CVE-2024-45338

Unscored

Advisory

Published 18 Dec 2024In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.009; 57th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,885; of 17,803 indexed, latest versions
Container images: 2,333; deployed by those charts
Fix available: 1 of 1; affected package

Non-linear parsing of case-insensitive content in golang.org/x/net/html

Carried by container images the latest versions of 1,885 of 17,803 indexed charts deploy, on 2,333 images.

Affected package	Affected versions	Fixed in	Images
golang.org/x/netgolang	v0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+198 more	0.33.0	2,333

OSV records: GO-2024-3333
Also known as: GHSA-w32m-9786-jp63

Charts affected

1,885 by stars

Chart

Latest

Affected images

Radar Score

kommandermesosphere-stable

0.39.2

18 of 29 See more

kommander mesosphere-stable 0.39.2

18 of the 29 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.33.0
mesosphere/karma :v0.55-d2iq-proxy	4693bb4e0814	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.33.0
mesosphere/kommander-federation-authorizedlister :v0.21.2	63bc411b930b	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.33.0
mesosphere/kommander-federation-controller-manager :v0.21.2	b036785a8862	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.33.0
mesosphere/kommander-federation-utility-apiserver :v0.21.2	f9b769c65e24	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.33.0
mesosphere/kommander-federation-webhook :v0.21.2	94af41b6dd9a	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.33.0
mesosphere/kommander-licensing-controller-manager :v0.21.2	8e18bbe407f7	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.33.0
mesosphere/kommander-licensing-webhook :v0.21.2	265edcd2a1ca	golang.org/x/net@v0.0.0-20201202161906-c7110b5ffcbb	0.33.0
mesosphere/kubeaddons-addon-initializer :v0.2.8	c10011f866f2	golang.org/x/net@v0.0.0-20191209160850-c0dbc17a3553	0.33.0
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.33.0
prom/prometheus :v2.19.2	cd134bd4fca0	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.33.0
thanosio/thanos :v0.19.0	88276fcd1491	golang.org/x/net@v0.0.0-20210119194325-5f4716e94777	0.33.0
thanosio/thanos :v0.15.0	b12d5c31bf5a	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.33.0
gcr.io/kubecost1/cost-model :prod-1.81.0	67f4f162da8d	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0
gcr.io/kubecost1/server :prod-1.81.0	a348db3e4d74	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.33.0
quay.io/kubernetes-multicluster/kubefed :v0.7.0	6d56f69b15a3	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0
quay.io/prometheus/alertmanager :v0.21.0	24a5204b418e	golang.org/x/net@v0.0.0-20200513185701-a91f0712d120	0.33.0
quay.io/thanos/thanos :v0.17.1	e362f02ed304	golang.org/x/net@v0.0.0-20201006153459-a7d1128ccaa0	0.33.0

Open the chart page →

68,442

kube-prometheus-stackmesosphere-stable

75.9.1

1 of 7 See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.29.2	c74b703deed2	golang.org/x/net@v0.19.0	0.33.0

Open the chart page →

10,568

opsportalmesosphere-stable

0.9.5

1 of 3 See more

opsportal mesosphere-stable 0.9.5

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
mesosphere/kubeaddons-addon-initializer :v0.2.0	9f863160127b	golang.org/x/net@v0.0.0-20190613194153-d28f0bde5980	0.33.0

Open the chart page →

7,031

veleromesosphere-stable

3.2.5

1 of 1 See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :1.26.4	a0a972324d93	golang.org/x/net@v0.7.0	0.33.0

Open the chart page →

1,871

cortexmetakube

0.6.0

1 of 2 See more

cortex metakube 0.6.0

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.33.0

Open the chart page →

4,115

istio-operatormetakube

1.12.0

1 of 1 See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
istio/operator :1.12.0	6cfce8a071b9	golang.org/x/net@v0.0.0-20211020060615-d418f374d309	0.33.0

