CVE-2024-45338

Unscored

Advisory

Published 18 Dec 2024In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.009; 57th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,866; of 17,781 indexed, latest versions
Container images: 2,303; deployed by those charts
Fix available: 1 of 1; affected package

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Carried by container images the latest versions of 1,866 of 17,781 indexed charts deploy, on 2,303 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+197 more	0.33.0	2,303

OSV records: GO-2024-3333
Also known as: GHSA-w32m-9786-jp63

Charts affected

1,866 by stars

Chart

Latest

Affected images

Radar Score

cnpg-sandboxcloudnative-pg

0.6.1

3 of 6 See more

cnpg-sandbox cloudnative-pg 0.6.1

3 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
grafana/grafana :8.3.5	cd7cb4345aa7	golang.org/x/net@v0.0.0-20210903162142-ad29c8ab022f	0.33.0
ghcr.io/cloudnative-pg/cloudnative-pg :1.17.1	4dd365800b62	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.33.0
quay.io/prometheus-operator/prometheus-operator :v0.54.0	be2aef39a2f8	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0

Open the chart page →

7,583

cloudttycloudtty

0.8.9

1 of 2 See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/cloudtty/cloudshell-operator :v0.8.9	e43ad91f0684	golang.org/x/net@v0.25.0	0.33.0

Open the chart page →

3,951

istio-allcode4devs

1.2.0

4 of 6 See more

istio-all code4devs 1.2.0

4 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0	0.33.0
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0	0.33.0
quay.io/kiali/kiali :v1.89.3	0dcdb1c1e747	golang.org/x/net@v0.24.0	0.33.0
quay.io/prometheus/prometheus :v2.54.1	f6639335d34a	golang.org/x/net@v0.27.0	0.33.0

Open the chart page →

4,784

istio-control-planecode4devs

1.0.0

2 of 3 See more

istio-control-plane code4devs 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
istio/install-cni :1.24.2-distroless	aef4825e110f	golang.org/x/net@v0.29.0	0.33.0
istio/pilot :1.24.2-distroless	137e44e3d1d2	golang.org/x/net@v0.29.0	0.33.0

Open the chart page →

2,360

contactcataloguscontact-catalogus

1.0.0

1 of 3 See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/contactcatalogus-php :latest	eeb625bd660c	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.33.0

Open the chart page →

7,303

cosmo-controller-managercosmo

0.9.0

1 of 2 See more

cosmo-controller-manager cosmo 0.9.0

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/cosmo-controller-manager :v0.9.0	8c7fa5552028	golang.org/x/net@v0.10.0	0.33.0

Open the chart page →

1,927

cosmo-dashboardcosmo

0.9.1

1 of 1 See more

cosmo-dashboard cosmo 0.9.1

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-workspace/cosmo-dashboard :v0.9.1	6a1c4a81a924	golang.org/x/net@v0.10.0	0.33.0

Open the chart page →

1,939

sops-operatorcraftypath

0.8.0

1 of 1 See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
craftypath/sops-operator :v0.8.0	402a0024c732	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0

Open the chart page →

6,473

revadcs3org

1.6.1

1 of 1 See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	golang.org/x/net@v0.7.0	0.33.0

Open the chart page →

1,704

cubefscubefs

3.2.0

6 of 10 See more

cubefs cubefs 3.2.0

6 of the 10 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.13.1	0a8caa2e9f19	golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80	0.33.0
ghcr.io/cubefs/cfs-csi-driver :3.2.0.150.0	8723616a976a	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0
registry.k8s.io/sig-storage/csi-attacher :v3.4.0	8b9c313c05f5	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.5.0	4fd21f36075b	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0
registry.k8s.io/sig-storage/csi-resizer :v1.3.0	6e0546563b18	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.33.0

Open the chart page →

15,891

CubeUniversecubeuniverse

0.1.0

1 of 1 See more

CubeUniverse cubeuniverse 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.33.0

Open the chart page →

1,837

extendeddaemonsetdatadog

0.3.3

1 of 1 See more

extendeddaemonset datadog 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
datadog/extendeddaemonset :v0.8.0	513a4377aed5	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0

Open the chart page →

4,759

datadogdatadog-test

2.4.23

1 of 2 See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
datadog/agent :7.22.0	8f20e56b5311	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.33.0

Open the chart page →

4,568

dbrepodbrepo

1.13.3

6 of 25 See more

dbrepo dbrepo 1.13.3

6 of the 25 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	golang.org/x/net@v0.29.0	0.33.0
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	golang.org/x/net@v0.17.0	0.33.0
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	golang.org/x/net@v0.27.0	0.33.0
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	golang.org/x/net@v0.27.0	0.33.0
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	golang.org/x/net@v0.17.0	0.33.0
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	golang.org/x/net@v0.27.0	0.33.0

