StackRadar

CVE-2024-45337

Critical

Advisory

Published 11 Dec 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.032
87th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,558
of 17,787 indexed, latest versions
Container images
1,807
deployed by those charts
Fix available
1 of 1
affected package

Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

Carried by container images the latest versions of 1,558 of 17,787 indexed charts deploy, on 1,807 images.

Affected packageAffected versionsFixed inImages
golang.org/x/cryptogolangv0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+134 more0.31.01,807
OSV records
GHSA-v778-237x-gjrc
Also known as
GO-2024-3321

Charts affected

1,558 by stars
ChartLatestAffected imagesRadar Score
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
golang.org/x/crypto@v0.0.0-20220314234724-5d542ad81a58
0.31.0

Open the chart page →

4,568
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.31.0

Open the chart page →

5,521
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.31.0
fluxcd/source-controller:v0.10.031a8c79a6803
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.31.0

Open the chart page →

7,705
keptn-addonsazureorkestra0.1.04 of 4See more

keptn-addons azureorkestra 0.1.0

4 of the 4 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
keptn/distributor:0.8.36bc3df9e0d6a
golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b
0.31.0
keptn/distributor:0.8.472e17527a4f9
golang.org/x/crypto@v0.0.0-20210314154223-e6e6c4f2bb5b
0.31.0
keptncontrib/prometheus-service:0.6.029969dd547de
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.31.0
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
golang.org/x/crypto@v0.0.0-20210513164829-c07d793c2f9a
0.31.0

Open the chart page →

10,621
prometheusazureorkestra14.8.03 of 6See more

prometheus azureorkestra 14.8.0

3 of the 6 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
quay.io/prometheus/alertmanager:v0.21.024a5204b418e
golang.org/x/crypto@v0.0.0-20191011191535-87dc89f01550
0.31.0
quay.io/prometheus/node-exporter:v1.1.222fbde17ab64
golang.org/x/crypto@v0.0.0-20201208171446-5f87f3452ae9
0.31.0
quay.io/prometheus/prometheus:v2.26.038d40a760569
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.31.0

Open the chart page →

9,661
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
golang.org/x/crypto@v0.24.0
0.31.0

Open the chart page →

1,191
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-12-20T01-00-02Z5702ea361420
golang.org/x/crypto@v0.17.0
0.31.0

Open the chart page →

5,823
prometheus-blackbox-exporterbackbox-exporter7.8.01 of 1See more

prometheus-blackbox-exporter backbox-exporter 7.8.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
prom/blackbox-exporter:v0.23.0ca04aa9d9093
golang.org/x/crypto@v0.0.0-20221012134737-56aed061732a
0.31.0

Open the chart page →

1,494
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.31.0

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
golang.org/x/crypto@v0.0.0-20200414173820-0848c9571904
0.31.0

Open the chart page →

7,342
trident-operatorberyju-org21.10.01 of 1See more

trident-operator beryju-org 21.10.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
netapp/trident-operator:21.10.049cfe552d9c2
golang.org/x/crypto@v0.0.0-20210921155107-089bfa567519
0.31.0

Open the chart page →

2,072
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.31.0

Open the chart page →

7,956
mx-notifierbicarus-labs1.1.91 of 1See more

mx-notifier bicarus-labs 1.1.9

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
bicarus/mx-notifier:1.1.8bed688d16762
golang.org/x/crypto@v0.3.0
0.31.0

Open the chart page →

3,722
wg-access-serverbicarus-labs0.9.91 of 1See more

wg-access-server bicarus-labs 0.9.9

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
bicarus/wg-access-server:v0.8.206cab48e9334
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.31.0

Open the chart page →

2,748
bitpokebitpokeVerified publisher1.8.191 of 1See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
golang.org/x/crypto@v0.1.0
0.31.0

Open the chart page →

2,312
stackbitpokeVerified publisher0.12.41 of 6See more

stack bitpoke 0.12.4

1 of the 6 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.31.0

Open the chart page →

9,897
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
golang.org/x/crypto@v0.14.0
0.31.0

