CVE-2024-45337

Critical

Advisory

Published 11 Dec 2024In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.032; 87th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,579; of 17,790 indexed, latest versions
Container images: 1,831; deployed by those charts
Fix available: 1 of 1; affected package

Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Carried by container images the latest versions of 1,579 of 17,790 indexed charts deploy, on 1,831 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+134 more	0.31.0	1,831

OSV records: GHSA-v778-237x-gjrc
Also known as: GO-2024-3321

Charts affected

1,579 by stars

Chart

Latest

Affected images

Radar Score

temporalcastai

0.54.2

10 of 14 See more

temporal castai 0.54.2

10 of the 14 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/crypto@v0.21.0	0.31.0
temporalio/admin-tools :1.26.2	37e2e33dbd7b	golang.org/x/crypto@v0.29.0	0.31.0
temporalio/server :1.26.2	1e2626efcbc1	golang.org/x/crypto@v0.14.0	0.31.0
temporalio/ui :2.33.0	5c586a3c8ec5	golang.org/x/crypto@v0.14.0	0.31.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/crypto@v0.23.0	0.31.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.31.0
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	golang.org/x/crypto@v0.21.0	0.31.0
quay.io/prometheus/prometheus :v2.53.0	075b1ba2c4eb	golang.org/x/crypto@v0.24.0	0.31.0
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/crypto@v0.21.0	0.31.0
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	golang.org/x/crypto@v0.21.0	0.31.0

Open the chart page →

16,232

catalyst-agentscatalyst-agents

0.1.31

6 of 18 See more

catalyst-agents catalyst-agents 0.1.31

6 of the 18 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.3	eec354133193	golang.org/x/crypto@v0.5.0	0.31.0
grafana/loki :3.0.0	757b5fadf816	golang.org/x/crypto@v0.21.0	0.31.0
grafana/loki-canary :3.0.0	28d7c00588aa	golang.org/x/crypto@v0.21.0	0.31.0
grafana/tempo :2.5.0	f0200a9bff6d	golang.org/x/crypto@v0.22.0	0.31.0
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.31.0
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.31.0

Open the chart page →

17,099

mongodb-operatorccowley

0.1.1

1 of 1 See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0

Open the chart page →

6,389

openldapccowley

2.0.4

1 of 3 See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.31.0

Open the chart page →

6,219

cert-manager-desec-webhookcert-manager-desec-webhook

1.0.1

1 of 1 See more

cert-manager-desec-webhook cert-manager-desec-webhook 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/luzifer/cert-manager-desec-webhook :v1.0.1	fa1f6b2e9a6e	golang.org/x/crypto@v0.24.0	0.31.0

Open the chart page →

1,271

cert-manager-webhook-civocert-manager-webhook-civo

0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of 1 See more

cert-manager-webhook-civo cert-manager-webhook-civo 0.0.0-05b683cb6efdc99135f68af18007954e74f18404

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
okteto/civo-webhook :0.5.3	57cd51176538	golang.org/x/crypto@v0.13.0	0.31.0

Open the chart page →

1,278

cert-manager-webhook-infoblox-wapicert-manager-webhook-infoblox-wapi

1.5.2

1 of 1 See more

cert-manager-webhook-infoblox-wapi cert-manager-webhook-infoblox-wapi 1.5.2

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/luisico/cert-manager-webhook-infoblox-wapi :1.5	ded797477896	golang.org/x/crypto@v0.0.0-20210711020723-a769d52b0f97	0.31.0

Open the chart page →

2,352

cert-manager-webhook-namecheapcert-manager-webhook-namecheap

0.1.2

1 of 1 See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/extrality/cert-manager-webhook-namecheap :latest	e3552fa0c68a	golang.org/x/crypto@v0.6.0	0.31.0

Open the chart page →

1,759

cert-manager-webhook-regerycert-manager-webhook-regery

1.0.0

1 of 1 See more

cert-manager-webhook-regery cert-manager-webhook-regery 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
darioackermann/cert-manager-webhook-regery :latest	0d450bc4acc4	golang.org/x/crypto@v0.24.0	0.31.0

Open the chart page →

889

cert-utils-operatorcert-utils-operator

1.3.12

2 of 2 See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

7,783

opencvecfi2017

0.1.2

1 of 7 See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/crypto@v0.27.0	0.31.0

Open the chart page →

15,490

clechaosnative

0.2.7

3 of 6 See more

cle chaosnative 0.2.7

3 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
chaosnative/cle-auth-server :2.7.0	72ee352bc333	golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a	0.31.0
chaosnative/cle-license-module :2.7.0	62cf6adc355e	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0
chaosnative/cle-server :2.7.0	e7bcff4a20c0	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0

Open the chart page →

16,412

checkin-componentcheckin-component

0.1.0

1 of 4 See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
conduction/checkin-component-php :dev	3423845692c1	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.31.0

