CVE-2024-45339
HighAdvisory
Published 28 Jan 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.1
- base score, highest
- EPSS
- 0.003
- 25th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 185
- of 17,781 indexed, latest versions
- Container images
- 174
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Insecure Temporary File usage in github.com/golang/glog
Carried by container images the latest versions of 185 of 17,781 indexed charts deploy, on 174 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20141105023935-44145f04b68c, v0.0.0-20160126235308-23def4e6c14b, v0.0.0-20210429001901-424d2337a529, v1.0.0+7 more | 1.2.4 | 174 |
- OSV records
- GHSA-6wxm-mpqj-6jpf
- Also known as
- GO-2025-3372
Charts affected
185 by stars
Container images carrying it
174 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| deepflowce/ | 34fcc526dd59 | github.com/ | 1.2.4 | 1 |
| defactops/ | 825cdf9ba706 | github.com/ | 1.2.4 | 1 |
| elastisys/ | 509b94f1da55 | github.com/ | 1.2.4 | 1 |
| gboxproxy/ | 3a9f4a711d5c | github.com/ | 1.2.4 | 1 |
| gobitfly/ | 1d08a7986348 | github.com/ | 1.2.4 | 1 |
| grafana/ | 0679e877ba20 | github.com/ | 1.2.4 | 1 |
| grafana/ | 1a359d92f40e | github.com/ | 1.2.4 | 1 |
| grafana/ | 1b9ca4bbc4a2 | github.com/ | 1.2.4 | 1 |
| grafana/ | 39c849cebccc | github.com/ | 1.2.4 | 1 |
| grafana/ | 464eac539793 | github.com/ | 1.2.4 | 1 |
| grafana/ | 6b5b37eb35bb | github.com/ | 1.2.4 | 1 |
| grafana/ | 76dcf36e7d2a | github.com/ | 1.2.4 | 1 |
| grafana/ | 8640e5038e83 | github.com/ | 1.2.4 | 1 |
| grafana/ | 9746858c20e6 | github.com/ | 1.2.4 | 1 |
| grafana/ | a738d0744784 | github.com/ | 1.2.4 | 1 |
| grafana/ | b23b588cf7cb | github.com/ | 1.2.4 | 1 |
| grafana/ | cd7cb4345aa7 | github.com/ | 1.2.4 | 1 |
| grafana/ | cf81d2c753c8 | github.com/ | 1.2.4 | 1 |
| grafana/ | ecc1b80b8ca2 | github.com/ | 1.2.4 | 1 |
| grafana/ | f9811e4e687f | github.com/ | 1.2.4 | 1 |
| grafana/ | 7476e456c738 | github.com/ | 1.2.4 | 1 |
| grafana/ | 85f55510e0d3 | github.com/ | 1.2.4 | 1 |
| hoppscotch/ | 538fe6ded4b6 | github.com/ | 1.2.4 | 1 |
| hyperledgerk8s/ | 29a8af8be270 | github.com/ | 1.2.4 | 1 |
| inaccel/ | a5d3d0af05c1 | github.com/ | 1.2.4 | 1 |
| inaccel/ | 44b4f274f40b | github.com/ | 1.2.4 | 1 |
| intel/ | 3426deb77337 | github.com/ | 1.2.4 | 1 |
| jaegertracing/ | 42822be7888b | github.com/ | 1.2.4 | 1 |
| jaegertracing/ | 60e65bfffe1f | github.com/ | 1.2.4 | 1 |
| jaegertracing/ | 7d32a4eddec7 | github.com/ | 1.2.4 | 1 |
| jaegertracing/ | f6b5d09073f1 | github.com/ | 1.2.4 | 1 |
| jaegertracing/ | ff81f0a9f63c | github.com/ | 1.2.4 | 1 |
| jaegertracing/ | b636f0f464bc | github.com/ | 1.2.4 | 1 |
| joeelliott/ | b4acd14642d0 | github.com/ | 1.2.4 | 1 |
| juicedata/ | 43978fc60798 | github.com/ | 1.2.4 | 1 |
| keyporttech/ | 5bd7955ea2f1 | github.com/ | 1.2.4 | 1 |
| kfirfer/ | c257c1e0e8b9 | github.com/ | 1.2.4 | 1 |
| kubeflow/ | 5783f6db428f | github.com/ | 1.2.4 | 1 |
| kubeflownotebookswg/ | 2060a2ede788 | github.com/ | 1.2.4 | 1 |
| kubeflownotebookswg/ | f226fb44db57 | github.com/ | 1.2.4 | 1 |
| kubemod/ | 028347c9fa77 | github.com/ | 1.2.4 | 1 |
| kubernetesui/ | 290bebc3cd96 | github.com/ | 1.2.4 | 1 |
| kubernetesui/ | 2e500d29e9d5 | github.com/ | 1.2.4 | 1 |
| kusionstack/ | 126c8f0b0976 | github.com/ | 1.2.4 | 1 |
| layer5/ | 8c20a8a1d6a4 | github.com/ | 1.2.4 | 1 |
| layer5/ | fde47c141ec6 | github.com/ | 1.2.4 | 1 |
| library/ | 60fb54d36b4b | github.com/ | 1.2.4 | 1 |
| library/ | 1489caffaedb | github.com/ | 1.2.4 | 1 |
| library/ | 5d47b7bb2546 | github.com/ | 1.2.4 | 1 |
| logiqai/ | 65b996bc7bdc | github.com/ | 1.2.4 | 1 |