BIT-golang-2023-44487
Open SourceExploitedCISA KEV listedCRITICAL2024-03-06
BIT-golang-2023-44487
Affected products
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 9 are already weaponised in the wild.
The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.
BIT-golang-2023-44487
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2020-0601
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.4, macOS Sonoma 14.4, macOS Ventura 13.6.5, tvOS 17.4, visionOS 1.1, watchOS 10.4. An a...
CVEs:CVE-2024-23225
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ipados | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| macos | affected | apple | — | — |
| tvos | affected | apple | — | — |
| visionos | affected | apple | — | — |
| watchos | affected | apple | — | — |
CVEs:CVE-2024-23225
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.6 and iPadOS 16.7.6, iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
CVEs:CVE-2024-23225
CVEs:CVE-2024-23296
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.4 and iPadOS 17.4, macOS Monterey 12.7.6, macOS Sonoma 14.4, macOS Ventura 13.6.7, tvOS 17.4, visionOS 1.1, watchOS 10.4. An a...
CVEs:CVE-2024-23296
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ipados | affected | apple | — | — |
| iphone_os | affected | apple | — | — |
| macos | affected | apple | — | — |
| tvos | affected | apple | — | — |
| visionos | affected | apple | — | — |
| watchos | affected | apple | — | — |
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited.
CVEs:CVE-2024-23296
TensorFlow vulnerable to heap out-of-buffer read in the QuantizeAndDequantize operation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
BIT-golang-2020-24553
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
chromium - security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
Security update for chromium
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | SUSE:Package Hub 15 SP5 | chromium | — |
| chromium | affected | openSUSE:Leap 15.5 | chromium | — |
| llvm17 | affected | openSUSE:Leap 15.5 | llvm17 | — |
| llvm17 | affected | SUSE:Package Hub 15 SP5 | llvm17 | — |
GHSA-6hhg-hj7x-7qv8
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2024-2173
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
chromium - security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
CVEs:CVE-2024-2173
Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2173
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Out of bounds memory access in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2173
GHSA-vgj9-5c97-pwx2
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2024-2174
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2174
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2024-2174
Inappropriate implementation in V8 in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2174
GHSA-gg9c-7j6m-3qq2
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
CVEs:CVE-2024-2883
DEBIAN-CVE-2024-2883
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2024-2883
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Use after free in ANGLE in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
CVEs:CVE-2024-2883
GHSA-5pj4-f8gh-j3mr
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
CVEs:CVE-2024-2886
DEBIAN-CVE-2024-2886
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in WebCodecs in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2886
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
GHSA-gf62-m3q5-x45g
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
DEBIAN-CVE-2024-2176
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2176
Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2176
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2024-2176
tls-listener affected by the slow loris vulnerability with default configuration
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| sdp-k8s-injector | affected | wolfi | sdp-k8s-injector | — |
| sdp-k8s-injector | affected | chainguard | sdp-k8s-injector | — |
| tls-listener | affected | crates.io | tls-listener | — |
tls-listener affected by the slow loris vulnerability with default configuration
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tls-listener | affected | crates.io | tls-listener | — |
In Quarkus, git credentials could be inadvertently published
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| io.quarkus:quarkus-kubernetes-deployment | affected | Maven | io.quarkus:quarkus-kubernetes-deployment | — |
In Quarkus, git credentials could be inadvertently published
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| io.quarkus:quarkus-kubernetes-deployment | affected | Maven | io.quarkus:quarkus-kubernetes-deployment | — |
A vulnerability was found in Quarkus. In certain conditions related to the CI process, git credentials could be inadvertently published, which could put the git repository at risk.
CVEs:CVE-2024-1979
In Quarkus, git credentials could be inadvertently published
CVEs:CVE-2024-1979
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| io.quarkus:quarkus-kubernetes-deployment | affected | Maven | io.quarkus:quarkus-kubernetes-deployment | — |
Kubernetes Nil pointer dereference in KCM after v1 HPA patch request
CVEs:CVE-2024-0793
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | k8s.io | k8s.io/kubernetes | — |
A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.
CVEs:CVE-2024-0793
JWX vulnerable to a denial of service attack using compressed JWE message
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lestrrat-go/jwx | affected | github.com | github.com/lestrrat-go/jwx | — |
| lestrrat-go/jwx/v2 | affected | github.com | github.com/lestrrat-go/jwx/v2 | — |
JWX vulnerable to a denial of service attack using compressed JWE message
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| boring-registry | affected | chainguard | boring-registry | — |
| boring-registry | affected | wolfi | boring-registry | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| external-secrets-0.7 | affected | chainguard | external-secrets-0.7 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| external-secrets-operator | affected | chainguard | external-secrets-operator | — |
| external-secrets-operator | affected | wolfi | external-secrets-operator | — |
| falco | affected | wolfi | falco | — |
| falco | affected | chainguard | falco | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| istio-cni-1.19 | affected | wolfi | istio-cni-1.19 | — |
| istio-cni-1.19 | affected | chainguard | istio-cni-1.19 | — |
| istio-cni-1.20 | affected | chainguard | istio-cni-1.20 | — |
| istio-cni-1.20 | affected | wolfi | istio-cni-1.20 | — |
| istio-cni-fips-1.19 | affected | chainguard | istio-cni-fips-1.19 | — |
| istio-fips-1.20 | affected | chainguard | istio-fips-1.20 | — |
| istio-operator-1.19 | affected | chainguard | istio-operator-1.19 | — |
| istio-operator-1.19 | affected | wolfi | istio-operator-1.19 | — |
| istio-operator-1.20 | affected | wolfi | istio-operator-1.20 | — |
| istio-operator-1.20 | affected | chainguard | istio-operator-1.20 | — |
| istio-operator-fips-1.19 | affected | chainguard | istio-operator-fips-1.19 | — |
| istio-pilot-agent-1.19 | affected | wolfi | istio-pilot-agent-1.19 | — |
| istio-pilot-agent-1.19 | affected | chainguard | istio-pilot-agent-1.19 | — |
| istio-pilot-agent-1.20 | affected | wolfi | istio-pilot-agent-1.20 | — |
| istio-pilot-agent-1.20 | affected | chainguard | istio-pilot-agent-1.20 | — |
| istio-pilot-agent-fips-1.19 | affected | chainguard | istio-pilot-agent-fips-1.19 | — |
| istio-pilot-discovery-1.19 | affected | chainguard | istio-pilot-discovery-1.19 | — |
| istio-pilot-discovery-1.19 | affected | wolfi | istio-pilot-discovery-1.19 | — |
| istio-pilot-discovery-1.20 | affected | chainguard | istio-pilot-discovery-1.20 | — |
| istio-pilot-discovery-1.20 | affected | wolfi | istio-pilot-discovery-1.20 | — |
| istio-pilot-discovery-fips-1.19 | affected | chainguard | istio-pilot-discovery-fips-1.19 | — |
| kyverno | affected | wolfi | kyverno | — |
| kyverno | affected | chainguard | kyverno | — |
| lestrrat-go/jwx | affected | github.com | github.com/lestrrat-go/jwx | — |
| lestrrat-go/jwx/v2 | affected | github.com | github.com/lestrrat-go/jwx/v2 | — |
| mc | affected | wolfi | mc | — |
| mc | affected | chainguard | mc | — |
| mc-fips | affected | chainguard | mc-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server-fips | affected | chainguard | spire-server-fips | — |
TensorFlow has segmentation fault in tfg-translate
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
DEBIAN-CVE-2024-1753
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-github-containers-buildah | affected | Debian:11 | golang-github-containers-buildah | — |
| golang-github-containers-buildah | affected | Debian:12 | golang-github-containers-buildah | — |
| golang-github-containers-buildah | affected | Debian:13 | golang-github-containers-buildah | — |
| golang-github-containers-buildah | affected | Debian:14 | golang-github-containers-buildah | — |
TensorFlow vulnerable to Heap Buffer Overflow in AvgPoolGrad
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Easy GA4 ( Google Analytics 4 ) allows Stored XSS.This issue affects HT Easy GA4 ( Google Analytics 4 ): from n/a through 1.1.7.
CVEs:CVE-2024-29094
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| ht_easy_ga4_\(google_analytics_4\) | affected | hasthemes | — | — |
CVEs:CVE-2024-29094
TensorFlow vulnerable to Out-of-Bounds Read in DynamicStitch
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow vulnerable to integer overflow in EditDistance
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has Null Pointer Error in TensorArrayConcatV2
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has Floating Point Exception in TensorListSplit with XLA
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has Segfault in Bincount with XLA
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has null dereference on ParallelConcat with XLA
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has Floating Point Exception in TFLite in conv kernel
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow vulnerable to Out-of-Bounds Read in GRUBlockCellGrad
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
TensorFlow has Floating Point Exception in AudioSpectrogram
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-7022
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — |
CVEs:CVE-2024-7022
Uninitialized Use in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-7022
TensorFlow has Null Pointer Error in LookupTableImportV2
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-29112
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Marketing Robot WooCommerce Google Feed Manager allows Stored XSS.This issue affects WooCommerce Google Feed Manager: from n/a through 2.2.0.
CVEs:CVE-2024-29112
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| woocommerce_google_feed_manager | affected | wpmarketingrobot | — | — |
TensorFlow vulnerable to segfault when opening multiframe gif
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
In battery, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08488849; Is...
CVEs:CVE-2024-20034
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20034
Security update for google-oauth-java-client
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google-oauth-java-client | affected | openSUSE:Leap 15.5 | google-oauth-java-client | — |
CVEs:CVE-2024-20832
Heap overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code.
CVEs:CVE-2024-20832
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
CVEs:CVE-2023-52432
Improper input validation in IpcTxSndSetLoopbackCtrl in libsec-ril prior to SMR Sep-2023 Release 1 allows local attackers to write out-of-bounds memory.
CVEs:CVE-2023-52432
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
CVEs:CVE-2024-20836
Out of bounds Read vulnerability in ssmis_get_frm in libsubextractor.so prior to SMR Mar-2024 Release 1 allows local attackers to read out of bounds memory.
CVEs:CVE-2024-20836
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
CVEs:CVE-2024-20831
Stack overflow in Little Kernel in bootloader prior to SMR Mar-2024 Release 1 allows local privileged attackers to execute arbitrary code.
CVEs:CVE-2024-20831
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
TensorFlow has double free in Fractional(Max/Avg)Pool
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Improper access control vulnerability in CustomFrequencyManagerService prior to SMR Mar-2024 Release 1 allows local attackers to execute privileged behaviors.
CVEs:CVE-2024-20835
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
CVEs:CVE-2024-20835
The sensitive information exposure vulnerability in WlanTest prior to SMR Mar-2024 Release 1 allows local attackers to access MAC address without proper permission.
CVEs:CVE-2024-20834
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
CVEs:CVE-2024-20834
CVEs:CVE-2024-20830
Incorrect default permission in AppLock prior to SMR MAr-2024 Release 1 allows local attackers to configure AppLock settings.
CVEs:CVE-2024-20830
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
Use after free vulnerability in pub_crypto_recv_msg prior to SMR Mar-2024 Release 1 due to race condition allows local attackers with system privilege to cause memory corruption.
CVEs:CVE-2024-20833
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | samsung | — | — |
CVEs:CVE-2024-20833
In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ...
CVEs:CVE-2024-20030
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20030
In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0847740...
CVEs:CVE-2024-20029
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20029
In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495937; I...
CVEs:CVE-2024-20037
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20037
In nvram, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08499945; Issue ...
CVEs:CVE-2024-20033
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20033
In aee, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08487630; Issue ID...
CVEs:CVE-2024-20032
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20032
CVEs:CVE-2024-20036
In vdec, there is a possible permission bypass due to a permissions bypass. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08509508; Issue ID: ALPS...
CVEs:CVE-2024-20036
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not need...
CVEs:CVE-2024-0044
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
net/http, x/net/http2: close connections when receiving too many headers
CVEs:CVE-2023-45288
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| http | affected | net | net/http | — |
| x/net | affected | golang.org | golang.org/x/net | — |
| x/net/http2 | affected | golang.org | golang.org/x/net/http2 | — |
An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a...
CVEs:CVE-2023-45288
net/http, x/net/http2: close connections when receiving too many headers
CVEs:CVE-2023-45288
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| http | affected | net | net/http | — |
| x/net | affected | golang.org | golang.org/x/net | — |
| x/net/http2 | affected | golang.org | golang.org/x/net/http2 | — |
GHSA-q75f-2pp5-9phj
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
Type Confusion in WebAssembly in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2887
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
CVEs:CVE-2024-2887
DEBIAN-CVE-2024-2887
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
BIT-golang-2021-38297
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2022-24675
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-33194
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-34558
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-39293
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-3115
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Excessive memory growth in net/http and golang.org/x/net/http2
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-41771
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-44716
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2020-28362
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
HTTP/2 rapid reset can cause excessive work in net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-29923
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-33196
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2022-27664
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-41772
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-33195
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-36221
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2022-23806
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2022-23772
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Insecure parsing of Windows paths with a \??\ prefix in path/filepath
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2022-23773
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-3114
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Panic when decoding Float and Rat types in math/big
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | — | — |
| golang | affected | Bitnami | golang | — |
Stack exhaustion from deeply nested XML documents in encoding/xml
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Backticks not treated as string delimiters in html/template
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Path traversal via Clean on Windows in path/filepath
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-33197
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Indefinite hang with large buffers on Windows in crypto/rand
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2020-29509
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Stack exhaustion when unmarshaling certain documents in encoding/xml
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Stack exhaustion in Glob on certain paths in io/fs
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Stack exhaustion on crafted paths in path/filepath
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Stack exhaustion when reading certain archives in compress/gzip
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2020-29511
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Excessive memory allocation in net/http and net/textproto
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-tensorflow-2021-35958
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Improper handling of non-optional LDFLAGS in go command with cgo in cmd/go
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Stack exhaustion when decoding certain messages in encoding/gob
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Arbitrary code execution via go.mod toolchain directive in cmd/go
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Improper sanitization of LDFLAGS with embedded spaces in go command with cgo in cmd/go
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Code injection via go command with cgo in cmd/go
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Path traversal on Windows in path/filepath
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Unbounded memory consumption when reading headers in archive/tar
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Large RSA keys can cause high CPU usage in crypto/tls
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Improper handling of JavaScript whitespace in html/template
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-27919
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
CVEs:CVE-2024-0039
In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-0039
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Excessive resource consumption in net/http, net/textproto and mime/multipart
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Insufficient sanitization of Host header in net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Memory exhaustion when compiling regular expressions in regexp/syntax
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | — | — |
| golang | affected | Bitnami | golang | — |
Infinite loop in parsing in go/scanner
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Netty's HttpPostRequestDecoder can OOM
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| celeborn-0.5 | affected | wolfi | celeborn-0.5 | — |
| celeborn-0.5 | affected | chainguard | celeborn-0.5 | — |
