StackRadar

CVE-2026-34986

High

Advisory

Published 3 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
49th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
405
of 17,781 indexed, latest versions
Container images
402
deployed by those charts
Fix available
2 of 3
affected packages

Go JOSE Panics in JWE decryption

Carried by container images the latest versions of 405 of 17,781 indexed charts deploy, on 402 images.

Affected packageAffected versionsFixed inImages
github.com/go-jose/go-jose/v4golangv4.0.1, v4.0.2, v4.0.4, v4.0.5+4 more4.1.4280
github.com/go-jose/go-jose/v3golangv3.0.0, v3.0.1, v3.0.1-0.20221117193127-916db76e8214, v3.0.2+2 more3.0.5169
github.com/go-jose/go-josegolangv2.6.3+incompatibleno fix listed4
OSV records
GHSA-78h2-9frx-2jm8
Also known as
GO-2026-4945

Charts affected

405 by stars
ChartLatestAffected imagesRadar Score
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

3,470
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

16,954
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

4,217
docker-authdocker-auth1.14.01 of 1See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.14.098e0307e0d2d
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5

Open the chart page →

1,506
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

1,990
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,437
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

1,296
edge-accessedge-accessVerified publisher0.1.01 of 1See more

edge-access edge-access 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/oauth2-proxy/oauth2-proxy:v7.13.056e3daedf765
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.1
3.0.5
4.1.4

Open the chart page →

670
continuum-proxyedgelesssysVerified publisher1.5.11 of 1See more

continuum-proxy edgelesssys 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/continuum/continuum-proxydigest-pinned24c76f294a80
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

852
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
emqxecp/otelcol:2.5.04c31d9bec846
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
quay.io/jetstack/cert-manager-controller:v1.16.1ae5e14401cde
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

23,685
ai-gateway-helmenvoy-ai-gateway0.0.0-003ab39f36923b5d40609a601e2951b73f6318fb1 of 1See more

ai-gateway-helm envoy-ai-gateway 0.0.0-003ab39f36923b5d40609a601e2951b73f6318fb

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
envoyproxy/ai-gateway-controller:003ab39f36923b5d40609a601e2951b73f6318fbec1f06ee29a7
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

824
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

8,648
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

7,329
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4

Open the chart page →

2,785
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

1,736
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.23 of 18See more

farm-observability farm-observability 0.27.2

3 of the 18 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
grafana/loki:3.6.73c8fd3570dd9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
grafana/tempo:2.9.065a578975943
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

13,255
did-helperfiware0.1.221 of 1See more

did-helper fiware 0.1.22

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/seamware/did-helper:0.6.0799c5f566952
github.com/go-jose/go-jose/v3@v3.0.1-0.20221117193127-916db76e8214
3.0.5

Open the chart page →

453
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

5,292
mission-controlflanksourceVerified publisher0.1.3362 of 8See more

mission-control flanksource 0.1.336

2 of the 8 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4

Open the chart page →

8,902
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4

Open the chart page →

3,474
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,420
galoygaloymoney0.34.71 of 24See more

galoy galoymoney 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

8,677
galoy-depsgaloymoney0.10.202 of 9See more

galoy-deps galoymoney 0.10.20

2 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

11,961
monitoringgaloymoney0.12.211 of 6See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

5,295
galoygaloymoney20.34.71 of 24See more

galoy galoymoney2 0.34.7

1 of the 24 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

8,677
galoy-depsgaloymoney20.10.202 of 9See more

galoy-deps galoymoney2 0.10.20

2 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

11,961
monitoringgaloymoney20.12.211 of 6See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

5,295
glassflow-etlglassflowVerified publisher0.5.212 of 16See more

glassflow-etl glassflow 0.5.21

2 of the 16 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
ghcr.io/glassflow/glassflow-etl-migration:v3.2.07db1a1bf3dae
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

12,056
gnp-stackgnp-stack0.0.52 of 14See more

gnp-stack gnp-stack 0.0.5

2 of the 14 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

7,659
harborgpg-dev1.18.32 of 8See more

harbor gpg-dev 1.18.3

2 of the 8 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.14.3a30e5a8be3d9
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

3,376
opentelemetry-demogpg-dev0.33.83 of 27See more

opentelemetry-demo gpg-dev 0.33.8

3 of the 27 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5

Open the chart page →

49,025
thanosgpg-dev0.5.31 of 1See more

thanos gpg-dev 0.5.3

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

592
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,274
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

