StackRadar

CVE-2026-34986

High

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
405
of 17,781 indexed, latest versions
Container images
402
deployed by those charts
Fix available
2 of 3
affected packages

Go JOSE Panics in JWE decryption

Carried by container images the latest versions of 405 of 17,781 indexed charts deploy, on 402 images.

Affected packageAffected versionsFixed inImages
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.4, v4.0.5+4 more4.1.4280
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+2 more3.0.5169
github.com/go-jose/go-josegolangv2.6.3+incompatibleno fix listed4
OSV records
GHSA-78h2-9frx-2jm8
Also known as
GO-2026-4945

Charts affected

405 by stars
ChartLatestAffected imagesRadar Score
oscargrycapOfficialVerified publisher4.1.31 of 2See more

oscar grycap 4.1.3

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/grycap/oscar:latest0c58ff972451
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

425
headscale-uiheadscale-uiVerified publisher0.2.91 of 1See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4

Open the chart page →

1,476
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

4,196
spirehelm-spireVerified publisher0.30.21 of 10See more

spire helm-spire 0.30.2

1 of the 10 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

1,640
htnn-controllerhtnnVerified publisher0.5.01 of 1See more

htnn-controller htnn 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
github.com/go-jose/go-jose/v3@v3.0.1
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4

Open the chart page →

4,300
irsa-managerirsa-managerVerified publisher0.3.21 of 1See more

irsa-manager irsa-manager 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/kkb0318/irsa-manager:0.3.296d600ae97b4
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

820
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.325 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

5 of the 17 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
grafana/grafana:12.3.12175aaa91c96
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
grafana/loki:3.6.73c8fd3570dd9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
grafana/tempo:2.9.065a578975943
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

15,418
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

5,508
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

5,789
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/minio:latest08c90bd040bf
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

12,019
cert-managerkubeblocksVerified publisher1.17.21 of 4See more

cert-manager kubeblocks 1.17.2

1 of the 4 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,900
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4

Open the chart page →

4,141
kubetailkubetailVerified publisher0.26.01 of 3See more

kubetail kubetail 0.26.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/kubetail-org/kubetail-cluster-agent:0.7.1a5eee8cab215
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,850
kube-vault-controllerkube-vault-controller1.2.01 of 1See more

kube-vault-controller kube-vault-controller 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
kupnu4x/kube-vault-controller:1.2.03be59109f3d6
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

1,550
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.11 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

7,087
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.01 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

5,941
kubeservice-namespace-node-affinitykubservice-chartsVerified publisher1.1.21 of 5See more

kubeservice-namespace-node-affinity kubservice-charts 1.1.2

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

6,872
authz-pdplabs64io-helm-chartsVerified publisher0.6.01 of 1See more

authz-pdp labs64io-helm-charts 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

800
plane-enterprisemakeplaneOfficialVerified publisher3.7.11 of 13See more

plane-enterprise makeplane 3.7.1

1 of the 13 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

4,942
mimir-syncmimir-sync3.1.01 of 1See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,293
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

11,103
opikopikOfficialVerified publisher2.2.592 of 13See more

opik opik 2.2.59

2 of the 13 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

14,334
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

6,883
spirephilips-labsVerified publisher0.12.21 of 6See more

spire philips-labs 0.12.2

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

7,236
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

11,869
cloudflare-tunnelrlex0.8.01 of 1See more

cloudflare-tunnel rlex 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2023.10.0c18744ae1767
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

1,684
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

38,107
iopsciencemeshVerified publisher0.4.01 of 2See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

4,052
session-manager-serversession-manager-server0.1.0-gfu-dev1 of 1See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server:0.1.0-gfu-devb9537499ff9e
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

795
scaffoldsigstoreVerified publisher0.6.1141 of 15See more

scaffold sigstore 0.6.114

1 of the 15 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

7,710
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

7,685
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
artifacthub/tracker:v1.19.06596c8c4d955
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.1
3.0.5
4.1.4

Open the chart page →

14,491
stackradar-scannerstackradarVerified publisher0.3.01 of 1See more

stackradar-scanner stackradar 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

1,209
stornxstornxVerified publisher1.1.12 of 9See more

stornx stornx 1.1.1

2 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
istio/pilot:1.29.1f8b0e412ac4a
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
quay.io/kiali/kiali:v2.23.07652b1285f50
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

11,574
supabasesupabse0.8.02 of 11See more

supabase supabse 0.8.0

2 of the 11 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
supabase/gotrue:v2.189.0385184459f57
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5

Open the chart page →

18,075
switchboardswitchboardVerified publisher0.7.41 of 1See more

switchboard switchboard 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/borchero/switchboard:0.7.454a193b757da
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

839
goalerttokens-studioVerified publisher0.0.51 of 2See more

goalert tokens-studio 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
goalert/goalert:v0.32.008d57388b0cb
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

1,469
traefik-hubtraefikOfficialVerified publisher4.2.01 of 1See more

traefik-hub traefik 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

3,165
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4

Open the chart page →

4,460
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4

Open the chart page →

2,289
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

10,323
aerospike-backup-serviceaerospike-helmVerified publisher2.0.131 of 1See more

aerospike-backup-service aerospike-helm 2.0.13

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
aerospike/aerospike-backup-service:3.5.1be40d709c583
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

628
mt-channel-brokerahhhhVerified publisher0.1.03 of 3See more

mt-channel-broker ahhhh 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filterdigest-pinnedd675f211a40f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingressdigest-pinnedec4b544499ba
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_brokerdigest-pinned395f4ff1bd34
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

2,607
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.27.2b44cbfeb43db
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

12,473
quialexmorbo-quiVerified publisher0.1.01 of 1See more

qui alexmorbo-qui 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/autobrr/qui:v1.14.110b7945d4f09
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,623
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-backend:v1.0.77e7a26393cd1
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

4,497
versitygw-webhook-pulsar-proxyalpineworks0.1.11 of 1See more

versitygw-webhook-pulsar-proxy alpineworks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/versitygw-webhook-pulsar-proxy:v1.0.06e9ced773732
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

893
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

28,131
cert-manager-csi-driver-cacertsappscodeVerified publisher2026.1.151 of 3See more

cert-manager-csi-driver-cacerts appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/appscode/csi-driver-cacerts:v0.5.0b6bf1888f9d5
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

3,417
cluster-importerappscodeVerified publisher2026.9.111 of 1See more

cluster-importer appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

999

Container images carrying it

402 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
16
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
8
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed
5
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
4
grafana/loki:3.6.73c8fd3570dd9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
4
grafana/tempo:2.9.065a578975943
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
3
grafana/grafana:11.0.00dc5a246ab16
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
3
grafana/grafana:11.3.0a0f881232a6f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
3
migrate/migrate:latestcc4ad8e19d66
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
3
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
3
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
3
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
3
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
3
alpine/k8s:1.32.12048f8d9c8cc7
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
grafana/grafana:11.1.0079600c9517b
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.3.12175aaa91c96
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
grafana/grafana:11.1.4886b56d5534e
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.3.39e1e77ade304
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
grafana/grafana:11.4.0d8ea37798ccc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
2
istio/install-cni:1.24.2-distrolessaef4825e110f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
2
louislam/uptime-kuma:2.3.29aeb4e51d038
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
2
oryd/kratos:v1.3.1fe2428f103a6
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
1password/connect-api:1.8.2e915c0c84397
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.