StackRadar

CVE-2024-8260

Medium

Advisory

Published 30 Aug 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
33
of 17,781 indexed, latest versions
Container images
39
deployed by those charts
Fix available
1 of 1
affected package

OPA for Windows has an SMB force-authentication vulnerability

Carried by container images the latest versions of 33 of 17,781 indexed charts deploy, on 39 images.

Affected packageAffected versionsFixed inImages
github.com/open-policy-agent/opagolangv0.0.0-20230321113606-0ffef53acc0a, v0.0.0-20230606071249-947d65b372ee, v0.24.0, v0.25.2+16 more0.68.039
OSV records
GHSA-c77r-fh37-x2px
Also known as
GO-2024-3141

Charts affected

33 by stars
ChartLatestAffected imagesRadar Score
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
github.com/open-policy-agent/opa@v0.51.0
0.68.0

Open the chart page →

1,942
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/open-policy-agent/opa@v0.45.0
0.68.0

Open the chart page →

2,898
finops-stackcert-managerVerified publisher0.0.56 of 12See more

finops-stack cert-manager 0.0.5

6 of the 12 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/open-policy-agent/opa@v0.61.0
0.68.0
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/open-policy-agent/opa@v0.61.0
0.68.0
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/open-policy-agent/opa@v0.61.0
0.68.0
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/open-policy-agent/opa@v0.61.0
0.68.0
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/open-policy-agent/opa@v0.61.0
0.68.0
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/open-policy-agent/opa@v0.61.0
0.68.0

Open the chart page →

12,562
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/open-policy-agent/opa@v0.44.1-0.20220927105354-00e835a7cc15
0.68.0

Open the chart page →

5,598
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/open-policy-agent/opa@v0.64.1
0.68.0

Open the chart page →

4,300
spirephilips-labsVerified publisher0.12.21 of 6See more

spire philips-labs 0.12.2

1 of the 6 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
github.com/open-policy-agent/opa@v0.49.0
0.68.0

Open the chart page →

7,236
artifact-hubsoftonic1.19.04 of 8See more

artifact-hub softonic 1.19.0

4 of the 8 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/open-policy-agent/opa@v0.45.0
0.68.0
artifacthub/hub:v1.19.0111918d8c399
github.com/open-policy-agent/opa@v0.65.0
0.68.0
artifacthub/scanner:v1.19.0323d026e78c3
github.com/open-policy-agent/opa@v0.62.0
0.68.0
artifacthub/tracker:v1.19.06596c8c4d955
github.com/open-policy-agent/opa@v0.65.0
0.68.0

Open the chart page →

14,491
harbor-scanner-trivyaqua-helm0.17.01 of 1See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/open-policy-agent/opa@v0.25.2
0.68.0

Open the chart page →

5,202
kovecmacraeVerified publisher0.2.01 of 1See more

kove cmacrae 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
ghcr.io/cmacrae/kove:v0.2.0185bfaae750c
github.com/open-policy-agent/opa@v0.25.2
0.68.0

Open the chart page →

2,089
kove-deprecationscmacraeVerified publisher0.1.21 of 1See more

kove-deprecations cmacrae 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
ghcr.io/cmacrae/kove:v0.1.0db1244edefc8
github.com/open-policy-agent/opa@v0.25.2
0.68.0

Open the chart page →

2,203
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/open-policy-agent/opa@v0.45.0
0.68.0

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/open-policy-agent/opa@v0.45.0
0.68.0

Open the chart page →

68,240
gatekeeperdoubanVerified publisher3.17.11 of 3See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.17.1b7b4d7cfdd52
github.com/open-policy-agent/opa@v0.67.0
0.68.0

Open the chart page →

2,490
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/open-policy-agent/opa@v0.51.0
0.68.0

Open the chart page →

2,607
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
github.com/open-policy-agent/opa@v0.0.0-20230321113606-0ffef53acc0a
0.68.0

Open the chart page →

7,862
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/open-policy-agent/opa@v0.62.0
0.68.0

Open the chart page →

3,999
harborkubesphereVerified publisher1.9.31 of 11See more

harbor kubesphere 1.9.3

1 of the 11 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/open-policy-agent/opa@v0.41.0
0.68.0

Open the chart page →

17,798
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
github.com/open-policy-agent/opa@v0.58.0
0.68.0

Open the chart page →

1,308
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/open-policy-agent/opa@v0.43.0
0.68.0

Open the chart page →

4,271
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/open-policy-agent/opa@v0.58.0
0.68.0

Open the chart page →

9,774
gatekeepermesosphere0.6.111 of 2See more

gatekeeper mesosphere 0.6.11

1 of the 2 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
github.com/open-policy-agent/opa@v0.24.0
0.68.0

Open the chart page →

3,034
gatekeepermesosphere-stable0.6.111 of 2See more

gatekeeper mesosphere-stable 0.6.11

1 of the 2 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
github.com/open-policy-agent/opa@v0.24.0
0.68.0

Open the chart page →

3,034
opa-nginxopa-nginx0.0.31 of 2See more

opa-nginx opa-nginx 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
openpolicyagent/opa:0.53.16a58dea59933
github.com/open-policy-agent/opa@v0.0.0-20230606071249-947d65b372ee
0.68.0

Open the chart page →

2,167
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/open-policy-agent/opa@v0.40.0
0.68.0

Open the chart page →

8,599
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/open-policy-agent/opa@v0.25.2
0.68.0

Open the chart page →

29,227
fleet-vendoredrock8sVerified publisher6.5.11 of 1See more

fleet-vendored rock8s 6.5.1

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
fleetdm/fleet:v4.66.012e644b7f40e
github.com/open-policy-agent/opa@v0.44.0
0.68.0

