CVE-2024-45337

Critical

Advisory

Published 11 Dec 2024In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.032; 87th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,576; of 17,792 indexed, latest versions
Container images: 1,827; deployed by those charts
Fix available: 1 of 1; affected package

Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Carried by container images the latest versions of 1,576 of 17,792 indexed charts deploy, on 1,827 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+134 more	0.31.0	1,827

OSV records: GHSA-v778-237x-gjrc
Also known as: GO-2024-3321

Charts affected

1,576 by stars

Chart

Latest

Affected images

Radar Score

prometheuskubeblocks

15.16.1

5 of 6 See more

prometheus kubeblocks 15.16.1

5 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.3	3496e0f85943	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.31.0
quay.io/prometheus/alertmanager :v0.24.0	088464f949de	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.31.0
quay.io/prometheus/node-exporter :v1.3.1	f2269e73124d	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.31.0
quay.io/prometheus/prometheus :v2.39.1	4748e26f9369	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.31.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.5.0	09a36e2be1db	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.31.0

Open the chart page →

10,309

victoria-metrics-alertkubeblocks

0.8.3-reload

1 of 3 See more

victoria-metrics-alert kubeblocks 0.8.3-reload

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.31.0

Open the chart page →

3,715

kubeclaritykubeclarity

2.23.3

2 of 5 See more

kubeclarity kubeclarity 2.23.3

2 of the 5 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	golang.org/x/crypto@v0.12.0	0.31.0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	golang.org/x/crypto@v0.17.0	0.31.0

Open the chart page →

5,520

cephfs-csikubegems

1.0.8

1 of 6 See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0

Open the chart page →

4,452

chartmuseumkubegems

3.8.0

1 of 1 See more

chartmuseum kubegems 3.8.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.14.0	878ef6a31fa0	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.31.0

Open the chart page →

3,526

gatewaykubegems

0.3.2

2 of 2 See more

gateway kubegems 0.3.2

2 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubegems/ingress-nginx-operator :v0.2.0	cc67357beeeb	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0
kubegems/kube-rbac-proxy :v0.8.0	941f557ed1ee	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

3,505

giteakubegems

5.0.8

1 of 2 See more

gitea kubegems 5.0.8

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
gitea/gitea :1.16.8	b0bdf102b485	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.31.0

Open the chart page →

3,400

juicefs-csi-driverkubegems

0.19.2

2 of 6 See more

juicefs-csi-driver kubegems 0.19.2

2 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.23.0	3e4daf9626d5	golang.org/x/crypto@v0.14.0	0.31.0
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	golang.org/x/crypto@v0.14.0	0.31.0

Open the chart page →

4,838

knative-servingkubegems

1.0.1

1 of 8 See more

knative-serving kubegems 1.0.1

1 of the 8 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	bac158dfb0c7	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.31.0

Open the chart page →

10,469

kubegems-edgekubegems

1.24.10

1 of 1 See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubegems/kubegems :v1.24.10	a730bcf9322a	golang.org/x/crypto@v0.17.0	0.31.0

Open the chart page →

3,390

logging-operatorkubegems

3.17.6

1 of 1 See more

logging-operator kubegems 3.17.6

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/logging-operator :3.17.6	23c2d4d54a64	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0

Open the chart page →

1,800

prometheus-adapterkubegems

4.14.1

1 of 1 See more

prometheus-adapter kubegems 4.14.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	golang.org/x/crypto@v0.22.0	0.31.0

Open the chart page →

937

prometheus-blackbox-exporterkubegems

7.1.3

1 of 1 See more

prometheus-blackbox-exporter kubegems 7.1.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
prom/blackbox-exporter :v0.22.0	608acee5704a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.31.0

Open the chart page →

1,634

xpai-schedulerkubegems

1.12.1

1 of 2 See more

xpai-scheduler kubegems 1.12.1

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
projecthami/volcano-vgpu-device-plugin :v1.9.4	0c94118d1d98	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0

Open the chart page →

2,324

gptchat-api-feishubotkubegemsapp

0.1.1

2 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.31.0

Open the chart page →

8,487

log-generatorkube-logging

0.6.0

1 of 1 See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/crypto@v0.5.0	0.31.0

Open the chart page →

1,269

logging-demokube-logging

4.0.3

1 of 1 See more

logging-demo kube-logging 4.0.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.4.1	05aa441b20aa	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

1,267

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/crypto@v0.0.0-20220817201139-bc19a97f63c8	0.31.0

Open the chart page →

7,208

lokikube-ops

1.7.3

1 of 1 See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0

Open the chart page →

2,653

promtailkube-ops

1.5.1

1 of 2 See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0

Open the chart page →

4,157

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/crypto@v0.13.0	0.31.0

Open the chart page →

3,630

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/crypto@v0.22.0	0.31.0

Open the chart page →

1,205

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/crypto@v0.24.0	0.31.0

Open the chart page →

855

api-serverkubeshop

0.11.16

1 of 2 See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.31.0

Open the chart page →

3,432

kusk-gatewaykubeshop

0.0.65

1 of 2 See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.31.0

Open the chart page →

1,621

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	golang.org/x/crypto@v0.17.0	0.31.0

Open the chart page →

1,562

fluentbit-operatorkubesphere

0.1.0

1 of 2 See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0

Open the chart page →

2,902

gitlabkubesphere

4.2.3

5 of 17 See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/crypto@v0.0.0-20190426145343-a29dc8fdc734	0.31.0
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.31.0
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.31.0
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.31.0
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.31.0

Open the chart page →

38,178

harborkubesphere

1.9.3

7 of 11 See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.31.0
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.31.0
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/crypto@v0.0.0-20220513210258-46612604a0f9	0.31.0