| cloudwatch-exporter | affected | chainguard | cloudwatch-exporter | — |
| cloudwatch-exporter | affected | wolfi | cloudwatch-exporter | — |
| docker-selenium-jre-bcfips | affected | chainguard | docker-selenium-jre-bcfips | — |
| druid | affected | wolfi | druid | — |
| druid | affected | chainguard | druid | — |
| elasticsearch-7 | affected | chainguard | elasticsearch-7 | — |
| elasticsearch-8 | affected | chainguard | elasticsearch-8 | — |
| grpc-java-fips-1.56.0 | affected | chainguard | grpc-java-fips-1.56.0 | — |
| io.netty:netty-codec-http | affected | Maven | io.netty:netty-codec-http | — |
| keycloak | affected | chainguard | keycloak | — |
| keycloak | affected | wolfi | keycloak | — |
| keycloak-fips | affected | chainguard | keycloak-fips | — |
| management-api-for-apache-cassandra | affected | chainguard | management-api-for-apache-cassandra | — |
| management-api-for-apache-cassandra | affected | wolfi | management-api-for-apache-cassandra | — |
| management-api-for-apache-cassandra-4.0 | affected | chainguard | management-api-for-apache-cassandra-4.0 | — |
| neo4j | affected | wolfi | neo4j | — |
| neo4j | affected | chainguard | neo4j | — |
| opensearch-2 | affected | wolfi | opensearch-2 | — |
| opensearch-2 | affected | chainguard | opensearch-2 | — |
| opensearch-2-jre-bcfips | affected | chainguard | opensearch-2-jre-bcfips | — |
| request-1277 | affected | chainguard | request-1277 | — |
| seata | affected | chainguard | seata | — |
| selenium | affected | wolfi | selenium | — |
| selenium | affected | chainguard | selenium | — |
| selenium-jre-bcfips | affected | chainguard | selenium-jre-bcfips | — |
| sonarqube-10 | affected | chainguard | sonarqube-10 | — |
| sonarqube-10 | affected | wolfi | sonarqube-10 | — |
| spark-3.5 | affected | wolfi | spark-3.5 | — |
| spark-3.5 | affected | chainguard | spark-3.5 | — |
| stargate | affected | chainguard | stargate | — |
| tez | affected | wolfi | tez | — |
| tez | affected | chainguard | tez | — |
| wavefront-proxy | affected | wolfi | wavefront-proxy | — |
| wavefront-proxy | affected | chainguard | wavefront-proxy | — |
Netty's HttpPostRequestDecoder can OOM
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| io.netty:netty-codec-http | affected | Maven | io.netty:netty-codec-http | — |
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | chainguard | aactl | — |
| aactl | affected | wolfi | aactl | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| amass | affected | wolfi | amass | — |
| amass | affected | chainguard | amass | — |
| apisix-ingress-controller | affected | chainguard | apisix-ingress-controller | — |
| apisix-ingress-controller | affected | wolfi | apisix-ingress-controller | — |
| argo-cd-2.10 | affected | wolfi | argo-cd-2.10 | — |
| argo-cd-2.10 | affected | chainguard | argo-cd-2.10 | — |
| argo-cd-2.8 | affected | chainguard | argo-cd-2.8 | — |
| argo-cd-2.8 | affected | wolfi | argo-cd-2.8 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.9 | affected | chainguard | argo-cd-fips-2.9 | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis | affected | chainguard | atlantis | — |
| atlantis | affected | wolfi | atlantis | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | wolfi | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver-1.18 | affected | chainguard | aws-ebs-csi-driver-1.18 | — |
| aws-ebs-csi-driver-1.19 | affected | chainguard | aws-ebs-csi-driver-1.19 | — |
| aws-ebs-csi-driver-fips | affected | chainguard | aws-ebs-csi-driver-fips | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-efs-csi-driver-fips-1.6 | affected | chainguard | aws-efs-csi-driver-fips-1.6 | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-flb-kinesis-fips | affected | chainguard | aws-flb-kinesis-fips | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-2.4.5 | affected | chainguard | aws-load-balancer-controller-2.4.5 | — |
| aws-load-balancer-controller-2.5 | affected | chainguard | aws-load-balancer-controller-2.5 | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| boring-registry | affected | chainguard | boring-registry | — |
| boring-registry | affected | wolfi | boring-registry | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buf | affected | wolfi | buf | — |
| buf | affected | chainguard | buf | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd | affected | chainguard | buildkitd | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| cadvisor | affected | chainguard | cadvisor | — |
| cadvisor | affected | wolfi | cadvisor | — |
| calico | affected | wolfi | calico | — |
| calico | affected | chainguard | calico | — |
| calico-fips | affected | chainguard | calico-fips | — |
| calico-fips-3.25 | affected | chainguard | calico-fips-3.25 | — |
| capslock | affected | chainguard | capslock | — |
| capslock | affected | wolfi | capslock | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| certificate-transparency | affected | wolfi | certificate-transparency | — |
| certificate-transparency | affected | chainguard | certificate-transparency | — |
| certificate-transparency-fips | affected | chainguard | certificate-transparency-fips | — |
| cert-manager-1.12 | affected | chainguard | cert-manager-1.12 | — |
| cert-manager-1.12 | affected | wolfi | cert-manager-1.12 | — |
| cert-manager-fips-1.12 | affected | chainguard | cert-manager-fips-1.12 | — |
| cert-manager-fips-1.13 | affected | chainguard | cert-manager-fips-1.13 | — |
| cert-manager-fips-1.14 | affected | chainguard | cert-manager-fips-1.14 | — |
| cfssl | affected | chainguard | cfssl | — |
| cfssl | affected | wolfi | cfssl | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| cilium-1.14 | affected | wolfi | cilium-1.14 | — |
| cilium-1.14 | affected | chainguard | cilium-1.14 | — |
| cilium-1.15 | affected | wolfi | cilium-1.15 | — |
| cilium-1.15 | affected | chainguard | cilium-1.15 | — |
| cilium-cli | affected | chainguard | cilium-cli | — |
| cilium-cli | affected | wolfi | cilium-cli | — |
| cilium-fips-1.14 | affected | chainguard | cilium-fips-1.14 | — |
| cloudflared | affected | wolfi | cloudflared | — |
| cloudflared | affected | chainguard | cloudflared | — |
| cloud-sql-proxy | affected | chainguard | cloud-sql-proxy | — |
| cloud-sql-proxy | affected | wolfi | cloud-sql-proxy | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-autoscaler-1.26 | affected | chainguard | cluster-autoscaler-1.26 | — |
| cluster-autoscaler-1.26 | affected | wolfi | cluster-autoscaler-1.26 | — |
| cluster-autoscaler-1.27 | affected | wolfi | cluster-autoscaler-1.27 | — |
| cluster-autoscaler-1.27 | affected | chainguard | cluster-autoscaler-1.27 | — |
| cluster-autoscaler-1.28 | affected | chainguard | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.28 | affected | wolfi | cluster-autoscaler-1.28 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-fips-1.25 | affected | chainguard | cluster-autoscaler-fips-1.25 | — |
| cluster-autoscaler-fips-1.26 | affected | chainguard | cluster-autoscaler-fips-1.26 | — |
| cluster-autoscaler-fips-1.27 | affected | chainguard | cluster-autoscaler-fips-1.27 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| clusterctl | affected | chainguard | clusterctl | — |
| clusterctl | affected | wolfi | clusterctl | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| conftest | affected | wolfi | conftest | — |
| conftest | affected | chainguard | conftest | — |
| conftest-fips | affected | chainguard | conftest-fips | — |
| consul-1.15 | affected | chainguard | consul-1.15 | — |
| consul-1.15 | affected | wolfi | consul-1.15 | — |
| consul-1.16 | affected | chainguard | consul-1.16 | — |
| consul-1.16 | affected | wolfi | consul-1.16 | — |
| consul-1.17 | affected | chainguard | consul-1.17 | — |
| consul-1.17-fips | affected | chainguard | consul-1.17-fips | — |
| containerd | affected | wolfi | containerd | — |
| containerd | affected | chainguard | containerd | — |
| contour-1.28 | affected | chainguard | contour-1.28 | — |
| contour-1.28 | affected | wolfi | contour-1.28 | — |
| coredns | affected | wolfi | coredns | — |
| coredns | affected | chainguard | coredns | — |
| cortex | affected | chainguard | cortex | — |
| cortex | affected | wolfi | cortex | — |
| cosign | affected | wolfi | cosign | — |
| cosign | affected | chainguard | cosign | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| cosign-fips | affected | wolfi | cosign-fips | — |
| cri-tools | affected | wolfi | cri-tools | — |
| cri-tools | affected | chainguard | cri-tools | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane-provider-aws | affected | chainguard | crossplane-provider-aws | — |
| crossplane-provider-aws | affected | wolfi | crossplane-provider-aws | — |
| crossplane-provider-aws-cloudformation | affected | wolfi | crossplane-provider-aws-cloudformation | — |
| crossplane-provider-aws-cloudformation | affected | chainguard | crossplane-provider-aws-cloudformation | — |
| crossplane-provider-aws-cloudfront | affected | wolfi | crossplane-provider-aws-cloudfront | — |
| crossplane-provider-aws-cloudfront | affected | chainguard | crossplane-provider-aws-cloudfront | — |
| crossplane-provider-aws-cloudwatchlogs | affected | wolfi | crossplane-provider-aws-cloudwatchlogs | — |
| crossplane-provider-aws-cloudwatchlogs | affected | chainguard | crossplane-provider-aws-cloudwatchlogs | — |
| crossplane-provider-aws-dynamodb | affected | wolfi | crossplane-provider-aws-dynamodb | — |
| crossplane-provider-aws-dynamodb | affected | chainguard | crossplane-provider-aws-dynamodb | — |
| crossplane-provider-aws-ec2 | affected | wolfi | crossplane-provider-aws-ec2 | — |
| crossplane-provider-aws-ec2 | affected | chainguard | crossplane-provider-aws-ec2 | — |
| crossplane-provider-aws-eks | affected | wolfi | crossplane-provider-aws-eks | — |
| crossplane-provider-aws-eks | affected | chainguard | crossplane-provider-aws-eks | — |
| crossplane-provider-aws-elasticache | affected | wolfi | crossplane-provider-aws-elasticache | — |
| crossplane-provider-aws-elasticache | affected | chainguard | crossplane-provider-aws-elasticache | — |
| crossplane-provider-aws-firehose | affected | chainguard | crossplane-provider-aws-firehose | — |
| crossplane-provider-aws-firehose | affected | wolfi | crossplane-provider-aws-firehose | — |
| crossplane-provider-aws-iam | affected | wolfi | crossplane-provider-aws-iam | — |
| crossplane-provider-aws-iam | affected | chainguard | crossplane-provider-aws-iam | — |
| crossplane-provider-aws-kinesis | affected | chainguard | crossplane-provider-aws-kinesis | — |
| crossplane-provider-aws-kinesis | affected | wolfi | crossplane-provider-aws-kinesis | — |
| crossplane-provider-aws-kms | affected | chainguard | crossplane-provider-aws-kms | — |
| crossplane-provider-aws-kms | affected | wolfi | crossplane-provider-aws-kms | — |
| crossplane-provider-aws-lambda | affected | chainguard | crossplane-provider-aws-lambda | — |
| crossplane-provider-aws-lambda | affected | wolfi | crossplane-provider-aws-lambda | — |
| crossplane-provider-aws-memorydb | affected | chainguard | crossplane-provider-aws-memorydb | — |
| crossplane-provider-aws-memorydb | affected | wolfi | crossplane-provider-aws-memorydb | — |
| crossplane-provider-aws-rds | affected | wolfi | crossplane-provider-aws-rds | — |
| crossplane-provider-aws-rds | affected | chainguard | crossplane-provider-aws-rds | — |
| crossplane-provider-aws-route53 | affected | chainguard | crossplane-provider-aws-route53 | — |
| crossplane-provider-aws-route53 | affected | wolfi | crossplane-provider-aws-route53 | — |
| crossplane-provider-aws-s3 | affected | wolfi | crossplane-provider-aws-s3 | — |
| crossplane-provider-aws-s3 | affected | chainguard | crossplane-provider-aws-s3 | — |
| crossplane-provider-aws-sns | affected | wolfi | crossplane-provider-aws-sns | — |
| crossplane-provider-aws-sns | affected | chainguard | crossplane-provider-aws-sns | — |
| crossplane-provider-aws-sqs | affected | chainguard | crossplane-provider-aws-sqs | — |
| crossplane-provider-aws-sqs | affected | wolfi | crossplane-provider-aws-sqs | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure-authorization | affected | chainguard | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-authorization | affected | wolfi | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-managedidentity | affected | wolfi | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-managedidentity | affected | chainguard | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-sql | affected | chainguard | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-sql | affected | wolfi | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-storage | affected | chainguard | crossplane-provider-azure-storage | — |
| crossplane-provider-azure-storage | affected | wolfi | crossplane-provider-azure-storage | — |
| crossplane-provider-family-aws | affected | chainguard | crossplane-provider-family-aws | — |
| crossplane-provider-family-aws | affected | wolfi | crossplane-provider-family-aws | — |
| crossplane-provider-family-azure | affected | wolfi | crossplane-provider-family-azure | — |
| crossplane-provider-family-azure | affected | chainguard | crossplane-provider-family-azure | — |
| crossplane-provider-gcp | affected | wolfi | crossplane-provider-gcp | — |
| crossplane-provider-gcp | affected | chainguard | crossplane-provider-gcp | — |
| ctop | affected | wolfi | ctop | — |
| ctop | affected | chainguard | ctop | — |
| dagger | affected | wolfi | dagger | — |
| dagger | affected | chainguard | dagger | — |
| datadog-agent | affected | wolfi | datadog-agent | — |
| datadog-agent | affected | chainguard | datadog-agent | — |
| datadog-agent-fips | affected | chainguard | datadog-agent-fips | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-fips | affected | chainguard | dex-fips | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| docker | affected | chainguard | docker | — |
| docker | affected | wolfi | docker | — |
| docker-compose | affected | wolfi | docker-compose | — |
| docker-compose | affected | chainguard | docker-compose | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| etcd-3.4 | affected | chainguard | etcd-3.4 | — |
| etcd-3.5 | affected | wolfi | etcd-3.5 | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-dns | affected | wolfi | external-dns | — |
| external-dns | affected | chainguard | external-dns | — |
| external-dns-0.13.5 | affected | chainguard | external-dns-0.13.5 | — |
| external-dns-fips | affected | chainguard | external-dns-fips | — |
| external-secrets-0.7 | affected | chainguard | external-secrets-0.7 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| external-secrets-operator | affected | chainguard | external-secrets-operator | — |
| external-secrets-operator | affected | wolfi | external-secrets-operator | — |
| falco | affected | wolfi | falco | — |
| falco | affected | chainguard | falco | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| falcosidekick | affected | wolfi | falcosidekick | — |
| falcosidekick | affected | chainguard | falcosidekick | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| filebeat | affected | wolfi | filebeat | — |
| filebeat | affected | chainguard | filebeat | — |
| filebeat-fips | affected | chainguard | filebeat-fips | — |
| flannel | affected | chainguard | flannel | — |
| flannel | affected | wolfi | flannel | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-0 | affected | chainguard | flux-0 | — |
| flux-0.37 | affected | chainguard | flux-0.37 | — |
| flux-2.0 | affected | chainguard | flux-2.0 | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller-0.37 | affected | chainguard | flux-helm-controller-0.37 | — |
| flux-helm-controller-2.0 | affected | chainguard | flux-helm-controller-2.0 | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller-0 | affected | chainguard | flux-image-automation-controller-0 | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller-0 | affected | chainguard | flux-image-reflector-controller-0 | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller-0 | affected | chainguard | flux-kustomize-controller-0 | — |
| flux-kustomize-controller-0.37 | affected | chainguard | flux-kustomize-controller-0.37 | — |
| flux-kustomize-controller-2.0 | affected | chainguard | flux-kustomize-controller-2.0 | — |
| flux-notification-controller | affected | wolfi | flux-notification-controller | — |
| flux-notification-controller | affected | chainguard | flux-notification-controller | — |
| flux-notification-controller-0 | affected | chainguard | flux-notification-controller-0 | — |
| flux-notification-controller-0.37 | affected | chainguard | flux-notification-controller-0.37 | — |
| flux-notification-controller-2.0 | affected | chainguard | flux-notification-controller-2.0 | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| frp | affected | chainguard | frp | — |
| frp | affected | wolfi | frp | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gatekeeper-3.12 | affected | wolfi | gatekeeper-3.12 | — |
| gatekeeper-3.12 | affected | chainguard | gatekeeper-3.12 | — |
| gatekeeper-3.13 | affected | wolfi | gatekeeper-3.13 | — |
| gatekeeper-3.13 | affected | chainguard | gatekeeper-3.13 | — |
| gatekeeper-3.14 | affected | chainguard | gatekeeper-3.14 | — |
| gatekeeper-3.14 | affected | wolfi | gatekeeper-3.14 | — |
| gatekeeper-fips-3.13 | affected | chainguard | gatekeeper-fips-3.13 | — |
| gatekeeper-fips-3.14 | affected | chainguard | gatekeeper-fips-3.14 | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | wolfi | gh | — |
| gh | affected | chainguard | gh | — |
| gitlab-pages | affected | wolfi | gitlab-pages | — |
| gitlab-pages | affected | chainguard | gitlab-pages | — |
| gitlab-runner | affected | wolfi | gitlab-runner | — |
| gitlab-runner | affected | chainguard | gitlab-runner | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gitsign | affected | chainguard | gitsign | — |
| gitsign | affected | wolfi | gitsign | — |
| go-ipfs-fips | affected | chainguard | go-ipfs-fips | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate | affected | wolfi | gomplate | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser-1.18 | affected | wolfi | goreleaser-1.18 | — |
| goreleaser-1.18 | affected | chainguard | goreleaser-1.18 | — |
| gotenberg | affected | chainguard | gotenberg | — |
| gpu-operator | affected | chainguard | gpu-operator | — |
| grafana | affected | chainguard | grafana | — |
| grafana | affected | wolfi | grafana | — |
| grafana-10.2 | affected | chainguard | grafana-10.2 | — |
| grafana-agent-operator | affected | wolfi | grafana-agent-operator | — |
| grafana-agent-operator | affected | chainguard | grafana-agent-operator | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpc-health-probe | affected | wolfi | grpc-health-probe | — |
| grpc-health-probe | affected | chainguard | grpc-health-probe | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grype | affected | chainguard | grype | — |
| grype | affected | wolfi | grype | — |
| guac | affected | chainguard | guac | — |
| guac | affected | wolfi | guac | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| helm | affected | wolfi | helm | — |
| helm | affected | chainguard | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | wolfi | helm-push | — |
| helm-push | affected | chainguard | helm-push | — |
| hubble | affected | wolfi | hubble | — |
| hubble | affected | chainguard | hubble | — |
| hubble-fips | affected | chainguard | hubble-fips | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui-backend | affected | chainguard | hubble-ui-backend | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| hugo | affected | wolfi | hugo | — |
| hugo | affected | chainguard | hugo | — |
| hugo-extended | affected | chainguard | hugo-extended | — |
| hugo-extended | affected | wolfi | hugo-extended | — |
| influx | affected | wolfi | influx | — |
| influx | affected | chainguard | influx | — |
| influxd | affected | chainguard | influxd | — |
| influxd | affected | wolfi | influxd | — |
| ingress-nginx-controller | affected | chainguard | ingress-nginx-controller | — |
| ingress-nginx-controller | affected | wolfi | ingress-nginx-controller | — |
| ingress-nginx-controller-1.9 | affected | chainguard | ingress-nginx-controller-1.9 | — |
| ingress-nginx-controller-fips | affected | chainguard | ingress-nginx-controller-fips | — |
| ipfs | affected | wolfi | ipfs | — |
