CVE-2024-45337

Critical

Advisory

Published 11 Dec 2024In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.1; base score, highest
EPSS: 0.032; 87th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,558; of 17,781 indexed, latest versions
Container images: 1,808; deployed by those charts
Fix available: 1 of 1; affected package

Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Carried by container images the latest versions of 1,558 of 17,781 indexed charts deploy, on 1,808 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/cryptogolang	v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+134 more	0.31.0	1,808

OSV records: GHSA-v778-237x-gjrc
Also known as: GO-2024-3321

Charts affected

1,558 by stars

Chart

Latest

Affected images

Radar Score

kubecostmesosphere-stable

0.37.5

6 of 9 See more

kubecost mesosphere-stable 0.37.5

6 of the 9 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.7	1a359d92f40e	golang.org/x/crypto@v0.4.0	0.31.0
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	golang.org/x/crypto@v0.15.0	0.31.0
quay.io/prometheus-operator/prometheus-config-reloader :v0.69.1	7bbe804260f3	golang.org/x/crypto@v0.14.0	0.31.0
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	golang.org/x/crypto@v0.18.0	0.31.0
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/crypto@v0.26.0	0.31.0
quay.io/thanos/thanos :v0.36.1	e542959e1b36	golang.org/x/crypto@v0.24.0	0.31.0

Open the chart page →

17,693

rclonemglants

2.3.4

1 of 1 See more

rclone mglants 2.3.4

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
rclone/rclone :1.57.0	1e6eeabddc01	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0

Open the chart page →

2,743

helm-ai-kernelmindburn-labs

0.8.5

1 of 2 See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	golang.org/x/crypto@v0.25.0	0.31.0

Open the chart page →

2,160

move2kubemove2kube

0.3.15

1 of 1 See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3	0.31.0

Open the chart page →

3,793

keycloak-operatornewsaktuell

0.1.7

1 of 1 See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0

Open the chart page →

5,067

oesopsmx

4.0.32

5 of 25 See more

oes opsmx 4.0.32

5 of the 25 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.31.0
minio/minio :RELEASE.2020-12-03T05-49-24Z	053f103f4894	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.31.0
quay.io/opsmxpublic/create-secret :v4.0.4	defc3263e0e9	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.31.0
quay.io/opsmxpublic/forwarder-controller :v3.5.7	f0c5bebaec96	golang.org/x/crypto@v0.0.0-20220829220503-c86fa9a7ed90	0.31.0
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.31.0

Open the chart page →

107,811

ipfs-clusterparadeum-team

0.0.19

2 of 2 See more

ipfs-cluster paradeum-team 0.0.19

2 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ipfs/go-ipfs :v0.13.1	17259397f587	golang.org/x/crypto@v0.0.0-20220518034528-6f7dac969898	0.31.0
ipfs/ipfs-cluster :1.0.2	1511f6d57994	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0

Open the chart page →

3,757

permifypermify

0.5.0

1 of 1 See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	golang.org/x/crypto@v0.24.0	0.31.0

Open the chart page →

997

pomeriumpomerium

34.0.1

1 of 1 See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
pomerium/pomerium :v0.22.1	9c69b10a2126	golang.org/x/crypto@v0.8.0	0.31.0

Open the chart page →

1,942

kube-prometheus-stackprometheus-worawutchan

12.8.0

4 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

4 of the 6 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	golang.org/x/crypto@v0.0.0-20200820211705-5c72a883971a	0.31.0
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0
quay.io/prometheus-operator/prometheus-operator :v0.44.0	983627001c89	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0
quay.io/prometheus/node-exporter :v1.0.1	cf66a6bbd573	golang.org/x/crypto@v0.0.0-20200510223506-06a226fb4e37	0.31.0

Open the chart page →

12,125

nfs-server-provisionerraphael

1.3.0

1 of 1 See more

nfs-server-provisioner raphael 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
gcr.io/k8s-staging-sig-storage/nfs-provisioner :v3.0.0	2de1d15fc1f2	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.31.0

Open the chart page →

2,730

qbittorrent-vpnrtomik-helm-charts

0.0.2

1 of 2 See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.40.0	2b42bfa04675	golang.org/x/crypto@v0.29.0	0.31.0

Open the chart page →

1,218

corednssoftizy

0.2.0

1 of 1 See more

coredns softizy 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
coredns/coredns :1.10.1	a0ead06651cf	golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2	0.31.0

Open the chart page →

1,663

knative-servingsoftonic

3.0.0

5 of 5 See more

knative-serving softonic 3.0.0

5 of the 5 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhookdigest-pinned	873b968f02b5	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.31.0
gcr.io/knative-releases/knative.dev/serving/cmd/activatordigest-pinned	a5de0fb75046	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.31.0
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdigest-pinned	2ef460356b17	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.31.0
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned	30ce73388ae5	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.31.0
gcr.io/knative-releases/knative.dev/serving/cmd/webhookdigest-pinned	f16c0e022203	golang.org/x/crypto@v0.0.0-20200302210943-78000ba7a073	0.31.0

