StackRadar

GO-2024-2914

Medium

Advisory

Published 10 Jun 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
170
of 17,781 indexed, latest versions
Container images
146
deployed by those charts
Fix available
2 of 2
affected packages

Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing

Carried by container images the latest versions of 170 of 17,781 indexed charts deploy, on 146 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+24 more20.10.11, 20.10.11+incompatible134
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible20.10.11, 20.10.11+incompatible17
OSV records
GHSA-xmmx-7jpf-fx42GO-2024-2914

Charts affected

170 by stars
ChartLatestAffected imagesRadar Score
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

6,237
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

2,435
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

3,160
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11+incompatible

Open the chart page →

9,754
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

3,462
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11+incompatible

Open the chart page →

28,165
vaultstakaterVerified publisher0.8.41 of 2See more

vault stakater 0.8.4

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.4dfc3500beb0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
20.10.11+incompatible

Open the chart page →

5,864
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
prom/prometheus:v2.22.2f7ffebdd428b
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11+incompatible

Open the chart page →

16,506
minio-operatorstatcan4.1.01 of 2See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
minio/operator:v4.1.02adc5be088f5
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
20.10.11+incompatible

Open the chart page →

6,596
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,480
telegraf-ds-k3stelegraf-ds-k3s1.0.01 of 1See more

telegraf-ds-k3s telegraf-ds-k3s 1.0.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
library/telegraf:1.19.0-alpine794079a7f241
github.com/docker/docker@v20.10.6+incompatible
20.10.11+incompatible

Open the chart page →

3,764
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/docker@v20.10.9+incompatible
20.10.11+incompatible

Open the chart page →

21,005
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
20.10.11+incompatible

Open the chart page →

18,908
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,510
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,429
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,552
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/docker/docker@v1.13.1
20.10.11+incompatible

