CVE-2024-45338

Unscored

Advisory

Published 18 Dec 2024In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.009; 57th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,886; of 17,787 indexed, latest versions
Container images: 2,333; deployed by those charts
Fix available: 1 of 1; affected package

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Carried by container images the latest versions of 1,886 of 17,787 indexed charts deploy, on 2,333 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+198 more	0.33.0	2,333

OSV records: GO-2024-3333
Also known as: GHSA-w32m-9786-jp63

Charts affected

1,886 by stars

Chart

Latest

Affected images

Radar Score

gptchat-api-feishubotkubegemsapp

0.1.1

2 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

2 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	golang.org/x/net@v0.4.0	0.33.0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	golang.org/x/net@v0.4.0	0.33.0

Open the chart page →

8,486

kubeintellectkubeintellect

2.5.0

1 of 2 See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/mskazemi/kubeintellect :2.5.0	b5d7681d1b9d	golang.org/x/net@v0.30.0	0.33.0

Open the chart page →

1,858

kubelet-summary-exporterkubelet-summary-exporter

1.0.0

1 of 1 See more

kubelet-summary-exporter kubelet-summary-exporter 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/salesforce/kubelet-summary-exporter :sha-c2bf90d	377e09d2dd72	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

1,015

log-generatorkube-logging

0.6.0

1 of 1 See more

log-generator kube-logging 0.6.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/kube-logging/log-generator :v0.6.0	8324bbc0ec08	golang.org/x/net@v0.7.0	0.33.0

Open the chart page →

1,269

log-socketkube-logging

0.1.2

1 of 1 See more

log-socket kube-logging 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/banzaicloud/log-socket :latest	a514736d2d4d	golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d	0.33.0

Open the chart page →

1,220

kubemacpoolkubemacpool

0.3.0

1 of 1 See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	golang.org/x/net@v0.23.0	0.33.0

Open the chart page →

1,624

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	golang.org/x/net@v0.0.0-20220822230855-b0a4917ee28c	0.33.0

Open the chart page →

7,196

lokikube-ops

1.7.3

1 of 1 See more

loki kube-ops 1.7.3

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/loki :2.2.1	4fbd63194674	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.33.0

Open the chart page →

2,646

promtailkube-ops

1.5.1

1 of 2 See more

promtail kube-ops 1.5.1

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/kube-ops/promtail :2.2.1	34de6387233b	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.33.0

Open the chart page →

4,149

kubereportkubereport

1.1.0

1 of 1 See more

kubereport kubereport 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubesuite/kubereport :latest	0262424ee702	golang.org/x/net@v0.29.0	0.33.0

Open the chart page →

1,120

scrutinykubernetes-homelab-helm-charts

0.2.2

1 of 3 See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
library/influxdb :2.8	571eb4514977	golang.org/x/net@v0.25.0	0.33.0

Open the chart page →

5,519

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	golang.org/x/net@v0.15.0	0.33.0

Open the chart page →

3,622

harbor-operatorkubernetes-replicator

1.6.3

1 of 1 See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	golang.org/x/net@v0.24.0	0.33.0

Open the chart page →

1,196

kubernetes-secret-generatorkubernetes-replicator

3.4.1

1 of 1 See more

kubernetes-secret-generator kubernetes-replicator 3.4.1

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	golang.org/x/net@v0.26.0	0.33.0

Open the chart page →

855

kubernetesweeklykubernetesweekly

2.1.0

1 of 1 See more

kubernetesweekly kubernetesweekly 2.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
zufardhiyaulhaq/kubernetesweekly :v2.1.0	a287ada277c6	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f	0.33.0

Open the chart page →

1,489

kube-secrets-exporterkube-secrets-exporter

0.1.0

1 of 1 See more

kube-secrets-exporter kube-secrets-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/dcristobalhmad/kube-secrets-exporter :latest	a9043737cb73	golang.org/x/net@v0.23.0	0.33.0

Open the chart page →

544

api-serverkubeshop

0.11.16

1 of 2 See more

api-server kubeshop 0.11.16

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :0.11.16	0ad97f07a78b	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.33.0

Open the chart page →

3,417

kusk-gatewaykubeshop

0.0.65

1 of 2 See more

kusk-gateway kubeshop 0.0.65

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway :v1.5.4	8b5bfd57a3ce	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.33.0