Open the chart page →

12,502

sn-platformstreamnative

1.11.44

5 of 9 See more

sn-platform streamnative 1.11.44

5 of the 9 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	golang.org/x/crypto@v0.4.0	0.31.0
streamnative/pulsar_vault_init :v1.0.7	31533fa9fab7	golang.org/x/crypto@v0.0.0-20220208050332-20e1d8d225ab	0.31.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.31.0
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a	0.31.0
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/crypto@v0.7.0	0.31.0

Open the chart page →

15,477

feedbacksystemthm-mni-ii

0.47.1

4 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

4 of the 10 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	golang.org/x/crypto@v0.17.0	0.31.0
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/crypto@v0.12.0	0.31.0
library/docker :20.10.21-dind	3153fa63f546	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.31.0
thmmniii/fbs-runner :v1.27.1	86105349c1a3	golang.org/x/crypto@v0.1.0	0.31.0

Open the chart page →

28,534

maeshtraefik

2.1.2

1 of 7 See more

maesh traefik 2.1.2

1 of the 7 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
containous/maesh :v1.3.2	587162516502	golang.org/x/crypto@v0.0.0-20200317142112-1b76d66859c6	0.31.0

Open the chart page →

4,136

traefik-meshtraefik

4.1.1

3 of 7 See more

traefik-mesh traefik 4.1.1

3 of the 7 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
jaegertracing/all-in-one :1.18	db45c07f2e1b	golang.org/x/crypto@v0.0.0-20200214034016-1d94cc7ab1c6	0.31.0
library/traefik :v2.5	7d5a6ae66572	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.31.0
traefik/mesh :v1.4.8	cf071f3e165c	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.31.0

Open the chart page →

9,257

argocdtwomartens

0.1.1

2 of 3 See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.37.0	f579d00721b0	golang.org/x/crypto@v0.0.0-20220525230936-793ad666bf5e	0.31.0
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/crypto@v0.14.0	0.31.0

Open the chart page →

10,315

vsphere-cpivsphere-tmm

1.6.0

1 of 1 See more

vsphere-cpi vsphere-tmm 1.6.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere :v1.28.0	026f63d9ed42	golang.org/x/crypto@v0.11.0	0.31.0

Open the chart page →

1,344

gethvulcanlink

1.10.23

1 of 1 See more

geth vulcanlink 1.10.23

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.10.23	cce21b423165	golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519	0.31.0

Open the chart page →

2,245

wasmcloud-chartwasmcloud-chart

0.7.2

1 of 2 See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
library/nats :2.10.7-alpine	1bcddab51b80	golang.org/x/crypto@v0.16.0	0.31.0

Open the chart page →

3,456

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.31.0

Open the chart page →

6,085

wharf-helmwharf-helm

3.2.6

4 of 5 See more

wharf-helm wharf-helm 3.2.6

4 of the 5 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/iver-wharf/wharf-api :v5.2.0	b736b345437d	golang.org/x/crypto@v0.0.0-20220214200702-86341886e292	0.31.0
quay.io/iver-wharf/wharf-provider-azuredevops :v3.0.1	2fe7e4dcffdf	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.31.0
quay.io/iver-wharf/wharf-provider-github :v3.0.1	77a22cb45c2a	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.31.0
quay.io/iver-wharf/wharf-provider-gitlab :v2.0.1	d7079e0890da	golang.org/x/crypto@v0.0.0-20220427172511-eb4f295cb31f	0.31.0

Open the chart page →

10,032

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0

Open the chart page →

4,714

yataiyatai

0.4.6

1 of 2 See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/crypto@v0.0.0-20220507011949-2cf3adece122	0.31.0

Open the chart page →

4,039

adcs-issueradcs-issuer

3.0.2

1 of 1 See more

adcs-issuer adcs-issuer 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
djkormo/adcs-issuer :2.1.2	9f34e87e7586	golang.org/x/crypto@v0.24.0	0.31.0

Open the chart page →

828

agentareaagentarea

0.0.18

1 of 16 See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/crypto@v0.26.0	0.31.0

Open the chart page →

14,914

clearml-servingallegroai

1.6.2

3 of 9 See more

clearml-serving allegroai 1.6.2

3 of the 9 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
grafana/grafana :9.4.3	76dcf36e7d2a	golang.org/x/crypto@v0.4.0	0.31.0
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/crypto@v0.1.0	0.31.0
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/crypto@v0.1.0	0.31.0