Open the chart page →

8,417

lokichoerodon

0.29.0

1 of 1 See more

loki choerodon 0.29.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
grafana/loki :1.5.0	922b3f412fdd	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.31.0

Open the chart page →

2,876

promtailchoerodon

0.23.0

1 of 1 See more

promtail choerodon 0.23.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
grafana/promtail :1.5.0	46e88d390cd6	golang.org/x/crypto@v0.0.0-20191112222119-e1110fd1c708	0.31.0

Open the chart page →

2,828

supersetchoerodon

1.0.0

1 of 3 See more

superset choerodon 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
apache/superset :dockerize	afe59523a6c8	golang.org/x/crypto@v0.9.0	0.31.0

Open the chart page →

1,439

argocd-metrics-serverchristianhuth

1.1.1

1 of 1 See more

argocd-metrics-server christianhuth 1.1.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	golang.org/x/crypto@v0.9.0	0.31.0

Open the chart page →

1,031

sloopchristianhuth

0.4.0

1 of 1 See more

sloop christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/salesforce/sloop :sha-2ce8bbe	119e24f24b1d	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

2,290

basechronicle

0.0.8

1 of 1 See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	golang.org/x/crypto@v0.28.0	0.31.0

Open the chart page →

4,865

mantlechronicle

0.1.3

1 of 1 See more

mantle chronicle 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
mantlenetworkio/l2geth :v0.4.3	6bf383d14291	golang.org/x/crypto@v0.9.0	0.31.0

Open the chart page →

1,941

chubaofschubaofs

1.5.1

1 of 6 See more

chubaofs chubaofs 1.5.1

1 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.31.0

Open the chart page →

3,602

calico-cniclastix

3.28.1

3 of 3 See more

calico-cni clastix 3.28.1

3 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
calico/cni :v3.28.1	e486870cfde8	golang.org/x/crypto@v0.22.0	0.31.0
calico/kube-controllers :v3.28.1	eadb3a25109a	golang.org/x/crypto@v0.22.0	0.31.0
calico/node :v3.28.1	d8c644a8a3ee	golang.org/x/crypto@v0.22.0	0.31.0

Open the chart page →

3,071

capi-kamaji-vsphere-fullclastix

1.0.1

1 of 9 See more

capi-kamaji-vsphere-full clastix 1.0.1

1 of the 9 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.32.0	f9f4dfd733ab	golang.org/x/crypto@v0.30.0	0.31.0

Open the chart page →

5,991

capsule-rancher-addonclastix

0.1.1

3 of 5 See more

capsule-rancher-addon clastix 0.1.1

3 of the 5 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-controller :v1.11.0	d429b6d696e0	golang.org/x/crypto@v0.5.0	0.31.0
quay.io/jetstack/cert-manager-ctl :v1.11.0	74611761f052	golang.org/x/crypto@v0.5.0	0.31.0
quay.io/jetstack/cert-manager-webhook :v1.11.0	6730d96fc382	golang.org/x/crypto@v0.5.0	0.31.0

Open the chart page →

7,126

kamajiclastix

0.0.0+latest

1 of 4 See more

kamaji clastix 0.0.0+latest

1 of the 4 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.31.0

Open the chart page →

4,652

kamaji-etcdclastix

0.17.0

2 of 4 See more

kamaji-etcd clastix 0.17.0

2 of the 4 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
cfssl/cfssl :latest	c9018c2ddf0b	golang.org/x/crypto@v0.19.0	0.31.0
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.31.0

Open the chart page →

12,082

local-path-provisionerclastix

0.0.30

1 of 1 See more

local-path-provisioner clastix 0.0.30

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.30	9b9148811700	golang.org/x/crypto@v0.25.0	0.31.0

Open the chart page →

1,209

vcloud-csiclastix

1.6.0

1 of 5 See more

vcloud-csi clastix 1.6.0

1 of the 5 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.31.0

Open the chart page →

7,413

kube-acp-stackcloudentity

2.28.0

2 of 7 See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	golang.org/x/crypto@v0.24.0	0.31.0
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert :1.3	e225fe7eaa55	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

21,034

openbankingcloudentity

0.1.9

6 of 6 See more

openbanking cloudentity 0.1.9

6 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
cloudentity/openbanking-quickstart-bank :1.11.1	9402ec4b5016	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
cloudentity/openbanking-quickstart-configuration :1.11.1	8a1890eb8265	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
cloudentity/openbanking-quickstart-consent-admin-portal :1.11.1	ee83cdd45b7b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
cloudentity/openbanking-quickstart-consent-page :1.11.1	5728654cecb7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
cloudentity/openbanking-quickstart-consent-self-service-portal :1.11.1	8ca94ae6acf4	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
cloudentity/openbanking-quickstart-financroo-tpp :1.11.1	c04eb10c77b7	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

