CVE-2024-6104
MediumAdvisory
Published 24 Jun 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.0
- base score, highest
- EPSS
- 0.004
- 29th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 252
- of 17,781 indexed, latest versions
- Container images
- 243
- deployed by those charts
- Fix available
- 1 of 1
- affected package
go-retryablehttp can leak basic auth credentials to log files
Carried by container images the latest versions of 252 of 17,781 indexed charts deploy, on 243 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.5.1, v0.5.2, v0.5.3, v0.5.4+11 more | 0.7.7 | 243 |
- OSV records
- GHSA-v6v8-xj6m-xwqh
- Also known as
- GO-2024-2947
Charts affected
252 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 2 of 2See more | 5,033 |
Container images carrying it
243 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | c62e3347611c | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 70d74ec46602 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 5dfa86b6451f | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | b69bcdaa8492 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 45e744fc623f | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | e949b0f733f0 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 17369c4cd390 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 056f0953763d | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | b61c750ade19 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 8de11e2363fc | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 511231955463 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 62517726d0c4 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 635b9024cad2 | github.com/ | 0.7.7 | 1 |
| ghcr.io/ | 322f5f8cc105 | github.com/ | 0.7.7 | 1 |
| public.ecr.aws/ | 651739583336 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 5b6701d8fb31 | github.com/ | 0.7.7 | 1 |
| quay.io/ | acaf37352569 | github.com/ | 0.7.7 | 1 |
| quay.io/ | d6fd2a9e3273 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 13aaae779248 | github.com/ | 0.7.7 | 1 |
| quay.io/ | e048bc7a17c2 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 674f45865af1 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 8e9c39c34e89 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 63baf86a49ac | github.com/ | 0.7.7 | 1 |
| quay.io/ | 9663f06adcb1 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 1143471c90db | github.com/ | 0.7.7 | 1 |
| quay.io/ | 4a9d0264055b | github.com/ | 0.7.7 | 1 |
| quay.io/ | 9c0527cab629 | github.com/ | 0.7.7 | 1 |
| quay.io/ | a20c44021a5d | github.com/ | 0.7.7 | 1 |
| quay.io/ | e1642bf8e933 | github.com/ | 0.7.7 | 1 |
| quay.io/ | ada70832a345 | github.com/ | 0.7.7 | 1 |
| quay.io/ | f65b644ed6db | github.com/ | 0.7.7 | 1 |
| quay.io/ | ebba936046ab | github.com/ | 0.7.7 | 1 |
| quay.io/ | 476ae867ae56 | github.com/ | 0.7.7 | 1 |
| quay.io/ | a9f4d31ab811 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 4748e26f9369 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 56e7f18e05dd | github.com/ | 0.7.7 | 1 |
| quay.io/ | f20d3127bf28 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 7b4202c25b67 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 6ba82beff18e | github.com/ | 0.7.7 | 1 |
| quay.io/ | 4853591bd1d2 | github.com/ | 0.7.7 | 1 |
| quay.io/ | b17a8c7d1f32 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 5b62aaade3c9 | github.com/ | 0.7.7 | 1 |
| quay.io/ | 9a6c84560d44 | github.com/ | 0.7.7 | 1 |