CVE-2024-6104
MediumAdvisory
Published 24 Jun 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.0
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 252
- of 17,781 indexed, latest versions
- Container images
- 243
- deployed by those charts
- Fix available
- 1 of 1
- affected package
go-retryablehttp can leak basic auth credentials to log files
Carried by container images the latest versions of 252 of 17,781 indexed charts deploy, on 243 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.5.1, v0.5.2, v0.5.3, v0.5.4+11 more | 0.7.7 | 243 |
- OSV records
- GHSA-v6v8-xj6m-xwqh
- Also known as
- GO-2024-2947
Charts affected
252 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
243 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| assistiot/ | 30812ba93555 | github.com/ | 0.7.7 | 1 |
| bitnamilegacy/ | 3c26208691a1 | github.com/ | 0.7.7 | 1 |
| buddyspencer/ | 9e7dbf923c12 | github.com/ | 0.7.7 | 1 |
| coderenvs/ | 1deffc4670e6 | github.com/ | 0.7.7 | 1 |
| containous/ | 587162516502 | github.com/ | 0.7.7 | 1 |
| craftypath/ | 402a0024c732 | github.com/ | 0.7.7 | 1 |
| daprio/ | 4be696707bd1 | github.com/ | 0.7.7 | 1 |
| daprio/ | 7ba5d51e5b97 | github.com/ | 0.7.7 | 1 |
| datappeal/ | e38c085a3567 | github.com/ | 0.7.7 | 1 |
| ddosify/ | ea602056d9ce | github.com/ | 0.7.7 | 1 |
| defactops/ | 825cdf9ba706 | github.com/ | 0.7.7 | 1 |
| devopsfaith/ | 4c678c224f67 | github.com/ | 0.7.7 | 1 |
| dexidp/ | 43655afd1a8f | github.com/ | 0.7.7 | 1 |
| dollarshaveclub/ | 14a257836529 | github.com/ | 0.7.7 | 1 |
| dongjiang1989/ | 2a3ead6a55dc | github.com/ | 0.7.7 | 1 |
| drone/ | 55897c8fb22d | github.com/ | 0.7.7 | 1 |
| easysoft/ | 592ad5df1f8b | github.com/ | 0.7.7 | 1 |
| flomesh/ | b188e128cbfe | github.com/ | 0.7.7 | 1 |
| flomesh/ | add7a4da4622 | github.com/ | 0.7.7 | 1 |
| flomesh/ | 47287e3ad324 | github.com/ | 0.7.7 | 1 |
| fluxcd/ | 92b891e495d8 | github.com/ | 0.7.7 | 1 |
| fluxcd/ | 31a8c79a6803 | github.com/ | 0.7.7 | 1 |
| foxcpp/ | 6ab538e2f28b | github.com/ | 0.7.7 | 1 |
| foxcpp/ | 8fa2bd8f6830 | github.com/ | 0.7.7 | 1 |
| gitea/ | 85416d6f65fe | github.com/ | 0.7.7 | 1 |
| gitea/ | ac73e0da341f | github.com/ | 0.7.7 | 1 |
| gitea/ | d5ab14cd29af | github.com/ | 0.7.7 | 1 |
| gitlab/ | 860d4a3fec7a | github.com/ | 0.7.7 | 1 |
| goharbor/ | b9522c3f5056 | github.com/ | 0.7.7 | 1 |
| grafana/ | f6cbec9409be | github.com/ | 0.7.7 | 1 |
| grafana/ | c3dac4e26471 | github.com/ | 0.7.7 | 1 |
| grafana/ | 0679e877ba20 | github.com/ | 0.7.7 | 1 |
| grafana/ | 1b9ca4bbc4a2 | github.com/ | 0.7.7 | 1 |
| grafana/ | 6b5b37eb35bb | github.com/ | 0.7.7 | 1 |
| grafana/ | 8640e5038e83 | github.com/ | 0.7.7 | 1 |
| grafana/ | f9811e4e687f | github.com/ | 0.7.7 | 1 |
| grafana/ | 6074e01dbe03 | github.com/ | 0.7.7 | 1 |
| grafana/ | 6ca6e2cd3b6f | github.com/ | 0.7.7 | 1 |
| grafana/ | 757b5fadf816 | github.com/ | 0.7.7 | 1 |
| grafana/ | 7476e456c738 | github.com/ | 0.7.7 | 1 |
| grafana/ | 330f990cdad9 | github.com/ | 0.7.7 | 1 |
| grafana/ | d3de3da9431c | github.com/ | 0.7.7 | 1 |
| hashicorp/ | 339b78b61750 | github.com/ | 0.7.7 | 1 |
| hashicorp/ | fb70bd9210ff | github.com/ | 0.7.7 | 1 |
| hashicorp/ | 712fe02d2f84 | github.com/ | 0.7.7 | 1 |
| hashicorp/ | ddff34041c5c | github.com/ | 0.7.7 | 1 |
| hashicorp/ | 0e4452f0f265 | github.com/ | 0.7.7 | 1 |
| hashicorp/ | 62bed1bf8106 | github.com/ | 0.7.7 | 1 |
| hashicorp/ | 4dcb45513699 | github.com/ | 0.7.7 | 1 |
| hashicorp/ | b19857bab620 | github.com/ | 0.7.7 | 1 |