18,040

cloudflare-ddns-updatecloudflare-ddns-update

0.1.2

1 of 1 See more

cloudflare-ddns-update cloudflare-ddns-update 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/dploeger/cloudflare-ddns-update :v0.1.0	ec06685b9ff4	golang.org/x/crypto@v0.23.0	0.31.0

Open the chart page →

1,338

cp4d-deployercloud-native-toolkit

1.0.0

1 of 1 See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/crypto@v0.11.0	0.31.0

Open the chart page →

25,513

ibm-toolkit-installcloud-native-toolkit

0.3.0

1 of 1 See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/crypto@v0.0.0-20220321153916-2c7772ba3064	0.31.0

Open the chart page →

6,704

iteration-zerocloud-native-toolkit

0.2.0

1 of 1 See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.31.0

Open the chart page →

6,930

robot-shopcloud-native-toolkit

1.1.1

1 of 12 See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
robotshop/rs-mongodb :latest	119b545823cd	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.31.0

Open the chart page →

29,602

cloudpremcloudprem

0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of 6 See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/formancehq/dex :v1.0.4	b803fbe1cdb8	golang.org/x/crypto@v0.0.0-20220926161630-eccd6366d1be	0.31.0

Open the chart page →

18,374

ctrox-csi-s3cloudve

0.1.0

1 of 4 See more

ctrox-csi-s3 cloudve 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ctrox/csi-s3 :v1.2.0-rc.2	3c72862bea3c	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.31.0

Open the chart page →

3,143

galaxycloudve

6.8.6

1 of 3 See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
tusproject/tusd :v1.13.0	f8088058b80f	golang.org/x/crypto@v0.12.0	0.31.0

Open the chart page →

5,603

galaxy-depscloudve

1.1.1

2 of 7 See more

galaxy-deps cloudve 1.1.1

2 of the 7 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq-cluster-operator :1.14.0-scratch-r5	67ac64a9623a	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.31.0
bitnamilegacy/rmq-messaging-topology-operator :1.7.1-scratch-r3	3c26208691a1	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0

Open the chart page →

10,581

galaxykubemancloudve

2.10.1

2 of 7 See more

galaxykubeman cloudve 2.10.1

2 of the 7 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
galaxy/cloudman-server :latest	e5c265fe9fcd	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/crypto@v0.0.0-20190923035154-9ee001bba392	0.31.0

Open the chart page →

16,134

janisterminalcloudve

0.1.0

1 of 2 See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.31.0

Open the chart page →

14,304

proxyinjectorcloudve

0.0.23

1 of 1 See more

proxyinjector cloudve 0.0.23

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/crypto@v0.0.0-20190611184440-5c40567a22f8	0.31.0

Open the chart page →

2,853

pulsarcloudve

0.2.0

1 of 2 See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0

Open the chart page →

6,204

metaflowcluster-deploy

0.2.2

1 of 1 See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	golang.org/x/crypto@v0.5.0	0.31.0

Open the chart page →

8,072

kovecmacrae

0.2.0

1 of 1 See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.2.0	185bfaae750c	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0

Open the chart page →

2,089

kove-deprecationscmacrae

0.1.2

1 of 1 See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/cmacrae/kove :v0.1.0	db1244edefc8	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0

Open the chart page →

2,203

door-agentcno

3.0.15

5 of 15 See more

door-agent cno 3.0.15

5 of the 15 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
beopenit/door-helm :v3.0.1	b4d9f9bee224	golang.org/x/crypto@v0.13.0	0.31.0
beopenit/onboarding-operator-kubernetes :v3.0.2	75a48144e682	golang.org/x/crypto@v0.0.0-20220314234659-1baeb1ce4c0b	0.31.0
doorcloud/apim-operator :v3.0.4	4e6ef8d72c3e	golang.org/x/crypto@v0.26.0	0.31.0
library/docker :27-dind	aa3df78ecf32	golang.org/x/crypto@v0.27.0	0.31.0
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.31.0

Open the chart page →

19,454

traefik-forward-authcolearendt

0.0.15

1 of 1 See more

traefik-forward-auth colearendt 0.0.15

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
thomseddon/traefik-forward-auth :2	69a2c985d2c5	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.31.0

Open the chart page →

2,234

cgrccommongroundregistratiecomponent

0.1.0

1 of 3 See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
conduction/cgrc-php :dev	25415534d245	golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904	0.31.0

Open the chart page →

7,581

community-operator-v2community-operator-v2

1.0.0

1 of 2 See more

community-operator-v2 community-operator-v2 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/community-operator-v2 :v1.0.0	7f1bbbe114eb	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.31.0