Open the chart page →

10,145
prometheus-domain-exporterblackbox-domain-exporter1.0.01 of 1See more

prometheus-domain-exporter blackbox-domain-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
bulich/domain-exporter:latest6d0b780f7c7b
golang.org/x/crypto@v0.9.0
0.31.0

Open the chart page →

1,408
firehoseblip-firehoseVerified publisher0.0.183 of 11See more

firehose blip-firehose 0.0.18

3 of the 11 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
blipai/deckard:0.0.28737d5d19a312
golang.org/x/crypto@v0.17.0
0.31.0
hashicorp/vault:1.15.26b4e5dadf082
golang.org/x/crypto@v0.14.0
0.31.0
hashicorp/vault-k8s:1.3.15d74a885ae3e
golang.org/x/crypto@v0.14.0
0.31.0

Open the chart page →

13,459
bnkrbnkr1.0.51 of 2See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
engrmth/bnkr:2.1.06d8464e6f0e8
golang.org/x/crypto@v0.0.0-20190530122614-20be4c3c3ed5
0.31.0

Open the chart page →

15,253
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
golang.org/x/crypto@v0.27.0
0.31.0

Open the chart page →

1,800
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
jaegertracing/jaeger-collector:1.53.07f1269222903
golang.org/x/crypto@v0.17.0
0.31.0
jaegertracing/jaeger-query:1.53.0049bb0d64ea3
golang.org/x/crypto@v0.17.0
0.31.0

Open the chart page →

19,229
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
golang.org/x/crypto@v0.17.0
0.31.0

Open the chart page →

8,323
kube-prometheus-stackbook-k8sinfra-v265.5.13 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

3 of the 6 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
golang.org/x/crypto@v0.26.0
0.31.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/crypto@v0.21.0
0.31.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
golang.org/x/crypto@v0.24.0
0.31.0

Open the chart page →

6,036
nfs-subdir-external-provisionerbook-k8sinfra-v24.0.181 of 1See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.31.0

Open the chart page →

2,743
prometheusbook-k8sinfra-v226.0.16 of 6See more

prometheus book-k8sinfra-v2 26.0.1

6 of the 6 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
golang.org/x/crypto@v0.28.0
0.31.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
golang.org/x/crypto@v0.28.0
0.31.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/crypto@v0.18.0
0.31.0
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
golang.org/x/crypto@v0.21.0
0.31.0
quay.io/prometheus/pushgateway:v1.10.07a4d0696a24e
golang.org/x/crypto@v0.26.0
0.31.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
golang.org/x/crypto@v0.28.0
0.31.0

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.02 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

2 of the 3 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
golang.org/x/crypto@v0.22.0
0.31.0
grafana/pyroscope:1.10.0319bf32ae06b
golang.org/x/crypto@v0.24.0
0.31.0

Open the chart page →

3,244
tempobook-k8sinfra-v21.10.31 of 1See more

tempo book-k8sinfra-v2 1.10.3

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
grafana/tempo:2.5.0f0200a9bff6d
golang.org/x/crypto@v0.22.0
0.31.0

Open the chart page →

1,859
butane-operatorbutane-operatorVerified publisher0.3.01 of 2See more

butane-operator butane-operator 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
registry.k8s.io/kubebuilder/kube-rbac-proxy:v0.16.0771a9a173e03
golang.org/x/crypto@v0.19.0
0.31.0

Open the chart page →

1,396
butlercibutlerciVerified publisher0.1.01 of 1See more

butlerci butlerci 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
etejeda/butlerci:0.1.0737d58183abc
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.31.0

Open the chart page →

2,374
accelerationbuttahtoastVerified publisher0.1.01 of 1See more

acceleration buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
goharbor/harbor-acceld:0.2.13451103a6c8d8
golang.org/x/crypto@v0.17.0
0.31.0

