StackRadar

CVE-2026-34986

High

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
405
of 17,781 indexed, latest versions
Container images
402
deployed by those charts
Fix available
2 of 3
affected packages

Go JOSE Panics in JWE decryption

Carried by container images the latest versions of 405 of 17,781 indexed charts deploy, on 402 images.

Affected packageAffected versionsFixed inImages
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.4, v4.0.5+4 more4.1.4280
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+2 more3.0.5169
github.com/go-jose/go-josegolangv2.6.3+incompatibleno fix listed4
OSV records
GHSA-78h2-9frx-2jm8
Also known as
GO-2026-4945

Charts affected

405 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.01 of 3See more

argo-cd argo 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

3,218
artifact-hubartifact-hubVerified publisher1.23.03 of 7See more

artifact-hub artifact-hub 1.23.0

3 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
artifacthub/scanner:v1.23.02d8365601f0e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
artifacthub/tracker:v1.23.05368d21a6e5c
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

10,755
mimir-distributedgrafana6.2.01 of 6See more

mimir-distributed grafana 6.2.0

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

4,517
argo-cdargo-cd-oci10.9.01 of 3See more

argo-cd argo-cd-oci 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

3,218
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

1,765
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4

Open the chart page →

969
openebsopenebsOfficialVerified publisher4.6.12 of 35See more

openebs openebs 4.6.1

2 of the 35 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

23,894
connectonepassword-connect2.4.12 of 2See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
1password/connect-api:1.8.2e915c0c84397
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1password/connect-sync:1.8.26297ca6136c0
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

2,550
miniominio-official5.4.01 of 2See more

minio minio-official 5.4.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

2,483
vault-secrets-operatorhashicorpVerified publisher1.5.11 of 2See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed

Open the chart page →

1,040
atlantisatlantis6.15.01 of 1See more

atlantis atlantis 6.15.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,891
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

3,475
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

2,221
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

19,391
pulsarapache4.7.02 of 10See more

pulsar apache 4.7.0

2 of the 10 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
grafana/grafana:12.4.1e932bd6ed0e0
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

9,864
miniocloudpirates-minioVerified publisher0.13.41 of 1See more

minio cloudpirates-minio 0.13.4

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

961
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

3,157
hydraory0.64.01 of 2See more

hydra ory 0.64.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/hydra:v26.2.0ff67c7fb5f95
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5

Open the chart page →

1,156
headscalegabe565Verified publisher0.16.01 of 2See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4

Open the chart page →

1,979
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

16,251
k8sgpt-operatork8sgptOfficialVerified publisher0.2.291 of 2See more

k8sgpt-operator k8sgpt 0.2.29

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed

Open the chart page →

966
kratosory0.64.01 of 1See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/kratos:v26.2.02a13bb8d362c
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4

Open the chart page →

866
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

2,321
cloudflaredkubitodevVerified publisher1.7.91 of 1See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,437
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

5,240
dgraphdgraph24.1.41 of 1See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
dgraph/dgraph:v24.1.4b57fa31f9b7f
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,993
falcosidekickfalcosecurity0.14.01 of 1See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.32.01976da721518
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

1,633
plane-cemakeplaneOfficialVerified publisher1.8.11 of 11See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

4,854
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

10,670
spirespiffeVerified publisher0.30.21 of 10See more

spire spiffe 0.30.2

1 of the 10 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

1,640
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

1,235
codefreshcodefresh-onpremOfficialVerified publisher2.12.131 of 42See more

codefresh codefresh-onprem 2.12.13

1 of the 42 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5

Open the chart page →

14,956
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
supabase/gotrue:v2.163.0ba4ddc594b0b
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

23,123
budibasebudibase0.0.0-master1 of 7See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

10,775
minifluxgabe565Verified publisher0.9.21 of 2See more

miniflux gabe565 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

1,247
tailing-sidecar-operatortailing-sidecar-operatorOfficialVerified publisher0.111.01 of 2See more

tailing-sidecar-operator tailing-sidecar-operator 0.111.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed

Open the chart page →

1,205
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

23,228
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
library/traefik:v2.11.00a5157f742d2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

17,245
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,039
gatustwin1.5.01 of 1See more

gatus twin 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
twinproduction/gatus:v5.34.03fff895e77d3
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

721
codercoderOfficialVerified publisher1.44.61 of 2See more

coder coder 1.44.6

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

6,849
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

4,531
oathkeeperory0.64.01 of 1See more

oathkeeper ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/oathkeeper:v26.2.0467329abde34
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4

Open the chart page →

769
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

16,210
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

14,240
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

2,984
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

17,263
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

14,094
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

27,267
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

1,981

Container images carrying it

402 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kkb0318/irsa-manager:0.3.296d600ae97b4
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/go-jose/go-jose/v3@v3.0.1
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
1
ghcr.io/sigstore/scaffolding/serverae8eb69c7b70
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.