StackRadar

GO-2024-2914

Medium

Advisory

Published 10 Jun 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
170
of 17,781 indexed, latest versions
Container images
146
deployed by those charts
Fix available
2 of 2
affected packages

Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing

Carried by container images the latest versions of 170 of 17,781 indexed charts deploy, on 146 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+24 more20.10.11, 20.10.11+incompatible134
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible20.10.11, 20.10.11+incompatible17
OSV records
GHSA-xmmx-7jpf-fx42GO-2024-2914

Charts affected

170 by stars
ChartLatestAffected imagesRadar Score
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

6,237
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

2,435
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

3,160
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11+incompatible

Open the chart page →

9,754
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

3,462
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11+incompatible

Open the chart page →

28,165
vaultstakaterVerified publisher0.8.41 of 2See more

vault stakater 0.8.4

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.4dfc3500beb0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
20.10.11+incompatible

Open the chart page →

5,864
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
prom/prometheus:v2.22.2f7ffebdd428b
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11+incompatible

Open the chart page →

16,506
minio-operatorstatcan4.1.01 of 2See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
minio/operator:v4.1.02adc5be088f5
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
20.10.11+incompatible

Open the chart page →

6,596
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,480
telegraf-ds-k3stelegraf-ds-k3s1.0.01 of 1See more

telegraf-ds-k3s telegraf-ds-k3s 1.0.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
library/telegraf:1.19.0-alpine794079a7f241
github.com/docker/docker@v20.10.6+incompatible
20.10.11+incompatible

Open the chart page →

3,764
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/docker@v20.10.9+incompatible
20.10.11+incompatible

Open the chart page →

21,005
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
20.10.11+incompatible

Open the chart page →

18,908
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,510
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,429
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,552
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/docker/docker@v1.13.1
20.10.11+incompatible

Open the chart page →

2,745

Container images carrying it

146 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
20.10.11
20.10.11+incompatible
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
20.10.11
20.10.11+incompatible
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/docker/docker@v20.10.3+incompatible
github.com/docker/docker@v20.10.3+incompatible
20.10.11
20.10.11+incompatible
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/docker/docker@v20.10.3+incompatible
github.com/docker/docker@v20.10.3+incompatible
20.10.11
20.10.11+incompatible
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/docker/docker@v20.10.2+incompatible
github.com/docker/docker@v20.10.2+incompatible
20.10.11
20.10.11+incompatible
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
20.10.11
20.10.11+incompatible
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
github.com/docker/docker@v20.10.8+incompatible
github.com/docker/docker@v20.10.8+incompatible
20.10.11
20.10.11+incompatible
1
quay.io/jetstack/kube-oidc-proxy:v0.3.0e045b26eb6df
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
20.10.11
20.10.11+incompatible
1
quay.io/kube-ops/promtail:2.2.134de6387233b
github.com/docker/docker@v20.10.1+incompatible
github.com/docker/docker@v20.10.1+incompatible
20.10.11
20.10.11+incompatible
1
quay.io/openshift/origin-cli:4.66722d5041b47
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
20.10.11
20.10.11+incompatible
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
20.10.11
20.10.11+incompatible
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/docker/docker@v20.10.8+incompatible
github.com/docker/docker@v20.10.8+incompatible
20.10.11
20.10.11+incompatible
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/docker/docker@v20.10.3+incompatible
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/docker/docker@v20.10.3+incompatible
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11
20.10.11+incompatible
20.10.11+incompatible
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/docker/docker@v17.12.1-ce+incompatible
github.com/docker/docker@v17.12.1-ce+incompatible
20.10.11
20.10.11+incompatible
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.