Open the chart page →

1,400
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
golang.org/x/crypto@v0.16.0
0.31.0

Open the chart page →

2,770
etcdcagriekinVerified publisher0.1.51 of 1See more

etcd cagriekin 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
quay.io/coreos/etcd:v3.5.16d967d98a12dc
golang.org/x/crypto@v0.21.0
0.31.0

Open the chart page →

892
ct-singlecalltelemetry0.8.43 of 7See more

ct-single calltelemetry 0.8.4

3 of the 7 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
library/nats:2.8.4-alpine988010f74b61
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.31.0
natsio/nats-box:0.11.09fbf7bf684e4
golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59
0.31.0
natsio/prometheus-nats-exporter:0.10.016048afb67a5
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.31.0

Open the chart page →

10,629
stablecalltelemetry0.7.13 of 9See more

stable calltelemetry 0.7.1

3 of the 9 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
library/nats:2.8.4-alpine988010f74b61
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.31.0
natsio/nats-box:0.11.09fbf7bf684e4
golang.org/x/crypto@v0.0.0-20200323165209-0ec3e9974c59
0.31.0
natsio/prometheus-nats-exporter:0.10.016048afb67a5
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.31.0

Open the chart page →

7,702
stable-hacalltelemetry0.11.42 of 7See more

stable-ha calltelemetry 0.11.4

2 of the 7 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
library/nats:2.10.12-alpinebca70839d953
golang.org/x/crypto@v0.21.0
0.31.0
natsio/nats-box:0.14.2e808e0644ce1
golang.org/x/crypto@v0.14.0
0.31.0

Open the chart page →

4,705
bucket-clonercamptocamp31.0.41 of 1See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
camptocamp/bucket-cloner:latestacfafc308d88
golang.org/x/crypto@v0.0.0-20210421170649-83a5a9bb288b
0.31.0

Open the chart page →

4,518
getconfigcamptocamp30.1.11 of 1See more

getconfig camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.3.08c21390be87d
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.31.0

Open the chart page →

2,195
ssl-exportercamptocamp30.1.01 of 1See more

ssl-exporter camptocamp3 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
ribbybibby/ssl-exporter:2.4.2718abe7f5e79
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.31.0

Open the chart page →

1,632
terraboardcamptocamp32.4.01 of 1See more

terraboard camptocamp3 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/terraboard:v2.3.0df53e2c8998c
golang.org/x/crypto@v0.14.0
0.31.0

Open the chart page →

1,330
caninecanine0.1.103 of 7See more

canine canine 0.1.10

3 of the 7 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
golang.org/x/crypto@v0.27.0
0.31.0
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
golang.org/x/crypto@v0.24.0
0.31.0
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
golang.org/x/crypto@v0.24.0
0.31.0

Open the chart page →

14,130
cert-managercanine1.15.32 of 4See more

cert-manager canine 1.15.3

2 of the 4 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
golang.org/x/crypto@v0.24.0
0.31.0
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
golang.org/x/crypto@v0.24.0
0.31.0

Open the chart page →

2,880
stigatroncarbide-charts0.4.12 of 10See more

stigatron carbide-charts 0.4.1

2 of the 10 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
library/nats:2.10.5-alpine85319e5e541b
golang.org/x/crypto@v0.15.0
0.31.0
natsio/nats-box:0.14.1a67913df95f1
golang.org/x/crypto@v0.13.0
0.31.0

Open the chart page →

4,423
cassandra-webcassandra-web0.1.01 of 1See more

cassandra-web cassandra-web 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
ipushc/cassandra-web:latestfa3e0c66c289
golang.org/x/crypto@v0.7.0
0.31.0

Open the chart page →

1,301
castai-tetragoncastaiVerified publisher0.6.11 of 4See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.31.0

