StackRadar

GHSA-jq35-85cj-fj4p

Medium

Advisory

Published 30 Oct 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
311
of 17,781 indexed, latest versions
Container images
283
deployed by those charts
Fix available
1 of 1
affected package

/sys/devices/virtual/powercap accessible by default to containers

Carried by container images the latest versions of 311 of 17,781 indexed charts deploy, on 283 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+43 more20.10.27, 23.0.8, 24.0.7283
OSV records
GHSA-jq35-85cj-fj4p

Charts affected

311 by stars
ChartLatestAffected imagesRadar Score
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27

Open the chart page →

7,510
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27

Open the chart page →

7,429
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
github.com/docker/docker@v23.0.0-rc.2+incompatible
23.0.8

Open the chart page →

6,232
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27

Open the chart page →

7,552
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/docker/docker@v24.0.5+incompatible
24.0.7

Open the chart page →

14,983
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/docker/docker@v24.0.2+incompatible
24.0.7

Open the chart page →

2,022
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/docker/docker@v1.13.1
20.10.27

Open the chart page →

2,745
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry GHSA-jq35-85cj-fj4p.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/docker/docker@v20.10.21+incompatible
20.10.27

Open the chart page →

13,677

Container images carrying it

283 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/docker/docker@v20.10.24+incompatible
20.10.27
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/docker/docker@v20.10.2+incompatible
20.10.27
1
mesosphere/kubeaddons-addon-initializer:v0.5.15efa21defcbc
github.com/docker/docker@v1.13.1
20.10.27
1
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
github.com/docker/docker@v1.13.1
20.10.27
1
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
github.com/docker/docker@v1.13.1
20.10.27
1
minio/operator:v5.0.9170b154d2c61
github.com/docker/docker@v20.10.24+incompatible
20.10.27
1
minio/operator:v4.1.02adc5be088f5
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
20.10.27
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
20.10.27
1
moul/sshportal:v1.19.3332b603727c3
github.com/docker/docker@v20.10.12+incompatible
20.10.27
1
murtazashah46/helmfile:latest4d11726cf803
github.com/docker/docker@v20.10.21+incompatible
20.10.27
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.27
1
oryd/kratos:v1.1.08f15006a080d
github.com/docker/docker@v20.10.24+incompatible
20.10.27
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/docker/docker@v20.10.17+incompatible
20.10.27
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/docker/docker@v24.0.5+incompatible
24.0.7
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/docker/docker@v20.10.12+incompatible
20.10.27
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/docker/docker@v24.0.2+incompatible
24.0.7
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/docker/docker@v20.10.20+incompatible
20.10.27
1
phntom/chartmuseum:v0.16.053883b65d9b7
github.com/docker/docker@v20.10.24+incompatible
20.10.27
1
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/docker/docker@v20.10.17+incompatible
20.10.27
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/docker/docker@v23.0.3+incompatible
23.0.8
1
prom/prometheus:v2.48.0b440bc0e8aa5
github.com/docker/docker@v24.0.6+incompatible
24.0.7
1
prom/prometheus:v2.22.2f7ffebdd428b
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.27
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/docker/docker@v20.10.7+incompatible
20.10.27
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/docker/docker@v0.0.0-20180620051407-e2593239d949
20.10.27
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/docker@v20.10.8+incompatible
20.10.27
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/docker/docker@v20.10.12+incompatible
20.10.27
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/docker/docker@v20.10.10+incompatible
20.10.27
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.27
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/docker/docker@v20.10.7+incompatible
20.10.27
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/docker/docker@v20.10.21+incompatible
20.10.27
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
github.com/docker/docker@v1.13.1
20.10.27
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/docker@v20.10.20+incompatible
20.10.27
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/docker/docker@v20.10.12+incompatible
20.10.27
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/docker/docker@v20.10.20+incompatible
20.10.27
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerb2cd45b8a8a4
github.com/docker/docker@v1.13.1
20.10.27
1
gcr.io/projectsigstore/cosigned784518ff3ee7
github.com/docker/docker@v20.10.12+incompatible
20.10.27
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
github.com/docker/docker@v20.10.12+incompatible
20.10.27
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
github.com/docker/docker@v20.10.17+incompatible
20.10.27
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/docker/docker@v24.0.5+incompatible
24.0.7
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/docker/docker@v24.0.5+incompatible
24.0.7
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/docker/docker@v20.10.17+incompatible
20.10.27
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.5.1448cb346b12c
github.com/docker/docker@v20.10.17+incompatible
20.10.27
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/docker/docker@v20.10.17+incompatible
20.10.27
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27
1
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.27
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.