StackRadar

GHSA-32gq-x56h-299c

Medium

Advisory

Published 18 Dec 2024In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
31
deployed by those charts
Fix available
1 of 1
affected package

age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 31 images.

Affected packageAffected versionsFixed inImages
filippo.io/agegolangv0.0.0-20241218150118-482cf6fc9bab, v1.0.0-beta7, v1.1.1, v1.2.01.2.131
OSV records
GHSA-32gq-x56h-299cGO-2024-3344

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

16,251
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
filippo.io/age@v1.0.0-beta7
1.2.1

Open the chart page →

32,902
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
filippo.io/age@v1.2.0
1.2.1

Open the chart page →

4,531
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

15,477
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

12,562
sops-operatorcraftypathVerified publisher0.8.01 of 1See more

sops-operator craftypath 0.8.0

1 of the 1 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
craftypath/sops-operator:v0.8.0402a0024c732
filippo.io/age@v1.0.0-beta7
1.2.1

Open the chart page →

6,473
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

52,635
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

16,346
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

7,685
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

4,460
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

6,036
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

16,198
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
filippo.io/age@v1.0.0-beta7
1.2.1

Open the chart page →

6,921
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

4,509
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
filippo.io/age@v1.0.0-beta7
1.2.1

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
filippo.io/age@v1.0.0-beta7
1.2.1

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
filippo.io/age@v1.0.0-beta7
1.2.1

Open the chart page →

32,902
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

8,648
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

7,329
monitoringgaloymoney0.12.211 of 6See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

5,295
monitoringgaloymoney20.12.211 of 6See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

5,295
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
litestream/litestream:0.3c5a1e1b01916
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

9,019
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

49,025
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

9,460
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
filippo.io/age@v0.0.0-20241218150118-482cf6fc9bab
1.2.1

Open the chart page →

2,594
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

3,561
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:9.5.239c849cebccc
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

18,316
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

7,510
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

7,309
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

2,966
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
nocodb/nocodb:0.258.06779a4ddedf2
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

4,219
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

5,137
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

5,411
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

1,326
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

25,934
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

9,355
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

4,038
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
filippo.io/age@v1.0.0-beta7
1.2.1

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
filippo.io/age@v1.0.0-beta7
1.2.1

Open the chart page →

32,902
talos-backupsinextraVerified publisher0.1.21 of 1See more

talos-backup sinextra 0.1.2

1 of the 1 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
ghcr.io/siderolabs/talos-backup:v0.1.0-beta.203a71e140f1d
filippo.io/age@v1.2.0
1.2.1

Open the chart page →

898
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

10,134
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry GHSA-32gq-x56h-299c.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
filippo.io/age@v1.1.1
1.2.1

Open the chart page →

10,902

Container images carrying it

31 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/kubectl:latest2ad610626658
filippo.io/age@v1.0.0-beta7
filippo.io/age@v1.0.0-beta7
1.2.1
1.2.1
6
grafana/grafana:11.0.00dc5a246ab16
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
3
grafana/grafana:11.3.0a0f881232a6f
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
3
grafana/grafana:11.1.0079600c9517b
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
2
grafana/grafana:11.1.4886b56d5534e
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
2
grafana/grafana:11.4.0d8ea37798ccc
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
2
alpine/k8s:1.31.49c4976d47656
filippo.io/age@v1.2.0
filippo.io/age@v1.2.0
1.2.1
1.2.1
1
alpine/k8s:1.30.0bd01dae02676
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
alpine/k8s:1.30.2cd560fce90f7
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
alpine/k8s:1.28.13e5c0b053fed7
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
craftypath/sops-operator:v0.8.0402a0024c732
filippo.io/age@v1.0.0-beta7
filippo.io/age@v1.0.0-beta7
1.2.1
1.2.1
1
defactops/defactops-ui:1.0.16825cdf9ba706
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:10.1.50679e877ba20
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:10.1.11b9ca4bbc4a2
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:9.5.239c849cebccc
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:11.2.2-security-01464eac539793
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:10.2.36b5b37eb35bb
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:10.3.38640e5038e83
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:11.1.3b23b588cf7cb
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:10.4.0f9811e4e687f
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
grafana/grafana:11.3.1fa801ab6e1ae
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
litestream/litestream:0.3c5a1e1b01916
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
nocodb/nocodb:0.258.06779a4ddedf2
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
filippo.io/age@v0.0.0-20241218150118-482cf6fc9bab
filippo.io/age@v0.0.0-20241218150118-482cf6fc9bab
1.2.1
1.2.1
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
filippo.io/age@v1.1.1
filippo.io/age@v1.1.1
1.2.1
1.2.1
1
ghcr.io/siderolabs/talos-backup:v0.1.0-beta.203a71e140f1d
filippo.io/age@v1.2.0
filippo.io/age@v1.2.0
1.2.1
1.2.1
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
filippo.io/age@v1.0.0-beta7
filippo.io/age@v1.0.0-beta7
1.2.1
1.2.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.