Open the chart page →

52,635

dregsydeliveryhero

0.1.5

1 of 1 See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
xelalex/dregsy :0.4.3	574054e1c417	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.33.0

Open the chart page →

2,969

labelsmanager-controllerdeliveryhero

1.0.4

1 of 1 See more

labelsmanager-controller deliveryhero 1.0.4

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
thomasnyambati/labelsmanager-controller :1.0.0	148ae3f99fea	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.33.0

Open the chart page →

2,305

weblatedeliveryhero

0.3.2

1 of 3 See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
weblate/weblate :4.2.2-1	69c160d37a3c	golang.org/x/net@v0.0.0-20190620200207-3b0461eec859	0.33.0

Open the chart page →

7,984

permission-managerdevopstales

1.8.0

1 of 1 See more

permission-manager devopstales 1.8.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.33.0

Open the chart page →

2,266

trivy-operatordevopstales

2.5.0

1 of 1 See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
devopstales/trivy-operator :2.5	75136aa7a26e	golang.org/x/net@v0.4.0	0.33.0

Open the chart page →

5,598

dnsmasqdevplayer0

0.1.5

1 of 2 See more

dnsmasq devplayer0 0.1.5

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.33.0

Open the chart page →

3,392

calicodevtron

0.1.1

3 of 4 See more

calico devtron 0.1.1

3 of the 4 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0

Open the chart page →

10,071

clairdevtron

0.1.14

1 of 2 See more

clair devtron 0.1.14

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.33.0

Open the chart page →

6,237

dex-serverdex-server

1.19.1

1 of 3 See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
dexidp/dex :v2.39.1-distroless	43655afd1a8f	golang.org/x/net@v0.24.0	0.33.0

Open the chart page →

2,238

digispoof-interfacedigispoof-interface

1.0.0

1 of 3 See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/digispoof-interface-php :latest	03aba499950f	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.33.0

Open the chart page →

7,779

dnation-pingdnationcloud

0.1.9

3 of 5 See more

dnation-ping dnationcloud 0.1.9

3 of the 5 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.33.0
prom/blackbox-exporter :v0.18.0	1ffc3f109eb3	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.33.0
prom/prometheus :v2.21.0	d43417c260e5	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.33.0

Open the chart page →

10,454

docker-in-dockerdocker-in-docker

0.0.3

1 of 2 See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
library/docker :24.0.2-dind	1d148deae16a	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

2,576

dockyarddockyard

0.4.0

1 of 1 See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/kgma74/dockyard :0.4.0	b40439329191	golang.org/x/net@v0.29.0	0.33.0

Open the chart page →

1,542

thermitedollarshaveclub

0.1.17

1 of 1 See more

thermite dollarshaveclub 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
dollarshaveclub/thermite :0.0.31	663cbf25fcfe	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.33.0

Open the chart page →

2,732

archerydouban

0.4.3

2 of 6 See more

archery douban 0.4.3

2 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
hanchuanchuan/goinception :latest	b3c0dd26fb50	golang.org/x/net@v0.23.0	0.33.0
hhyo/archery :v1.9.1	1aa41843419e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0

Open the chart page →

5,853

karmadouban

1.9.2

1 of 1 See more

karma douban 1.9.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/prymitive/karma :v0.85	d06892218680	golang.org/x/net@v0.0.0-20210503060351-7fd8e65b6420	0.33.0

Open the chart page →

2,017

dragonfly-stackdragonfly

0.1.2

4 of 7 See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	golang.org/x/net@v0.19.0	0.33.0
dragonflyoss/manager :v2.1.49	c3ef7f10698d	golang.org/x/net@v0.19.0	0.33.0
dragonflyoss/scheduler :v2.1.49	523785c77787	golang.org/x/net@v0.19.0	0.33.0
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

18,376

nydus-snapshotterdragonfly

0.0.10

1 of 2 See more

nydus-snapshotter dragonfly 0.0.10

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

3,658

gethdysnix

1.1.2

1 of 1 See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.14.8	886ec69b35b0	golang.org/x/net@v0.24.0	0.33.0

Open the chart page →

1,624

glideeinstack

0.0.2

1 of 1 See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/einstack/glide :0.0.1-alpine	ab3f7d0a1d50	golang.org/x/net@v0.19.0	0.33.0

Open the chart page →

1,335

elchi-discoveryelchi

1.0.0

1 of 1 See more

elchi-discovery elchi 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
jhonbrownn/elchi-discovery :latest	8f6551ecc98c	golang.org/x/net@v0.13.0	0.33.0

