Open the chart page →

4,551
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
@azure/identity@2.1.0
4.2.1

Open the chart page →

4,217
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

13,558
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,296
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
prom/prometheus:v2.51.24f6c47e39a90
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

6,678
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

23,685
eoapi-supporteoapiVerified publisher0.1.73 of 7See more

eoapi-support eoapi 0.1.7

3 of the 7 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

8,648
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

7,329
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.01 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/loki:2.9.66ca6e2cd3b6f
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

5,748
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.418cd5711fc9a
azure-identity@1.15.0
1.16.1

Open the chart page →

12,454
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
@azure/identity@2.1.0
4.2.1

Open the chart page →

3,474
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

11,961
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

24,319
logging-stackhelm-charts-alexis-carbillet0.1.02 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

2 of the 9 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
grafana/loki:2.8.2b1da1d23037e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.1a67e5e402ff5
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

9,460
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
azure-identity@1.11.2
1.12.2

Open the chart page →

5,320
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

11,069
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
@azure/identity@1.5.0
4.2.1

Open the chart page →

7,232
rclonejacobcolvinVerified publisher1.0.11 of 1See more

rclone jacobcolvin 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
rclone/rclone:1.63.008e1af3c8814
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

2,143
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
@azure/identity@3.4.2
4.2.1

Open the chart page →

5,826
vaultjfrog0.25.01 of 2See more

vault jfrog 0.25.0

1 of the 2 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
hashicorp/vault:1.14.0b2177a8bfe85
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

3,968
komiserkomiser-eks3.1.101 of 1See more

komiser komiser-eks 3.1.10

1 of the 1 container images this version deploys carry CVE-2024-35255.

Container imageDigestPackageFixed in
tailwarden/komiser:3.1.103f68c8ae7993
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.1
1.6.0-beta.4.0.20240610221955-50774cd97099

Open the chart page →

1,265

Container images carrying it

161 by charts deploying them

A fixed version is listed for 7 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:6.12781369df9994
azure-identity@1.9.0
1.16.1
3
grafana/grafana:8.2.500568d89c4f8
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099
3
grafana/grafana:11.0.00dc5a246ab16
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099
3
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
3
agoldis/sorry-cypress-director:2.5.1110228ecd353b
@azure/identity@2.0.5
4.2.1
2
apache/nifi-registry:1.26.07cdfd8deec92
azure-identity@1.11.2
1.12.2
2
governify/dashboard:lateste83a17ba5038
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.10.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/grafana:9.2.4057896e23443
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/grafana:11.1.0079600c9517b
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/grafana:8.5.042d3e6bc1865
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/grafana:11.1.4886b56d5534e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/loki:3.1.0d947e68a84d9
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
2
grafana/tempo:2.5.0f0200a9bff6d
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.1
1.6.0-beta.4.0.20240610221955-50774cd97099
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
2
prom/prometheus:v2.52.05c435642ca4d
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
prom/prometheus:v2.48.1a67e5e402ff5
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
Azure.Identity@1.7.0
1.11.4
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v0.13.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
quay.io/prometheus-operator/prometheus-config-reloader:v0.67.014feefde1b80
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.2
1.6.0-beta.4.0.20240610221955-50774cd97099
2
quay.io/prometheus/prometheus:v2.47.0c5dd35038287
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
2
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
1
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
Azure.Identity@1.3.0
1.11.4
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
Azure.Identity@1.3.0
1.11.4
1
alpine/k8s:1.30.0bd01dae02676
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
apache/airflow:2.8.4-python3.964e58748b6b9
azure-identity@1.15.0
1.16.1
1
apache/airflow:2.8.1e5560ad0b86e
azure-identity@1.15.0
1.16.1
1
apache/druid:29.0.10cef139b6bf1
azure-identity@1.11.1
1.12.2
1
apache/nifi-registry:1.27.063b8e3e40742
azure-identity@1.11.2
1.12.2
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
aquasec/trivy:0.43.1944a04445179
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.4.0
1.6.0-beta.4.0.20240610221955-50774cd97099
1
btungut/azure-keyvault-secret-operator:1.7.04a072e2edf71
Azure.Identity@1.10.0
Microsoft.Identity.Client@4.54.1
1.11.4
4.60.4
1
chrislusf/seaweedfs:3.56ed80f00fde46
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.3.0
1.6.0-beta.4.0.20240610221955-50774cd97099
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
azure-identity@1.11.1
1.12.2
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
azure-identity@1.1.0
1.12.2
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
azure-identity@1.1.0
1.12.2
1
darthsim/imgproxy:v3.15.040f6eb807444
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.2.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
devopsfaith/krakend:2.6.34c678c224f67
github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.5.1
1.6.0-beta.4.0.20240610221955-50774cd97099
1
directus/directus:11.1.0e3c8bb975350
@azure/identity@3.4.2
4.2.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.