Open the chart page →

1,615

kusk-gateway-apikubeshop

0.1.28

2 of 2 See more

kusk-gateway-api kubeshop 0.1.28

2 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubeshop/kusk-gateway-api :v1.5.4	126c713cf7d8	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.33.0
kubeshop/kusk-gateway-api-websocket :v1.5.4	3b4f8345ca5c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.33.0

Open the chart page →

2,308

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	golang.org/x/net@v0.17.0	0.33.0

Open the chart page →

1,554

cloudnative-pgkube-site-follower

0.23.0

1 of 1 See more

cloudnative-pg kube-site-follower 0.23.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/cloudnative-pg/cloudnative-pg :1.25.0	a27779ed1085	golang.org/x/net@v0.32.0	0.33.0

Open the chart page →

902

apisix-dashboardkubesphere

0.3.0

1 of 1 See more

apisix-dashboard kubesphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
apache/apisix-dashboard :2.9.0	c010ea7d1694	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.33.0

Open the chart page →

2,518

apisix-ingress-controllerkubesphere

0.8.0

1 of 2 See more

apisix-ingress-controller kubesphere 0.8.0

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
apache/apisix-ingress-controller :1.3.0	412f92cde0b3	golang.org/x/net@v0.0.0-20210510120150-4163338589ed	0.33.0

Open the chart page →

2,409

fluentbit-operatorkubesphere

0.1.0

1 of 2 See more

fluentbit-operator kubesphere 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubesphere/fluentbit-operator :v0.9.0	b87db3c57cb3	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.33.0

Open the chart page →

2,902

gitlabkubesphere

4.2.3

5 of 17 See more

gitlab kubesphere 4.2.3

5 of the 17 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
gitlab/gitlab-runner :alpine-v13.2.1	fd7e5dfb9f30	golang.org/x/net@v0.0.0-20200222125558-5a598a2470a0	0.33.0
mirrorgitlabcontainers/gitaly :v13.2.2	83599461ef8b	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.33.0
mirrorgitlabcontainers/gitlab-container-registry :v2.9.1-gitlab	06b19a4bc805	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582	0.33.0
mirrorgitlabcontainers/gitlab-shell :v13.3.0	9f3654f1eafc	golang.org/x/net@v0.0.0-20200114155413-6afb5195e5aa	0.33.0
mirrorgitlabcontainers/gitlab-workhorse-ce :v13.2.2	a6d7bf42805a	golang.org/x/net@v0.0.0-20200226121028-0de0cce0169b	0.33.0

Open the chart page →

38,135

harborkubesphere

1.9.3

7 of 11 See more

harbor kubesphere 1.9.3

7 of the 11 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
goharbor/chartmuseum-photon :v2.5.3	6ab3ca28e9e5	golang.org/x/net@v0.0.0-20220121210141-e204ce36a2ba	0.33.0
goharbor/harbor-core :v2.5.3	86bf3031f4a7	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e	0.33.0
goharbor/harbor-jobservice :v2.5.3	8d5339ff2d74	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e	0.33.0
goharbor/harbor-registryctl :v2.5.3	7f82ed1e2635	golang.org/x/net@v0.0.0-20211013171255-e13a2654a71e	0.33.0
goharbor/notary-server-photon :v2.5.3	fd91a4a1273f	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.33.0
goharbor/notary-signer-photon :v2.5.3	a92b51aa7d6e	golang.org/x/net@v0.0.0-20200202094626-16171245cfb2	0.33.0
goharbor/trivy-adapter-photon :v2.5.3	b9522c3f5056	golang.org/x/net@v0.0.0-20211108170745-6635138e15ea	0.33.0

Open the chart page →

17,798

pvc-autoresizerkubesphere

0.1.0

1 of 1 See more

pvc-autoresizer kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubesphere/pvc-autoresizer :v0.1	9a18a16c7b87	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.33.0

Open the chart page →

1,562

storageclass-accessorkubesphere

0.1.0

1 of 1 See more

storageclass-accessor kubesphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubesphere/storageclass-accessor :v0.1.1	eac8f273a9b6	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.33.0

Open the chart page →

1,509

chaos-meshkubesphere-stable

2.5.1

3 of 3 See more

chaos-mesh kubesphere-stable 2.5.1

3 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-daemon :v2.5.1	cf78fdf7403a	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.33.0
ghcr.io/chaos-mesh/chaos-dashboard :v2.5.1	448cb346b12c	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.33.0
ghcr.io/chaos-mesh/chaos-mesh :v2.5.1	700bb42ac21d	golang.org/x/net@v0.0.0-20220722155237-a158d28d115b	0.33.0