Open the chart page →

638

elchi-stackelchi

1.13.0

2 of 10 See more

elchi-stack elchi 1.13.0

2 of the 10 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
otel/opentelemetry-collector-contrib :0.89.0	995f17004231	golang.org/x/net@v0.18.0	0.33.0
victoriametrics/victoria-metrics :v1.93.5	77a9815d0640	golang.org/x/net@v0.15.0	0.33.0

Open the chart page →

15,383

navidromeemmas-charts

0.0.6

1 of 1 See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
deluan/navidrome :0.50.0	2cf4442b0099	golang.org/x/net@v0.18.0	0.33.0

Open the chart page →

2,129

nexus-operatorepmdedp-dev

2.11.0-MDTU-DDM-SNAPSHOT.1

1 of 1 See more

nexus-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.1

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
epamedp/nexus-operator :2.11.0-MDTU-DDM-SNAPSHOT.1	449a53804699	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0

Open the chart page →

2,266

ipfs-clusterethereum-helm-charts

0.1.14

1 of 3 See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.33.0

Open the chart page →

4,614

event-exporterevent-exporter

0.1.17

1 of 1 See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubestar/event-exporter :latest	656606941255	golang.org/x/net@v0.17.0	0.33.0

Open the chart page →

1,210

events-exporterevents-exporter

0.0.4

1 of 1 See more

events-exporter events-exporter 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/nabokihms/events_exporter :latest	68d44646e8b2	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.33.0

Open the chart page →

2,134

github-actions-runner-operatorevryfs-oss

2.8.1

1 of 1 See more

github-actions-runner-operator evryfs-oss 2.8.1

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/evryfs/github-actions-runner-operator :v0.11.1	6b084e0bd082	golang.org/x/net@v0.12.0	0.33.0

Open the chart page →

1,236

vidcheckfactly

0.5.2

1 of 2 See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
factly/vidcheck-server :0.12.0	87064eb0463c	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.33.0

Open the chart page →

3,617

ecr-cleanupfairwinds-stable

1.2.8

1 of 1 See more

ecr-cleanup fairwinds-stable 1.2.8

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
danielfm/kube-ecr-cleanup-controller :0.1.10	12485563b1d0	golang.org/x/net@v0.7.0	0.33.0

Open the chart page →

1,004

featurehubfeaturehub

4.1.6

1 of 7 See more

featurehub featurehub 4.1.6

1 of the 7 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.14.1	a67913df95f1	golang.org/x/net@v0.15.0	0.33.0

Open the chart page →

8,240

federidfederid

0.1.2

1 of 1 See more

federid federid 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
federid/webhook :0.1.0	fbfb7c6510a7	golang.org/x/net@v0.30.0	0.33.0

Open the chart page →

2,064

fission-corefission-charts

1.14.1

2 of 3 See more

fission-core fission-charts 1.14.1

2 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
fission/fission-bundle :1.14.1	3fcfd8a0fa5d	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.33.0
fission/pre-upgrade-checks :1.14.1	fa0f24cdb9cd	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.33.0

Open the chart page →

7,104

openldapfluktuid

0.1.1

1 of 2 See more

openldap fluktuid 0.1.1

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
osixia/openldap :1.5.0	18742e9c449c	golang.org/x/net@v0.0.0-20201010224723-4f7140c49acb	0.33.0

Open the chart page →

3,313

free5gcfree5gc

0.1.3

11 of 12 See more

free5gc free5gc 0.1.3

11 of the 12 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
free5gc/amf :v3.4.3	1bc96ff5a2a6	golang.org/x/net@v0.24.0	0.33.0
free5gc/ausf :v3.4.3	687ff4daf5da	golang.org/x/net@v0.23.0	0.33.0
free5gc/chf :v3.4.3	e2a4dd98a4ed	golang.org/x/net@v0.24.0	0.33.0
free5gc/nrf :v3.4.3	99e46b860efb	golang.org/x/net@v0.23.0	0.33.0
free5gc/nssf :v3.4.3	dfe8c68c04b4	golang.org/x/net@v0.23.0	0.33.0
free5gc/pcf :v3.4.3	f712e8ecd927	golang.org/x/net@v0.23.0	0.33.0
free5gc/smf :v3.4.3	60e38baa4b10	golang.org/x/net@v0.23.0	0.33.0
free5gc/udm :v3.4.3	2f68df062a50	golang.org/x/net@v0.23.0	0.33.0
free5gc/udr :v3.4.3	c0783bcdcbdc	golang.org/x/net@v0.23.0	0.33.0
free5gc/upf :v3.4.3	b6b362a39fdd	golang.org/x/net@v0.23.0	0.33.0
free5gc/webui :v3.4.3	9adeb18492cb	golang.org/x/net@v0.23.0	0.33.0

Open the chart page →

10,693

fsmfsm

0.2.11

2 of 5 See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
flomesh/fsm-ingress-pipy :0.2.11	cc39c96711c4	golang.org/x/net@v0.10.0	0.33.0
flomesh/fsm-manager :0.2.11	22f849c70b25	golang.org/x/net@v0.10.0	0.33.0