| ipfs | affected | chainguard | ipfs | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| istio-cni-1.20 | affected | chainguard | istio-cni-1.20 | — |
| istio-cni-1.20 | affected | wolfi | istio-cni-1.20 | — |
| istio-cni-fips-1.19 | affected | chainguard | istio-cni-fips-1.19 | — |
| istio-fips-1.20 | affected | chainguard | istio-fips-1.20 | — |
| istio-operator-1.19 | affected | wolfi | istio-operator-1.19 | — |
| istio-operator-1.19 | affected | chainguard | istio-operator-1.19 | — |
| istio-operator-1.20 | affected | chainguard | istio-operator-1.20 | — |
| istio-operator-1.20 | affected | wolfi | istio-operator-1.20 | — |
| istio-operator-fips-1.19 | affected | chainguard | istio-operator-fips-1.19 | — |
| istio-pilot-agent-1.19 | affected | chainguard | istio-pilot-agent-1.19 | — |
| istio-pilot-agent-1.19 | affected | wolfi | istio-pilot-agent-1.19 | — |
| istio-pilot-agent-1.20 | affected | wolfi | istio-pilot-agent-1.20 | — |
| istio-pilot-agent-1.20 | affected | chainguard | istio-pilot-agent-1.20 | — |
| istio-pilot-agent-fips-1.19 | affected | chainguard | istio-pilot-agent-fips-1.19 | — |
| istio-pilot-discovery-1.19 | affected | chainguard | istio-pilot-discovery-1.19 | — |
| istio-pilot-discovery-1.19 | affected | wolfi | istio-pilot-discovery-1.19 | — |
| istio-pilot-discovery-1.20 | affected | wolfi | istio-pilot-discovery-1.20 | — |
| istio-pilot-discovery-1.20 | affected | chainguard | istio-pilot-discovery-1.20 | — |
| istio-pilot-discovery-fips-1.19 | affected | chainguard | istio-pilot-discovery-fips-1.19 | — |
| k3d | affected | chainguard | k3d | — |
| k3d | affected | wolfi | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| k9s | affected | wolfi | k9s | — |
| k9s | affected | chainguard | k9s | — |
| kaf | affected | wolfi | kaf | — |
| kaf | affected | chainguard | kaf | — |
| kaniko | affected | wolfi | kaniko | — |
| kaniko | affected | chainguard | kaniko | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| karpenter | affected | chainguard | karpenter | — |
| karpenter | affected | wolfi | karpenter | — |
| karpenter-0.23 | affected | chainguard | karpenter-0.23 | — |
| keda | affected | wolfi | keda | — |
| keda | affected | chainguard | keda | — |
| keda-2.11 | affected | chainguard | keda-2.11 | — |
| keda-2.11 | affected | wolfi | keda-2.11 | — |
| keda-2.12 | affected | wolfi | keda-2.12 | — |
| keda-2.12 | affected | chainguard | keda-2.12 | — |
| keda-2.13 | affected | chainguard | keda-2.13 | — |
| keda-2.13 | affected | wolfi | keda-2.13 | — |
| keda-2.8 | affected | chainguard | keda-2.8 | — |
| keda-2.9 | affected | chainguard | keda-2.9 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kiam | affected | chainguard | kiam | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| kpt | affected | wolfi | kpt | — |
| kpt | affected | chainguard | kpt | — |
| kubeadm-bootstrap-controller | affected | chainguard | kubeadm-bootstrap-controller | — |
| kubeadm-bootstrap-controller | affected | wolfi | kubeadm-bootstrap-controller | — |
| kubeadm-controlplane-controller | affected | wolfi | kubeadm-controlplane-controller | — |
| kubeadm-controlplane-controller | affected | chainguard | kubeadm-controlplane-controller | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench-fips | affected | chainguard | kube-bench-fips | — |
| kubectl-1.26 | affected | chainguard | kubectl-1.26 | — |
| kubeflow | affected | wolfi | kubeflow | — |
| kubeflow | affected | chainguard | kubeflow | — |
| kubeflow-fips | affected | chainguard | kubeflow-fips | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-fluentd-operator | affected | wolfi | kube-fluentd-operator | — |
| kube-fluentd-operator | affected | chainguard | kube-fluentd-operator | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.26 | affected | wolfi | kubernetes-1.26 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-1.31 | affected | chainguard | kubernetes-1.31 | — |
| kubernetes-1.31 | affected | wolfi | kubernetes-1.31 | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-external-attacher-4.3 | affected | chainguard | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.3 | affected | wolfi | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.4 | affected | wolfi | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-4.4 | affected | chainguard | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-fips-4.3 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.3 | — |
| kubernetes-csi-external-attacher-fips-4.4 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.4 | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer-1.8 | affected | chainguard | kubernetes-csi-external-resizer-1.8 | — |
| kubernetes-csi-external-resizer-fips-1.8 | affected | chainguard | kubernetes-csi-external-resizer-fips-1.8 | — |
| kubernetes-csi-external-snapshotter | affected | chainguard | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter | affected | wolfi | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter-6.0 | affected | chainguard | kubernetes-csi-external-snapshotter-6.0 | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-fips-2.8 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.8 | — |
| kubernetes-csi-node-driver-registrar-fips-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.9 | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kubescape | affected | wolfi | kubescape | — |
| kubescape | affected | chainguard | kubescape | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-2.2.0 | affected | chainguard | kube-state-metrics-2.2.0 | — |
| kube-state-metrics-2.6 | affected | chainguard | kube-state-metrics-2.6 | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kustomize | affected | wolfi | kustomize | — |
| kustomize | affected | chainguard | kustomize | — |
| kwok | affected | chainguard | kwok | — |
| kwok | affected | wolfi | kwok | — |
| kyverno | affected | chainguard | kyverno | — |
| kyverno | affected | wolfi | kyverno | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter-2.11 | affected | chainguard | kyverno-policy-reporter-2.11 | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin-1.5 | affected | chainguard | kyverno-policy-reporter-kyverno-plugin-1.5 | — |
| kyverno-policy-reporter-ui | affected | wolfi | kyverno-policy-reporter-ui | — |
| kyverno-policy-reporter-ui | affected | chainguard | kyverno-policy-reporter-ui | — |
| litefs | affected | wolfi | litefs | — |
| litefs | affected | chainguard | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| loki | affected | wolfi | loki | — |
| loki | affected | chainguard | loki | — |
| mc | affected | wolfi | mc | — |
| mc | affected | chainguard | mc | — |
| mc-fips | affected | chainguard | mc-fips | — |
| melange | affected | wolfi | melange | — |
| melange | affected | chainguard | melange | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| metacontroller | affected | chainguard | metacontroller | — |
| metacontroller | affected | wolfi | metacontroller | — |
| metallb | affected | wolfi | metallb | — |
| metallb | affected | chainguard | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent-1.43 | affected | chainguard | newrelic-infrastructure-agent-1.43 | — |
| newrelic-nri-kube-events | affected | chainguard | newrelic-nri-kube-events | — |
| newrelic-nri-kube-events | affected | wolfi | newrelic-nri-kube-events | — |
| newrelic-nri-kube-events-1.9 | affected | chainguard | newrelic-nri-kube-events-1.9 | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| node-problem-detector-0.8 | affected | wolfi | node-problem-detector-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-kubernetes | affected | wolfi | nri-kubernetes | — |
| nri-kubernetes | affected | chainguard | nri-kubernetes | — |
| nri-kubernetes-2.13 | affected | chainguard | nri-kubernetes-2.13 | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| ollama | affected | wolfi | ollama | — |
| ollama | affected | chainguard | ollama | — |
| opentofu | affected | wolfi | opentofu | — |
| opentofu | affected | chainguard | opentofu | — |
| opentofu-1.6 | affected | chainguard | opentofu-1.6 | — |
| osv-scanner | affected | chainguard | osv-scanner | — |
| osv-scanner | affected | wolfi | osv-scanner | — |
| pgpool2_exporter | affected | wolfi | pgpool2_exporter | — |
| pgpool2_exporter | affected | chainguard | pgpool2_exporter | — |
| pgpool2_exporter-fips | affected | chainguard | pgpool2_exporter-fips | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| prometheus | affected | wolfi | prometheus | — |
| prometheus | affected | chainguard | prometheus | — |
| prometheus-2.38 | affected | chainguard | prometheus-2.38 | — |
| prometheus-2.50 | affected | wolfi | prometheus-2.50 | — |
| prometheus-2.50 | affected | chainguard | prometheus-2.50 | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter | affected | wolfi | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | wolfi | prometheus-bind-exporter | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | wolfi | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter | affected | wolfi | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-fips | affected | chainguard | prometheus-fips | — |
| prometheus-fips-2.45 | affected | chainguard | prometheus-fips-2.45 | — |
| prometheus-mongodb-exporter | affected | wolfi | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-mysqld-exporter | affected | wolfi | prometheus-mysqld-exporter | — |
| prometheus-nats-exporter | affected | wolfi | prometheus-nats-exporter | — |
| prometheus-nats-exporter | affected | chainguard | prometheus-nats-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter | affected | wolfi | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | wolfi | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-0.13 | affected | chainguard | prometheus-postgres-exporter-0.13 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | wolfi | prometheus-redis-exporter | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-redis-exporter-fips-1.44 | affected | chainguard | prometheus-redis-exporter-fips-1.44 | — |
| prometheus-stackdriver-exporter | affected | chainguard | prometheus-stackdriver-exporter | — |
| prometheus-stackdriver-exporter | affected | wolfi | prometheus-stackdriver-exporter | — |
| prometheus-statsd-exporter | affected | wolfi | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-0.22 | affected | chainguard | prometheus-statsd-exporter-0.22 | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protobuf | affected | google.golang.org | google.golang.org/protobuf | — |
| protobuf/encoding/protojson | affected | google.golang.org | google.golang.org/protobuf/encoding/protojson | — |
| protobuf/internal/encoding/json | affected | google.golang.org | google.golang.org/protobuf/internal/encoding/json | — |
| protoc-gen-go | affected | chainguard | protoc-gen-go | — |
| protoc-gen-go | affected | wolfi | protoc-gen-go | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-language-dotnet | affected | chainguard | pulumi-language-dotnet | — |
| pulumi-language-dotnet | affected | wolfi | pulumi-language-dotnet | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| rabbitmq-messaging-topology-operator | affected | wolfi | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator | affected | chainguard | rabbitmq-messaging-topology-operator | — |
| rclone | affected | wolfi | rclone | — |
| rclone | affected | chainguard | rclone | — |
| rekor | affected | wolfi | rekor | — |
| rekor | affected | chainguard | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| request-1279 | affected | chainguard | request-1279 | — |
| request-1279-1-12 | affected | chainguard | request-1279-1-12 | — |
| restic | affected | wolfi | restic | — |
| restic | affected | chainguard | restic | — |
| rook | affected | wolfi | rook | — |
| rook | affected | chainguard | rook | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| scorecard | affected | wolfi | scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| secrets-store-csi-driver | affected | chainguard | secrets-store-csi-driver | — |
| secrets-store-csi-driver | affected | wolfi | secrets-store-csi-driver | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| skopeo | affected | chainguard | skopeo | — |
| skopeo | affected | wolfi | skopeo | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sops | affected | wolfi | sops | — |
| sops | affected | chainguard | sops | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spicedb | affected | wolfi | spicedb | — |
| spicedb | affected | chainguard | spicedb | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server-fips | affected | chainguard | spire-server-fips | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca | affected | wolfi | step-ca | — |
| supercronic | affected | chainguard | supercronic | — |
| supercronic | affected | wolfi | supercronic | — |
| syft | affected | chainguard | syft | — |
| syft | affected | wolfi | syft | — |
| tctl | affected | chainguard | tctl | — |
| tctl | affected | wolfi | tctl | — |
| tctl-fips | affected | chainguard | tctl-fips | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-pipelines | affected | wolfi | tekton-pipelines | — |
| tekton-pipelines | affected | chainguard | tekton-pipelines | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| telegraf-1.27 | affected | chainguard | telegraf-1.27 | — |
| telegraf-1.27 | affected | wolfi | telegraf-1.27 | — |
| telegraf-1.28 | affected | chainguard | telegraf-1.28 | — |
| telegraf-1.28 | affected | wolfi | telegraf-1.28 | — |
| telegraf-1.29 | affected | chainguard | telegraf-1.29 | — |
| telegraf-1.29 | affected | wolfi | telegraf-1.29 | — |
| telegraf-1.30 | affected | chainguard | telegraf-1.30 | — |
| telegraf-1.30 | affected | wolfi | telegraf-1.30 | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-1.7 | affected | chainguard | terraform-1.7 | — |
| terraform-1.8 | affected | chainguard | terraform-1.8 | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-fips-1.5 | affected | chainguard | terraform-fips-1.5 | — |
| terraform-provider-aws | affected | wolfi | terraform-provider-aws | — |
| terraform-provider-aws | affected | chainguard | terraform-provider-aws | — |
| terraform-provider-azurerm | affected | chainguard | terraform-provider-azurerm | — |
| terraform-provider-azurerm | affected | wolfi | terraform-provider-azurerm | — |
| terraform-provider-google | affected | wolfi | terraform-provider-google | — |
| terraform-provider-google | affected | chainguard | terraform-provider-google | — |
| terraform-provider-sendgrid | affected | chainguard | terraform-provider-sendgrid | — |
| terraform-provider-sendgrid | affected | wolfi | terraform-provider-sendgrid | — |
| terraform-provider-sendgrid-fips | affected | chainguard | terraform-provider-sendgrid-fips | — |
| terragrunt | affected | wolfi | terragrunt | — |
| terragrunt | affected | chainguard | terragrunt | — |
| tflint | affected | wolfi | tflint | — |
| tflint | affected | chainguard | tflint | — |
| thanos | affected | chainguard | thanos | — |
| thanos | affected | wolfi | thanos | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-1.30 | affected | wolfi | tigera-operator-1.30 | — |
| tigera-operator-1.30 | affected | chainguard | tigera-operator-1.30 | — |
| tigera-operator-1.31 | affected | wolfi | tigera-operator-1.31 | — |
| tigera-operator-1.31 | affected | chainguard | tigera-operator-1.31 | — |
| tigera-operator-1.32 | affected | chainguard | tigera-operator-1.32 | — |
| tigera-operator-1.32 | affected | wolfi | tigera-operator-1.32 | — |
| tigera-operator-1.33 | affected | wolfi | tigera-operator-1.33 | — |
| tigera-operator-1.33 | affected | chainguard | tigera-operator-1.33 | — |
| tigera-operator-fips | affected | chainguard | tigera-operator-fips | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| tigera-operator-fips-1.32 | affected | chainguard | tigera-operator-fips-1.32 | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| tkn | affected | chainguard | tkn | — |
| tkn | affected | wolfi | tkn | — |
| traefik | affected | wolfi | traefik | — |
| traefik | affected | chainguard | traefik | — |
| traefik-fips | affected | chainguard | traefik-fips | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| trivy | affected | chainguard | trivy | — |
| trivy | affected | wolfi | trivy | — |
| trust-manager | affected | wolfi | trust-manager | — |
| trust-manager | affected | chainguard | trust-manager | — |
| up | affected | chainguard | up | — |
| up | affected | wolfi | up | — |
| vault-1.13 | affected | chainguard | vault-1.13 | — |
| vault-1.13 | affected | wolfi | vault-1.13 | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-csi-provider | affected | wolfi | vault-csi-provider | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| weaviate | affected | wolfi | weaviate | — |
| weaviate | affected | chainguard | weaviate | — |
| zarf | affected | wolfi | zarf | — |
| zarf | affected | chainguard | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
Golang protojson.Unmarshal function infinite loop when unmarshaling certain forms of invalid JSON
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| protobuf | affected | google.golang.org | google.golang.org/protobuf | — |
| protobuf/encoding/protojson | affected | google.golang.org | google.golang.org/protobuf/encoding/protojson | — |
| protobuf/internal/encoding/json | affected | google.golang.org | google.golang.org/protobuf/internal/encoding/json | — |
CVE-2024-24786 affecting package kubernetes for versions less than 1.28.4-12
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Azure Linux:2 | kubernetes | — |
CVE-2024-24786 affecting package kubernetes for versions less than 1.30.1-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Azure Linux:3 | kubernetes | — |
DEBIAN-CVE-2024-24786
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-google-protobuf | affected | Debian:11 | golang-google-protobuf | — |
| golang-google-protobuf | affected | Debian:12 | golang-google-protobuf | — |
| golang-google-protobuf | affected | Debian:13 | golang-google-protobuf | — |
| golang-google-protobuf | affected | Debian:14 | golang-google-protobuf | — |
Infinite loop in JSON unmarshaling in google.golang.org/protobuf
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | chainguard | aactl | — |
| aactl | affected | wolfi | aactl | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| amass | affected | chainguard | amass | — |
| amass | affected | wolfi | amass | — |
| apisix-ingress-controller | affected | wolfi | apisix-ingress-controller | — |
| apisix-ingress-controller | affected | chainguard | apisix-ingress-controller | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis | affected | chainguard | atlantis | — |
| atlantis | affected | wolfi | atlantis | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-flb-kinesis-fips | affected | chainguard | aws-flb-kinesis-fips | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| boring-registry | affected | wolfi | boring-registry | — |
| boring-registry | affected | chainguard | boring-registry | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buf | affected | wolfi | buf | — |
| buf | affected | chainguard | buf | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| cadvisor | affected | chainguard | cadvisor | — |
| cadvisor | affected | wolfi | cadvisor | — |
| capslock | affected | wolfi | capslock | — |
| capslock | affected | chainguard | capslock | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| certificate-transparency | affected | chainguard | certificate-transparency | — |
| certificate-transparency | affected | wolfi | certificate-transparency | — |
| certificate-transparency-fips | affected | chainguard | certificate-transparency-fips | — |
| cfssl | affected | wolfi | cfssl | — |
| cfssl | affected | chainguard | cfssl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cilium-1.15 | affected | chainguard | cilium-1.15 | — |
| cilium-cli | affected | wolfi | cilium-cli | — |
| cilium-cli | affected | chainguard | cilium-cli | — |
| cloudflared | affected | wolfi | cloudflared | — |
| cloudflared | affected | chainguard | cloudflared | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| conftest | affected | chainguard | conftest | — |
| conftest | affected | wolfi | conftest | — |
| conftest-fips | affected | chainguard | conftest-fips | — |
| cortex | affected | chainguard | cortex | — |
| cortex | affected | wolfi | cortex | — |
| cosign | affected | chainguard | cosign | — |