Open the chart page →

8,555

cni-hostnickubesphere-stable

0.1.0

1 of 1 See more

cni-hostnic kubesphere-stable 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.33.0

Open the chart page →

2,437

cranekubesphere-stable

0.5.2

2 of 3 See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
gocrane/crane-scheduler :0.0.23	9ba6d11b2079	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.33.0
gocrane/crane-scheduler-controller :0.1.23	a2d7e60576f9	golang.org/x/net@v0.0.0-20220225172249-27dd8689420f	0.33.0

Open the chart page →

8,887

csi-qingcloudkubesphere-stable

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-stable 1.4.0

6 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0

Open the chart page →

12,404

curvefs-csikubesphere-stable

0.1.0

1 of 3 See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.33.0

Open the chart page →

2,824

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-server :v6.2.6.5	34fcc526dd59	golang.org/x/net@v0.7.0	0.33.0
deepflowce/deepflowio-init-grafana :v6.2.6.5	6b51a0206b04	golang.org/x/net@v0.8.0	0.33.0
grafana/grafana :9.5.2	39c849cebccc	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

18,394

edgemeshkubesphere-stable

0.1.0

2 of 2 See more

edgemesh kubesphere-stable 0.1.0

2 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubeedge/edgemesh-agent :latest	460c6061b608	golang.org/x/net@v0.10.0	0.33.0
kubeedge/edgemesh-server :latest	a437cf5ec0ae	golang.org/x/net@v0.0.0-20211216030914-fe4d6282115f	0.33.0

Open the chart page →

4,098

fpga-operatorkubesphere-stable

2.7.4

2 of 7 See more

fpga-operator kubesphere-stable 2.7.4

2 of the 7 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
inaccel/daemon :latest	093e1ea90ab8	golang.org/x/net@v0.19.0	0.33.0
inaccel/reef :latest	c967218739f3	golang.org/x/net@v0.19.0	0.33.0

Open the chart page →

5,759

iomeshkubesphere-stable

1.1.0

23 of 25 See more

iomesh kubesphere-stable 1.1.0

23 of the 25 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.33.0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.33.0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	golang.org/x/net@v0.0.0-20211015210444-4f30a5c0130f	0.33.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.33.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.33.0
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	golang.org/x/net@v0.8.0	0.33.0
iomesh/deck :v0.1.0	a31e26b6ae22	golang.org/x/net@v0.17.0	0.33.0
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	golang.org/x/net@v0.19.0	0.33.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.33.0
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69	0.33.0
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.33.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0
iomesh/node-disk-manager :1.8.0	002c4b92fd34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0
iomesh/node-disk-operator :1.8.0	f6c76380db34	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0
iomesh/operator :v1.1.0	60081c9b2f52	golang.org/x/net@v0.17.0	0.33.0
iomesh/post-delete-hook :v1.1.0	eea5651f3270	golang.org/x/net@v0.17.0	0.33.0
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	golang.org/x/net@v0.8.0	0.33.0
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	golang.org/x/net@v0.7.0	0.33.0
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0	0.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0	0.33.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0	0.33.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0	0.33.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

48,833

IOMeshkubesphere-stable

1.2.0

23 of 25 See more

IOMesh kubesphere-stable 1.2.0

23 of the 25 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.33.0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.33.0
iomesh/csi-driver :v2.8.0	1a151f602451	golang.org/x/net@v0.8.0	0.33.0
iomesh/csi-node-driver-registrar :v2.5.0	86f58b0a2106	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.33.0
iomesh/csi-provisioner :v3.0.0	f9508460b273	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.33.0
iomesh/csi-snapshotter :v6.2.2	becc53e25b96	golang.org/x/net@v0.8.0	0.33.0
iomesh/deck :v0.2.0	282d6c419ed3	golang.org/x/net@v0.19.0	0.33.0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	golang.org/x/net@v0.19.0	0.33.0
iomesh/hostpath-provisioner :v0.5.1	f4878c8ae53a	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.33.0
iomesh/livenessprobe :v2.8.0	560f01510f99	golang.org/x/net@v0.0.0-20220921203646-d300de134e69	0.33.0
iomesh/localpv-manager :v0.2.0	f13deacac3f4	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.33.0
iomesh/node-disk-exporter :1.8.0	f03148764f38	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0
iomesh/operator :v1.2.0	ba4dd6be7e59	golang.org/x/net@v0.17.0	0.33.0
iomesh/post-delete-hook :v1.2.0	e3b92f838f4b	golang.org/x/net@v0.17.0	0.33.0
iomesh/snapshot-controller :v6.2.2	fb95b65bb88f	golang.org/x/net@v0.8.0	0.33.0
iomesh/zookeeper-operator :0.2.15	9b38b5c7a61d	golang.org/x/net@v0.7.0	0.33.0
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0	0.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.8.0	f6717ce72a26	golang.org/x/net@v0.8.0	0.33.0
registry.k8s.io/sig-storage/csi-provisioner :v3.5.0	d078dc174323	golang.org/x/net@v0.8.0	0.33.0
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0	0.33.0
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

