GO-2023-2153
HighAdvisory
Published 25 Oct 2023In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 770
- of 17,781 indexed, latest versions
- Container images
- 935
- deployed by those charts
- Fix available
- 1 of 1
- affected package
gRPC-Go HTTP/2 Rapid Reset vulnerability
Carried by container images the latest versions of 770 of 17,781 indexed charts deploy, on 935 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| google.golang.org/ | v0.0.0-20160317175043-d3ddb4469d5a, v0.0.0-20170216003643-d0c32ee6a441, v1.10.0, v1.14.0+64 more | 1.56.3, 1.57.1, 1.58.3 | 935 |
- OSV records
- GHSA-m425-mq94-257gGO-2023-2153
Charts affected
770 by stars
Container images carrying it
935 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | c68135620167 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 3 |
| registry.k8s.io/ | 4eb73137b663 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 3 |
| registry.k8s.io/ | 2e2b44393539 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 3 |
| registry.k8s.io/ | 4dc0b87ccd69 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 3 |
| bitnamilegacy/ | d17df1f9d745 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| cesanta/ | 4d16885f3d4c | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| chankh/ | 963c44c7f8b1 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| crate/ | b8d89fa5d19b | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| cs3org/ | 3b57a34a7dfd | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| cs3org/ | e80a4d67b352 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| csiplugin/ | 0766163dc046 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| datawire/ | 8588eafe6862 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| dmilhdef/ | fada1a6e7638 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| goelankit/ | 0d9a82dcf026 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| governify/ | e83a17ba5038 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| grafana/ | a136c6208aa3 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| grafana/ | 057896e23443 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| grafana/ | 42d3e6bc1865 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| grafana/ | 511bc20bfcd1 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| grafana/ | 922b3f412fdd | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| grafana/ | f9ef133793af | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| grafana/ | 46e88d390cd6 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| hanchuanchuan/ | b3c0dd26fb50 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| hashicorp/ | e38576edcdfd | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| hashicorp/ | 538a3436398d | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| hashicorp/ | 4db614d40d0e | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| hashicorp/ | 8de4d5f31b38 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| iomesh/ | 86f58b0a2106 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| iomesh/ | f9508460b273 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| iomesh/ | becc53e25b96 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| iomesh/ | 560f01510f99 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| iomesh/ | f13deacac3f4 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| istio/ | 757d28c24100 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| istio/ | a78b7a165744 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| jaegertracing/ | 04d224a9999b | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| k0sproject/ | f04635825d51 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| library/ | 44a366dd7724 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| library/ | 7d5a6ae66572 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| minio/ | bf85c57cdfcc | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| openebs/ | f6c18b0f8c8a | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| openebs/ | aea39e49bb97 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| openpolicyagent/ | 825370bdb3c3 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| oryd/ | d06fc5845f63 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| oryd/ | e8cb9b79a89c | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| place1/ | 2b2f3ea80ed6 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| prom/ | 42d2395cd719 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| prom/ | 8176adea328e | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| prom/ | d43417c260e5 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| qingcloud/ | 4cd5366a9f51 | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |
| rancher/ | 9380f5dbae9a | google.golang.org/ google.golang.org/ | 1.56.3 1.56.3 | 2 |