Open the chart page →

1,581
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/open-policy-agent/opa@v0.45.0
0.68.0

Open the chart page →

68,240
bytesafe-cesimcube1.0.41 of 3See more

bytesafe-ce simcube 1.0.4

1 of the 3 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
bytesafe/bytesafe-ce:v1.0.4ee287384c005
github.com/open-policy-agent/opa@v0.52.0
0.68.0

Open the chart page →

1,494
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/open-policy-agent/opa@v0.45.0
0.68.0

Open the chart page →

7,672
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/open-policy-agent/opa@v0.45.0
0.68.0

Open the chart page →

2,505
starboard-operatorstatcan0.10.41 of 1See more

starboard-operator statcan 0.10.4

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
aquasec/starboard-operator:0.15.4be34f709e1ce
github.com/open-policy-agent/opa@v0.39.0
0.68.0

Open the chart page →

1,827
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/open-policy-agent/opa@v0.64.1
0.68.0

Open the chart page →

2,477
posteetrivy-operator2.14.02 of 3See more

postee trivy-operator 2.14.0

2 of the 3 container images this version deploys carry CVE-2024-8260.

Container imageDigestPackageFixed in
aquasec/postee:2.12.0-amd640795cba777e7
github.com/open-policy-agent/opa@v0.45.0
0.68.0
aquasec/postee-ui:2.12.0-amd64c0467c3941dc
github.com/open-policy-agent/opa@v0.44.0
0.68.0

Open the chart page →

4,815

Container images carrying it

39 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/open-policy-agent/opa@v0.45.0
0.68.0
3
openpolicyagent/gatekeeper:v3.4.0-rc.1825370bdb3c3
github.com/open-policy-agent/opa@v0.24.0
0.68.0
2
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/open-policy-agent/opa@v0.64.1
0.68.0
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/open-policy-agent/opa@v0.25.2
0.68.0
1
aquasec/postee:2.12.0-amd640795cba777e7
github.com/open-policy-agent/opa@v0.45.0
0.68.0
1
aquasec/postee-ui:2.12.0-amd64c0467c3941dc
github.com/open-policy-agent/opa@v0.44.0
0.68.0
1
aquasec/starboard-operator:0.15.4be34f709e1ce
github.com/open-policy-agent/opa@v0.39.0
0.68.0
1
aquasec/trivy:0.43.1944a04445179
github.com/open-policy-agent/opa@v0.45.0
0.68.0
1
aquasec/trivy:0.32.0973d0df16189
github.com/open-policy-agent/opa@v0.43.0
0.68.0
1
artifacthub/hub:v1.19.0111918d8c399
github.com/open-policy-agent/opa@v0.65.0
0.68.0
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/open-policy-agent/opa@v0.62.0
0.68.0
1
artifacthub/tracker:v1.19.06596c8c4d955
github.com/open-policy-agent/opa@v0.65.0
0.68.0
1
bytesafe/bytesafe-ce:v1.0.4ee287384c005
github.com/open-policy-agent/opa@v0.52.0
0.68.0
1
datadog/agent:6aad9994de6a7
github.com/open-policy-agent/opa@v0.62.0
0.68.0
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/open-policy-agent/opa@v0.44.1-0.20220927105354-00e835a7cc15
0.68.0
1
fleetdm/fleet:v4.66.012e644b7f40e
github.com/open-policy-agent/opa@v0.44.0
0.68.0
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/open-policy-agent/opa@v0.41.0
0.68.0
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/open-policy-agent/opa@v0.45.0
0.68.0
1
megaease/easegress:latestfad1c7452958
github.com/open-policy-agent/opa@v0.58.0
0.68.0
1
openpolicyagent/gatekeeper:v3.17.1b7b4d7cfdd52
github.com/open-policy-agent/opa@v0.67.0
0.68.0
1
openpolicyagent/opa:0.53.16a58dea59933
github.com/open-policy-agent/opa@v0.0.0-20230606071249-947d65b372ee
0.68.0
1
pomerium/pomerium:v0.22.19c69b10a2126
github.com/open-policy-agent/opa@v0.51.0
0.68.0
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/open-policy-agent/opa@v0.45.0
0.68.0
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/open-policy-agent/opa@v0.45.0
0.68.0
1
ghcr.io/cmacrae/kove:v0.2.0185bfaae750c
github.com/open-policy-agent/opa@v0.25.2
0.68.0
1
ghcr.io/cmacrae/kove:v0.1.0db1244edefc8
github.com/open-policy-agent/opa@v0.25.2
0.68.0
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/open-policy-agent/opa@v0.61.0
0.68.0
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/open-policy-agent/opa@v0.61.0
0.68.0
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/open-policy-agent/opa@v0.61.0
0.68.0
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/open-policy-agent/opa@v0.61.0
0.68.0
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/open-policy-agent/opa@v0.61.0
0.68.0
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/open-policy-agent/opa@v0.61.0
0.68.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/open-policy-agent/opa@v0.58.0
0.68.0
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/open-policy-agent/opa@v0.64.1
0.68.0
1
ghcr.io/spiffe/spire-server:1.6.0635b9024cad2
github.com/open-policy-agent/opa@v0.49.0
0.68.0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
github.com/open-policy-agent/opa@v0.0.0-20230321113606-0ffef53acc0a
0.68.0
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/open-policy-agent/opa@v0.51.0
0.68.0
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/open-policy-agent/opa@v0.40.0
0.68.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/open-policy-agent/opa@v0.25.2
0.68.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.