Open the chart page →

4,136
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.31.0

Open the chart page →

3,449
temporalcastaiVerified publisher0.54.210 of 14See more

temporal castai 0.54.2

10 of the 14 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
golang.org/x/crypto@v0.21.0
0.31.0
temporalio/admin-tools:1.26.237e2e33dbd7b
golang.org/x/crypto@v0.29.0
0.31.0
temporalio/server:1.26.21e2626efcbc1
golang.org/x/crypto@v0.14.0
0.31.0
temporalio/ui:2.33.05c586a3c8ec5
golang.org/x/crypto@v0.14.0
0.31.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.74.0d55631c7a740
golang.org/x/crypto@v0.23.0
0.31.0
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
golang.org/x/crypto@v0.18.0
0.31.0
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
golang.org/x/crypto@v0.21.0
0.31.0
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
golang.org/x/crypto@v0.24.0
0.31.0
quay.io/prometheus/pushgateway:v1.8.0c159e946abf4
golang.org/x/crypto@v0.21.0
0.31.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.12.0b401fae262a5
golang.org/x/crypto@v0.21.0
0.31.0

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.305 of 18See more

catalyst-agents catalyst-agents 0.1.30

5 of the 18 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
golang.org/x/crypto@v0.5.0
0.31.0
grafana/loki:3.0.0757b5fadf816
golang.org/x/crypto@v0.21.0
0.31.0
grafana/loki-canary:3.0.028d7c00588aa
golang.org/x/crypto@v0.21.0
0.31.0
grafana/tempo:2.5.0f0200a9bff6d
golang.org/x/crypto@v0.22.0
0.31.0
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.31.0

Open the chart page →

15,027
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
golang.org/x/crypto@v0.0.0-20200220183623-bac4c82f6975
0.31.0

Open the chart page →

6,389
openldapccowleyVerified publisher2.0.41 of 3See more

openldap ccowley 2.0.4

1 of the 3 container images this version deploys carry CVE-2024-45337.

Container imageDigestPackageFixed in
osixia/openldap:1.4.0ccd95cc6e61e
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.31.0

