CVE-2024-6104
MediumAdvisory
Published 24 Jun 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.0
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 252
- of 17,781 indexed, latest versions
- Container images
- 243
- deployed by those charts
- Fix available
- 1 of 1
- affected package
go-retryablehttp can leak basic auth credentials to log files
Carried by container images the latest versions of 252 of 17,781 indexed charts deploy, on 243 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.5.1, v0.5.2, v0.5.3, v0.5.4+11 more | 0.7.7 | 243 |
- OSV records
- GHSA-v6v8-xj6m-xwqh
- Also known as
- GO-2024-2947
Charts affected
252 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
243 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| sikalabs/ | fdc0c6711add | github.com/ | 0.7.7 | 1 |
| sky5367/ | d51bf68d4b26 | github.com/ | 0.7.7 | 1 |
| slamdev/ | 855f6625dda4 | github.com/ | 0.7.7 | 1 |
| streamnative/ | 31533fa9fab7 | github.com/ | 0.7.7 | 1 |
| su541/ | 371ee33f83c1 | github.com/ | 0.7.7 | 1 |
| summerwind/ | 2128f81dbede | github.com/ | 0.7.7 | 1 |
| svtechnmaa/ | 6e368ace0977 | github.com/ | 0.7.7 | 1 |
| t3nde/ | 77e008f764db | github.com/ | 0.7.7 | 1 |
| tobirachel/ | 7d9f37154994 | github.com/ | 0.7.7 | 1 |
| tundeficky/ | 3cf9a9ce54e8 | github.com/ | 0.7.7 | 1 |
| vultr/ | 541c3e0aec58 | github.com/ | 0.7.7 | 1 |
| vultr/ | 1806f17d620c | github.com/ | 0.7.7 | 1 |
| vultr/ | 41d26735d437 | github.com/ | 0.7.7 | 1 |
| wallarm/ | b55ff6cecbd5 | github.com/ | 0.7.7 | 1 |
| weaveworks/ | a9c2e9df4227 | github.com/ | 0.7.7 | 1 |
| gcr.io/ | 784518ff3ee7 | github.com/ | 0.7.7 | 1 |
| gcr.io/ | 82940e8c3e0d | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 18689773150d | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 744bc929a579 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 657a2c9f6e6d | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 9afcd070940f | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 637083d9369d | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | cbc6e3ea157d | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | d95725b24dbe | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | f4b2dbc19a78 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | df53e2c8998c | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 13964b29d63e | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | f579d00721b0 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | a43323732181 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 627e5e211766 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 2f5be9cde5f9 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 56a1ea4490ba | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 7104f60d8972 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | b803fbe1cdb8 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 6d4106724d56 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 8abb52b66557 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | ebd03028ff6a | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 49b1c312e342 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | aa0c8526ae5e | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | a1d4cf8b8fe1 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | e3d1f1302e49 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | ac8459f70f85 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | af77073c184f | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 06ed5db6cd33 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | b914032ef9ad | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 9c73f1841ebc | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | a61c7022abcf | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 832a32779e6d | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 185d2eebc60c | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 63f7eaf5aa8a | github.com/ | 0.7.7 | 1 |