| cosign | affected | wolfi | cosign | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| cri-tools | affected | wolfi | cri-tools | — |
| cri-tools | affected | chainguard | cri-tools | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane-provider-aws | affected | wolfi | crossplane-provider-aws | — |
| crossplane-provider-aws | affected | chainguard | crossplane-provider-aws | — |
| crossplane-provider-aws-cloudformation | affected | wolfi | crossplane-provider-aws-cloudformation | — |
| crossplane-provider-aws-cloudformation | affected | chainguard | crossplane-provider-aws-cloudformation | — |
| crossplane-provider-aws-cloudfront | affected | chainguard | crossplane-provider-aws-cloudfront | — |
| crossplane-provider-aws-cloudfront | affected | wolfi | crossplane-provider-aws-cloudfront | — |
| crossplane-provider-aws-cloudwatchlogs | affected | wolfi | crossplane-provider-aws-cloudwatchlogs | — |
| crossplane-provider-aws-cloudwatchlogs | affected | chainguard | crossplane-provider-aws-cloudwatchlogs | — |
| crossplane-provider-aws-dynamodb | affected | wolfi | crossplane-provider-aws-dynamodb | — |
| crossplane-provider-aws-dynamodb | affected | chainguard | crossplane-provider-aws-dynamodb | — |
| crossplane-provider-aws-ec2 | affected | wolfi | crossplane-provider-aws-ec2 | — |
| crossplane-provider-aws-ec2 | affected | chainguard | crossplane-provider-aws-ec2 | — |
| crossplane-provider-aws-eks | affected | wolfi | crossplane-provider-aws-eks | — |
| crossplane-provider-aws-eks | affected | chainguard | crossplane-provider-aws-eks | — |
| crossplane-provider-aws-elasticache | affected | wolfi | crossplane-provider-aws-elasticache | — |
| crossplane-provider-aws-elasticache | affected | chainguard | crossplane-provider-aws-elasticache | — |
| crossplane-provider-aws-firehose | affected | wolfi | crossplane-provider-aws-firehose | — |
| crossplane-provider-aws-firehose | affected | chainguard | crossplane-provider-aws-firehose | — |
| crossplane-provider-aws-iam | affected | wolfi | crossplane-provider-aws-iam | — |
| crossplane-provider-aws-iam | affected | chainguard | crossplane-provider-aws-iam | — |
| crossplane-provider-aws-kinesis | affected | chainguard | crossplane-provider-aws-kinesis | — |
| crossplane-provider-aws-kinesis | affected | wolfi | crossplane-provider-aws-kinesis | — |
| crossplane-provider-aws-kms | affected | chainguard | crossplane-provider-aws-kms | — |
| crossplane-provider-aws-kms | affected | wolfi | crossplane-provider-aws-kms | — |
| crossplane-provider-aws-lambda | affected | wolfi | crossplane-provider-aws-lambda | — |
| crossplane-provider-aws-lambda | affected | chainguard | crossplane-provider-aws-lambda | — |
| crossplane-provider-aws-memorydb | affected | chainguard | crossplane-provider-aws-memorydb | — |
| crossplane-provider-aws-memorydb | affected | wolfi | crossplane-provider-aws-memorydb | — |
| crossplane-provider-aws-rds | affected | wolfi | crossplane-provider-aws-rds | — |
| crossplane-provider-aws-rds | affected | chainguard | crossplane-provider-aws-rds | — |
| crossplane-provider-aws-route53 | affected | wolfi | crossplane-provider-aws-route53 | — |
| crossplane-provider-aws-route53 | affected | chainguard | crossplane-provider-aws-route53 | — |
| crossplane-provider-aws-s3 | affected | chainguard | crossplane-provider-aws-s3 | — |
| crossplane-provider-aws-s3 | affected | wolfi | crossplane-provider-aws-s3 | — |
| crossplane-provider-aws-sns | affected | wolfi | crossplane-provider-aws-sns | — |
| crossplane-provider-aws-sns | affected | chainguard | crossplane-provider-aws-sns | — |
| crossplane-provider-aws-sqs | affected | wolfi | crossplane-provider-aws-sqs | — |
| crossplane-provider-aws-sqs | affected | chainguard | crossplane-provider-aws-sqs | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure-authorization | affected | chainguard | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-authorization | affected | wolfi | crossplane-provider-azure-authorization | — |
| crossplane-provider-azure-managedidentity | affected | wolfi | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-managedidentity | affected | chainguard | crossplane-provider-azure-managedidentity | — |
| crossplane-provider-azure-sql | affected | chainguard | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-sql | affected | wolfi | crossplane-provider-azure-sql | — |
| crossplane-provider-azure-storage | affected | chainguard | crossplane-provider-azure-storage | — |
| crossplane-provider-azure-storage | affected | wolfi | crossplane-provider-azure-storage | — |
| crossplane-provider-family-aws | affected | chainguard | crossplane-provider-family-aws | — |
| crossplane-provider-family-aws | affected | wolfi | crossplane-provider-family-aws | — |
| crossplane-provider-family-azure | affected | wolfi | crossplane-provider-family-azure | — |
| crossplane-provider-family-azure | affected | chainguard | crossplane-provider-family-azure | — |
| crossplane-provider-gcp | affected | chainguard | crossplane-provider-gcp | — |
| ctop | affected | wolfi | ctop | — |
| ctop | affected | chainguard | ctop | — |
| dagger | affected | chainguard | dagger | — |
| dagger | affected | wolfi | dagger | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-fips | affected | chainguard | dex-fips | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| docker | affected | wolfi | docker | — |
| docker | affected | chainguard | docker | — |
| docker-compose | affected | chainguard | docker-compose | — |
| docker-compose | affected | wolfi | docker-compose | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | wolfi | eksctl | — |
| eksctl | affected | chainguard | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| etcd-3.4 | affected | chainguard | etcd-3.4 | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| falcosidekick | affected | chainguard | falcosidekick | — |
| falcosidekick | affected | wolfi | falcosidekick | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| ferretdb | affected | wolfi | ferretdb | — |
| ferretdb | affected | chainguard | ferretdb | — |
| flannel | affected | chainguard | flannel | — |
| flannel | affected | wolfi | flannel | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-notification-controller | affected | chainguard | flux-notification-controller | — |
| flux-notification-controller | affected | wolfi | flux-notification-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| frp | affected | chainguard | frp | — |
| frp | affected | wolfi | frp | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | wolfi | gh | — |
| gh | affected | chainguard | gh | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gitsign | affected | chainguard | gitsign | — |
| gitsign | affected | wolfi | gitsign | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| gotenberg | affected | chainguard | gotenberg | — |
| grafana-agent-operator | affected | chainguard | grafana-agent-operator | — |
| grafana-agent-operator | affected | wolfi | grafana-agent-operator | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpc-health-probe | affected | wolfi | grpc-health-probe | — |
| grpc-health-probe | affected | chainguard | grpc-health-probe | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grype | affected | wolfi | grype | — |
| grype | affected | chainguard | grype | — |
| guac | affected | wolfi | guac | — |
| guac | affected | chainguard | guac | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| helm | affected | chainguard | helm | — |
| helm | affected | wolfi | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | wolfi | helm-push | — |
| helm-push | affected | chainguard | helm-push | — |
| hubble | affected | chainguard | hubble | — |
| hubble | affected | wolfi | hubble | — |
| hubble-fips | affected | chainguard | hubble-fips | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| hugo | affected | chainguard | hugo | — |
| hugo | affected | wolfi | hugo | — |
| hugo-extended | affected | wolfi | hugo-extended | — |
| hugo-extended | affected | chainguard | hugo-extended | — |
| influx | affected | wolfi | influx | — |
| influx | affected | chainguard | influx | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| k3d | affected | chainguard | k3d | — |
| k3d | affected | wolfi | k3d | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| k9s | affected | wolfi | k9s | — |
| k9s | affected | chainguard | k9s | — |
| kaf | affected | chainguard | kaf | — |
| kaf | affected | wolfi | kaf | — |
| kaniko | affected | wolfi | kaniko | — |
| kaniko | affected | chainguard | kaniko | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| kiam | affected | chainguard | kiam | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kor | affected | wolfi | kor | — |
| kor | affected | chainguard | kor | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| kpt | affected | wolfi | kpt | — |
| kpt | affected | chainguard | kpt | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench-fips | affected | chainguard | kube-bench-fips | — |
| kubeflow | affected | chainguard | kubeflow | — |
| kubeflow | affected | wolfi | kubeflow | — |
| kubeflow-fips | affected | chainguard | kubeflow-fips | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kube-fluentd-operator | affected | wolfi | kube-fluentd-operator | — |
| kube-fluentd-operator | affected | chainguard | kube-fluentd-operator | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.26 | affected | wolfi | kubernetes-1.26 | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-csi-driver-hostpath | affected | chainguard | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-driver-hostpath | affected | wolfi | kubernetes-csi-driver-hostpath | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubescape | affected | wolfi | kubescape | — |
| kubescape | affected | chainguard | kubescape | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-2.6 | affected | chainguard | kube-state-metrics-2.6 | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kustomize | affected | chainguard | kustomize | — |
| kustomize | affected | wolfi | kustomize | — |
| kwok | affected | chainguard | kwok | — |
| kwok | affected | wolfi | kwok | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-ui | affected | chainguard | kyverno-policy-reporter-ui | — |
| kyverno-policy-reporter-ui | affected | wolfi | kyverno-policy-reporter-ui | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| mc | affected | wolfi | mc | — |
| mc | affected | chainguard | mc | — |
| mc-fips | affected | chainguard | mc-fips | — |
| melange | affected | wolfi | melange | — |
| melange | affected | chainguard | melange | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| metacontroller | affected | chainguard | metacontroller | — |
| metacontroller | affected | wolfi | metacontroller | — |
| metallb | affected | chainguard | metallb | — |
| metallb | affected | wolfi | metallb | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| nats | affected | chainguard | nats | — |
| nats | affected | wolfi | nats | — |
| nerdctl | affected | wolfi | nerdctl | — |
| nerdctl | affected | chainguard | nerdctl | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-nri-kube-events | affected | chainguard | newrelic-nri-kube-events | — |
| newrelic-nri-kube-events | affected | wolfi | newrelic-nri-kube-events | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-kubernetes | affected | chainguard | nri-kubernetes | — |
| nri-kubernetes | affected | wolfi | nri-kubernetes | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| ollama | affected | wolfi | ollama | — |
| ollama | affected | chainguard | ollama | — |
| osv-scanner | affected | wolfi | osv-scanner | — |
| osv-scanner | affected | chainguard | osv-scanner | — |
| pgpool2_exporter | affected | wolfi | pgpool2_exporter | — |
| pgpool2_exporter | affected | chainguard | pgpool2_exporter | — |
| pgpool2_exporter-fips | affected | chainguard | pgpool2_exporter-fips | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-nats-exporter | affected | chainguard | prometheus-nats-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-stackdriver-exporter | affected | chainguard | prometheus-stackdriver-exporter | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protobuf | affected | google.golang.org | google.golang.org/protobuf | — |
| protoc-gen-go | affected | chainguard | protoc-gen-go | — |
| protoc-gen-go | affected | wolfi | protoc-gen-go | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-language-dotnet | affected | chainguard | pulumi-language-dotnet | — |
| pulumi-language-dotnet | affected | wolfi | pulumi-language-dotnet | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-messaging-topology-operator | affected | chainguard | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator | affected | wolfi | rabbitmq-messaging-topology-operator | — |
| rclone | affected | wolfi | rclone | — |
| rclone | affected | chainguard | rclone | — |
| rekor | affected | wolfi | rekor | — |
| rekor | affected | chainguard | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| request-1279 | affected | chainguard | request-1279 | — |
| restic | affected | chainguard | restic | — |
| restic | affected | wolfi | restic | — |
| rook | affected | chainguard | rook | — |
| rook | affected | wolfi | rook | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | wolfi | runc | — |
| runc | affected | chainguard | runc | — |
| scorecard | affected | chainguard | scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| secrets-store-csi-driver | affected | wolfi | secrets-store-csi-driver | — |
| secrets-store-csi-driver | affected | chainguard | secrets-store-csi-driver | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| skopeo | affected | chainguard | skopeo | — |
| skopeo | affected | wolfi | skopeo | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| sops | affected | wolfi | sops | — |
| sops | affected | chainguard | sops | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spicedb | affected | wolfi | spicedb | — |
| spicedb | affected | chainguard | spicedb | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server-fips | affected | chainguard | spire-server-fips | — |
| src | affected | chainguard | src | — |
| src | affected | wolfi | src | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca | affected | chainguard | step-ca | — |
| supercronic | affected | chainguard | supercronic | — |
| supercronic | affected | wolfi | supercronic | — |
| syft | affected | wolfi | syft | — |
| syft | affected | chainguard | syft | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | chainguard | terraform | — |
| terraform | affected | wolfi | terraform | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-provider-aws | affected | chainguard | terraform-provider-aws | — |
| terraform-provider-aws | affected | wolfi | terraform-provider-aws | — |
| terraform-provider-azurerm | affected | chainguard | terraform-provider-azurerm | — |
| terraform-provider-azurerm | affected | wolfi | terraform-provider-azurerm | — |
| terraform-provider-google | affected | chainguard | terraform-provider-google | — |
| terraform-provider-google | affected | wolfi | terraform-provider-google | — |
| terraform-provider-sendgrid | affected | chainguard | terraform-provider-sendgrid | — |
| terraform-provider-sendgrid | affected | wolfi | terraform-provider-sendgrid | — |
| terraform-provider-sendgrid-fips | affected | chainguard | terraform-provider-sendgrid-fips | — |
| terragrunt | affected | wolfi | terragrunt | — |
| terragrunt | affected | chainguard | terragrunt | — |
| tflint | affected | wolfi | tflint | — |
| tflint | affected | chainguard | tflint | — |
| thanos | affected | wolfi | thanos | — |
| thanos | affected | chainguard | thanos | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| timoni | affected | chainguard | timoni | — |
| timoni | affected | wolfi | timoni | — |
| tkn | affected | wolfi | tkn | — |
| tkn | affected | chainguard | tkn | — |
| trillian | affected | chainguard | trillian | — |
| trillian | affected | wolfi | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| trivy | affected | chainguard | trivy | — |
| trivy | affected | wolfi | trivy | — |
| trust-manager | affected | wolfi | trust-manager | — |
| trust-manager | affected | chainguard | trust-manager | — |
| up | affected | chainguard | up | — |
| up | affected | wolfi | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | wolfi | velero | — |
| velero | affected | chainguard | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| weaviate | affected | wolfi | weaviate | — |
| weaviate | affected | chainguard | weaviate | — |
| zarf | affected | wolfi | zarf | — |
| zarf | affected | chainguard | zarf | — |
| zot | affected | chainguard | zot | — |
| zot | affected | wolfi | zot | — |
Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Excessive resource consumption in mime/multipart
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Restricted file access on Windows in os and net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Denial of service via chunk extensions in net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Red Hat Security Advisory: golang security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Red Hat:enterprise_linux:9::appstream | golang | — |
| golang-bin | affected | Red Hat:enterprise_linux:9::appstream | golang-bin | — |
| golang-docs | affected | Red Hat:enterprise_linux:9::appstream | golang-docs | — |
| golang-misc | affected | Red Hat:enterprise_linux:9::appstream | golang-misc | — |
| golang-src | affected | Red Hat:enterprise_linux:9::appstream | golang-src | — |
| golang-tests | affected | Red Hat:enterprise_linux:9::appstream | golang-tests | — |
| go-toolset | affected | Red Hat:enterprise_linux:9::appstream | go-toolset | — |
Moderate: golang security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | AlmaLinux:9 | golang | — |
| golang-bin | affected | AlmaLinux:9 | golang-bin | — |
| golang-docs | affected | AlmaLinux:9 | golang-docs | — |
| golang-misc | affected | AlmaLinux:9 | golang-misc | — |
| golang-src | affected | AlmaLinux:9 | golang-src | — |
| golang-tests | affected | AlmaLinux:9 | golang-tests | — |
| go-toolset | affected | AlmaLinux:9 | go-toolset | — |
Incorrect sanitization of forwarded query parameters in net/http/httputil
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
golang security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | openEuler:20.03-LTS-SP1 | golang | — |
| golang | affected | openEuler:20.03-LTS-SP4 | golang | — |
| golang | affected | openEuler:22.03-LTS | golang | — |
| golang | affected | openEuler:22.03-LTS-SP1 | golang | — |
| golang | affected | openEuler:22.03-LTS-SP2 | golang | — |
| golang | affected | openEuler:22.03-LTS-SP3 | golang | — |
Memory exhaustion in multipart form parsing in net/textproto and net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
GHSA-rr6r-cfgf-gc6h
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| amass | affected | wolfi | amass | — |
| amass | affected | chainguard | amass | — |
| argo-cd-2.7 | affected | wolfi | argo-cd-2.7 | — |
| argo-cd-2.7 | affected | chainguard | argo-cd-2.7 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.9 | affected | chainguard | argo-cd-fips-2.9 | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver | affected | wolfi | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver-1.18 | affected | chainguard | aws-ebs-csi-driver-1.18 | — |
| aws-ebs-csi-driver-1.19 | affected | chainguard | aws-ebs-csi-driver-1.19 | — |
| aws-ebs-csi-driver-fips | affected | chainguard | aws-ebs-csi-driver-fips | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-efs-csi-driver-fips-1.6 | affected | chainguard | aws-efs-csi-driver-fips-1.6 | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-2.4.5 | affected | chainguard | aws-load-balancer-controller-2.4.5 | — |
| aws-load-balancer-controller-2.5 | affected | chainguard | aws-load-balancer-controller-2.5 | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bom | affected | wolfi | bom | — |
| bom | affected | chainguard | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd | affected | chainguard | buildkitd | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| cadvisor | affected | chainguard | cadvisor | — |
| cadvisor | affected | wolfi | cadvisor | — |
| calico | affected | wolfi | calico | — |
| calico | affected | chainguard | calico | — |
