CVE-2024-6104
MediumAdvisory
Published 24 Jun 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.0
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 252
- of 17,781 indexed, latest versions
- Container images
- 243
- deployed by those charts
- Fix available
- 1 of 1
- affected package
go-retryablehttp can leak basic auth credentials to log files
Carried by container images the latest versions of 252 of 17,781 indexed charts deploy, on 243 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.5.1, v0.5.2, v0.5.3, v0.5.4+11 more | 0.7.7 | 243 |
- OSV records
- GHSA-v6v8-xj6m-xwqh
- Also known as
- GO-2024-2947
Charts affected
252 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
243 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hashicorp/ | 0b01ed3924e6 | github.com/ | 0.7.7 | 1 |
| hashicorp/ | b2177a8bfe85 | github.com/ | 0.7.7 | 1 |
| hashicorp/ | dfc3500beb0e | github.com/ | 0.7.7 | 1 |
| hashicorp/ | 97d521a27498 | github.com/ | 0.7.7 | 1 |
| huangchengwu6904/ | 1b932f8221a9 | github.com/ | 0.7.7 | 1 |
| juicedata/ | 43978fc60798 | github.com/ | 0.7.7 | 1 |
| jupyterhub/ | a395326989c3 | github.com/ | 0.7.7 | 1 |
| kubebb/ | 20509de4b399 | github.com/ | 0.7.7 | 1 |
| kubebb/ | 2b5894ef1e2f | github.com/ | 0.7.7 | 1 |
| kupnu4x/ | 3be59109f3d6 | github.com/ | 0.7.7 | 1 |
| library/ | 571eb4514977 | github.com/ | 0.7.7 | 1 |
| library/ | a10d46445d68 | github.com/ | 0.7.7 | 1 |
| library/ | ba10ac9ba17a | github.com/ | 0.7.7 | 1 |
| library/ | d7f5dd5f70e2 | github.com/ | 0.7.7 | 1 |
| library/ | f75e48af0598 | github.com/ | 0.7.7 | 1 |
| library/ | 0a5157f742d2 | github.com/ | 0.7.7 | 1 |
| library/ | 1489caffaedb | github.com/ | 0.7.7 | 1 |
| library/ | 1957e3314f43 | github.com/ | 0.7.7 | 1 |
| library/ | 2f603f8d3abe | github.com/ | 0.7.7 | 1 |
| library/ | 5d47b7bb2546 | github.com/ | 0.7.7 | 1 |
| library/ | 7d0228d19042 | github.com/ | 0.7.7 | 1 |
| library/ | eda951fd29a8 | github.com/ | 0.7.7 | 1 |
| library/ | f5af5a5ce17f | github.com/ | 0.7.7 | 1 |
| library/ | f98ac9dd97b0 | github.com/ | 0.7.7 | 1 |
| mesosphere/ | b093d78a21ed | github.com/ | 0.7.7 | 1 |
| minio/ | 55f3aef5803e | github.com/ | 0.7.7 | 1 |
| minio/ | f93c2d9088df | github.com/ | 0.7.7 | 1 |
| minio/ | 053f103f4894 | github.com/ | 0.7.7 | 1 |
| minio/ | e2b7b633c250 | github.com/ | 0.7.7 | 1 |
| minio/ | f00aa6ef2b72 | github.com/ | 0.7.7 | 1 |
| moby/ | c2aeafaed434 | github.com/ | 0.7.7 | 1 |
| monitoror/ | 4b88edcf51ff | github.com/ | 0.7.7 | 1 |
| odavid/ | e7ab3bbc948e | github.com/ | 0.7.7 | 1 |
| opencsghq/ | bdd2c58b9744 | github.com/ | 0.7.7 | 1 |
| opencsghq/ | f6d7e7d6be5d | github.com/ | 0.7.7 | 1 |
| opsgenie/ | ecb246e4d260 | github.com/ | 0.7.7 | 1 |
| oryd/ | 8f15006a080d | github.com/ | 0.7.7 | 1 |
| otel/ | 9e36620d6c2c | github.com/ | 0.7.7 | 1 |
| otel/ | ee9da0b08d83 | github.com/ | 0.7.7 | 1 |
| otel/ | 71fcef33ae71 | github.com/ | 0.7.7 | 1 |
| otel/ | 995f17004231 | github.com/ | 0.7.7 | 1 |
| otel/ | c6671841470b | github.com/ | 0.7.7 | 1 |
| otel/ | dfb3a55ea8c9 | github.com/ | 0.7.7 | 1 |
| prom/ | 4f6c47e39a90 | github.com/ | 0.7.7 | 1 |
| prom/ | b440bc0e8aa5 | github.com/ | 0.7.7 | 1 |
| rancher/ | 8c2599ecfca8 | github.com/ | 0.7.7 | 1 |
| rancher/ | eaa270df79cc | github.com/ | 0.7.7 | 1 |
| runatlantis/ | 45fbaf7e207c | github.com/ | 0.7.7 | 1 |
| sealio/ | b0389d9848a5 | github.com/ | 0.7.7 | 1 |
| sikalabs/ | 7bd267f30247 | github.com/ | 0.7.7 | 1 |