StackRadar

CVE-2026-34986

High

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
405
of 17,781 indexed, latest versions
Container images
402
deployed by those charts
Fix available
2 of 3
affected packages

Go JOSE Panics in JWE decryption

Carried by container images the latest versions of 405 of 17,781 indexed charts deploy, on 402 images.

Affected packageAffected versionsFixed inImages
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.4, v4.0.5+4 more4.1.4280
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+2 more3.0.5169
github.com/go-jose/go-josegolangv2.6.3+incompatibleno fix listed4
OSV records
GHSA-78h2-9frx-2jm8
Also known as
GO-2026-4945

Charts affected

405 by stars
ChartLatestAffected imagesRadar Score
loadtesterflagger0.39.01 of 1See more

loadtester flagger 0.39.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

1,760
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

96,941
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
headscale/headscale:0.25.1a7a8ae9616bb
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4

Open the chart page →

7,949
fulciosigstoreVerified publisher2.11.11 of 6See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

3,490
policy-controllersigstoreVerified publisher0.10.71 of 2See more

policy-controller sigstore 0.10.7

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

911
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

19,337
snapschedulerbackube-helm-chartsVerified publisher3.5.01 of 2See more

snapscheduler backube-helm-charts 3.5.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed

Open the chart page →

1,224
boundaryboundaryVerified publisher0.1.01 of 1See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
hashicorp/boundary:0.21.037bf86488b74
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.2
3.0.5
4.1.4

Open the chart page →

1,438
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
grafana/grafana:10.4.19a9043254ba16
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5

Open the chart page →

24,700
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

28,839
coreinstill-aiOfficialVerified publisher0.1.754 of 15See more

core instill-ai 0.1.75

4 of the 15 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
instill/api-gateway:9bfdc88b53eaa51c523
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
instill/artifact-backend:b28766ac4a393e601ed
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
openfga/openfga:v1.9.25e94966c11df
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
temporalio/admin-tools:1.28cfde8170c92f
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

30,816
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,145
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

11,582
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

3,675
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

3,793
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

4,060
permifypermifyVerified publisher0.5.01 of 1See more

permify permify 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

997
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

1,942
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

13,521
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

1,055
forecastlestakaterVerified publisher2.1.11 of 1See more

forecastle stakater 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
stakater/forecastle:v2.0.2382cd9572352
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

712
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

15,477
argocdtwomartensVerified publisher0.1.12 of 3See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

10,315
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,619
argo-cdwenerme10.9.01 of 3See more

argo-cd wenerme 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

3,218
agentareaagentareaVerified publisher0.0.183 of 16See more

agentarea agentarea 0.0.18

3 of the 16 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
temporalio/auto-setup:1.29.15b3502a3b685
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
temporalio/ui:2.39.0b768f87f18b5
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

14,914
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

14,917
kedaarieotechVerified publisher0.1.02 of 3See more

keda arieotech 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4

Open the chart page →

2,276
kubebrowseravistoOfficialVerified publisher1.4.01 of 1See more

kubebrowser avisto 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/kubebrowser:0.10.0a354b8dc7e6a
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

677
boundaryboundary-chart0.3.121 of 1See more

boundary boundary-chart 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
hashicorp/boundary:0.15.3339b78b61750
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

1,624
finops-stackcert-managerVerified publisher0.0.57 of 12See more

finops-stack cert-manager 0.0.5

7 of the 12 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4

Open the chart page →

12,562
cluster-setupcluster-setup1.5.03 of 8See more

cluster-setup cluster-setup 1.5.0

3 of the 8 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

10,037
istio-allcode4devsVerified publisher1.2.03 of 6See more

istio-all code4devs 1.2.0

3 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
istio/install-cni:1.24.2-distrolessaef4825e110f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
quay.io/kiali/kiali:v1.89.30dcdb1c1e747
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed

Open the chart page →

4,784
istio-control-planecode4devsVerified publisher1.0.02 of 3See more

istio-control-plane code4devs 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
istio/install-cni:1.24.2-distrolessaef4825e110f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4

Open the chart page →

2,360
maintenancecodewithemadVerified publisher0.1.61 of 1See more

maintenance codewithemad 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
library/caddy:2.9-alpineb4e3952384eb
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

1,469
cosmo-controller-managercosmoVerified publisher0.9.01 of 2See more

cosmo-controller-manager cosmo 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/cosmo-controller-manager:v0.9.08c7fa5552028
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

1,927
cosmo-dashboardcosmoVerified publisher0.9.11 of 1See more

cosmo-dashboard cosmo 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/cosmo-dashboard:v0.9.16a1c4a81a924
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

1,939
cryptlex-enterprisecryptlex3.21.251 of 8See more

cryptlex-enterprise cryptlex 3.21.25

1 of the 8 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-03-12T18-04-18Z46b3009bf704
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,345
revadcs3orgOfficialVerified publisher1.6.11 of 1See more

revad cs3org 1.6.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

1,704
dbrepodbrepo1.13.32 of 25See more

dbrepo dbrepo 1.13.3

2 of the 25 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

52,635
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4

Open the chart page →

2,238
dragonfly-stackdragonflyVerified publisher0.1.23 of 7See more

dragonfly-stack dragonfly 0.1.2

3 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
dragonflyoss/manager:v2.1.49c3ef7f10698d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
dragonflyoss/scheduler:v2.1.49523785c77787
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

18,376
elchi-stackelchi1.13.01 of 10See more

elchi-stack elchi 1.13.0

1 of the 10 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:12.2.074144189b384
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4

Open the chart page →

15,383
enbuildenbuildVerified publisher0.0.502 of 6See more

enbuild enbuild 0.0.50

2 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

31,510
evccevccVerified publisher1.0.471 of 1See more

evcc evcc 1.0.47

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
evcc/evcc:0.300.8ddf2a25afce5
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,181
gateboardgateboard1.12.51 of 1See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
udhos/gateboard:1.12.53acc0e7599bf
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,463
gateboard-discoverygateboard1.9.51 of 1See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
udhos/gateboard-discovery:1.9.55567c9363c4c
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,190
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

15,562
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

16,346
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

3,518

Container images carrying it

402 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kkb0318/irsa-manager:0.3.296d600ae97b4
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/go-jose/go-jose/v3@v3.0.1
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
1
ghcr.io/sigstore/scaffolding/serverae8eb69c7b70
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.