| calico-fips | affected | chainguard | calico-fips | — |
| capslock | affected | chainguard | capslock | — |
| capslock | affected | wolfi | capslock | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cert-manager-fips-1.13 | affected | chainguard | cert-manager-fips-1.13 | — |
| cert-manager-fips-1.14 | affected | chainguard | cert-manager-fips-1.14 | — |
| cfssl | affected | wolfi | cfssl | — |
| cfssl | affected | chainguard | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy | affected | chainguard | cloud-sql-proxy | — |
| cloud-sql-proxy | affected | wolfi | cloud-sql-proxy | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-api-controller | affected | wolfi | cluster-api-controller | — |
| cluster-api-controller | affected | chainguard | cluster-api-controller | — |
| cluster-autoscaler-1.25 | affected | wolfi | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.25 | affected | chainguard | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-fips-1.25 | affected | chainguard | cluster-autoscaler-fips-1.25 | — |
| cluster-autoscaler-fips-1.26 | affected | chainguard | cluster-autoscaler-fips-1.26 | — |
| cluster-autoscaler-fips-1.27 | affected | chainguard | cluster-autoscaler-fips-1.27 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| clusterctl | affected | wolfi | clusterctl | — |
| clusterctl | affected | chainguard | clusterctl | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| consul-1.15 | affected | chainguard | consul-1.15 | — |
| consul-1.15 | affected | wolfi | consul-1.15 | — |
| consul-1.16 | affected | chainguard | consul-1.16 | — |
| consul-1.16 | affected | wolfi | consul-1.16 | — |
| consul-1.17 | affected | chainguard | consul-1.17 | — |
| consul-1.17-fips | affected | chainguard | consul-1.17-fips | — |
| controller-gen | affected | wolfi | controller-gen | — |
| controller-gen | affected | chainguard | controller-gen | — |
| coredns | affected | chainguard | coredns | — |
| coredns | affected | wolfi | coredns | — |
| cortex | affected | wolfi | cortex | — |
| cortex | affected | chainguard | cortex | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| ctop | affected | wolfi | ctop | — |
| ctop | affected | chainguard | ctop | — |
| cue | affected | wolfi | cue | — |
| cue | affected | chainguard | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | chainguard | dagger | — |
| dagger | affected | wolfi | dagger | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| datadog-agent | affected | wolfi | datadog-agent | — |
| datadog-agent | affected | chainguard | datadog-agent | — |
| datadog-agent-fips | affected | chainguard | datadog-agent-fips | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| delve | affected | wolfi | delve | — |
| delve | affected | chainguard | delve | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| direnv | affected | chainguard | direnv | — |
| direnv | affected | wolfi | direnv | — |
| dive | affected | chainguard | dive | — |
| dive | affected | wolfi | dive | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | wolfi | eksctl | — |
| eksctl | affected | chainguard | eksctl | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | wolfi | esbuild | — |
| esbuild | affected | chainguard | esbuild | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| etcd-3.5 | affected | wolfi | etcd-3.5 | — |
| external-dns | affected | chainguard | external-dns | — |
| external-dns | affected | wolfi | external-dns | — |
| external-dns-0.13.5 | affected | chainguard | external-dns-0.13.5 | — |
| external-dns-fips | affected | chainguard | external-dns-fips | — |
| external-secrets-0.7 | affected | chainguard | external-secrets-0.7 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falco | affected | chainguard | falco | — |
| falco | affected | wolfi | falco | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| filebeat | affected | wolfi | filebeat | — |
| filebeat | affected | chainguard | filebeat | — |
| filebeat-fips | affected | chainguard | filebeat-fips | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-0 | affected | chainguard | flux-0 | — |
| flux-0.37 | affected | chainguard | flux-0.37 | — |
| flux-2.0 | affected | chainguard | flux-2.0 | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller-0.37 | affected | chainguard | flux-helm-controller-0.37 | — |
| flux-helm-controller-2.0 | affected | chainguard | flux-helm-controller-2.0 | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller-0 | affected | chainguard | flux-image-automation-controller-0 | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller-0 | affected | chainguard | flux-image-reflector-controller-0 | — |
| flux-kustomize-controller-0 | affected | chainguard | flux-kustomize-controller-0 | — |
| flux-kustomize-controller-0.37 | affected | chainguard | flux-kustomize-controller-0.37 | — |
| flux-kustomize-controller-2.0 | affected | chainguard | flux-kustomize-controller-2.0 | — |
| flux-notification-controller-0 | affected | chainguard | flux-notification-controller-0 | — |
| flux-notification-controller-0.37 | affected | chainguard | flux-notification-controller-0.37 | — |
| flux-notification-controller-2.0 | affected | chainguard | flux-notification-controller-2.0 | — |
| fq | affected | chainguard | fq | — |
| fq | affected | wolfi | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gatekeeper-3.12 | affected | wolfi | gatekeeper-3.12 | — |
| gatekeeper-3.12 | affected | chainguard | gatekeeper-3.12 | — |
| gatekeeper-3.13 | affected | chainguard | gatekeeper-3.13 | — |
| gatekeeper-3.13 | affected | wolfi | gatekeeper-3.13 | — |
| gatekeeper-3.14 | affected | wolfi | gatekeeper-3.14 | — |
| gatekeeper-3.14 | affected | chainguard | gatekeeper-3.14 | — |
| gatekeeper-fips-3.13 | affected | chainguard | gatekeeper-fips-3.13 | — |
| gatekeeper-fips-3.14 | affected | chainguard | gatekeeper-fips-3.14 | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gh | affected | chainguard | gh | — |
| gh | affected | wolfi | gh | — |
| gitlab-rails-ee-17.0 | affected | chainguard | gitlab-rails-ee-17.0 | — |
| gitlab-rails-ee-17.3 | affected | chainguard | gitlab-rails-ee-17.3 | — |
| gitlab-rails-ee-fips-17.0 | affected | chainguard | gitlab-rails-ee-fips-17.0 | — |
| gitlab-rails-ee-fips-17.1 | affected | chainguard | gitlab-rails-ee-fips-17.1 | — |
| gitlab-runner | affected | chainguard | gitlab-runner | — |
| gitlab-runner | affected | wolfi | gitlab-runner | — |
| gitness | affected | chainguard | gitness | — |
| gitness | affected | wolfi | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-bindata | affected | chainguard | go-bindata | — |
| go-bindata | affected | wolfi | go-bindata | — |
| gobuster | affected | chainguard | gobuster | — |
| gobuster | affected | wolfi | gobuster | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-md2man | affected | chainguard | go-md2man | — |
| go-md2man | affected | wolfi | go-md2man | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gops | affected | chainguard | gops | — |
| gops | affected | wolfi | gops | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser-1.18 | affected | chainguard | goreleaser-1.18 | — |
| goreleaser-1.18 | affected | wolfi | goreleaser-1.18 | — |
| gosu | affected | chainguard | gosu | — |
| gosu | affected | wolfi | gosu | — |
| govulncheck | affected | wolfi | govulncheck | — |
| govulncheck | affected | chainguard | govulncheck | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grype | affected | chainguard | grype | — |
| grype | affected | wolfi | grype | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| helm | affected | chainguard | helm | — |
| helm | affected | wolfi | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| hey | affected | chainguard | hey | — |
| hey | affected | wolfi | hey | — |
| http-echo | affected | chainguard | http-echo | — |
| http-echo | affected | wolfi | http-echo | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui-backend | affected | chainguard | hubble-ui-backend | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | wolfi | influx | — |
| influx | affected | chainguard | influx | — |
| ingress-nginx-controller | affected | wolfi | ingress-nginx-controller | — |
| ingress-nginx-controller | affected | chainguard | ingress-nginx-controller | — |
| ingress-nginx-controller-fips | affected | chainguard | ingress-nginx-controller-fips | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| istio-operator-fips-1.19 | affected | chainguard | istio-operator-fips-1.19 | — |
| istio-pilot-agent-fips-1.19 | affected | chainguard | istio-pilot-agent-fips-1.19 | — |
| istio-pilot-discovery-fips-1.19 | affected | chainguard | istio-pilot-discovery-fips-1.19 | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | wolfi | k3d | — |
| k3d | affected | chainguard | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | chainguard | kaf | — |
| kaf | affected | wolfi | kaf | — |
| karpenter-0.23 | affected | chainguard | karpenter-0.23 | — |
| keda | affected | chainguard | keda | — |
| keda | affected | wolfi | keda | — |
| keda-2.8 | affected | chainguard | keda-2.8 | — |
| keda-2.9 | affected | chainguard | keda-2.9 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | chainguard | kind | — |
| kind | affected | wolfi | kind | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kpt | affected | chainguard | kpt | — |
| kpt | affected | wolfi | kpt | — |
| kubeadm-bootstrap-controller | affected | wolfi | kubeadm-bootstrap-controller | — |
| kubeadm-bootstrap-controller | affected | chainguard | kubeadm-bootstrap-controller | — |
| kubeadm-controlplane-controller | affected | wolfi | kubeadm-controlplane-controller | — |
| kubeadm-controlplane-controller | affected | chainguard | kubeadm-controlplane-controller | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.19 | affected | chainguard | kubernetes-1.19 | — |
| kubernetes-1.20 | affected | chainguard | kubernetes-1.20 | — |
| kubernetes-1.21 | affected | chainguard | kubernetes-1.21 | — |
| kubernetes-1.22 | affected | chainguard | kubernetes-1.22 | — |
| kubernetes-1.23 | affected | chainguard | kubernetes-1.23 | — |
| kubernetes-1.24 | affected | chainguard | kubernetes-1.24 | — |
| kubernetes-1.24 | affected | wolfi | kubernetes-1.24 | — |
| kubernetes-1.26 | affected | wolfi | kubernetes-1.26 | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-csi-external-attacher-4.3 | affected | chainguard | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.3 | affected | wolfi | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.4 | affected | chainguard | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-4.4 | affected | wolfi | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-fips-4.3 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.3 | — |
| kubernetes-csi-external-attacher-fips-4.4 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.4 | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer-1.8 | affected | chainguard | kubernetes-csi-external-resizer-1.8 | — |
| kubernetes-csi-external-resizer-fips-1.8 | affected | chainguard | kubernetes-csi-external-resizer-fips-1.8 | — |
| kubernetes-csi-external-snapshotter | affected | chainguard | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter | affected | wolfi | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter-6.0 | affected | chainguard | kubernetes-csi-external-snapshotter-6.0 | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-fips-2.8 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.8 | — |
| kubernetes-csi-node-driver-registrar-fips-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.9 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics-2.2.0 | affected | chainguard | kube-state-metrics-2.2.0 | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kustomize | affected | chainguard | kustomize | — |
| kustomize | affected | wolfi | kustomize | — |
| kwok | affected | chainguard | kwok | — |
| kwok | affected | wolfi | kwok | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter-2.11 | affected | chainguard | kyverno-policy-reporter-2.11 | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin-1.5 | affected | chainguard | kyverno-policy-reporter-kyverno-plugin-1.5 | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| logstash-jre-bcfips | affected | chainguard | logstash-jre-bcfips | — |
| loki | affected | chainguard | loki | — |
| loki | affected | wolfi | loki | — |
| mage | affected | chainguard | mage | — |
| mage | affected | wolfi | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| metallb | affected | wolfi | metallb | — |
| metallb | affected | chainguard | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | chainguard | mockery | — |
| mockery | affected | wolfi | mockery | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nats-server | affected | chainguard | nats-server | — |
| nats-server | affected | wolfi | nats-server | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent-1.43 | affected | chainguard | newrelic-infrastructure-agent-1.43 | — |
| newrelic-nri-kube-events-1.9 | affected | chainguard | newrelic-nri-kube-events-1.9 | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| node-problem-detector-0.8 | affected | wolfi | node-problem-detector-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kubernetes-2.13 | affected | chainguard | nri-kubernetes-2.13 | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nuclei | affected | wolfi | nuclei | — |
| nuclei | affected | chainguard | nuclei | — |
| opentofu | affected | wolfi | opentofu | — |
| opentofu | affected | chainguard | opentofu | — |
| oras | affected | chainguard | oras | — |
| oras | affected | wolfi | oras | — |
| paranoia | affected | chainguard | paranoia | — |
| paranoia | affected | wolfi | paranoia | — |
| petname | affected | wolfi | petname | — |
| petname | affected | chainguard | petname | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| pombump | affected | chainguard | pombump | — |
| pombump | affected | wolfi | pombump | — |
| prometheus | affected | wolfi | prometheus | — |
| prometheus | affected | chainguard | prometheus | — |
| prometheus-2.45 | affected | wolfi | prometheus-2.45 | — |
| prometheus-2.45 | affected | chainguard | prometheus-2.45 | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | wolfi | prometheus-beat-exporter | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-bind-exporter | affected | wolfi | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | wolfi | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter | affected | wolfi | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-fips | affected | chainguard | prometheus-fips | — |
| prometheus-fips-2.38 | affected | chainguard | prometheus-fips-2.38 | — |
| prometheus-fips-2.45 | affected | chainguard | prometheus-fips-2.45 | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter | affected | wolfi | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | wolfi | prometheus-mysqld-exporter | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter | affected | wolfi | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | wolfi | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-0.13 | affected | chainguard | prometheus-postgres-exporter-0.13 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | wolfi | prometheus-redis-exporter | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-redis-exporter-fips-1.44 | affected | chainguard | prometheus-redis-exporter-fips-1.44 | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter | affected | wolfi | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-0.22 | affected | chainguard | prometheus-statsd-exporter-0.22 | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| q | affected | wolfi | q | — |
| q | affected | chainguard | q | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| regclient | affected | wolfi | regclient | — |
| regclient | affected | chainguard | regclient | — |
| render-template | affected | chainguard | render-template | — |
| render-template | affected | wolfi | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| s5cmd | affected | chainguard | s5cmd | — |
| s5cmd | affected | wolfi | s5cmd | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | chainguard | shfmt | — |
| shfmt | affected | wolfi | shfmt | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| supercronic | affected | wolfi | supercronic | — |
| supercronic | affected | chainguard | supercronic | — |
| tailscale | affected | chainguard | tailscale | — |
| tailscale | affected | wolfi | tailscale | — |
| task | affected | wolfi | task | — |
| task | affected | chainguard | task | — |
| tctl | affected | chainguard | tctl | — |
| tctl | affected | wolfi | tctl | — |
| tctl-fips | affected | chainguard | tctl-fips | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | chainguard | terraform | — |
| terraform | affected | wolfi | terraform | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-fips-1.5 | affected | chainguard | terraform-fips-1.5 | — |
| tflint | affected | wolfi | tflint | — |
| tflint | affected | chainguard | tflint | — |
| thanos | affected | wolfi | thanos | — |
| thanos | affected | chainguard | thanos | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator-fips | affected | chainguard | thanos-operator-fips | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-1.32 | affected | wolfi | tigera-operator-1.32 | — |
| tigera-operator-1.32 | affected | chainguard | tigera-operator-1.32 | — |
| tigera-operator-1.33 | affected | chainguard | tigera-operator-1.33 | — |
| tigera-operator-1.33 | affected | wolfi | tigera-operator-1.33 | — |
| tigera-operator-fips | affected | chainguard | tigera-operator-fips | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | chainguard | timoni | — |
| timoni | affected | wolfi | timoni | — |
| traefik-fips | affected | chainguard | traefik-fips | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | chainguard | up | — |
| up | affected | wolfi | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-csi-provider | affected | wolfi | vault-csi-provider | — |
| vault-fips-1.14 | affected | chainguard | vault-fips-1.14 | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| vite | affected | chainguard | vite | — |
| vite | affected | wolfi | vite | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | chainguard | vt-cli | — |
| vt-cli | affected | wolfi | vt-cli | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | wolfi | wazero | — |
| wazero | affected | chainguard | wazero | — |
| wire-go | affected | wolfi | wire-go | — |
| wire-go | affected | chainguard | wire-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| yam | affected | chainguard | yam | — |
| yam | affected | wolfi | yam | — |
| yq | affected | chainguard | yq | — |
| yq | affected | wolfi | yq | — |
| ytt | affected | wolfi | ytt | — |
| ytt | affected | chainguard | ytt | — |
CVE-2023-45290 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2023-45290 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2023-45290 affecting package golang 1.25.7-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:3 | golang | — |
DEBIAN-CVE-2023-45290
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-1.15 | affected | Debian:11 | golang-1.15 | — |
| golang-1.19 | affected | Debian:12 | golang-1.19 | — |
Memory exhaustion in multipart form parsing in net/textproto and net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| amass | affected | chainguard | amass | — |
| amass | affected | wolfi | amass | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bom | affected | wolfi | bom | — |
| bom | affected | chainguard | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| cadvisor | affected | wolfi | cadvisor | — |
| cadvisor | affected | chainguard | cadvisor | — |
| capslock | affected | wolfi | capslock | — |
| capslock | affected | chainguard | capslock | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cfssl | affected | chainguard | cfssl | — |
| cfssl | affected | wolfi | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| controller-gen | affected | wolfi | controller-gen | — |
| controller-gen | affected | chainguard | controller-gen | — |
| cortex | affected | wolfi | cortex | — |
| cortex | affected | chainguard | cortex | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| ctop | affected | chainguard | ctop | — |
| ctop | affected | wolfi | ctop | — |
| cue | affected | chainguard | cue | — |
