StackRadar

GO-2024-2914

Medium

Advisory

Published 10 Jun 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
170
of 17,781 indexed, latest versions
Container images
146
deployed by those charts
Fix available
2 of 2
affected packages

Moby (Docker Engine) is vulnerable to Ambiguous OCI manifest parsing

Carried by container images the latest versions of 170 of 17,781 indexed charts deploy, on 146 images.

Affected packageAffected versionsFixed inImages
github.com/docker/dockergolangv0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+24 more20.10.11, 20.10.11+incompatible134
github.com/moby/mobygolangv0.7.3-0.20190826074503-38ab9da00309, v1.4.2-0.20170731201646-1009e6a40b29, v1.13.1, v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible20.10.11, 20.10.11+incompatible17
OSV records
GHSA-xmmx-7jpf-fx42GO-2024-2914

Charts affected

170 by stars
ChartLatestAffected imagesRadar Score
clairromholdings0.1.141 of 2See more

clair romholdings 0.1.14

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

6,237
securityromholdings0.2.21 of 1See more

security romholdings 0.2.2

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

2,435
ed-traefik2scaleway-charts0.2.01 of 1See more

ed-traefik2 scaleway-charts 0.2.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
library/traefik:2.5.62f603f8d3abe
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

3,160
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11+incompatible

Open the chart page →

9,754
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/docker/docker@v20.10.7+incompatible
20.10.11+incompatible

Open the chart page →

3,462
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11+incompatible

Open the chart page →

28,165
vaultstakaterVerified publisher0.8.41 of 2See more

vault stakater 0.8.4

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
hashicorp/vault:1.8.4dfc3500beb0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
20.10.11+incompatible

Open the chart page →

5,864
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
prom/prometheus:v2.22.2f7ffebdd428b
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11+incompatible

Open the chart page →

16,506
minio-operatorstatcan4.1.01 of 2See more

minio-operator statcan 4.1.0

1 of the 2 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
minio/operator:v4.1.02adc5be088f5
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
20.10.11+incompatible

Open the chart page →

6,596
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,480
telegraf-ds-k3stelegraf-ds-k3s1.0.01 of 1See more

telegraf-ds-k3s telegraf-ds-k3s 1.0.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
library/telegraf:1.19.0-alpine794079a7f241
github.com/docker/docker@v20.10.6+incompatible
20.10.11+incompatible

Open the chart page →

3,764
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/docker@v20.10.9+incompatible
20.10.11+incompatible

Open the chart page →

21,005
monitoringthl-chartsVerified publisher0.1.11 of 10See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
20.10.11+incompatible

Open the chart page →

18,908
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,510
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,429
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11+incompatible

Open the chart page →

7,552
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry GO-2024-2914.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/docker/docker@v1.13.1
20.10.11+incompatible