Open the chart page →

1,544

Container images carrying it

1,831 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/gkarthics/apid-helper :v0.2.3	d7d93debf1f4	golang.org/x/crypto@v0.10.0	0.31.0	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	golang.org/x/crypto@v0.0.0-20220321153916-2c7772ba3064	0.31.0	1
quay.io/influxdb/chronograf :1.9.4	bb0a980bc2bf	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.31.0	1
quay.io/influxdb/chronograf :1.9.3	c2ed16080689	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.31.0	1
quay.io/jenkins-kubernetes-operator/operator :v0.8.1	71cb50263c3b	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
quay.io/jetstack/cert-manager-cainjector :v1.16.1	3c49185718cf	golang.org/x/crypto@v0.27.0	0.31.0	1
quay.io/jetstack/cert-manager-cainjector :v1.10.1	b5657161d2c2	golang.org/x/crypto@v0.0.0-20220924013350-4ba4fb4dd9e7	0.31.0	1
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0	1
quay.io/jetstack/cert-manager-cainjector :v1.8.0	e7b6203ccb37	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0	1
quay.io/jetstack/cert-manager-controller :v1.10.1	1143471c90db	golang.org/x/crypto@v0.0.0-20220924013350-4ba4fb4dd9e7	0.31.0	1
quay.io/jetstack/cert-manager-controller :v1.12.0	4a9d0264055b	golang.org/x/crypto@v0.6.0	0.31.0	1
quay.io/jetstack/cert-manager-controller :v1.14.5	9c0527cab629	golang.org/x/crypto@v0.22.0	0.31.0	1
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0	1
quay.io/jetstack/cert-manager-controller :v1.16.1	ae5e14401cde	golang.org/x/crypto@v0.27.0	0.31.0	1
quay.io/jetstack/cert-manager-controller :v1.8.0	e1642bf8e933	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0	1
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	golang.org/x/crypto@v0.14.0	0.31.0	1
quay.io/jetstack/cert-manager-ctl :v1.8.0	595c548dee6f	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0	1
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	golang.org/x/crypto@v0.0.0-20211117183948-ae814b36b871	0.31.0	1
quay.io/jetstack/cert-manager-ctl :v1.12.0	8d54fe9d0c0d	golang.org/x/crypto@v0.6.0	0.31.0	1
quay.io/jetstack/cert-manager-startupapicheck :v1.16.1	b4a5e42f6dbf	golang.org/x/crypto@v0.27.0	0.31.0	1
quay.io/jetstack/cert-manager-webhook :v1.10.1	64121721c665	golang.org/x/crypto@v0.0.0-20220924013350-4ba4fb4dd9e7	0.31.0	1
quay.io/jetstack/cert-manager-webhook :v1.16.1	6edf44244b2a	golang.org/x/crypto@v0.27.0	0.31.0	1
quay.io/jetstack/cert-manager-webhook :v1.12.0	ec4306b243d9	golang.org/x/crypto@v0.6.0	0.31.0	1
quay.io/jetstack/cert-manager-webhook :v1.14.5	ef419261a209	golang.org/x/crypto@v0.22.0	0.31.0	1
quay.io/jetstack/kube-oidc-proxy :v0.3.0	e045b26eb6df	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0	1
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
quay.io/keycloak/keycloak-operator :19.0.2-legacy	15fa0ed662b1	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
quay.io/kiali/kiali :v1.89.3	0dcdb1c1e747	golang.org/x/crypto@v0.22.0	0.31.0	1
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.31.0	1
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0	1
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9	0.31.0	1
quay.io/kubermatic/kubermatic :v2.24.5	ebba936046ab	golang.org/x/crypto@v0.16.0	0.31.0	1
quay.io/kubermatic/machine-controller :v1.57.0	476ae867ae56	golang.org/x/crypto@v0.4.0	0.31.0	1
quay.io/kubermatic/operating-system-manager :v1.3.0	10081473da43	golang.org/x/crypto@v0.8.0	0.31.0	1
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
quay.io/kubernetes-multicluster/kubefed :v0.10.0	c4635c95730e	golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83	0.31.0	1
quay.io/metallb/controller :v0.10.2	21164241c045	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	1
quay.io/minio/mc :RELEASE.2024-01-11T05-49-32Z	026ae522febc	golang.org/x/crypto@v0.17.0	0.31.0	1
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.31.0	1
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.31.0	1
quay.io/minio/mc :RELEASE.2024-04-29T09-56-05Z	c574fac67f60	golang.org/x/crypto@v0.22.0	0.31.0	1
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	golang.org/x/crypto@v0.17.0	0.31.0	1
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	golang.org/x/crypto@v0.17.0	0.31.0	1
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.31.0	1
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	golang.org/x/crypto@v0.23.0	0.31.0	1
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	golang.org/x/crypto@v0.1.0	0.31.0	1
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/crypto@v0.13.0	0.31.0	1
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/crypto@v0.22.0	0.31.0	1