Open the chart page →

8,963

wg-access-servermglants

0.4.7

1 of 1 See more

wg-access-server mglants 0.4.7

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	golang.org/x/net@v0.0.0-20200707034311-ab3426394381	0.33.0

Open the chart page →

2,752

gogsmhio

0.9.2

1 of 2 See more

gogs mhio 0.9.2

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
gogs/gogs :0.12.1	420d53bb7277	golang.org/x/net@v0.0.0-20191014212845-da9a3fd4c582	0.33.0

Open the chart page →

3,231

kube-agent-chartmiddleware-labs

0.1.2

1 of 1 See more

kube-agent-chart middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	golang.org/x/net@v0.4.0	0.33.0

Open the chart page →

1,808

middleware-odigosmiddleware-labs

0.2.41

4 of 6 See more

middleware-odigos middleware-labs 0.2.41

4 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/odigos-autoscaler :middleware-test-0.0.14	aac0389614e4	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0
ghcr.io/middleware-labs/odigos-instrumentor :middleware-test-0.0.1	04ae1fc698a5	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0
ghcr.io/middleware-labs/odigos-odiglet :middleware-test-0.0.1	03c8c835ecee	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.33.0
ghcr.io/middleware-labs/odigos-scheduler :middleware-test-0.0.1	09741c86aee7	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0

Open the chart page →

8,383

middleware-visionmiddleware-labs

0.2.65

4 of 6 See more

middleware-vision middleware-labs 0.2.65

4 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/vision-autoscaler :middleware-test-0.0.23	1f7f89bc6585	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0
ghcr.io/middleware-labs/vision-instrumentor :middleware-test-0.0.4	dfa5907170c4	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0
ghcr.io/middleware-labs/vision-odiglet :middleware-test-0.0.3	bce34c98668e	golang.org/x/net@v0.3.1-0.20221206200815-1e63c2f08a10	0.33.0
ghcr.io/middleware-labs/vision-scheduler :middleware-test-0.0.3	3609a075c825	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0

Open the chart page →

8,375

mw-autoinstrumentationmiddleware-labs

1.2.6

3 of 6 See more

mw-autoinstrumentation middleware-labs 1.2.6

3 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-auto-injector :0.1.1	8512248e17e8	golang.org/x/net@v0.26.0	0.33.0
ghcr.io/middleware-labs/mw-lang-aggregator :0.1.0	ae6e13970ec2	golang.org/x/net@v0.26.0	0.33.0
ghcr.io/middleware-labs/mw-lang-detector :0.1.2	a4776aa2a56b	golang.org/x/net@v0.26.0	0.33.0

Open the chart page →

3,753

mw-kube-agentmiddleware-labs

0.1.2

1 of 1 See more

mw-kube-agent middleware-labs 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	golang.org/x/net@v0.14.0	0.33.0

Open the chart page →

1,611

argocd-extra-app-info-exportermikejoh

0.1.12

1 of 1 See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
mikejoh/argocd-extra-app-info-exporter :0.2.0	5c5a3b734271	golang.org/x/net@v0.30.0	0.33.0

Open the chart page →

1,365

imaginemikejoh

0.2.0

1 of 1 See more

imagine mikejoh 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
mikejoh/imagine :0.1.0	78737d7345f9	golang.org/x/net@v0.26.0	0.33.0

Open the chart page →

559

local-path-provisionermikejoh

0.0.29

1 of 1 See more

local-path-provisioner mikejoh 0.0.29

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	golang.org/x/net@v0.27.0	0.33.0

Open the chart page →

1,300

miniomilvus-helm

8.0.20

1 of 1 See more

minio milvus-helm 8.0.20

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-05-28T17-19-04Z	391d1d45fdbe	golang.org/x/net@v0.25.0	0.33.0

