StackRadar

CVE-2026-34986

High

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
405
of 17,781 indexed, latest versions
Container images
402
deployed by those charts
Fix available
2 of 3
affected packages

Go JOSE Panics in JWE decryption

Carried by container images the latest versions of 405 of 17,781 indexed charts deploy, on 402 images.

Affected packageAffected versionsFixed inImages
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.4, v4.0.5+4 more4.1.4280
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+2 more3.0.5169
github.com/go-jose/go-josegolangv2.6.3+incompatibleno fix listed4
OSV records
GHSA-78h2-9frx-2jm8
Also known as
GO-2026-4945

Charts affected

405 by stars
ChartLatestAffected imagesRadar Score
gcp-credential-managerappscodeVerified publisher2026.3.111 of 1See more

gcp-credential-manager appscode 2026.3.11

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/appscode/gcp-credential-manager:v0.1.0b58345fe8209
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

1,060
grafana-operatorappscodeVerified publisher2026.6.121 of 1See more

grafana-operator appscode 2026.6.12

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

361
kubevault-certifiedappscodeVerified publisher2026.2.271 of 1See more

kubevault-certified appscode 2026.2.27

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

1,106
monitoring-operatorappscodeVerified publisher2026.6.121 of 1See more

monitoring-operator appscode 2026.6.12

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

361
offline-license-serverappscodeVerified publisher2026.9.111 of 2See more

offline-license-server appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/appscode/offline-license-server:v0.0.76e4b66308d8f6
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,681
persesappscodeVerified publisher2026.6.21 of 1See more

perses appscode 2026.6.2

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/opnpulse/perses:v2026.4.24b880da90aa1a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

530
service-backendappscodeVerified publisher2026.9.111 of 1See more

service-backend appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,329
service-providerappscodeVerified publisher2026.9.112 of 2See more

service-provider appscode 2026.9.11

2 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-rbac-proxy:v0.18.27de54b6dedc8
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,223
argocdargo-helm-charts1.0.02 of 3See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

7,300
argo-workflowsargo-helm-charts1.0.02 of 2See more

argo-workflows argo-helm-charts 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4

Open the chart page →

1,826
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

40,238
semantic-repositoryassist-iot-semantic-repository1.1.01 of 3See more

semantic-repository assist-iot-semantic-repository 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

1,069
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4

Open the chart page →

45,363
celestia-localastria9.0.02 of 2See more

celestia-local astria 9.0.0

2 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

3,281
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

1,502
krakendbaboulinet0.1.341 of 1See more

krakend baboulinet 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.7.09219cda867e2
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

1,191
firehoseblip-firehoseVerified publisher0.0.181 of 11See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.26b4e5dadf082
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

13,459
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

6,036
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

3,244
miniobysamioVerified publisher1.0.31 of 1See more

minio bysamio 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

1,069
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4

Open the chart page →

1,677
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

14,130
cert-managercanine1.15.31 of 4See more

cert-manager canine 1.15.3

1 of the 4 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

2,880
temporalcastaiVerified publisher0.54.24 of 14See more

temporal castai 0.54.2

4 of the 14 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
temporalio/admin-tools:1.26.237e2e33dbd7b
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
temporalio/server:1.26.21e2626efcbc1
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
temporalio/ui:2.33.05c586a3c8ec5
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

15,027
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

961
kubevirt-managerchristianhuthVerified publisher0.7.01 of 1See more

kubevirt-manager christianhuth 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4

Open the chart page →

1,986
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5

Open the chart page →

1,617
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

1,744
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

25,151
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

18,293
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

6,162
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4

Open the chart page →

1,035
mla-external-secretscluster-deploy0.3.01 of 1See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

716
monitoringcluster-deploy0.3.02 of 11See more

monitoring cluster-deploy 0.3.0

2 of the 11 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
grafana/loki:3.6.73c8fd3570dd9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

8,183
coder-logstream-kubecoder-logstream-kube0.0.151 of 1See more

coder-logstream-kube coder-logstream-kube 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/coder/coder-logstream-kube:v0.0.1510ae596d296e
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

885
consentbbconsentbbVerified publisher2023.12.41 of 5See more

consentbb consentbb 2023.12.4

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

3,181
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4

Open the chart page →

1,925
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

3,672
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

2,253
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

1,797
csghubcsghubVerified publisher2.4.34 of 34See more

csghub csghub 2.4.3

4 of the 34 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

11,335
ipfs-clustercsi-driver-ipfs0.2.01 of 2See more

ipfs-cluster csi-driver-ipfs 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ipfs/kubo:v0.41.00661819c2e09
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,475
cloudflareddamounVerified publisher3.3.01 of 1See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.5.05d5f70a59d5e
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4

Open the chart page →

1,306
dapr-agentsdapr-agents-devVerified publisher0.1.510 of 31See more

dapr-agents dapr-agents-dev 0.1.5

10 of the 31 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
grafana/loki:3.6.5847c287ada0e
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
grafana/tempo:2.9.065a578975943
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
ghcr.io/dapr/injector:1.17.0-rc.37a2fd888ed5f
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

22,193
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,994
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

4,509
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

734

Container images carrying it

402 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
16
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
8
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed
5
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
4
grafana/loki:3.6.73c8fd3570dd9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
4
grafana/tempo:2.9.065a578975943
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
3
grafana/grafana:11.0.00dc5a246ab16
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
3
grafana/grafana:11.3.0a0f881232a6f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
3
migrate/migrate:latestcc4ad8e19d66
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
3
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
3
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
3
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
3
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
3
alpine/k8s:1.32.12048f8d9c8cc7
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
grafana/grafana:11.1.0079600c9517b
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.3.12175aaa91c96
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
grafana/grafana:11.1.4886b56d5534e
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.3.39e1e77ade304
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
grafana/grafana:11.4.0d8ea37798ccc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
2
istio/install-cni:1.24.2-distrolessaef4825e110f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
2
louislam/uptime-kuma:2.3.29aeb4e51d038
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
2
oryd/kratos:v1.3.1fe2428f103a6
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
1password/connect-api:1.8.2e915c0c84397
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.