StackRadar

CVE-2026-34986

High

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
405
of 17,781 indexed, latest versions
Container images
402
deployed by those charts
Fix available
2 of 3
affected packages

Go JOSE Panics in JWE decryption

Carried by container images the latest versions of 405 of 17,781 indexed charts deploy, on 402 images.

Affected packageAffected versionsFixed inImages
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.4, v4.0.5+4 more4.1.4280
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+2 more3.0.5169
github.com/go-jose/go-josegolangv2.6.3+incompatibleno fix listed4
OSV records
GHSA-78h2-9frx-2jm8
Also known as
GO-2026-4945

Charts affected

405 by stars
ChartLatestAffected imagesRadar Score
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
miniflux/miniflux:2.2.18a3ca6bbc1f74
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

2,669
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

2,968
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

7,309
jupyterhub-metricsncsaVerified publisher1.3.01 of 5See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

4,132
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.4
3.0.5
4.1.4

Open the chart page →

5,034
cert-managernicklasfrahm-cert-managerVerified publisher0.1.21 of 4See more

cert-manager nicklasfrahm-cert-manager 0.1.2

1 of the 4 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,824
ciliumnicklasfrahm-ciliumVerified publisher0.7.41 of 6See more

cilium nicklasfrahm-cilium 0.7.4

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

7,092
terraform-backendnimbolus0.3.21 of 2See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

2,462
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,006
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,006
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

6,455
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

5,565
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

4,674
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

2,966
vault-helm-chartnotesprojectchart0.1.01 of 1See more

vault-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
library/vault:1.13.3f98ac9dd97b0
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

2,246
lensoci-ai-incubations0.1.143 of 16See more

lens oci-ai-incubations 0.1.14

3 of the 16 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
grafana/grafana:12.1.1a1701c218024
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

17,070
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4

Open the chart page →

2,346
onyx-stackonyx0.3.12 of 12See more

onyx-stack onyx 0.3.1

2 of the 12 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

6,338
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

5,017
sentinelopennms-helm-chartsVerified publisher0.4.01 of 2See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
opennms/sentinel:36.0.288869082a14f
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

2,024
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.2
3.0.5
4.1.4

Open the chart page →

4,127
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

8,599
voyager-gatewayopenshift2026.1.151 of 2See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

2,567
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,821
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

71,208
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

5,137
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

5,411
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

1,978
parcaparca-rr0.1.01 of 2See more

parca parca-rr 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

2,366
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

4,120
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

2,028
vikunjapascaliskeVerified publisher5.1.01 of 1See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

1,342
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

1,326
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

3,678
firehose-corepinaxVerified publisher0.1.11 of 2See more

firehose-core pinax 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

3,488
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

7,062
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

4,889
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

25,934
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4

Open the chart page →

1,306
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

4,416
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

889
hydraradar-baseVerified publisher0.48.01 of 1See more

hydra radar-base 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

1,524
kratosradar-baseVerified publisher0.43.11 of 1See more

kratos radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/kratos:v1.1.08f15006a080d
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

1,776
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

9,355
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5

Open the chart page →

1,667
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/hydra:v2.3.0b94007e19a1f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

2,177
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4

Open the chart page →

1,561
thanosrayselfs-chartsVerified publisher0.1.51 of 1See more

thanos rayselfs-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

750

Container images carrying it

402 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/kedacore/keda:2.16.002348a19aeae
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4
1
ghcr.io/kedacore/keda:2.17.0112fc427d933
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda:2.17.272dc058e478d
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.16.073a2ebae4413
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4
1
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kkb0318/irsa-manager:0.3.296d600ae97b4
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
1
ghcr.io/loafoe/solgate:v0.0.12b3256cbc7b68
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/go-jose/go-jose/v3@v3.0.1
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/permify/permify:v1.3.5f0c6f7d7daa6
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/sigstore/policy-controller/policy-controller0bcd60beb93f
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
1
ghcr.io/sigstore/scaffolding/serverae8eb69c7b70
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.