Open the chart page →

17,851

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0

Open the chart page →

8,580

cranekubesphere-stable

0.5.2

2 of 3 See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0
gocrane/craned :v0.5.1	a1400909118c	golang.org/x/crypto@v0.0.0-20220112180741-5e0467b6c7ce	0.31.0

Open the chart page →

8,902

csi-qingcloudkubesphere-stable

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

3 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.31.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.31.0

Open the chart page →

12,444

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/crypto@v0.1.0	0.31.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.31.0
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/crypto@v0.4.0	0.31.0

Open the chart page →

18,420

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/crypto@v0.7.0	0.31.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0

Open the chart page →

4,108

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/crypto@v0.16.0	0.31.0
inaccel/reef :latest	c967218739f3	golang.org/x/crypto@v0.17.0	0.31.0

Open the chart page →

5,770

iomeshkubesphere-stable

1.1.0

11 of 25 See more

iomesh kubesphere-stable 1.1.0

11 of the 25 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.31.0
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/crypto@v0.16.0	0.31.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/crypto@v0.16.0	0.31.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/crypto@v0.14.0	0.31.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/crypto@v0.14.0	0.31.0

Open the chart page →

48,954

IOMeshkubesphere-stable

1.2.0

11 of 25 See more

IOMesh kubesphere-stable 1.2.0

11 of the 25 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.31.0
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/crypto@v0.16.0	0.31.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/crypto@v0.16.0	0.31.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/crypto@v0.14.0	0.31.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/crypto@v0.14.0	0.31.0

Open the chart page →

46,639

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413	0.31.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0

Open the chart page →

14,401

csi-neonsankubesphere-test

1.3.0

3 of 6 See more

csi-neonsan kubesphere-test 1.3.0

3 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.31.0

Open the chart page →

18,526

csi-qingcloudkubesphere-test

1.4.0

3 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

3 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.31.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.31.0

Open the chart page →

12,444

openelbkubesphere-test

0.2.4

1 of 2 See more

openelb kubesphere-test 0.2.4

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0

Open the chart page →

4,336

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0

Open the chart page →

2,791

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/crypto@v0.5.0	0.31.0

Open the chart page →

4,456

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/crypto@v0.5.0	0.31.0

Open the chart page →

4,773

kubiya-runnerkubiya-helm-charts

0.9.4

3 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	golang.org/x/crypto@v0.29.0	0.31.0
ghcr.io/kubiyabot/kubiya-operator :runner_v2	6bf945565865	golang.org/x/crypto@v0.26.0	0.31.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.14.0	37d841299325	golang.org/x/crypto@v0.28.0	0.31.0

Open the chart page →

20,386

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	golang.org/x/crypto@v0.29.0	0.31.0

Open the chart page →

6,913

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	golang.org/x/crypto@v0.14.0	0.31.0

Open the chart page →

1,881

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

16,539

kvkkvkservice

0.1.0

1 of 4 See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
conduction/kvk-php :dev	8f177f9f8a7b	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.31.0

Open the chart page →

8,543

Container images carrying it

1,827 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0	1
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.31.0	1
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/crypto@v0.26.0	0.31.0	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	golang.org/x/crypto@v0.5.0	0.31.0	1
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/crypto@v0.14.0	0.31.0	1
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	golang.org/x/crypto@v0.25.0	0.31.0	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	golang.org/x/crypto@v0.0.0-20220210151621-f4118a5b28e2	0.31.0	1
quay.io/aerokube/moon-ui :2.0.5	89990b146824	golang.org/x/crypto@v0.10.0	0.31.0	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/crypto@v0.14.0	0.31.0	1
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/crypto@v0.17.0	0.31.0	1
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	golang.org/x/crypto@v0.9.0	0.31.0	1
quay.io/argoprojlabs/argocd-operator :v0.4.0	cf8faa986789	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0	1
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/crypto@v0.17.0	0.31.0	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
quay.io/backube/volsync :0.16.0	0d03a6aad575	golang.org/x/crypto@v0.0.0-20220312131142-6068a2e6cfdc	0.31.0	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122	0.31.0	1
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/crypto@v0.6.0	0.31.0	1
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/crypto@v0.14.0	0.31.0	1
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/crypto@v0.14.0	0.31.0	1
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/crypto@v0.19.0	0.31.0	1
quay.io/brancz/kube-rbac-proxy :v0.18.0	754ab2a723c8	golang.org/x/crypto@v0.24.0	0.31.0	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/crypto@v0.17.0	0.31.0	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/crypto@v0.17.0	0.31.0	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d	0.31.0	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.31.0	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/crypto@v0.11.0	0.31.0	1
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/crypto@v0.14.0	0.31.0	1
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/crypto@v0.21.0	0.31.0	1
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.31.0	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586	0.31.0	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.31.0	1
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/crypto@v0.11.0	0.31.0	1
quay.io/fiware/dsba-pdp :0.3.2	0cca71497e9e	golang.org/x/crypto@v0.1.0	0.31.0	1
quay.io/fiware/ishare-auth-provider :0.4.3	158108f70f95	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0	1
quay.io/fiware/vcverifier :2.0.1	cd36290dc849	golang.org/x/crypto@v0.7.0	0.31.0	1
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.31.0	1
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.31.0	1
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.31.0	1
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	golang.org/x/crypto@v0.5.0	0.31.0	1
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	golang.org/x/crypto@v0.5.0	0.31.0	1
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	golang.org/x/crypto@v0.5.0	0.31.0	1
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	golang.org/x/crypto@v0.10.0	0.31.0	1
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0	1
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/crypto@v0.10.0	0.31.0	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/crypto@v0.0.0-20220321153916-2c7772ba3064	0.31.0	1
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.31.0	1
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.31.0	1