Open the chart page →

2,745

Container images carrying it

146 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/docker/docker@v20.10.9+incompatible
github.com/docker/docker@v20.10.9+incompatible
20.10.11
20.10.11+incompatible
1
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/docker/docker@v20.10.9+incompatible
github.com/docker/docker@v20.10.9+incompatible
20.10.11
20.10.11+incompatible
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
20.10.11
20.10.11+incompatible
1
grafana/agent:v0.20.0825c09373d27
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
1
grafana/promtail:2.0.05fd12edcc694
github.com/docker/docker@v17.12.0-ce-rc1.0.20201009160326-9c15e82f19b0+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20201009160326-9c15e82f19b0+incompatible
20.10.11
20.10.11+incompatible
1
hashicorp/boundary:0.8.1fb70bd9210ff
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
1
hashicorp/vault:1.8.4dfc3500beb0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
20.10.11
20.10.11+incompatible
1
hyperledger/fabric-peer:2.2.1bf4995c86af6
github.com/docker/docker@v17.12.0-ce-rc1.0.20190628135806-70f67c6240bb+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20190628135806-70f67c6240bb+incompatible
20.10.11
20.10.11+incompatible
1
istio/operator:1.12.06cfce8a071b9
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
20.10.11
20.10.11+incompatible
1
kiosksh/kiosk:0.2.11501725ba2025
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
20.10.11
20.10.11+incompatible
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
kubesphere/openelb:v0.5.0b5b665c4672c
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
20.10.11
20.10.11+incompatible
1
kubesphere/openelb:v0.4.4ed7311a0f9e4
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
20.10.11
20.10.11+incompatible
1
kubesphere/porter:v0.4.38d1ed5ee1d2e
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
20.10.11
20.10.11+incompatible
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
library/docker:20.10.21-dind3153fa63f546
github.com/docker/docker@v20.10.3-0.20221021173910-5aac513617f0+incompatible
github.com/docker/docker@v20.10.3-0.20221021173910-5aac513617f0+incompatible
20.10.11
20.10.11+incompatible
1
library/kapacitor:1.6.37232f6388a4d
github.com/docker/docker@v20.10.5+incompatible
github.com/docker/docker@v20.10.5+incompatible
20.10.11
20.10.11+incompatible
1
library/telegraf:1.20.428e98eece020
github.com/docker/docker@v20.10.9+incompatible
github.com/docker/docker@v20.10.9+incompatible
20.10.11
20.10.11+incompatible
1
library/telegraf:1.19.0-alpine794079a7f241
github.com/docker/docker@v20.10.6+incompatible
github.com/docker/docker@v20.10.6+incompatible
20.10.11
20.10.11+incompatible
1
library/telegraf:1.19-alpineaddb86c0c520
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
1
library/traefik:2.5.62f603f8d3abe
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
1
library/traefik:2.5.47d0228d19042
github.com/docker/docker@v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible
20.10.11
20.10.11+incompatible
1
library/traefik:2.4.8eda951fd29a8
github.com/docker/docker@v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200204220554-5f6d6f3f2203+incompatible
20.10.11
20.10.11+incompatible
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
20.10.11
20.10.11+incompatible
1
lumenvox/cloud-license:2.0.09a69862e1248
github.com/docker/docker@v20.10.8+incompatible
github.com/docker/docker@v20.10.8+incompatible
20.10.11
20.10.11+incompatible
1
mattermost/calls-offloader:v0.9.0b440b282599e
github.com/docker/docker@v20.10.9+incompatible
github.com/docker/docker@v20.10.9+incompatible
20.10.11
20.10.11+incompatible
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/docker/docker@v20.10.2+incompatible
github.com/docker/docker@v20.10.2+incompatible
20.10.11
20.10.11+incompatible
1
mesosphere/kubeaddons-addon-initializer:v0.5.15efa21defcbc
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
20.10.11
20.10.11
20.10.11+incompatible
20.10.11+incompatible
1
mesosphere/kubeaddons-addon-initializer:v0.2.09f863160127b
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
20.10.11
20.10.11
20.10.11+incompatible
20.10.11+incompatible
1
mesosphere/kubeaddons-addon-initializer:v0.2.8c10011f866f2
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
github.com/docker/docker@v1.13.1
github.com/moby/moby@v1.13.1
20.10.11
20.10.11
20.10.11+incompatible
20.10.11+incompatible
1
minio/operator:v4.1.02adc5be088f5
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
20.10.11
20.10.11+incompatible
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
20.10.11
20.10.11+incompatible
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
20.10.11
20.10.11
20.10.11+incompatible
20.10.11+incompatible
1
prom/prometheus:v2.22.2f7ffebdd428b
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11
20.10.11+incompatible
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
1
runatlantis/atlantis:v0.16.145fbaf7e207c
github.com/docker/docker@v0.0.0-20180620051407-e2593239d949
github.com/docker/docker@v0.0.0-20180620051407-e2593239d949
20.10.11
20.10.11+incompatible
1
simpleidserver/faasprometheus:0.0.425e378d57d78
github.com/docker/docker@v20.10.8+incompatible
github.com/docker/docker@v20.10.8+incompatible
20.10.11
20.10.11+incompatible
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
20.10.11
20.10.11+incompatible
1
streamnative/pulsar_vault_init:v1.0.731533fa9fab7
github.com/docker/docker@v20.10.10+incompatible
github.com/docker/docker@v20.10.10+incompatible
20.10.11
20.10.11+incompatible
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11
20.10.11+incompatible
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
github.com/docker/docker@v1.13.1
github.com/docker/docker@v1.13.1
20.10.11
20.10.11+incompatible
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerb2cd45b8a8a4
github.com/docker/docker@v1.13.1
github.com/docker/docker@v1.13.1
20.10.11
20.10.11+incompatible
1
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
github.com/moby/moby@v1.4.2-0.20170731201646-1009e6a40b29
github.com/moby/moby@v1.4.2-0.20170731201646-1009e6a40b29
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.