Open the chart page →

1,685

pulsarv2milvus-helm

2.7.8

2 of 4 See more

pulsarv2 milvus-helm 2.7.8

2 of the 4 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.17.2	42d2395cd719	golang.org/x/net@v0.0.0-20200301022130-244492dfa37a	0.33.0
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	golang.org/x/net@v0.0.0-20190923162816-aa69164e4478	0.33.0

Open the chart page →

15,875

mimirmimir

0.1.10

1 of 1 See more

mimir mimir 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/heimops/mimir-operator :latest	4e1a3ef1fe82	golang.org/x/net@v0.17.0	0.33.0

Open the chart page →

382

minio-operatorminio-operator

4.3.7

1 of 2 See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	golang.org/x/net@v0.0.0-20210421230115-4e50805a0758	0.33.0

Open the chart page →

6,087

aws-api-gateway-operatormintel

0.1.2

1 of 11 See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/net@v0.4.0	0.33.0

Open the chart page →

10,732

standard-application-stackmintel

11.5.0

1 of 12 See more

standard-application-stack mintel 11.5.0

1 of the 12 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
library/docker :20.10-dind	af96c680a7e1	golang.org/x/net@v0.4.0	0.33.0

Open the chart page →

10,642

jupyterhubmizzoukube

0.0.1-set.by.chartpress

1 of 7 See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
registry.k8s.io/kube-scheduler :v1.28.7	3ae5620a33bb	golang.org/x/net@v0.19.0	0.33.0

Open the chart page →

1,896

cert-manager-webhook-duckdnsmmontes

1.2.3

1 of 1 See more

cert-manager-webhook-duckdns mmontes 1.2.3

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ebrianne/cert-manager-webhook-duckdns :v1.2.3	9cd17700c9ec	golang.org/x/net@v0.0.0-20200822124328-c89045814202	0.33.0

Open the chart page →

2,854

cockroachdb-operatormmontes

0.1.0

1 of 1 See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
cockroachdb/cockroach-operator :v2.1.0	983312754620	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.33.0

Open the chart page →

7,799

echoperatormmontes

0.0.2

1 of 1 See more

echoperator mmontes 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/mmontes11/echoperator :v0.0.4	a544a71c6e3b	golang.org/x/net@v0.0.0-20210224082022-3d97a244fca7	0.33.0

Open the chart page →

1,827

corednsmoikot

1.13.3

1 of 1 See more

coredns moikot 1.13.3

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
coredns/coredns :1.7.0	73ca82b4ce82	golang.org/x/net@v0.0.0-20200324143707-d3edc9973b7e	0.33.0

Open the chart page →

2,555

smartthings-metricsmoikot

0.1.0

1 of 1 See more

smartthings-metrics moikot 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :0.1.0	8625f53aa9b7	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.33.0

Open the chart page →

1,744

smartthings-metrics-feat-log-detailsmoikot

0.0.92

1 of 1 See more

smartthings-metrics-feat-log-details moikot 0.0.92

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
moikot/smartthings-metrics :feat-log-details	fb8565140106	golang.org/x/net@v0.0.0-20200602114024-627f9648deb9	0.33.0

Open the chart page →

1,732

pritunl-vpnmoinologics

0.0.1

1 of 1 See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
goofball222/pritunl :1.32.3602.80	7bf26032dfce	golang.org/x/net@v0.7.0	0.33.0

Open the chart page →

2,470

backendmojaloop

0.1.0

2 of 6 See more

backend mojaloop 0.1.0

2 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
bitnamilegacy/kafka-exporter-archived :1.3.2	e527fbf75dce	golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985	0.33.0
bitnamilegacy/mysqld-exporter :0.13.0	a7e14cc919cb	golang.org/x/net@v0.0.0-20200625001655-4c5254603344	0.33.0