Open the chart page →

2,745

Container images carrying it

146 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible
20.10.11
20.10.11+incompatible
7
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
20.10.11
20.10.11+incompatible
4
hyperledger/fabric-tools:2.4b1194f509085
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible
20.10.11
20.10.11+incompatible
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0
20.10.11
20.10.11+incompatible
3
grafana/promtail:2.4.2626900031c4e
github.com/docker/docker@v20.10.8+incompatible
github.com/docker/docker@v20.10.8+incompatible
20.10.11
20.10.11+incompatible
3
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
3
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
3
quay.io/prometheus/prometheus:v2.26.038d40a760569
github.com/docker/docker@v20.10.5+incompatible
github.com/docker/docker@v20.10.5+incompatible
20.10.11
20.10.11+incompatible
3
quay.io/prometheus/prometheus:v2.31.1a8779cfe553e
github.com/docker/docker@v20.10.9+incompatible
github.com/docker/docker@v20.10.9+incompatible
20.10.11
20.10.11+incompatible
3
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/docker/docker@v1.13.1
github.com/docker/docker@v1.13.1
20.10.11
20.10.11+incompatible
2
hashicorp/vault:1.8.34db614d40d0e
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
20.10.11
20.10.11+incompatible
2
library/traefik:v2.57d5a6ae66572
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
2
minio/operator:v4.3.754393e03f3b2
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7
20.10.11
20.10.11+incompatible
2
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/docker/docker@v1.13.1
github.com/docker/docker@v1.13.1
20.10.11
20.10.11+incompatible
2
prom/prometheus:v2.21.0d43417c260e5
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11
20.10.11+incompatible
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/docker/docker@v20.10.7+incompatible
github.com/docker/docker@v20.10.7+incompatible
20.10.11
20.10.11+incompatible
2
xelalex/dregsy:0.4.3574054e1c417
github.com/docker/docker@v20.10.0+incompatible
github.com/docker/docker@v20.10.0+incompatible
20.10.11
20.10.11+incompatible
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/docker/docker@v20.10.3-0.20211206061157-934f955e3d62+incompatible
github.com/docker/docker@v20.10.3-0.20211206061157-934f955e3d62+incompatible
20.10.11
20.10.11+incompatible
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656
20.10.11
20.10.11+incompatible
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
github.com/docker/docker@v20.10.3+incompatible
github.com/docker/docker@v20.10.3+incompatible
20.10.11
20.10.11+incompatible
2
quay.io/prometheus/prometheus:v2.22.1b899dbd1b901
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible
20.10.11
20.10.11+incompatible
2
alpine/k8s:1.22.600ac10bcb759
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
alpine/k8s:1.18.16a41efe02a041
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/docker/docker@v1.13.1
github.com/docker/docker@v1.13.1
20.10.11
20.10.11+incompatible
1
anchore/anchore-engine:v0.10.0bde9eedf639d
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
20.10.11
20.10.11+incompatible
1
apache/camel-k:1.10.43bb13d14f64a
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
20.10.11
20.10.11+incompatible
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/docker/docker@v20.10.3+incompatible
github.com/docker/docker@v20.10.3+incompatible
20.10.11
20.10.11+incompatible
1
aquasec/trivy:0.32.0973d0df16189
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
github.com/docker/docker@v20.10.3-0.20220224222438-c78f6963a1c0+incompatible
20.10.11
20.10.11+incompatible
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
github.com/docker/docker@v1.13.1
github.com/docker/docker@v1.13.1
20.10.11
20.10.11+incompatible
1
bicarus/wg-access-server:v0.8.206cab48e9334
github.com/docker/docker@v20.10.8+incompatible
github.com/docker/docker@v20.10.8+incompatible
20.10.11
20.10.11+incompatible
1
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/balance-registration-php:devc36094a41369
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/betaalservice-php:latestece1ab544c57
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/cgrc-php:dev25415534d245
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/checkin-component-php:dev3423845692c1
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/conduction-ui-php:dev2744565516e8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/kvk-php:dev8f177f9f8a7b
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
conduction/pan-php:dev24f03c57568f
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
daprio/dashboard:0.15.04be696707bd1
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
daprio/dashboard:0.14.07ba5d51e5b97
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
datadog/agent:7.22.08f20e56b5311
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible
20.10.11
20.10.11+incompatible
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
github.com/moby/moby@v0.7.3-0.20190826074503-38ab9da00309
20.10.11
20.10.11+incompatible
1
devspacecloud/manager:0.3.349c397413f7b
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
github.com/docker/docker@v1.4.2-0.20200203170920-46ec8731fbce
20.10.11
20.10.11+incompatible
1
douz/overlord:latestf2bc7fc068c1
github.com/docker/docker@v1.13.1
github.com/docker/docker@v1.13.1
20.10.11
20.10.11+incompatible
1
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
github.com/moby/moby@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible
20.10.11
20.10.11+incompatible
1
gocrane/craned:v0.5.1a1400909118c
github.com/docker/docker@v20.10.2+incompatible
github.com/docker/docker@v20.10.2+incompatible
20.10.11
20.10.11+incompatible
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.