1,546
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.2
3.0.5
4.1.4

Open the chart page →

8,188
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
github.com/go-jose/go-jose/v4@v4.0.1
4.1.4

Open the chart page →

1,391
minifluxhajowielandVerified publisher1.0.01 of 1See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

1,112
hakoniwahakoniwa0.1.01 of 1See more

hakoniwa hakoniwa 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/aplulu/hakoniwa:0.1.0accf0b921388
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

338
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5

Open the chart page →

24,995
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

9,460
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4

Open the chart page →

2,594
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.3
3.0.5
4.1.4

Open the chart page →

9,342
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.2
3.0.5
4.1.4

Open the chart page →

29,817
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5

Open the chart page →

6,012
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4

Open the chart page →

25,017
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4

Open the chart page →

3,124
monitoring-stackict-platformVerified publisher0.4.01 of 13See more

monitoring-stack ict-platform 0.4.0

1 of the 13 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
grafana/loki:3.6.73c8fd3570dd9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4

Open the chart page →

9,573
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34986.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4

Open the chart page →

1,384

Container images carrying it

402 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
16
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
8
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed
5
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
4
grafana/loki:3.6.73c8fd3570dd9
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
4
grafana/tempo:2.9.065a578975943
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
4
quay.io/jetstack/cert-manager-controller:v1.13.16b83f55bd99e
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
4
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
github.com/go-jose/go-jose/v4@v4.1.0
4.1.4
3
grafana/grafana:11.0.00dc5a246ab16
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
3
grafana/grafana:11.3.0a0f881232a6f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
3
migrate/migrate:latestcc4ad8e19d66
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
3
oryd/hydra:v2.2.02c93beb5e5f2
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
3
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
3
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
3
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
3
alpine/k8s:1.32.12048f8d9c8cc7
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
devopsfaith/krakend:latestf8bdaa8a1a43
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-jose/go-jose/v3@v3.0.4
3.0.5
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
grafana/grafana:11.1.0079600c9517b
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.3.12175aaa91c96
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
grafana/grafana:11.1.4886b56d5534e
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.3.39e1e77ade304
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
grafana/grafana:11.4.0d8ea37798ccc
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
grafana/grafana:12.4.1e932bd6ed0e0
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
hashicorp/vault:1.15.26b4e5dadf082
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
ipfs/kubo:v0.33.21a30f5ed8579
github.com/go-jose/go-jose/v4@v4.0.4
4.1.4
2
istio/install-cni:1.24.2-distrolessaef4825e110f
github.com/go-jose/go-jose/v3@v3.0.3
3.0.5
2
istio/pilot:1.24.2-distroless137e44e3d1d2
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
2
louislam/uptime-kuma:2.3.29aeb4e51d038
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.0.5
3.0.5
4.1.4
2
oryd/kratos:v1.3.1fe2428f103a6
github.com/go-jose/go-jose/v3@v3.0.3
github.com/go-jose/go-jose/v4@v4.0.2
3.0.5
4.1.4
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
thanosio/thanos:v0.41.0cf3e9b292e43
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
ghcr.io/appscode/grafana-tools:v0.8.077c9d29080eb
github.com/go-jose/go-jose/v4@v4.1.3
4.1.4
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
ghcr.io/spiffe/spiffe-helper:0.11.01c92e5998ad3
github.com/go-jose/go-jose/v4@v4.1.2
4.1.4
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/go-jose/go-jose/v3@v3.0.4
github.com/go-jose/go-jose/v4@v4.1.0
3.0.5
4.1.4
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
github.com/go-jose/go-jose@v2.6.3+incompatible
no fix listed
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
github.com/go-jose/go-jose/v4@v4.0.5
4.1.4
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
github.com/go-jose/go-jose/v3@v3.0.1
3.0.5
2
quay.io/jetstack/cert-manager-controller:v1.13.29c67cf8c92d8
github.com/go-jose/go-jose/v3@v3.0.0
3.0.5
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
github.com/go-jose/go-jose/v4@v4.0.2
4.1.4
2
1password/connect-api:1.8.2e915c0c84397
github.com/go-jose/go-jose/v4@v4.1.1
4.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.