Open the chart page →

16,329

camera-viewermoreillon

0.2.1

1 of 4 See more

camera-viewer moreillon 0.2.1

1 of the 4 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c	0.33.0

Open the chart page →

11,700

face-recognitionmoreillon

0.2.4

1 of 3 See more

face-recognition moreillon 0.2.4

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c	0.33.0

Open the chart page →

8,565

mqtt-loggermoreillon

0.3.1

2 of 5 See more

mqtt-logger moreillon 0.3.1

2 of the 5 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
bitnamilegacy/influxdb :2.6.1-debian-11-r18	d17df1f9d745	golang.org/x/net@v0.0.0-20220617184016-355a448f1bc9	0.33.0
bitnamilegacy/mongodb :6.0.4-debian-11-r10	016dce036593	golang.org/x/net@v0.0.0-20220906165146-f3363e06e74c	0.33.0

Open the chart page →

11,025

user-manager-mongodbmoreillon

0.6.2

1 of 4 See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	golang.org/x/net@v0.14.0	0.33.0

Open the chart page →

25,873

backupmorremeyer

4.0.0

1 of 1 See more

backup morremeyer 4.0.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
restic/restic :0.15.2	579e4e6a4931	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

2,303

hcloud-ccm-networksmorremeyer

2.0.0

1 of 1 See more

hcloud-ccm-networks morremeyer 2.0.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-cloud-controller-manager :v1.16.0	8c07e6d7a76c	golang.org/x/net@v0.11.0	0.33.0

Open the chart page →

1,753

hcloud-csi-drivermorremeyer

3.0.0

6 of 6 See more

hcloud-csi-driver morremeyer 3.0.0

6 of the 6 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
hetznercloud/hcloud-csi-driver :v2.3.2	b7ed90d5fab2	golang.org/x/net@v0.7.0	0.33.0
registry.k8s.io/sig-storage/csi-attacher :v4.1.0	08721106b949	golang.org/x/net@v0.4.0	0.33.0
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.7.0	4a4cae5118c4	golang.org/x/net@v0.4.0	0.33.0
registry.k8s.io/sig-storage/csi-provisioner :v3.4.0	e468dddcd275	golang.org/x/net@v0.4.0	0.33.0
registry.k8s.io/sig-storage/csi-resizer :v1.7.0	3a7bdf5d1057	golang.org/x/net@v0.4.0	0.33.0
registry.k8s.io/sig-storage/livenessprobe :v2.9.0	2b10b24dafdc	golang.org/x/net@v0.4.0	0.33.0

Open the chart page →

7,187

chirpstackmosquitto-helm-chart

0.5.0

2 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

2 of the 8 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
chirpstack/chirpstack-application-server :3	fb7667fe037f	golang.org/x/net@v0.0.0-20220726230323-06994584191e	0.33.0
chirpstack/chirpstack-network-server :3	c0bbbb7a3f1e	golang.org/x/net@v0.8.0	0.33.0

Open the chart page →

96,742

chirpstack-event-forwardmosquitto-helm-chart

0.1.2

1 of 1 See more

chirpstack-event-forward mosquitto-helm-chart 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/chirpstack-event-forward :v0.1.2	23dc6274cc4b	golang.org/x/net@v0.0.0-20210813160813-60bc85c4be6d	0.33.0

Open the chart page →

1,854

replacermosquitto-helm-chart

0.2.0

2 of 3 See more

replacer mosquitto-helm-chart 0.2.0

2 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/replacer :v1.1.0	0b2a41c2a43e	golang.org/x/net@v0.0.0-20191004110552-13f9640d40b9	0.33.0
ghcr.io/liangyuanpeng/waitfor :v1.0.0	ca5a98cbed32	golang.org/x/net@v0.0.0-20211209124913-491a49abca63	0.33.0

Open the chart page →

3,931

configmapsecretsmozilla

0.0.1

1 of 1 See more

configmapsecrets mozilla 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
mzinc/configmapsecret-controller :v0.5.1	eebbcbf2d1f7	golang.org/x/net@v0.0.0-20210226172049-e18ecbb05110	0.33.0