| cue | affected | wolfi | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | wolfi | dagger | — |
| dagger | affected | chainguard | dagger | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| delve | affected | chainguard | delve | — |
| delve | affected | wolfi | delve | — |
| dex | affected | chainguard | dex | — |
| dex | affected | wolfi | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| direnv | affected | wolfi | direnv | — |
| direnv | affected | chainguard | direnv | — |
| dive | affected | chainguard | dive | — |
| dive | affected | wolfi | dive | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | wolfi | eksctl | — |
| eksctl | affected | chainguard | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | wolfi | esbuild | — |
| esbuild | affected | chainguard | esbuild | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | wolfi | ferretdb | — |
| ferretdb | affected | chainguard | ferretdb | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flux | affected | chainguard | flux | — |
| flux | affected | wolfi | flux | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| fq | affected | wolfi | fq | — |
| fq | affected | chainguard | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | chainguard | gh | — |
| gh | affected | wolfi | gh | — |
| gitness | affected | chainguard | gitness | — |
| gitness | affected | wolfi | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-bindata | affected | chainguard | go-bindata | — |
| go-bindata | affected | wolfi | go-bindata | — |
| gobuster | affected | wolfi | gobuster | — |
| gobuster | affected | chainguard | gobuster | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-md2man | affected | chainguard | go-md2man | — |
| go-md2man | affected | wolfi | go-md2man | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gops | affected | chainguard | gops | — |
| gops | affected | wolfi | gops | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser | affected | chainguard | goreleaser | — |
| gosu | affected | chainguard | gosu | — |
| gosu | affected | wolfi | gosu | — |
| govulncheck | affected | wolfi | govulncheck | — |
| govulncheck | affected | chainguard | govulncheck | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grype | affected | chainguard | grype | — |
| grype | affected | wolfi | grype | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| helm | affected | wolfi | helm | — |
| helm | affected | chainguard | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| hey | affected | wolfi | hey | — |
| hey | affected | chainguard | hey | — |
| http-echo | affected | chainguard | http-echo | — |
| http-echo | affected | wolfi | http-echo | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | chainguard | influx | — |
| influx | affected | wolfi | influx | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | wolfi | k3d | — |
| k3d | affected | chainguard | k3d | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | wolfi | kaf | — |
| kaf | affected | chainguard | kaf | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | chainguard | kind | — |
| kind | affected | wolfi | kind | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| kor | affected | wolfi | kor | — |
| kor | affected | chainguard | kor | — |
| kpt | affected | wolfi | kpt | — |
| kpt | affected | chainguard | kpt | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kustomize | affected | wolfi | kustomize | — |
| kustomize | affected | chainguard | kustomize | — |
| kwok | affected | chainguard | kwok | — |
| kwok | affected | wolfi | kwok | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| lazygit | affected | chainguard | lazygit | — |
| lazygit | affected | wolfi | lazygit | — |
| litefs | affected | wolfi | litefs | — |
| litefs | affected | chainguard | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| mage | affected | chainguard | mage | — |
| mage | affected | wolfi | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| metallb | affected | wolfi | metallb | — |
| metallb | affected | chainguard | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | wolfi | mockery | — |
| mockery | affected | chainguard | mockery | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nats-server | affected | chainguard | nats-server | — |
| nats-server | affected | wolfi | nats-server | — |
| nerdctl | affected | wolfi | nerdctl | — |
| nerdctl | affected | chainguard | nerdctl | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nuclei | affected | wolfi | nuclei | — |
| nuclei | affected | chainguard | nuclei | — |
| oras | affected | wolfi | oras | — |
| oras | affected | chainguard | oras | — |
| paranoia | affected | wolfi | paranoia | — |
| paranoia | affected | chainguard | paranoia | — |
| petname | affected | chainguard | petname | — |
| petname | affected | wolfi | petname | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| pombump | affected | chainguard | pombump | — |
| pombump | affected | wolfi | pombump | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| q | affected | wolfi | q | — |
| q | affected | chainguard | q | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| regclient | affected | wolfi | regclient | — |
| regclient | affected | chainguard | regclient | — |
| render-template | affected | chainguard | render-template | — |
| render-template | affected | wolfi | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| s5cmd | affected | wolfi | s5cmd | — |
| s5cmd | affected | chainguard | s5cmd | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | chainguard | shfmt | — |
| shfmt | affected | wolfi | shfmt | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| stdlib | affected | Go | stdlib | — |
| supercronic | affected | wolfi | supercronic | — |
| supercronic | affected | chainguard | supercronic | — |
| tailscale | affected | wolfi | tailscale | — |
| tailscale | affected | chainguard | tailscale | — |
| task | affected | chainguard | task | — |
| task | affected | wolfi | task | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | chainguard | terraform | — |
| terraform | affected | wolfi | terraform | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| tflint | affected | chainguard | tflint | — |
| tflint | affected | wolfi | tflint | — |
| thanos | affected | chainguard | thanos | — |
| thanos | affected | wolfi | thanos | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| trillian | affected | chainguard | trillian | — |
| trillian | affected | wolfi | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | wolfi | up | — |
| up | affected | chainguard | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| vite | affected | wolfi | vite | — |
| vite | affected | chainguard | vite | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | chainguard | vt-cli | — |
| vt-cli | affected | wolfi | vt-cli | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | wolfi | wazero | — |
| wazero | affected | chainguard | wazero | — |
| wire-go | affected | chainguard | wire-go | — |
| wire-go | affected | wolfi | wire-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| yam | affected | wolfi | yam | — |
| yam | affected | chainguard | yam | — |
| yq | affected | wolfi | yq | — |
| yq | affected | chainguard | yq | — |
| ytt | affected | chainguard | ytt | — |
| ytt | affected | wolfi | ytt | — |
Command 'go get' may unexpectedly fallback to insecure git in cmd/go
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Out of bounds read in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Panic on large handshake records in crypto/tls
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
SQL injection in github.com/jackc/pgproto3 and github.com/jackc/pgx
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| amass | affected | wolfi | amass | — |
| amass | affected | chainguard | amass | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| jackc/pgproto3/v2 | affected | github.com | github.com/jackc/pgproto3/v2 | — |
| jackc/pgx | affected | github.com | github.com/jackc/pgx | — |
| jackc/pgx/v4 | affected | github.com | github.com/jackc/pgx/v4 | — |
| jackc/pgx/v5 | affected | github.com | github.com/jackc/pgx/v5 | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench-fips | affected | chainguard | kube-bench-fips | — |
| spicedb | affected | wolfi | spicedb | — |
| spicedb | affected | chainguard | spicedb | — |
| src | affected | chainguard | src | — |
| src | affected | wolfi | src | — |
| step | affected | chainguard | step | — |
| step | affected | wolfi | step | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca | affected | chainguard | step-ca | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
DEBIAN-CVE-2024-27304
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-github-jackc-pgconn | affected | Debian:12 | golang-github-jackc-pgconn | — |
| golang-github-jackc-pgconn | affected | Debian:13 | golang-github-jackc-pgconn | — |
| golang-github-jackc-pgconn | affected | Debian:14 | golang-github-jackc-pgconn | — |
| golang-github-jackc-pgx | affected | Debian:11 | golang-github-jackc-pgx | — |
| golang-github-jackc-pgx | affected | Debian:12 | golang-github-jackc-pgx | — |
| golang-github-jackc-pgx | affected | Debian:13 | golang-github-jackc-pgx | — |
| golang-github-jackc-pgx | affected | Debian:14 | golang-github-jackc-pgx | — |
pgx SQL Injection via Protocol Message Size Overflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| jackc/pgx | affected | github.com | github.com/jackc/pgx | — |
| jackc/pgx/v4 | affected | github.com | github.com/jackc/pgx/v4 | — |
| jackc/pgx/v5 | affected | github.com | github.com/jackc/pgx/v5 | — |
pgx SQL Injection via Protocol Message Size Overflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| amass | affected | wolfi | amass | — |
| amass | affected | chainguard | amass | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| ferretdb | affected | wolfi | ferretdb | — |
| ferretdb | affected | chainguard | ferretdb | — |
| jackc/pgx | affected | github.com | github.com/jackc/pgx | — |
| jackc/pgx/v4 | affected | github.com | github.com/jackc/pgx/v4 | — |
| jackc/pgx/v5 | affected | github.com | github.com/jackc/pgx/v5 | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| keda | affected | chainguard | keda | — |
| keda | affected | wolfi | keda | — |
| keda-2.11 | affected | wolfi | keda-2.11 | — |
| keda-2.11 | affected | chainguard | keda-2.11 | — |
| keda-2.12 | affected | chainguard | keda-2.12 | — |
| keda-2.12 | affected | wolfi | keda-2.12 | — |
| keda-2.13 | affected | chainguard | keda-2.13 | — |
| keda-2.13 | affected | wolfi | keda-2.13 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench-fips | affected | chainguard | kube-bench-fips | — |
| spicedb | affected | wolfi | spicedb | — |
| spicedb | affected | chainguard | spicedb | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca | affected | chainguard | step-ca | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| telegraf-1.27 | affected | chainguard | telegraf-1.27 | — |
| telegraf-1.27 | affected | wolfi | telegraf-1.27 | — |
| telegraf-1.28 | affected | wolfi | telegraf-1.28 | — |
| telegraf-1.28 | affected | chainguard | telegraf-1.28 | — |
| telegraf-1.29 | affected | chainguard | telegraf-1.29 | — |
| telegraf-1.29 | affected | wolfi | telegraf-1.29 | — |
| telegraf-1.30 | affected | chainguard | telegraf-1.30 | — |
| telegraf-1.30 | affected | wolfi | telegraf-1.30 | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| vault-1.13 | affected | wolfi | vault-1.13 | — |
| vault-1.13 | affected | chainguard | vault-1.13 | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
pgproto3 SQL Injection via Protocol Message Size Overflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| jackc/pgproto3 | affected | github.com | github.com/jackc/pgproto3 | — |
| jackc/pgproto3/v2 | affected | github.com | github.com/jackc/pgproto3/v2 | — |
pgproto3 SQL Injection via Protocol Message Size Overflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| amass | affected | wolfi | amass | — |
| amass | affected | chainguard | amass | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| falcosidekick-fips | affected | chainguard | falcosidekick-fips | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| github.com/jackc/pgproto3 | affected | go | — | — |
| github.com/jackc/pgproto3 | affected | Go | github.com/jackc/pgproto3 | — |
| github.com/jackc/pgproto3/v2 | affected | Go | github.com/jackc/pgproto3/v2 | — |
| github.com/jackc/pgx | affected | Go | github.com/jackc/pgx | — |
| github.com/jackc/pgx/v4 | affected | Go | github.com/jackc/pgx/v4 | — |
| github.com/jackc/pgx/v5 | affected | Go | github.com/jackc/pgx/v5 | — |
| jackc/pgproto3 | affected | github.com | github.com/jackc/pgproto3 | — |
| jackc/pgproto3 | affected | github.com | github.com/jackc/pgproto3 | — |
| jackc/pgproto3 | affected | github.com | — | — |
| jackc/pgproto3/v2 | affected | github.com | github.com/jackc/pgproto3/v2 | — |
| jackc/pgproto3/v2 | affected | github.com | github.com/jackc/pgproto3/v2 | — |
| jackc/pgx | affected | github.com | github.com/jackc/pgx | — |
| jackc/pgx | affected | github.com | github.com/jackc/pgx | — |
| jackc/pgx/v4 | affected | github.com | github.com/jackc/pgx/v4 | — |
| jackc/pgx/v4 | affected | github.com | github.com/jackc/pgx/v4 | — |
| jackc/pgx/v5 | affected | github.com | github.com/jackc/pgx/v5 | — |
| jackc/pgx/v5 | affected | github.com | github.com/jackc/pgx/v5 | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| keda | affected | chainguard | keda | — |
| keda | affected | wolfi | keda | — |
| keda-2.11 | affected | chainguard | keda-2.11 | — |
| keda-2.11 | affected | wolfi | keda-2.11 | — |
| keda-2.12 | affected | chainguard | keda-2.12 | — |
| keda-2.12 | affected | wolfi | keda-2.12 | — |
| keda-2.13 | affected | wolfi | keda-2.13 | — |
| keda-2.13 | affected | chainguard | keda-2.13 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench-fips | affected | chainguard | kube-bench-fips | — |
| pgproto3 | affected | github.com | — | — |
| pgproto3 | affected | github.com/jackc | — | — |
| spicedb | affected | chainguard | spicedb | — |
| spicedb | affected | wolfi | spicedb | — |
| src | affected | chainguard | src | — |
| src | affected | wolfi | src | — |
| step | affected | chainguard | step | — |
| step | affected | wolfi | step | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca | affected | wolfi | step-ca | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| telegraf-1.27 | affected | chainguard | telegraf-1.27 | — |
| telegraf-1.27 | affected | wolfi | telegraf-1.27 | — |
| telegraf-1.28 | affected | wolfi | telegraf-1.28 | — |
| telegraf-1.28 | affected | chainguard | telegraf-1.28 | — |
| telegraf-1.29 | affected | chainguard | telegraf-1.29 | — |
| telegraf-1.29 | affected | wolfi | telegraf-1.29 | — |
| telegraf-1.30 | affected | chainguard | telegraf-1.30 | — |
| telegraf-1.30 | affected | wolfi | telegraf-1.30 | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| vault-1.13 | affected | chainguard | vault-1.13 | — |
| vault-1.13 | affected | wolfi | vault-1.13 | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
GHSA-32ch-6x54-q4h9
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| amass | affected | wolfi | amass | — |
| amass | affected | chainguard | amass | — |
| argo-cd-2.7 | affected | wolfi | argo-cd-2.7 | — |
| argo-cd-2.7 | affected | chainguard | argo-cd-2.7 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.9 | affected | chainguard | argo-cd-fips-2.9 | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver | affected | wolfi | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver-1.18 | affected | chainguard | aws-ebs-csi-driver-1.18 | — |
| aws-ebs-csi-driver-1.19 | affected | chainguard | aws-ebs-csi-driver-1.19 | — |
| aws-ebs-csi-driver-fips | affected | chainguard | aws-ebs-csi-driver-fips | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-efs-csi-driver-fips-1.6 | affected | chainguard | aws-efs-csi-driver-fips-1.6 | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller-2.4.5 | affected | chainguard | aws-load-balancer-controller-2.4.5 | — |
| aws-load-balancer-controller-2.5 | affected | chainguard | aws-load-balancer-controller-2.5 | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bom | affected | chainguard | bom | — |
| bom | affected | wolfi | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| cadvisor | affected | wolfi | cadvisor | — |
| cadvisor | affected | chainguard | cadvisor | — |
| calico | affected | chainguard | calico | — |
| calico | affected | wolfi | calico | — |
| calico-fips | affected | chainguard | calico-fips | — |
| capslock | affected | chainguard | capslock | — |
| capslock | affected | wolfi | capslock | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cert-manager-fips-1.13 | affected | chainguard | cert-manager-fips-1.13 | — |
| cert-manager-fips-1.14 | affected | chainguard | cert-manager-fips-1.14 | — |
| cfssl | affected | wolfi | cfssl | — |
| cfssl | affected | chainguard | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy | affected | wolfi | cloud-sql-proxy | — |
| cloud-sql-proxy | affected | chainguard | cloud-sql-proxy | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-api-controller | affected | wolfi | cluster-api-controller | — |
| cluster-api-controller | affected | chainguard | cluster-api-controller | — |
| cluster-autoscaler-1.25 | affected | wolfi | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.25 | affected | chainguard | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-fips-1.25 | affected | chainguard | cluster-autoscaler-fips-1.25 | — |
| cluster-autoscaler-fips-1.26 | affected | chainguard | cluster-autoscaler-fips-1.26 | — |
| cluster-autoscaler-fips-1.27 | affected | chainguard | cluster-autoscaler-fips-1.27 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| clusterctl | affected | wolfi | clusterctl | — |
| clusterctl | affected | chainguard | clusterctl | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| consul-1.15 | affected | wolfi | consul-1.15 | — |
| consul-1.15 | affected | chainguard | consul-1.15 | — |
| consul-1.16 | affected | chainguard | consul-1.16 | — |
| consul-1.16 | affected | wolfi | consul-1.16 | — |
| consul-1.17 | affected | chainguard | consul-1.17 | — |
| consul-1.17-fips | affected | chainguard | consul-1.17-fips | — |
| controller-gen | affected | chainguard | controller-gen | — |
| controller-gen | affected | wolfi | controller-gen | — |
| coredns | affected | chainguard | coredns | — |
| coredns | affected | wolfi | coredns | — |
| cortex | affected | wolfi | cortex | — |
| cortex | affected | chainguard | cortex | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| ctop | affected | chainguard | ctop | — |
| ctop | affected | wolfi | ctop | — |
| cue | affected | chainguard | cue | — |
| cue | affected | wolfi | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | wolfi | dagger | — |
| dagger | affected | chainguard | dagger | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| datadog-agent | affected | wolfi | datadog-agent | — |
| datadog-agent | affected | chainguard | datadog-agent | — |
| datadog-agent-fips | affected | chainguard | datadog-agent-fips | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| delve | affected | chainguard | delve | — |
| delve | affected | wolfi | delve | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | chainguard | dgraph | — |
| dgraph | affected | wolfi | dgraph | — |
| direnv | affected | wolfi | direnv | — |
| direnv | affected | chainguard | direnv | — |
| dive | affected | wolfi | dive | — |
| dive | affected | chainguard | dive | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | chainguard | esbuild | — |
| esbuild | affected | wolfi | esbuild | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| etcd-3.5 | affected | wolfi | etcd-3.5 | — |
| external-dns | affected | wolfi | external-dns | — |
| external-dns | affected | chainguard | external-dns | — |
| external-dns-0.13.5 | affected | chainguard | external-dns-0.13.5 | — |
| external-dns-fips | affected | chainguard | external-dns-fips | — |
| external-secrets-0.7 | affected | chainguard | external-secrets-0.7 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falco | affected | wolfi | falco | — |
| falco | affected | chainguard | falco | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| filebeat | affected | wolfi | filebeat | — |
| filebeat | affected | chainguard | filebeat | — |
