CVE-2024-45339
HighAdvisory
Published 28 Jan 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.1
- base score, highest
- EPSS
- 0.003
- 25th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 185
- of 17,781 indexed, latest versions
- Container images
- 174
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Insecure Temporary File usage in github.com/golang/glog
Carried by container images the latest versions of 185 of 17,781 indexed charts deploy, on 174 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20141105023935-44145f04b68c, v0.0.0-20160126235308-23def4e6c14b, v0.0.0-20210429001901-424d2337a529, v1.0.0+7 more | 1.2.4 | 174 |
- OSV records
- GHSA-6wxm-mpqj-6jpf
- Also known as
- GO-2025-3372
Charts affected
185 by stars
Container images carrying it
174 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| jaegertracing/ | 7f1269222903 | github.com/ | 1.2.4 | 4 |
| jaegertracing/ | 049bb0d64ea3 | github.com/ | 1.2.4 | 4 |
| caddy/ | 18d1366fc0e9 | github.com/ | 1.2.4 | 3 |
| dgraph/ | 3b55ea83fffe | github.com/ | 1.2.4 | 3 |
| grafana/ | 0dc5a246ab16 | github.com/ | 1.2.4 | 3 |
| oryd/ | 2c93beb5e5f2 | github.com/ | 1.2.4 | 3 |
| public.ecr.aws/ | fefa9ee7256a | github.com/ | 1.2.4 | 3 |
| quay.io/ | f402e6039b3c | github.com/ | 1.2.4 | 3 |
| registry.k8s.io/ | c825f3d5e28b | github.com/ | 1.2.4 | 3 |
| aquasec/ | ea3e33bc3c4e | github.com/ | 1.2.4 | 2 |
| ayushsobti/ | 4c94e8f8924e | github.com/ | 1.2.4 | 2 |
| danielfm/ | 7152b84e57cb | github.com/ | 1.2.4 | 2 |
| grafana/ | 057896e23443 | github.com/ | 1.2.4 | 2 |
| grafana/ | 079600c9517b | github.com/ | 1.2.4 | 2 |
| grafana/ | 42d3e6bc1865 | github.com/ | 1.2.4 | 2 |
| grafana/ | 886b56d5534e | github.com/ | 1.2.4 | 2 |
| hanchuanchuan/ | b3c0dd26fb50 | github.com/ | 1.2.4 | 2 |
| hoppscotch/ | f1da831950b7 | github.com/ | 1.2.4 | 2 |
| iomesh/ | f4878c8ae53a | github.com/ | 1.2.4 | 2 |
| ipfs/ | 1a30f5ed8579 | github.com/ | 1.2.4 | 2 |
| jaegertracing/ | 04d224a9999b | github.com/ | 1.2.4 | 2 |
| k0sproject/ | f04635825d51 | github.com/ | 1.2.4 | 2 |
| kubernetesui/ | 148991563e37 | github.com/ | 1.2.4 | 2 |
| openpolicyagent/ | 825370bdb3c3 | github.com/ | 1.2.4 | 2 |
| oryd/ | d06fc5845f63 | github.com/ | 1.2.4 | 2 |
| oryd/ | fe2428f103a6 | github.com/ | 1.2.4 | 2 |
| oryd/ | e8cb9b79a89c | github.com/ | 1.2.4 | 2 |
| phntom/ | 3b82358bd56e | github.com/ | 1.2.4 | 2 |
| streamnative/ | 0e6d7aa3ef32 | github.com/ | 1.2.4 | 2 |
| gcr.io/ | 2de1d15fc1f2 | github.com/ | 1.2.4 | 2 |
| ghcr.io/ | cd264d33efd4 | github.com/ | 1.2.4 | 2 |
| ghcr.io/ | 0d1df8f436f7 | github.com/ | 1.2.4 | 2 |
| ghcr.io/ | 228f7f44594a | github.com/ | 1.2.4 | 2 |
| quay.io/ | 8c65b333a3d3 | github.com/ | 1.2.4 | 2 |
| registry.k8s.io/ | 63d5e04551ec | github.com/ | 1.2.4 | 2 |
| 1password/ | 5884757f7879 | github.com/ | 1.2.4 | 1 |
| altinity/ | db7dde971407 | github.com/ | 1.2.4 | 1 |
| altinity/ | 85b4fdbae053 | github.com/ | 1.2.4 | 1 |
| amazon/ | d8ab0eef5074 | github.com/ | 1.2.4 | 1 |
| apecloud/ | dbca95a15bc1 | github.com/ | 1.2.4 | 1 |
| aquasec/ | 6672264accce | github.com/ | 1.2.4 | 1 |
| aquasec/ | c329d73fea58 | github.com/ | 1.2.4 | 1 |
| avaprotocol/ | c430ea5c37d6 | github.com/ | 1.2.4 | 1 |
| baserow/ | df0c42eb67e8 | github.com/ | 1.2.4 | 1 |
| bloxstaking/ | bf6d7d2fdc93 | github.com/ | 1.2.4 | 1 |
| coredns/ | a0ead06651cf | github.com/ | 1.2.4 | 1 |
| ctrox/ | 3c72862bea3c | github.com/ | 1.2.4 | 1 |
| danielfm/ | 12485563b1d0 | github.com/ | 1.2.4 | 1 |
| darthsim/ | 40f6eb807444 | github.com/ | 1.2.4 | 1 |
| datamate/ | 2dd66b722464 | github.com/ | 1.2.4 | 1 |