Open the chart page →

2,110

vikunjamt190502

7.1.2

1 of 3 See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
vikunja/vikunja :0.24.6	ed1f3ed467fe	golang.org/x/net@v0.27.0	0.33.0

Open the chart page →

3,029

multusmultus

0.2.0

2 of 2 See more

multus multus 0.2.0

2 of the 2 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	golang.org/x/net@v0.23.0	0.33.0
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller :v0.3.7	2a2bb32c0ea8	golang.org/x/net@v0.30.0	0.33.0

Open the chart page →

1,866

devops-demomungari-development-charts

1.0.4

1 of 4 See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	golang.org/x/net@v0.0.0-20220909164309-bea034e7d591	0.33.0

Open the chart page →

9,019

approuvezmvisonneau

0.1.1

1 of 1 See more

approuvez mvisonneau 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
ghcr.io/mvisonneau/approuvez :v0.1.0	441da62e6cb3	golang.org/x/net@v0.0.0-20190311183353-d8887717615a	0.33.0

Open the chart page →

1,978

unpollermvisonneau

0.1.0

1 of 1 See more

unpoller mvisonneau 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
golift/unifi-poller :v2.9.2	585a29a06d05	golang.org/x/net@v0.15.0	0.33.0

Open the chart page →

1,190

authmya

22.4.3

1 of 1 See more

auth mya 22.4.3

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
cesanta/docker_auth :1.6.0	4d16885f3d4c	golang.org/x/net@v0.0.0-20190813141303-74dc4d7220e7	0.33.0

Open the chart page →

2,381

cognativemya

0.2403.3

2 of 3 See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
grafana/grafana :10.4.0	f9811e4e687f	golang.org/x/net@v0.20.0	0.33.0
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	golang.org/x/net@v0.21.0	0.33.0

Open the chart page →

7,396

giteamya

23.12.5

1 of 1 See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2024-45338.

Container image	Digest	Package	Fixed in
gitea/gitea :1.21.6	ac73e0da341f	golang.org/x/net@v0.20.0	0.33.0