| filebeat-fips | affected | chainguard | filebeat-fips | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flux | affected | chainguard | flux | — |
| flux | affected | wolfi | flux | — |
| flux-0 | affected | chainguard | flux-0 | — |
| flux-0.37 | affected | chainguard | flux-0.37 | — |
| flux-2.0 | affected | chainguard | flux-2.0 | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller-0.37 | affected | chainguard | flux-helm-controller-0.37 | — |
| flux-helm-controller-2.0 | affected | chainguard | flux-helm-controller-2.0 | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller-0 | affected | chainguard | flux-image-automation-controller-0 | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller-0 | affected | chainguard | flux-image-reflector-controller-0 | — |
| flux-kustomize-controller-0 | affected | chainguard | flux-kustomize-controller-0 | — |
| flux-kustomize-controller-0.37 | affected | chainguard | flux-kustomize-controller-0.37 | — |
| flux-kustomize-controller-2.0 | affected | chainguard | flux-kustomize-controller-2.0 | — |
| flux-notification-controller-0 | affected | chainguard | flux-notification-controller-0 | — |
| flux-notification-controller-0.37 | affected | chainguard | flux-notification-controller-0.37 | — |
| flux-notification-controller-2.0 | affected | chainguard | flux-notification-controller-2.0 | — |
| fq | affected | chainguard | fq | — |
| fq | affected | wolfi | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| gatekeeper-3.12 | affected | chainguard | gatekeeper-3.12 | — |
| gatekeeper-3.12 | affected | wolfi | gatekeeper-3.12 | — |
| gatekeeper-3.13 | affected | chainguard | gatekeeper-3.13 | — |
| gatekeeper-3.13 | affected | wolfi | gatekeeper-3.13 | — |
| gatekeeper-3.14 | affected | wolfi | gatekeeper-3.14 | — |
| gatekeeper-3.14 | affected | chainguard | gatekeeper-3.14 | — |
| gatekeeper-fips-3.13 | affected | chainguard | gatekeeper-fips-3.13 | — |
| gatekeeper-fips-3.14 | affected | chainguard | gatekeeper-fips-3.14 | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gh | affected | chainguard | gh | — |
| gh | affected | wolfi | gh | — |
| gitlab-rails-ee-17.0 | affected | chainguard | gitlab-rails-ee-17.0 | — |
| gitlab-rails-ee-17.3 | affected | chainguard | gitlab-rails-ee-17.3 | — |
| gitlab-rails-ee-fips-17.0 | affected | chainguard | gitlab-rails-ee-fips-17.0 | — |
| gitlab-rails-ee-fips-17.1 | affected | chainguard | gitlab-rails-ee-fips-17.1 | — |
| gitlab-runner | affected | chainguard | gitlab-runner | — |
| gitlab-runner | affected | wolfi | gitlab-runner | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-bindata | affected | chainguard | go-bindata | — |
| go-bindata | affected | wolfi | go-bindata | — |
| gobuster | affected | chainguard | gobuster | — |
| gobuster | affected | wolfi | gobuster | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-md2man | affected | chainguard | go-md2man | — |
| go-md2man | affected | wolfi | go-md2man | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gops | affected | chainguard | gops | — |
| gops | affected | wolfi | gops | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser-1.18 | affected | wolfi | goreleaser-1.18 | — |
| goreleaser-1.18 | affected | chainguard | goreleaser-1.18 | — |
| gosu | affected | chainguard | gosu | — |
| gosu | affected | wolfi | gosu | — |
| govulncheck | affected | wolfi | govulncheck | — |
| govulncheck | affected | chainguard | govulncheck | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grype | affected | wolfi | grype | — |
| grype | affected | chainguard | grype | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| helm | affected | chainguard | helm | — |
| helm | affected | wolfi | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | wolfi | helm-push | — |
| helm-push | affected | chainguard | helm-push | — |
| hey | affected | chainguard | hey | — |
| hey | affected | wolfi | hey | — |
| http-echo | affected | wolfi | http-echo | — |
| http-echo | affected | chainguard | http-echo | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui-backend | affected | chainguard | hubble-ui-backend | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | chainguard | influx | — |
| influx | affected | wolfi | influx | — |
| ingress-nginx-controller | affected | chainguard | ingress-nginx-controller | — |
| ingress-nginx-controller | affected | wolfi | ingress-nginx-controller | — |
| ingress-nginx-controller-fips | affected | chainguard | ingress-nginx-controller-fips | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| istio-operator-fips-1.19 | affected | chainguard | istio-operator-fips-1.19 | — |
| istio-pilot-agent-fips-1.19 | affected | chainguard | istio-pilot-agent-fips-1.19 | — |
| istio-pilot-discovery-fips-1.19 | affected | chainguard | istio-pilot-discovery-fips-1.19 | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | chainguard | k3d | — |
| k3d | affected | wolfi | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | chainguard | kaf | — |
| kaf | affected | wolfi | kaf | — |
| karpenter-0.23 | affected | chainguard | karpenter-0.23 | — |
| keda | affected | wolfi | keda | — |
| keda | affected | chainguard | keda | — |
| keda-2.8 | affected | chainguard | keda-2.8 | — |
| keda-2.9 | affected | chainguard | keda-2.9 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | chainguard | kind | — |
| kind | affected | wolfi | kind | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kpt | affected | wolfi | kpt | — |
| kpt | affected | chainguard | kpt | — |
| kubeadm-bootstrap-controller | affected | wolfi | kubeadm-bootstrap-controller | — |
| kubeadm-bootstrap-controller | affected | chainguard | kubeadm-bootstrap-controller | — |
| kubeadm-controlplane-controller | affected | chainguard | kubeadm-controlplane-controller | — |
| kubeadm-controlplane-controller | affected | wolfi | kubeadm-controlplane-controller | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.19 | affected | chainguard | kubernetes-1.19 | — |
| kubernetes-1.20 | affected | chainguard | kubernetes-1.20 | — |
| kubernetes-1.21 | affected | chainguard | kubernetes-1.21 | — |
| kubernetes-1.22 | affected | chainguard | kubernetes-1.22 | — |
| kubernetes-1.23 | affected | chainguard | kubernetes-1.23 | — |
| kubernetes-1.24 | affected | chainguard | kubernetes-1.24 | — |
| kubernetes-1.24 | affected | wolfi | kubernetes-1.24 | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.26 | affected | wolfi | kubernetes-1.26 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-csi-external-attacher-4.3 | affected | wolfi | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.3 | affected | chainguard | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.4 | affected | chainguard | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-4.4 | affected | wolfi | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-fips-4.3 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.3 | — |
| kubernetes-csi-external-attacher-fips-4.4 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.4 | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer-1.8 | affected | chainguard | kubernetes-csi-external-resizer-1.8 | — |
| kubernetes-csi-external-resizer-fips-1.8 | affected | chainguard | kubernetes-csi-external-resizer-fips-1.8 | — |
| kubernetes-csi-external-snapshotter | affected | wolfi | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter | affected | chainguard | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter-6.0 | affected | chainguard | kubernetes-csi-external-snapshotter-6.0 | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-fips-2.8 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.8 | — |
| kubernetes-csi-node-driver-registrar-fips-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.9 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-2.2.0 | affected | chainguard | kube-state-metrics-2.2.0 | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kustomize | affected | wolfi | kustomize | — |
| kustomize | affected | chainguard | kustomize | — |
| kwok | affected | wolfi | kwok | — |
| kwok | affected | chainguard | kwok | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter-2.11 | affected | chainguard | kyverno-policy-reporter-2.11 | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin-1.5 | affected | chainguard | kyverno-policy-reporter-kyverno-plugin-1.5 | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| logstash-jre-bcfips | affected | chainguard | logstash-jre-bcfips | — |
| loki | affected | wolfi | loki | — |
| loki | affected | chainguard | loki | — |
| mage | affected | wolfi | mage | — |
| mage | affected | chainguard | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| metallb | affected | wolfi | metallb | — |
| metallb | affected | chainguard | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | chainguard | mockery | — |
| mockery | affected | wolfi | mockery | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| nats | affected | chainguard | nats | — |
| nats | affected | wolfi | nats | — |
| nats-server | affected | wolfi | nats-server | — |
| nats-server | affected | chainguard | nats-server | — |
| nerdctl | affected | wolfi | nerdctl | — |
| nerdctl | affected | chainguard | nerdctl | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent-1.43 | affected | chainguard | newrelic-infrastructure-agent-1.43 | — |
| newrelic-nri-kube-events-1.9 | affected | chainguard | newrelic-nri-kube-events-1.9 | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| node-problem-detector-0.8 | affected | wolfi | node-problem-detector-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kubernetes-2.13 | affected | chainguard | nri-kubernetes-2.13 | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nuclei | affected | wolfi | nuclei | — |
| nuclei | affected | chainguard | nuclei | — |
| opentofu | affected | chainguard | opentofu | — |
| opentofu | affected | wolfi | opentofu | — |
| oras | affected | wolfi | oras | — |
| oras | affected | chainguard | oras | — |
| paranoia | affected | wolfi | paranoia | — |
| paranoia | affected | chainguard | paranoia | — |
| petname | affected | wolfi | petname | — |
| petname | affected | chainguard | petname | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| pombump | affected | chainguard | pombump | — |
| pombump | affected | wolfi | pombump | — |
| prometheus | affected | wolfi | prometheus | — |
| prometheus | affected | chainguard | prometheus | — |
| prometheus-2.45 | affected | wolfi | prometheus-2.45 | — |
| prometheus-2.45 | affected | chainguard | prometheus-2.45 | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter | affected | wolfi | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-bind-exporter | affected | wolfi | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter | affected | wolfi | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter | affected | wolfi | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-fips | affected | chainguard | prometheus-fips | — |
| prometheus-fips-2.38 | affected | chainguard | prometheus-fips-2.38 | — |
| prometheus-fips-2.45 | affected | chainguard | prometheus-fips-2.45 | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter | affected | wolfi | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | wolfi | prometheus-mysqld-exporter | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter | affected | wolfi | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | wolfi | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-0.13 | affected | chainguard | prometheus-postgres-exporter-0.13 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | wolfi | prometheus-redis-exporter | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-redis-exporter-fips-1.44 | affected | chainguard | prometheus-redis-exporter-fips-1.44 | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter | affected | wolfi | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-0.22 | affected | chainguard | prometheus-statsd-exporter-0.22 | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| q | affected | chainguard | q | — |
| q | affected | wolfi | q | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| regclient | affected | wolfi | regclient | — |
| regclient | affected | chainguard | regclient | — |
| render-template | affected | chainguard | render-template | — |
| render-template | affected | wolfi | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | wolfi | runc | — |
| runc | affected | chainguard | runc | — |
| s5cmd | affected | wolfi | s5cmd | — |
| s5cmd | affected | chainguard | s5cmd | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | chainguard | shfmt | — |
| shfmt | affected | wolfi | shfmt | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| supercronic | affected | chainguard | supercronic | — |
| supercronic | affected | wolfi | supercronic | — |
| tailscale | affected | chainguard | tailscale | — |
| tailscale | affected | wolfi | tailscale | — |
| task | affected | wolfi | task | — |
| task | affected | chainguard | task | — |
| tctl | affected | chainguard | tctl | — |
| tctl | affected | wolfi | tctl | — |
| tctl-fips | affected | chainguard | tctl-fips | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-fips-1.5 | affected | chainguard | terraform-fips-1.5 | — |
| tflint | affected | chainguard | tflint | — |
| tflint | affected | wolfi | tflint | — |
| thanos | affected | wolfi | thanos | — |
| thanos | affected | chainguard | thanos | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator-fips | affected | chainguard | thanos-operator-fips | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-1.32 | affected | chainguard | tigera-operator-1.32 | — |
| tigera-operator-1.32 | affected | wolfi | tigera-operator-1.32 | — |
| tigera-operator-1.33 | affected | wolfi | tigera-operator-1.33 | — |
| tigera-operator-1.33 | affected | chainguard | tigera-operator-1.33 | — |
| tigera-operator-fips | affected | chainguard | tigera-operator-fips | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | chainguard | timoni | — |
| timoni | affected | wolfi | timoni | — |
| traefik-fips | affected | chainguard | traefik-fips | — |
| trillian | affected | chainguard | trillian | — |
| trillian | affected | wolfi | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | chainguard | up | — |
| up | affected | wolfi | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-csi-provider | affected | wolfi | vault-csi-provider | — |
| vault-fips-1.14 | affected | chainguard | vault-fips-1.14 | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | wolfi | velero | — |
| velero | affected | chainguard | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| vite | affected | chainguard | vite | — |
| vite | affected | wolfi | vite | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | wolfi | vt-cli | — |
| vt-cli | affected | chainguard | vt-cli | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | wolfi | wazero | — |
| wazero | affected | chainguard | wazero | — |
| wire-go | affected | wolfi | wire-go | — |
| wire-go | affected | chainguard | wire-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| yam | affected | chainguard | yam | — |
| yam | affected | wolfi | yam | — |
| yq | affected | chainguard | yq | — |
| yq | affected | wolfi | yq | — |
| ytt | affected | chainguard | ytt | — |
| ytt | affected | wolfi | ytt | — |
CVE-2023-45289 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2023-45289 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2023-45289 affecting package golang 1.25.7-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:3 | golang | — |
DEBIAN-CVE-2023-45289
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-1.15 | affected | Debian:11 | golang-1.15 | — |
| golang-1.19 | affected | Debian:12 | golang-1.19 | — |
Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| amass | affected | chainguard | amass | — |
| amass | affected | wolfi | amass | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bom | affected | wolfi | bom | — |
| bom | affected | chainguard | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| cadvisor | affected | chainguard | cadvisor | — |
| cadvisor | affected | wolfi | cadvisor | — |
| capslock | affected | wolfi | capslock | — |
| capslock | affected | chainguard | capslock | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cfssl | affected | wolfi | cfssl | — |
| cfssl | affected | chainguard | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| controller-gen | affected | wolfi | controller-gen | — |
| controller-gen | affected | chainguard | controller-gen | — |
| cortex | affected | wolfi | cortex | — |
| cortex | affected | chainguard | cortex | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| ctop | affected | wolfi | ctop | — |
| ctop | affected | chainguard | ctop | — |
| cue | affected | wolfi | cue | — |
| cue | affected | chainguard | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | chainguard | dagger | — |
| dagger | affected | wolfi | dagger | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| delve | affected | chainguard | delve | — |
| delve | affected | wolfi | delve | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| direnv | affected | chainguard | direnv | — |
| direnv | affected | wolfi | direnv | — |
| dive | affected | chainguard | dive | — |
| dive | affected | wolfi | dive | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | chainguard | esbuild | — |
| esbuild | affected | wolfi | esbuild | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | wolfi | ferretdb | — |
| ferretdb | affected | chainguard | ferretdb | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| fq | affected | chainguard | fq | — |
| fq | affected | wolfi | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | chainguard | gh | — |
| gh | affected | wolfi | gh | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-bindata | affected | chainguard | go-bindata | — |
| go-bindata | affected | wolfi | go-bindata | — |
| gobuster | affected | wolfi | gobuster | — |
| gobuster | affected | chainguard | gobuster | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-md2man | affected | chainguard | go-md2man | — |
| go-md2man | affected | wolfi | go-md2man | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gops | affected | wolfi | gops | — |
| gops | affected | chainguard | gops | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| gosu | affected | chainguard | gosu | — |
| gosu | affected | wolfi | gosu | — |
| govulncheck | affected | chainguard | govulncheck | — |
| govulncheck | affected | wolfi | govulncheck | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grype | affected | wolfi | grype | — |
| grype | affected | chainguard | grype | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| helm | affected | wolfi | helm | — |
| helm | affected | chainguard | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| hey | affected | wolfi | hey | — |
| hey | affected | chainguard | hey | — |
| http-echo | affected | chainguard | http-echo | — |
| http-echo | affected | wolfi | http-echo | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | wolfi | influx | — |
| influx | affected | chainguard | influx | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | wolfi | k3d | — |
| k3d | affected | chainguard | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | chainguard | kaf | — |
| kaf | affected | wolfi | kaf | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | wolfi | kind | — |
| kind | affected | chainguard | kind | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kpt | affected | chainguard | kpt | — |
| kpt | affected | wolfi | kpt | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kustomize | affected | wolfi | kustomize | — |
| kustomize | affected | chainguard | kustomize | — |
| kwok | affected | wolfi | kwok | — |
| kwok | affected | chainguard | kwok | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| mage | affected | chainguard | mage | — |
| mage | affected | wolfi | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| metallb | affected | wolfi | metallb | — |
| metallb | affected | chainguard | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | chainguard | mockery | — |
| mockery | affected | wolfi | mockery | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| nats | affected | chainguard | nats | — |
| nats | affected | wolfi | nats | — |
| nats-server | affected | wolfi | nats-server | — |
| nats-server | affected | chainguard | nats-server | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| oras | affected | chainguard | oras | — |