Open the chart page →

17,877

soft-servealphani-helm-charts

0.4.0

1 of 1 See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
charmcli/soft-serve :v0.4.0	39523c1a6ba8	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.31.0

Open the chart page →

3,119

smockerandrcuns

0.0.4

1 of 1 See more

smocker andrcuns 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
andrcuns/smocker :0.18.5	b4a8eb20581a	golang.org/x/crypto@v0.0.0-20220307211146-efcb8507fb70	0.31.0

Open the chart page →

2,173

upcloud-csiankra-charts

0.4.0

2 of 8 See more

upcloud-csi ankra-charts 0.4.0

2 of the 8 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.13	7a319b15cfc9	golang.org/x/crypto@v0.5.0	0.31.0
registry.k8s.io/sig-storage/csi-provisioner :v3.1.0	122bfb8c1eda	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0

Open the chart page →

14,917

alazanteon

0.12.0

1 of 1 See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ddosify/alaz :v0.12.0	ea602056d9ce	golang.org/x/crypto@v0.18.0	0.31.0

Open the chart page →

3,366

anteonanteon

2.6.4

3 of 13 See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
chrislusf/seaweedfs :3.64	634b094b2183	golang.org/x/crypto@v0.19.0	0.31.0
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.31.0
prom/prometheus :v2.37.9	8176adea328e	golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88	0.31.0

Open the chart page →

22,202

scannerappscode

2026.1.15

1 of 3 See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
rancher/kine :v0.11.4	12889bbcd1e8	golang.org/x/crypto@v0.17.0	0.31.0

Open the chart page →

5,299

stash-enterpriseappscode

0.42.0

2 of 4 See more

stash-enterprise appscode 0.42.0

2 of the 4 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
prom/pushgateway :v1.4.2	a684e7c830a4	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.31.0
ghcr.io/stashed/stash-enterprise :v0.42.1	759f3850eda9	golang.org/x/crypto@v0.24.0	0.31.0

Open the chart page →

3,620

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0

Open the chart page →

5,222

kedaarieotech

0.1.0

2 of 3 See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/kedacore/keda :2.16.0	02348a19aeae	golang.org/x/crypto@v0.28.0	0.31.0
ghcr.io/kedacore/keda-metrics-apiserver :2.16.0	73a2ebae4413	golang.org/x/crypto@v0.28.0	0.31.0

Open the chart page →

2,276

cert-exporterarzu

3.0.1

1 of 1 See more

cert-exporter arzu 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
joeelliott/cert-exporter :v2.7.0	b4acd14642d0	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

2,819

siemassist-iot-cybersecurity-monitroting-siem

0.1.0

1 of 3 See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

10,730

dltbrokerassist-iot-distributed-broker

0.2.0

3 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

3 of the 9 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.31.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.31.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.31.0

Open the chart page →

77,706

dltloggingassist-iot-logging-auditing

0.2.0

3 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

3 of the 9 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
hyperledger/fabric-orderer :2.4	6ec3fe59ea55	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.31.0
hyperledger/fabric-peer :2.4	6ff36af21eb1	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.31.0
hyperledger/fabric-tools :2.4	b1194f509085	golang.org/x/crypto@v0.0.0-20210322153248-0c34fe9e7dc2	0.31.0

Open the chart page →

77,687

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0

Open the chart page →

4,292

dex-k8sav1o-charts

0.2.1

1 of 1 See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.28.1	5e88f2205de1	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.31.0

Open the chart page →

3,391

kube-image-webhookav1o-charts

0.1.3

1 of 1 See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0

Open the chart page →

3,723

db-backupballe-petersen

0.1.4

1 of 1 See more

db-backup balle-petersen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
tobiasbp/db-backup :0.0.3	14bee6e33a26	golang.org/x/crypto@v0.0.0-20200109152110-61a87790db17	0.31.0

Open the chart page →

4,814

chirpstackbeeinventor

0.1.10

1 of 5 See more

chirpstack beeinventor 0.1.10

1 of the 5 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3.17.6	e0b23dfd24d6	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.31.0

Open the chart page →

7,807

livekit-serverbeeinventor

1.0.0

1 of 2 See more

livekit-server beeinventor 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
livekit/livekit-server :v1.0.0	8391fd1b834f	golang.org/x/crypto@v0.0.0-20220516162934-403b01795ae8	0.31.0

Open the chart page →

2,602

cloudflare-tunnel-operatorbeezlabs

0.2.0

1 of 1 See more

cloudflare-tunnel-operator beezlabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/beezlabs-org/cloudflare-tunnel-operator :v0.1.0	9afcd070940f	golang.org/x/crypto@v0.0.0-20210817164053-32db794688a5	0.31.0

