GO-2022-0368
MediumAdvisory
Published 1 Mar 2022In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 16
- of 17,781 indexed, latest versions
- Container images
- 12
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Improper random number generation in github.com/coredns/coredns
Carried by container images the latest versions of 16 of 17,781 indexed charts deploy, on 12 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.0.0-20200803163833-7d5f5b87a4fb, v0.0.0-20230206182419-055b2c31a9cf, v0.0.0-20241121192733-51e11f166ef6, v0.0.0-20251008152637-1db4568df6aa+3 more | 1.6.6 | 12 |
- OSV records
- GHSA-gv9j-4w24-q7vxGO-2022-0368
Charts affected
16 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| corednscorednsVerified publisher | 1.47.1 | 1 of 1See more | 330 |
| oesopsmxVerified publisher | 4.0.32 | 1 of 25See more | 107,811 |
| corednssoftizyVerified publisher | 0.2.0 | 1 of 1See more | 1,663 |
| miniomilvus | 8.0.17 | 1 of 1See more | 6,915 |
| corednsdoubanVerified publisher | 1.39.2 | 1 of 1See more | 1,132 |
| chaos-meshethereum-helm-chartsVerified publisher | 0.0.3 | 1 of 4See more | 12,127 |
| mimir-openshift-experimentalgrafana | 2.1.0 | 1 of 4See more | 17,759 |
| corednsjouveVerified publisher | 1.45.0 | 1 of 1See more | 887 |
| chaos-meshkubeblocksVerified publisher | 2.7.2 | 1 of 4See more | 13,497 |
| apica-ascentlogiqai | 2.0.4 | 1 of 19See more | 23,613 |
| tailscalesinextraVerified publisher | 0.18.1 | 1 of 2See more | 1,047 |
| spinnakerspinnakerVerified publisher | 2.2.13 | 1 of 4See more | 6,836 |
| corednsvks-helm-chartsVerified publisher | 1.45.0 | 1 of 1See more | 887 |
| juicefs-csi-driverwenerme | 0.32.5 | 1 of 5See more | 9,117 |
| miniowenerme | 8.0.10 | 1 of 1See more | 6,915 |
| minio-standalonewenerme | 1.0.2 | 1 of 1See more | 6,138 |
Container images carrying it
12 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | bd11edda91f3 | github.com/ github.com/ | 1.6.6 1.6.6 | 3 |
| coredns/ | 9b9128672209 | github.com/ github.com/ | 1.6.6 1.6.6 | 2 |
| ghcr.io/ | 78dc63bc5b89 | github.com/ github.com/ | 1.6.6 1.6.6 | 2 |
| coredns/ | 40384aa1f5ea | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |
| coredns/ | 900f9c109f7a | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |
| coredns/ | a0ead06651cf | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |
| juicedata/ | 95008ba63318 | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |
| minio/ | 053f103f4894 | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |
| minio/ | 1484c87239ea | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |
| minio/ | e2b7b633c250 | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |
| minio/ | f00aa6ef2b72 | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |
| registry.k8s.io/ | 94caebb89dcf | github.com/ github.com/ | 1.6.6 1.6.6 | 1 |