46,507

pulsarkubesphere-stable

2.7.13

2 of 3 See more

pulsar kubesphere-stable 2.7.13

2 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.33.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	golang.org/x/net@v0.0.0-20201022231255-08b38378de70	0.33.0

Open the chart page →

14,368

aws-fsx-csi-driverkubesphere-test

0.1.0

1 of 4 See more

aws-fsx-csi-driver kubesphere-test 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
amazon/aws-fsx-csi-driver :latest	c9b14856fd22	golang.org/x/net@v0.0.0-20210614182718-04defd469f4e	0.33.0

Open the chart page →

1,588

cni-hostnickubesphere-test

0.1.0

1 of 1 See more

cni-hostnic kubesphere-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
qingcloud/hostnic-plus :v1.0.3	4cd5366a9f51	golang.org/x/net@v0.0.0-20210428140749-89ef3d95e781	0.33.0

Open the chart page →

2,437

csi-neonsankubesphere-test

1.3.0

6 of 6 See more

csi-neonsan kubesphere-test 1.3.0

6 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.33.0
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	golang.org/x/net@v0.0.0-20191112182307-2180aed22343	0.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0

Open the chart page →

18,482

csi-qingcloudkubesphere-test

1.4.0

6 of 6 See more

csi-qingcloud kubesphere-test 1.4.0

6 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
csiplugin/csi-attacher :v3.2.1	60ab9b3e6a03	golang.org/x/net@v0.0.0-20210410081132-afb366fc7cd1	0.33.0
csiplugin/csi-node-driver-registrar :v2.2.0	2dee3fe5fe86	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0
csiplugin/csi-qingcloud :v1.4.0	0766163dc046	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.33.0
csiplugin/csi-resizer :v1.2.0	36c31f7e1f43	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0
csiplugin/csi-snapshotter :v4.0.0	51f2dfde5bcc	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.33.0
registry.k8s.io/sig-storage/csi-provisioner :v2.2.2	04c55b93a032	golang.org/x/net@v0.0.0-20210316092652-d523dce5a7f4	0.33.0

Open the chart page →

12,404

curvefs-csikubesphere-test

0.1.0

1 of 3 See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/k8scsi/csi-node-driver-registrar :v1.3.0	e6df72478956	golang.org/x/net@v0.0.0-20180301190904-22ae77b79946	0.33.0

Open the chart page →

2,824

online-boutiquekubesphere-test

0.1.0

8 of 11 See more

online-boutique kubesphere-test 0.1.0

8 of the 11 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/cartservice :v0.2.3	566733b4d2d5	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.33.0
gcr.io/google-samples/microservices-demo/checkoutservice :v0.2.3	0fad1066de77	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.33.0
gcr.io/google-samples/microservices-demo/currencyservice :v0.2.3	49d458a3650f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.33.0
gcr.io/google-samples/microservices-demo/frontend :v0.2.3	ca5c0f0771c8	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7	0.33.0
gcr.io/google-samples/microservices-demo/paymentservice :v0.2.3	6eb201217a8f	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.33.0
gcr.io/google-samples/microservices-demo/productcatalogservice :v0.2.3	5a4a0e54c6d0	golang.org/x/net@v0.0.0-20190628185345-da137c7871d7	0.33.0
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.33.0
gcr.io/google-samples/microservices-demo/shippingservice :v0.2.3	0cb1707fc503	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.33.0

Open the chart page →

26,019

openelbkubesphere-test

0.2.4

2 of 2 See more

openelb kubesphere-test 0.2.4

2 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubesphere/openelb :v0.4.4	ed7311a0f9e4	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.33.0
kubespheredev/kube-webhook-certgen :v1.1.1	23a03c9c381f	golang.org/x/net@v0.0.0-20210520170846-37e1c6afe023	0.33.0