Open the chart page →

4,215

Container images carrying it

2,303 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	golang.org/x/net@v0.15.0	0.33.0	4
quay.io/jetstack/cert-manager-webhook :v1.13.1	48ea4a77dfa7	golang.org/x/net@v0.15.0	0.33.0	4
quay.io/prometheus/alertmanager :v0.25.0	fd4d9a3dd1fd	golang.org/x/net@v0.4.0	0.33.0	4
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	golang.org/x/net@v0.2.0	0.33.0	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20220916-gd32f8c343	39c5b2e3310d	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	golang.org/x/net@v0.1.0	0.33.0	4
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.1.1	64d8c73dca98	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.33.0	4
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	golang.org/x/net@v0.32.0	0.33.0	4
registry.k8s.io/sig-storage/csi-provisioner :v4.0.1	bf5a235b67d8	golang.org/x/net@v0.19.0	0.33.0	4
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	golang.org/x/net@v0.31.0	0.33.0	4
alfhou/hammond :v0.0.24	c85dc0293aa1	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.33.0	3
argoproj/argocd :v1.8.1	830e86cacefd	golang.org/x/net@v0.0.0-20201024042810-be3efd7ff127	0.33.0	3
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c	0.33.0	3
caddy/ingress :v0.2.1	18d1366fc0e9	golang.org/x/net@v0.17.0	0.33.0	3
ciscolabs/rtsp-server :latest	b59fc10bb821	golang.org/x/net@v0.0.0-20220526153639-5463443f8c37	0.33.0	3
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0	3
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.33.0	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	golang.org/x/net@v0.0.0-20201021035429-f5854403a974	0.33.0	3
grafana/grafana :8.2.5	00568d89c4f8	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.33.0	3
grafana/grafana :11.0.0	0dc5a246ab16	golang.org/x/net@v0.23.0	0.33.0	3
grafana/grafana :11.3.0	a0f881232a6f	golang.org/x/net@v0.29.0	0.33.0	3
grafana/promtail :2.4.2	626900031c4e	golang.org/x/net@v0.0.0-20211101193420-4a448f8816b3	0.33.0	3
groundnuty/k8s-wait-for :v2.0	c14d7271e401	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.33.0	3
library/docker :20.10-dind :20-dind	af96c680a7e1	golang.org/x/net@v0.4.0	0.33.0	3
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.33.0	3
mintel/dex-k8s-authenticator :1.4.0	caf71cee7b9a	golang.org/x/net@v0.0.0-20190522155817-f3200d17e092	0.33.0	3
oryd/hydra :v2.2.0	2c93beb5e5f2	golang.org/x/net@v0.18.0	0.33.0	3
prom/prometheus :v3.0.1	565ee8650122	golang.org/x/net@v0.30.0	0.33.0	3
prom/prometheus :v2.19.0	bfad037f95e5	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.33.0	3
prom/statsd-exporter :v0.28.0	4e7a1f00b9b2	golang.org/x/net@v0.29.0	0.33.0	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	golang.org/x/net@v0.17.0	0.33.0	3
stakater/proxyinjector :v0.0.23	83fef483d497	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.33.0	3
tykio/tyk-k8s-bootstrap-post :v2.2.0	55b4d31c7a01	golang.org/x/net@v0.23.0	0.33.0	3
tykio/tyk-k8s-bootstrap-pre-delete :v2.2.0	1489b58f642b	golang.org/x/net@v0.23.0	0.33.0	3
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0	0.33.0	3
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/net@v0.32.0	0.33.0	3
ghcr.io/devplayer0/kubelan :0.2.3	b776dae45d08	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.33.0	3
public.ecr.aws/zinclabs/zinc :latest	fefa9ee7256a	golang.org/x/net@v0.0.0-20221002022538-bcab6841153b	0.33.0	3
quay.io/argoproj/workflow-controller :v3.0.7	aa4da00c5b96	golang.org/x/net@v0.0.0-20201216054612-986b41b23924	0.33.0	3
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	golang.org/x/net@v0.8.0	0.33.0	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	golang.org/x/net@v0.23.0	0.33.0	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.33.0	3
quay.io/devtron/calico-networking :kube-controllers-v3.19.1	2ff71ba65cd7	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0	3
quay.io/devtron/calico-networking :cni-v3.19.1	51f294c56842	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0	3
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0	3
quay.io/devtron/clair :4.3.6	75fb847ac045	golang.org/x/net@v0.0.0-20210805182204-aaa1db679c0d	0.33.0	3
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.33.0	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	golang.org/x/net@v0.17.0	0.33.0	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0	3
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0	0.33.0	3