Open the chart page →

3,436

Container images carrying it

2,333 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws :1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64	b32c99e7bc45	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0	1
public.ecr.aws/boundless-software/switchblade :release-v0.0.19-lcm	01d8413d5075	golang.org/x/net@v0.21.0	0.33.0	1
public.ecr.aws/docker/library/caddy :2.6.3	87cbd356af2e	golang.org/x/net@v0.5.0	0.33.0	1
public.ecr.aws/dynatrace/dynatrace-operator :v1.3.0	f68901a54664	golang.org/x/net@v0.28.0	0.33.0	1
public.ecr.aws/eks-distro/kubernetes/kube-scheduler :v1.29.14-eks-1-29-latest	e7e1db003e6a	golang.org/x/net@v0.24.0	0.33.0	1
public.ecr.aws/groundcovercom/loki-proxy :0.1.1	783d550ad813	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.33.0	1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	golang.org/x/net@v0.0.0-20200520004742-59133d7f0dd7	0.33.0	1
public.ecr.aws/j1r0q0g6/training/training-operator :760ac1171dd30039a7363ffa03c77454bd714da5	ae59d222fd87	golang.org/x/net@v0.0.0-20210405180319-a5a99cb37ef4	0.33.0	1
public.ecr.aws/karpenter/controller :v0.19.3	f0e5ab60b2df	golang.org/x/net@v0.1.0	0.33.0	1
public.ecr.aws/karpenter/controller :1.1.1	fe383abf1dbc	golang.org/x/net@v0.30.0	0.33.0	1
public.ecr.aws/neuron/neuron-device-plugin :2.23.30.0	75a6d5ce3bd3	golang.org/x/net@v0.23.0	0.33.0	1
public.ecr.aws/neuron/neuron-scheduler :2.23.30.0	4cd274463e6b	golang.org/x/net@v0.23.0	0.33.0	1
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	golang.org/x/net@v0.28.0	0.33.0	1
public.ecr.aws/perfectscale-io/kube-state-metrics :4.1.14-redhat	849e235e2d3e	golang.org/x/net@v0.17.0	0.33.0	1
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	golang.org/x/net@v0.27.0	0.33.0	1
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	golang.org/x/net@v0.32.0	0.33.0	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	golang.org/x/net@v0.0.0-20210525063256-abc453219eb5	0.33.0	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd	0.33.0	1
public.ecr.aws/t0u0d5o5/ecr_authenticator :latest	077e4e57e41c	golang.org/x/net@v0.17.0	0.33.0	1
quay.io/aerokube/boot :1.0.1	3c269612053f	golang.org/x/net@v0.24.0	0.33.0	1
quay.io/aerokube/browser-ops :2.6.7	807c1bb67086	golang.org/x/net@v0.23.0	0.33.0	1
quay.io/aerokube/keygen :1.0.1	578934444f04	golang.org/x/net@v0.8.0	0.33.0	1
quay.io/aerokube/moon :2.5.1	a8837b00ba1c	golang.org/x/net@v0.7.0	0.33.0	1
quay.io/aerokube/moon-conf :2.5.1	9ca307b30080	golang.org/x/net@v0.7.0	0.33.0	1
quay.io/aerokube/moon-ui :2.0.5	89990b146824	golang.org/x/net@v0.11.0	0.33.0	1
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	golang.org/x/net@v0.20.0	0.33.0	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	golang.org/x/net@v0.0.0-20220621193019-9d032be2e588	0.33.0	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	golang.org/x/net@v0.17.0	0.33.0	1
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	golang.org/x/net@v0.19.0	0.33.0	1
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	golang.org/x/net@v0.10.0	0.33.0	1
quay.io/argoprojlabs/argocd-operator :v0.4.0	cf8faa986789	golang.org/x/net@v0.0.0-20220621193019-9d032be2e588	0.33.0	1
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	golang.org/x/net@v0.19.0	0.33.0	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b	0.33.0	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4	0.33.0	1
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	golang.org/x/net@v0.7.0	0.33.0	1
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	golang.org/x/net@v0.17.0	0.33.0	1
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	golang.org/x/net@v0.17.0	0.33.0	1
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	golang.org/x/net@v0.21.0	0.33.0	1
quay.io/brancz/kube-rbac-proxy :v0.18.0	754ab2a723c8	golang.org/x/net@v0.26.0	0.33.0	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	golang.org/x/net@v0.0.0-20210825183410-e898025ed96a	0.33.0	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	golang.org/x/net@v0.19.0	0.33.0	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	golang.org/x/net@v0.19.0	0.33.0	1
quay.io/cilium/tetragon :v1.1.0	96fac2482898	golang.org/x/net@v0.24.0	0.33.0	1
quay.io/cilium/tetragon-ci :b6f3056a3f6cf05e366a3e07348f7c0b6265a60f	5efd991d218b	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de	0.33.0	1
quay.io/cilium/tetragon-operator :v0.8.3	4ab8e6604204	golang.org/x/net@v0.0.0-20220615171555-694bf12d69de	0.33.0	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	golang.org/x/net@v0.0.0-20220107192237-5cfca573fb4d	0.33.0	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	golang.org/x/net@v0.14.0	0.33.0	1
quay.io/coreos/etcd :v3.5.11	842975891182	golang.org/x/net@v0.17.0	0.33.0	1
quay.io/coreos/etcd :v3.5.16	d967d98a12dc	golang.org/x/net@v0.23.0	0.33.0	1
quay.io/cortexproject/cortex :v1.9.0	5d1c2cf4c538	golang.org/x/net@v0.0.0-20210324051636-2c4c8ecb7826	0.33.0	1