Open the chart page →

6,219

Container images carrying it

1,807 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
prom/prometheus:v2.17.242d2395cd719
golang.org/x/crypto@v0.0.0-20191206172530-e9b2fee46413
0.31.0
2
prom/prometheus:v2.52.05c435642ca4d
golang.org/x/crypto@v0.22.0
0.31.0
2
prom/prometheus:v2.37.98176adea328e
golang.org/x/crypto@v0.0.0-20220511200225-c6db032c6c88
0.31.0
2
prom/prometheus:v2.48.1a67e5e402ff5
golang.org/x/crypto@v0.14.0
0.31.0
2
prom/prometheus:v2.21.0d43417c260e5
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.31.0
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.31.0
2
rancher/kine:v0.11.412889bbcd1e8
golang.org/x/crypto@v0.17.0
0.31.0
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
golang.org/x/crypto@v0.25.0
0.31.0
2
rclone/rclone:1.6874c51b8817e5
golang.org/x/crypto@v0.25.0
0.31.0
2
ribbybibby/ssl-exporter:2.4.2718abe7f5e79
golang.org/x/crypto@v0.0.0-20220622213112-05595931fe9d
0.31.0
2
rookout/controller:latest4451a6f6b8ec
golang.org/x/crypto@v0.11.0
0.31.0
2
rookout/data-on-prem:latest51c0fce64467
golang.org/x/crypto@v0.11.0
0.31.0
2
rss3/op-batcher:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8adae8a5bdd7a6
golang.org/x/crypto@v0.16.0
0.31.0
2
rss3/op-proposer:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8aa4059dd32c48
golang.org/x/crypto@v0.16.0
0.31.0
2
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.31.0
2
squareup/ghostunnel:v1.5.270f4cf270425
golang.org/x/crypto@v0.0.0-20191002192127-34f69633bfdc
0.31.0
2
statping/statping:v0.90.74e874da513a5c
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.31.0
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
golang.org/x/crypto@v0.4.0
0.31.0
2
temporalio/server:1.22.4c0a44c26397b
golang.org/x/crypto@v0.14.0
0.31.0
2
temporalio/ui:2.16.2af9c9349708f
golang.org/x/crypto@v0.1.0
0.31.0
2
thesisrobot/loop:v0.11.1-beta89ae07e787ca
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.31.0
2
thesisrobot/pool:v0.3.3-alpha2d1c388a4bda
golang.org/x/crypto@v0.0.0-20200709230013-948cd5f35899
0.31.0
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
golang.org/x/crypto@v0.0.0-20190820162420-60c769a6c586
0.31.0
2
voltha/voltha-openolt-adapter:4.5.16d6d79c08350a
golang.org/x/crypto@v0.24.0
0.31.0
2
voltha/voltha-rw-core:3.4.87a325316fe59
golang.org/x/crypto@v0.0.0-20210616213533-5ff15b29337e
0.31.0
2
weblate/weblate:4.2.2-169c160d37a3c
golang.org/x/crypto@v0.0.0-20190308221718-c2843e01d9a2
0.31.0
2
xelalex/dregsy:0.4.3574054e1c417
golang.org/x/crypto@v0.0.0-20211215153901-e495a2d5b3d3
0.31.0
2
zhenghaoz/gorse-master:0.4.12033046b432ec
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.31.0
2
zhenghaoz/gorse-server:0.4.1239c565685b01
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.31.0
2
zhenghaoz/gorse-worker:0.4.12f7739f64c9b0
golang.org/x/crypto@v0.0.0-20221010152910-d6f0a8c073c2
0.31.0
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
golang.org/x/crypto@v0.0.0-20190701094942-4def268fd1a4
0.31.0
2
ghcr.io/appscode/kube-auth-manager:v0.0.1789692ab9193
golang.org/x/crypto@v0.6.0
0.31.0
2
ghcr.io/appscode/kube-rbac-proxy:v0.11.00df4ae70e3bd
golang.org/x/crypto@v0.0.0-20200622213623-75b288015ac9
0.31.0
2
ghcr.io/astriaorg/astria-geth:latest4249e403225a
golang.org/x/crypto@v0.24.0
0.31.0
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
golang.org/x/crypto@v0.26.0
0.31.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.838bfdf5e3774
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.31.0
2
ghcr.io/chaos-mesh/chaos-coredns:v0.2.678dc63bc5b89
golang.org/x/crypto@v0.0.0-20210220033148-5ea612d1eb83
0.31.0
2
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.31.0
2
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
golang.org/x/crypto@v0.0.0-20201221181555-eec23a3978ad
0.31.0
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
golang.org/x/crypto@v0.22.0
0.31.0
2
ghcr.io/home-assistant/home-assistant:2026.9.1:latest612d76760b54
golang.org/x/crypto@v0.26.0
0.31.0
2
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
golang.org/x/crypto@v0.26.0
0.31.0
2
ghcr.io/matrix-org/sliding-sync:v0.99.19b940cab56435
golang.org/x/crypto@v0.14.0
0.31.0
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
golang.org/x/crypto@v0.9.0
0.31.0
2
public.ecr.aws/eks-distro/etcd-io/etcd:v3.5.6-eks-1-24-7efa6dee17ed2
golang.org/x/crypto@v0.0.0-20220411220226-7b82a4e95df4
0.31.0
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
golang.org/x/crypto@v0.27.0
0.31.0
2
quay.io/brancz/kube-rbac-proxy:v0.14.158d91a5faaf8
golang.org/x/crypto@v0.0.0-20220315160706-3147a52a75dd
0.31.0
2
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
golang.org/x/crypto@v0.0.0-20220722155217-630584e8d5aa
0.31.0
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
golang.org/x/crypto@v0.26.0
0.31.0
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
golang.org/x/crypto@v0.0.0-20220214200702-86341886e292
0.31.0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.