Open the chart page →

1,595

helm-dashboardbeluga-cloud

2.4.0

1 of 1 See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container image	Digest	Package	Fixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard :1.3.3	9ab9a675c405	golang.org/x/crypto@v0.14.0	0.31.0

Open the chart page →

2,898

Container images carrying it

1,808 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hashicorp/vault-k8s :1.1.0	844337076b72	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.31.0	2
honestica/kube-iptables-tailer :master-91	a393242fb939	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0	2
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	golang.org/x/crypto@v0.14.0	0.31.0	2
ilum/mongodb :6.0.5	42b6d774c37d	golang.org/x/crypto@v0.14.0	0.31.0	2
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/crypto@v0.16.0	0.31.0	2
inaccel/reef :latest	c967218739f3	golang.org/x/crypto@v0.17.0	0.31.0	2
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/crypto@v0.0.0-20210317152858-513c2a44f670	0.31.0	2
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975	0.31.0	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	2
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/crypto@v0.27.0	0.31.0	2
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/crypto@v0.27.0	0.31.0	2
istio/proxyv2 :1.18.0	757d28c24100	golang.org/x/crypto@v0.7.0	0.31.0	2
istio/proxyv2 :1.10.3	a78b7a165744	golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad	0.31.0	2
jaegertracing/all-in-one :1.31	04d224a9999b	golang.org/x/crypto@v0.0.0-20210920023735-84f357641f63	0.31.0	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4	0.31.0	2
jettech/kube-webhook-certgen :v1.2.1	c42098c8d855	golang.org/x/crypto@v0.0.0-20181203042331-505ab145d0a9	0.31.0	2
jettech/kube-webhook-certgen :v1.5.0	fb7c2cd46ccf	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0	2
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	golang.org/x/crypto@v0.5.0	0.31.0	2
kubernetesui/dashboard :v2.2.0	148991563e37	golang.org/x/crypto@v0.0.0-20201002170205-7f63de1d35b0	0.31.0	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.31.0	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	golang.org/x/crypto@v0.18.0	0.31.0	2
library/arangodb :3.11.8	1e75d74954a4	golang.org/x/crypto@v0.17.0	0.31.0	2
library/influxdb :2.6.1-alpine	44a366dd7724	golang.org/x/crypto@v0.0.0-20220331220935-ae2d96664a29	0.31.0	2
library/nats :2.9.17-alpine	1a7b320b2942	golang.org/x/crypto@v0.8.0	0.31.0	2
library/nats :2.10.7-alpine	1bcddab51b80	golang.org/x/crypto@v0.16.0	0.31.0	2
library/nats :2.10.5-alpine	85319e5e541b	golang.org/x/crypto@v0.15.0	0.31.0	2
library/nats :2.8.4-alpine	988010f74b61	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.31.0	2
library/traefik :v2.5	7d5a6ae66572	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.31.0	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	golang.org/x/crypto@v0.22.0	0.31.0	2
listmonk/listmonk :v2.1.0	d2eac77ddfad	golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e	0.31.0	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0	2
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	golang.org/x/crypto@v0.0.0-20201012173705-84dcc777aaee	0.31.0	2
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b	0.31.0	2
natsio/nats-account-server :1.0.0	a3381560aab6	golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e	0.31.0	2
natsio/nats-box :0.11.0	9fbf7bf684e4	golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59	0.31.0	2
natsio/prometheus-nats-exporter :0.10.0	16048afb67a5	golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa	0.31.0	2
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	golang.org/x/crypto@v0.8.0	0.31.0	2
openebs/node-disk-operator :2.1.0	6afe2123c457	golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd	0.31.0	2
openebs/provisioner-localpv :3.5.0	aea39e49bb97	golang.org/x/crypto@v0.14.0	0.31.0	2
openpolicyagent/gatekeeper :v3.4.0-rc.1	825370bdb3c3	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0	2
oryd/kratos :v1.0.0	d06fc5845f63	golang.org/x/crypto@v0.5.0	0.31.0	2
oryd/kratos :v1.3.1	fe2428f103a6	golang.org/x/crypto@v0.26.0	0.31.0	2
oryd/oathkeeper :v0.40.6	e8cb9b79a89c	golang.org/x/crypto@v0.1.0	0.31.0	2
osixia/openldap :1.4.0	ccd95cc6e61e	golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4	0.31.0	2
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	golang.org/x/crypto@v0.20.0	0.31.0	2
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	golang.org/x/crypto@v0.27.0	0.31.0	2
phntom/kochi :1.1.3	3b82358bd56e	golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9	0.31.0	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899	0.31.0	2
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550	0.31.0	2
prom/memcached-exporter :v0.14.2	d8a61419b841	golang.org/x/crypto@v0.17.0	0.31.0	2