Open the chart page →

4,329

porterkubesphere-test

0.2.2

1 of 2 See more

porter kubesphere-test 0.2.2

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
kubesphere/porter :v0.4.3	8d1ed5ee1d2e	golang.org/x/net@v0.0.0-20200528225125-3c3fba18258b	0.33.0

Open the chart page →

2,784

snapshot-controllerkubesphere-test

0.2.0

1 of 1 See more

snapshot-controller kubesphere-test 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
csiplugin/snapshot-controller :v4.0.0	00fcc441ea9f	golang.org/x/net@v0.0.0-20201209123823-ac852fbbde11	0.33.0

Open the chart page →

2,220

kubestellar-consolekubestellar-console

0.3.41

2 of 2 See more

kubestellar-console kubestellar-console 0.3.41

2 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	golang.org/x/net@v0.30.0	0.33.0
ghcr.io/kubestellar/console :v0.3.41	457cfc94b4da	golang.org/x/net@v0.23.0	0.33.0

Open the chart page →

4,440

kubestellar-uikubestellarui

0.1.1

1 of 4 See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
mavrick1/kubestellar-b :latest	45ca0429a1d4	golang.org/x/net@v0.26.0	0.33.0

Open the chart page →

4,763

Container images carrying it

2,333 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0	3
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	golang.org/x/net@v0.17.0	0.33.0	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	golang.org/x/net@v0.8.0	0.33.0	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	golang.org/x/net@v0.8.0	0.33.0	3
quay.io/devtron/nats-box :latest	48cdd3054b20	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c	0.33.0	3
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	golang.org/x/net@v0.28.0	0.33.0	3
quay.io/devtron/winter-soldier :abf5a822-196-14744	093844c46c19	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.33.0	3
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.33.0	3
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	golang.org/x/net@v0.0.0-20190812203447-cdfb69ac37fc	0.33.0	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	golang.org/x/net@v0.8.0	0.33.0	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	golang.org/x/net@v0.17.0	0.33.0	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	golang.org/x/net@v0.10.0	0.33.0	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	golang.org/x/net@v0.0.0-20201224014010-6772e930b67b	0.33.0	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	golang.org/x/net@v0.10.0	0.33.0	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.33.0	3
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	golang.org/x/net@v0.25.0	0.33.0	3
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	golang.org/x/net@v0.0.0-20210610132358-84b48f89b13b	0.33.0	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	golang.org/x/net@v0.4.0	0.33.0	3
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	golang.org/x/net@v0.28.0	0.33.0	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.33.0	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.33.0	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	golang.org/x/net@v0.8.0	0.33.0	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	golang.org/x/net@v0.28.0	0.33.0	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	golang.org/x/net@v0.22.0	0.33.0	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.33.0	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.33.0	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	golang.org/x/net@v0.1.0	0.33.0	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	golang.org/x/net@v0.10.0	0.33.0	3
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	golang.org/x/net@v0.22.0	0.33.0	3
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	golang.org/x/net@v0.26.0	0.33.0	3
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	golang.org/x/net@v0.8.0	0.33.0	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	golang.org/x/net@v0.28.0	0.33.0	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	golang.org/x/net@v0.18.0	0.33.0	3
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	golang.org/x/net@v0.8.0	0.33.0	3
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	golang.org/x/net@v0.8.0	0.33.0	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.33.0	3
1password/scim :v2.3.1	29d0c6cb67eb	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.33.0	2
alpine/git :2.47.2	062a01ad7a0e	golang.org/x/net@v0.23.0	0.33.0	2
alpine/k8s :1.32.12	048f8d9c8cc7	golang.org/x/net@v0.19.0	0.33.0	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	golang.org/x/net@v0.7.0	0.33.0	2
altinity/metrics-exporter :0.21.2	df3d57215356	golang.org/x/net@v0.7.0	0.33.0	2
apache/superset :dockerize	afe59523a6c8	golang.org/x/net@v0.10.0	0.33.0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	golang.org/x/net@v0.19.0	0.33.0	2
assistiot/fl_repository_db :latest	ad8f72108636	golang.org/x/net@v0.12.0	0.33.0	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	golang.org/x/net@v0.0.0-20220520000938-2e3eb7b945c2	0.33.0	2
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.33.0	2
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0	0.33.0	2
bitpoke/mysql-operator :v0.6.3	f44fa86ab27e	golang.org/x/net@v0.8.0	0.33.0	2
bitpoke/mysql-operator-orchestrator :v0.6.3	d86560c75bed	golang.org/x/net@v0.8.0	0.33.0	2
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.33.0	2