StackRadar

CVE-2026-34986

High

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
405
of 17,787 indexed, latest versions
Container images
401
deployed by those charts
Fix available
2 of 3
affected packages

Go JOSE Panics in JWE decryption

Carried by container images the latest versions of 405 of 17,787 indexed charts deploy, on 401 images.

Affected packageAffected versionsFixed inImages
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.4, v4.0.5+4 more4.1.4279
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+2 more3.0.5169
github.com/go-jose/go-josegolangv2.6.3+incompatibleno fix listed4
OSV records
GHSA-78h2-9frx-2jm8
Also known as
GO-2026-4945

Charts affected

405 by stars
ChartLatestAffected imagesRadar Score
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

16,047
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

4,038
monitoringrocketchat-server0.0.172 of 9See more

monitoring rocketchat-server 0.0.17

2 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/loki:3.6.3cd6e176883a9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

6,859
migrantromholdings0.0.31 of 1See more

migrant romholdings 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

734
spindlerubxkubeVerified publisher0.1.11 of 2See more

spindle rubxkube 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5

Open the chart page →

1,438
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

5,819
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

2,620
saml-exportersaml-exporter0.5.01 of 2See more

saml-exporter saml-exporter 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed

Open the chart page →

1,507
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

4,744
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4

Open the chart page →

1,795
harborsb-helm-charts0.3.01 of 2See more

harbor sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.11.1c017dd84ee96
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4

Open the chart page →

1,680
lokisb-helm-charts0.4.01 of 1See more

loki sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/loki:3.6.192bd5700577b
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

803
mimirsb-helm-charts0.3.01 of 1See more

mimir sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/mimir:2.15.085f55510e0d3
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4

Open the chart page →

888
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

923
cert-manager-webhook-cloudnsschichtelVerified publisher1.2.01 of 1See more

cert-manager-webhook-cloudns schichtel 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/cert-manager-webhook-cloudns:1.1.01020638bbe23
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

1,396
rabbitmq-topology-operatorschichtelVerified publisher0.1.91 of 1See more

rabbitmq-topology-operator schichtel 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/rabbitmqoperator/messaging-topology-operator:1.18.1f97c36882244
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

385
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

4,070
seaweedfs-operatorseaweedfs-operatorVerified publisher1.5.81 of 3See more

seaweedfs-operator seaweedfs-operator 1.5.8

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

2,092
secrets-bridgesecrets-bridge0.2.01 of 1See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/haydercyber/secrets-bridge:0.2.04709f1bb3039
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

373
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

987
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,674
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/go-jose/go-jose/v3@v3.0.2
3.0.5

Open the chart page →

3,337
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

7,708
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

2,728
tufsigstoreVerified publisher0.1.321 of 1See more

tuf sigstore 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/serverdigest-pinnedae8eb69c7b70
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

761
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

2,314
mimirskyloud-helm-chartsVerified publisher5.5.11 of 5See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/mimir:r292-5f018727476e456c738
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

10,651
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

1,326
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

7,901
kedasoftonic2.17.02 of 3See more

keda softonic 2.17.0

2 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.0112fc427d933
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
ghcr.io/kedacore/keda-metrics-apiserver:2.17.0167fd532bd43
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,583
kube-prometheus-stacksoftonic81.5.11 of 6See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

4,974
ipfsstakewise2.2.01 of 2See more

ipfs stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

1,239
v3-backendstakewise3.6.01 of 5See more

v3-backend stakewise 3.6.0

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

1,239
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

10,134
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
headscale/headscale:0.27.1cd37b3001857
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4

Open the chart page →

5,063
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed

Open the chart page →

3,025
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

2,540
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

2,991
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

3,460
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

10,902
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

10,006
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

7,248
token-servertoken-server1.0.91 of 1See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
udhos/token-server:1.0.9728013f2fac1
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

1,245
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
netapp/controller:25.11.0-bxp-preview06f6c9a0653f
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,183
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

4,526
typhoontyphoonVerified publisher0.2.31 of 2See more

typhoon typhoon 0.2.3

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

1,672
opencloudunxwaresVerified publisher0.2.32 of 13See more

opencloud unxwares 0.2.3

2 of the 13 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4

Open the chart page →

45,239
vals-operatorvals-operatorVerified publisher0.8.11 of 1See more

vals-operator vals-operator 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

696
vault-raft-snapshot-agentvault-raft-snapshot-agentVerified publisher0.6.91 of 1See more

vault-raft-snapshot-agent vault-raft-snapshot-agent 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,114
ciliumvks-helm-chartsVerified publisher1.17.141 of 3See more

cilium vks-helm-charts 1.17.14

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

4,046

Container images carrying it

401 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
1
public.ecr.aws/cloudnatix/llmariner/session-manager-server:0.1.0-gfu-devb9537499ff9e
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
public.ecr.aws/cloudnatix/llmariner/session-manager-server:1.9.0f24ecd37fbaa
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
1
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
1
quay.io/argoproj/workflow-controller:v3.5.56ab0da144235
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
1
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4
1
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
1
quay.io/jetstack/cert-manager-controller:v1.16.1ae5e14401cde
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
1
quay.io/kiali/kiali:v1.89.30dcdb1c1e747
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed
1
quay.io/kiali/kiali:v2.23.07652b1285f50
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
quay.io/mongodb/mongodb-enterprise-operator-ubi:1.33.0b05101723412
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
quay.io/oauth2-proxy/oauth2-proxy:v7.13.056e3daedf765
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.1
3.0.5
4.1.4
1
quay.io/oauth2-proxy/oauth2-proxy:v7.14.368336da945bd
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4
1
quay.io/oauth2-proxy/oauth2-proxy:v7.7.09ed7eaf72050
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.4
3.0.5
4.1.4
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
1
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1
quay.io/projectquay/clair:4.9.023329c3368e4
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
1
quay.io/rabbitmqoperator/messaging-topology-operator:1.18.1f97c36882244
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
quay.io/seamware/did-helper:0.6.0799c5f566952
github.com/go-jose/go-jose/v3@v3.0.1-0.20221117193127-916db76e8214
3.0.5
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
1
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend:1.0.31c7afac3446d6
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.