| oras | affected | wolfi | oras | — |
| paranoia | affected | chainguard | paranoia | — |
| paranoia | affected | wolfi | paranoia | — |
| petname | affected | chainguard | petname | — |
| petname | affected | wolfi | petname | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| pombump | affected | chainguard | pombump | — |
| pombump | affected | wolfi | pombump | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| q | affected | wolfi | q | — |
| q | affected | chainguard | q | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| regclient | affected | chainguard | regclient | — |
| regclient | affected | wolfi | regclient | — |
| render-template | affected | wolfi | render-template | — |
| render-template | affected | chainguard | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| s5cmd | affected | wolfi | s5cmd | — |
| s5cmd | affected | chainguard | s5cmd | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | wolfi | shfmt | — |
| shfmt | affected | chainguard | shfmt | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| src | affected | chainguard | src | — |
| src | affected | wolfi | src | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| stdlib | affected | Go | stdlib | — |
| supercronic | affected | chainguard | supercronic | — |
| supercronic | affected | wolfi | supercronic | — |
| tailscale | affected | chainguard | tailscale | — |
| tailscale | affected | wolfi | tailscale | — |
| task | affected | wolfi | task | — |
| task | affected | chainguard | task | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| tflint | affected | chainguard | tflint | — |
| tflint | affected | wolfi | tflint | — |
| thanos | affected | chainguard | thanos | — |
| thanos | affected | wolfi | thanos | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | wolfi | up | — |
| up | affected | chainguard | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | wolfi | velero | — |
| velero | affected | chainguard | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| vite | affected | chainguard | vite | — |
| vite | affected | wolfi | vite | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | wolfi | vt-cli | — |
| vt-cli | affected | chainguard | vt-cli | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | wolfi | wazero | — |
| wazero | affected | chainguard | wazero | — |
| wire-go | affected | chainguard | wire-go | — |
| wire-go | affected | wolfi | wire-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| yam | affected | wolfi | yam | — |
| yam | affected | chainguard | yam | — |
| yq | affected | wolfi | yq | — |
| yq | affected | chainguard | yq | — |
| ytt | affected | wolfi | ytt | — |
| ytt | affected | chainguard | ytt | — |
Comments in display names are incorrectly handled in net/mail
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
GHSA-fgq5-q76c-gx78
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| amass | affected | chainguard | amass | — |
| amass | affected | wolfi | amass | — |
| argo-cd-2.7 | affected | chainguard | argo-cd-2.7 | — |
| argo-cd-2.7 | affected | wolfi | argo-cd-2.7 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.9 | affected | chainguard | argo-cd-fips-2.9 | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver | affected | wolfi | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver-1.18 | affected | chainguard | aws-ebs-csi-driver-1.18 | — |
| aws-ebs-csi-driver-1.19 | affected | chainguard | aws-ebs-csi-driver-1.19 | — |
| aws-ebs-csi-driver-fips | affected | chainguard | aws-ebs-csi-driver-fips | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-efs-csi-driver-fips-1.6 | affected | chainguard | aws-efs-csi-driver-fips-1.6 | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller-2.4.5 | affected | chainguard | aws-load-balancer-controller-2.4.5 | — |
| aws-load-balancer-controller-2.5 | affected | chainguard | aws-load-balancer-controller-2.5 | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bom | affected | chainguard | bom | — |
| bom | affected | wolfi | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| cadvisor | affected | wolfi | cadvisor | — |
| cadvisor | affected | chainguard | cadvisor | — |
| calico | affected | wolfi | calico | — |
| calico | affected | chainguard | calico | — |
| calico-fips | affected | chainguard | calico-fips | — |
| capslock | affected | wolfi | capslock | — |
| capslock | affected | chainguard | capslock | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cert-manager-fips-1.13 | affected | chainguard | cert-manager-fips-1.13 | — |
| cert-manager-fips-1.14 | affected | chainguard | cert-manager-fips-1.14 | — |
| cfssl | affected | wolfi | cfssl | — |
| cfssl | affected | chainguard | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy | affected | chainguard | cloud-sql-proxy | — |
| cloud-sql-proxy | affected | wolfi | cloud-sql-proxy | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-api-controller | affected | chainguard | cluster-api-controller | — |
| cluster-api-controller | affected | wolfi | cluster-api-controller | — |
| cluster-autoscaler-1.25 | affected | chainguard | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.25 | affected | wolfi | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-fips-1.25 | affected | chainguard | cluster-autoscaler-fips-1.25 | — |
| cluster-autoscaler-fips-1.26 | affected | chainguard | cluster-autoscaler-fips-1.26 | — |
| cluster-autoscaler-fips-1.27 | affected | chainguard | cluster-autoscaler-fips-1.27 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| clusterctl | affected | wolfi | clusterctl | — |
| clusterctl | affected | chainguard | clusterctl | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| consul-1.15 | affected | wolfi | consul-1.15 | — |
| consul-1.15 | affected | chainguard | consul-1.15 | — |
| consul-1.16 | affected | wolfi | consul-1.16 | — |
| consul-1.16 | affected | chainguard | consul-1.16 | — |
| consul-1.17 | affected | chainguard | consul-1.17 | — |
| consul-1.17-fips | affected | chainguard | consul-1.17-fips | — |
| controller-gen | affected | wolfi | controller-gen | — |
| controller-gen | affected | chainguard | controller-gen | — |
| coredns | affected | wolfi | coredns | — |
| coredns | affected | chainguard | coredns | — |
| cortex | affected | wolfi | cortex | — |
| cortex | affected | chainguard | cortex | — |
| cri-tools | affected | wolfi | cri-tools | — |
| cri-tools | affected | chainguard | cri-tools | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| ctop | affected | wolfi | ctop | — |
| ctop | affected | chainguard | ctop | — |
| cue | affected | chainguard | cue | — |
| cue | affected | wolfi | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | chainguard | dagger | — |
| dagger | affected | wolfi | dagger | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| datadog-agent | affected | wolfi | datadog-agent | — |
| datadog-agent | affected | chainguard | datadog-agent | — |
| datadog-agent-fips | affected | chainguard | datadog-agent-fips | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| delve | affected | wolfi | delve | — |
| delve | affected | chainguard | delve | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| direnv | affected | chainguard | direnv | — |
| direnv | affected | wolfi | direnv | — |
| dive | affected | wolfi | dive | — |
| dive | affected | chainguard | dive | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | chainguard | esbuild | — |
| esbuild | affected | wolfi | esbuild | — |
| etcd-3.5 | affected | wolfi | etcd-3.5 | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-dns | affected | wolfi | external-dns | — |
| external-dns | affected | chainguard | external-dns | — |
| external-dns-0.13.5 | affected | chainguard | external-dns-0.13.5 | — |
| external-dns-fips | affected | chainguard | external-dns-fips | — |
| external-secrets-0.7 | affected | chainguard | external-secrets-0.7 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falco | affected | chainguard | falco | — |
| falco | affected | wolfi | falco | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | wolfi | ferretdb | — |
| ferretdb | affected | chainguard | ferretdb | — |
| filebeat | affected | wolfi | filebeat | — |
| filebeat | affected | chainguard | filebeat | — |
| filebeat-fips | affected | chainguard | filebeat-fips | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flux | affected | chainguard | flux | — |
| flux | affected | wolfi | flux | — |
| flux-0 | affected | chainguard | flux-0 | — |
| flux-0.37 | affected | chainguard | flux-0.37 | — |
| flux-2.0 | affected | chainguard | flux-2.0 | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller-0.37 | affected | chainguard | flux-helm-controller-0.37 | — |
| flux-helm-controller-2.0 | affected | chainguard | flux-helm-controller-2.0 | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller-0 | affected | chainguard | flux-image-automation-controller-0 | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller-0 | affected | chainguard | flux-image-reflector-controller-0 | — |
| flux-kustomize-controller-0 | affected | chainguard | flux-kustomize-controller-0 | — |
| flux-kustomize-controller-0.37 | affected | chainguard | flux-kustomize-controller-0.37 | — |
| flux-kustomize-controller-2.0 | affected | chainguard | flux-kustomize-controller-2.0 | — |
| flux-notification-controller-0 | affected | chainguard | flux-notification-controller-0 | — |
| flux-notification-controller-0.37 | affected | chainguard | flux-notification-controller-0.37 | — |
| flux-notification-controller-2.0 | affected | chainguard | flux-notification-controller-2.0 | — |
| fq | affected | wolfi | fq | — |
| fq | affected | chainguard | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| gatekeeper-3.12 | affected | chainguard | gatekeeper-3.12 | — |
| gatekeeper-3.12 | affected | wolfi | gatekeeper-3.12 | — |
| gatekeeper-3.13 | affected | wolfi | gatekeeper-3.13 | — |
| gatekeeper-3.13 | affected | chainguard | gatekeeper-3.13 | — |
| gatekeeper-3.14 | affected | chainguard | gatekeeper-3.14 | — |
| gatekeeper-3.14 | affected | wolfi | gatekeeper-3.14 | — |
| gatekeeper-fips-3.13 | affected | chainguard | gatekeeper-fips-3.13 | — |
| gatekeeper-fips-3.14 | affected | chainguard | gatekeeper-fips-3.14 | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | wolfi | gh | — |
| gh | affected | chainguard | gh | — |
| gitlab-rails-ee-17.0 | affected | chainguard | gitlab-rails-ee-17.0 | — |
| gitlab-rails-ee-17.3 | affected | chainguard | gitlab-rails-ee-17.3 | — |
| gitlab-rails-ee-fips-17.0 | affected | chainguard | gitlab-rails-ee-fips-17.0 | — |
| gitlab-rails-ee-fips-17.1 | affected | chainguard | gitlab-rails-ee-fips-17.1 | — |
| gitlab-runner | affected | chainguard | gitlab-runner | — |
| gitlab-runner | affected | wolfi | gitlab-runner | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-bindata | affected | wolfi | go-bindata | — |
| go-bindata | affected | chainguard | go-bindata | — |
| gobuster | affected | wolfi | gobuster | — |
| gobuster | affected | chainguard | gobuster | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-md2man | affected | wolfi | go-md2man | — |
| go-md2man | affected | chainguard | go-md2man | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gops | affected | wolfi | gops | — |
| gops | affected | chainguard | gops | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser-1.18 | affected | wolfi | goreleaser-1.18 | — |
| goreleaser-1.18 | affected | chainguard | goreleaser-1.18 | — |
| gosu | affected | chainguard | gosu | — |
| gosu | affected | wolfi | gosu | — |
| govulncheck | affected | wolfi | govulncheck | — |
| govulncheck | affected | chainguard | govulncheck | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grype | affected | wolfi | grype | — |
| grype | affected | chainguard | grype | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| helm | affected | wolfi | helm | — |
| helm | affected | chainguard | helm | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| hey | affected | wolfi | hey | — |
| hey | affected | chainguard | hey | — |
| http-echo | affected | wolfi | http-echo | — |
| http-echo | affected | chainguard | http-echo | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui-backend | affected | chainguard | hubble-ui-backend | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | chainguard | influx | — |
| influx | affected | wolfi | influx | — |
| ingress-nginx-controller | affected | wolfi | ingress-nginx-controller | — |
| ingress-nginx-controller | affected | chainguard | ingress-nginx-controller | — |
| ingress-nginx-controller-fips | affected | chainguard | ingress-nginx-controller-fips | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| istio-operator-fips-1.19 | affected | chainguard | istio-operator-fips-1.19 | — |
| istio-pilot-agent-fips-1.19 | affected | chainguard | istio-pilot-agent-fips-1.19 | — |
| istio-pilot-discovery-fips-1.19 | affected | chainguard | istio-pilot-discovery-fips-1.19 | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | chainguard | k3d | — |
| k3d | affected | wolfi | k3d | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | wolfi | kaf | — |
| kaf | affected | chainguard | kaf | — |
| karpenter-0.23 | affected | chainguard | karpenter-0.23 | — |
| keda | affected | chainguard | keda | — |
| keda | affected | wolfi | keda | — |
| keda-2.8 | affected | chainguard | keda-2.8 | — |
| keda-2.9 | affected | chainguard | keda-2.9 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | wolfi | kind | — |
| kind | affected | chainguard | kind | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kpt | affected | wolfi | kpt | — |
| kpt | affected | chainguard | kpt | — |
| kubeadm-bootstrap-controller | affected | wolfi | kubeadm-bootstrap-controller | — |
| kubeadm-bootstrap-controller | affected | chainguard | kubeadm-bootstrap-controller | — |
| kubeadm-controlplane-controller | affected | wolfi | kubeadm-controlplane-controller | — |
| kubeadm-controlplane-controller | affected | chainguard | kubeadm-controlplane-controller | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.19 | affected | chainguard | kubernetes-1.19 | — |
| kubernetes-1.20 | affected | chainguard | kubernetes-1.20 | — |
| kubernetes-1.21 | affected | chainguard | kubernetes-1.21 | — |
| kubernetes-1.22 | affected | chainguard | kubernetes-1.22 | — |
| kubernetes-1.23 | affected | chainguard | kubernetes-1.23 | — |
| kubernetes-1.24 | affected | wolfi | kubernetes-1.24 | — |
| kubernetes-1.24 | affected | chainguard | kubernetes-1.24 | — |
| kubernetes-1.26 | affected | wolfi | kubernetes-1.26 | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-csi-external-attacher-4.3 | affected | chainguard | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.3 | affected | wolfi | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.4 | affected | chainguard | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-4.4 | affected | wolfi | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-fips-4.3 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.3 | — |
| kubernetes-csi-external-attacher-fips-4.4 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.4 | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer-1.8 | affected | chainguard | kubernetes-csi-external-resizer-1.8 | — |
| kubernetes-csi-external-resizer-fips-1.8 | affected | chainguard | kubernetes-csi-external-resizer-fips-1.8 | — |
| kubernetes-csi-external-snapshotter | affected | chainguard | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter | affected | wolfi | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter-6.0 | affected | chainguard | kubernetes-csi-external-snapshotter-6.0 | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-fips-2.8 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.8 | — |
| kubernetes-csi-node-driver-registrar-fips-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.9 | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics-2.2.0 | affected | chainguard | kube-state-metrics-2.2.0 | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kustomize | affected | chainguard | kustomize | — |
| kustomize | affected | wolfi | kustomize | — |
| kwok | affected | wolfi | kwok | — |
| kwok | affected | chainguard | kwok | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter-2.11 | affected | chainguard | kyverno-policy-reporter-2.11 | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin-1.5 | affected | chainguard | kyverno-policy-reporter-kyverno-plugin-1.5 | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | wolfi | litefs | — |
| litefs | affected | chainguard | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| logstash-jre-bcfips | affected | chainguard | logstash-jre-bcfips | — |
| loki | affected | wolfi | loki | — |
| loki | affected | chainguard | loki | — |
| mage | affected | wolfi | mage | — |
| mage | affected | chainguard | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| metallb | affected | chainguard | metallb | — |
| metallb | affected | wolfi | metallb | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | wolfi | mockery | — |
| mockery | affected | chainguard | mockery | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| nats | affected | chainguard | nats | — |
| nats | affected | wolfi | nats | — |
| nats-server | affected | wolfi | nats-server | — |
| nats-server | affected | chainguard | nats-server | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent-1.43 | affected | chainguard | newrelic-infrastructure-agent-1.43 | — |
| newrelic-nri-kube-events-1.9 | affected | chainguard | newrelic-nri-kube-events-1.9 | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| node-problem-detector-0.8 | affected | wolfi | node-problem-detector-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kubernetes-2.13 | affected | chainguard | nri-kubernetes-2.13 | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nuclei | affected | wolfi | nuclei | — |
| nuclei | affected | chainguard | nuclei | — |
| opentofu | affected | wolfi | opentofu | — |
| opentofu | affected | chainguard | opentofu | — |
| oras | affected | wolfi | oras | — |
| oras | affected | chainguard | oras | — |
| paranoia | affected | chainguard | paranoia | — |
| paranoia | affected | wolfi | paranoia | — |
| petname | affected | wolfi | petname | — |
| petname | affected | chainguard | petname | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| pombump | affected | chainguard | pombump | — |
| pombump | affected | wolfi | pombump | — |
| prometheus | affected | wolfi | prometheus | — |
| prometheus | affected | chainguard | prometheus | — |
| prometheus-2.45 | affected | wolfi | prometheus-2.45 | — |
| prometheus-2.45 | affected | chainguard | prometheus-2.45 | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter | affected | wolfi | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | wolfi | prometheus-bind-exporter | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | wolfi | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter | affected | wolfi | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-fips | affected | chainguard | prometheus-fips | — |
| prometheus-fips-2.38 | affected | chainguard | prometheus-fips-2.38 | — |
| prometheus-fips-2.45 | affected | chainguard | prometheus-fips-2.45 | — |
| prometheus-mongodb-exporter | affected | wolfi | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-mysqld-exporter | affected | wolfi | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter | affected | wolfi | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter | affected | wolfi | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-0.13 | affected | chainguard | prometheus-postgres-exporter-0.13 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter | affected | wolfi | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-redis-exporter-fips-1.44 | affected | chainguard | prometheus-redis-exporter-fips-1.44 | — |
| prometheus-statsd-exporter | affected | wolfi | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-0.22 | affected | chainguard | prometheus-statsd-exporter-0.22 | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| q | affected | wolfi | q | — |
| q | affected | chainguard | q | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| regclient | affected | wolfi | regclient | — |
| regclient | affected | chainguard | regclient | — |
| render-template | affected | wolfi | render-template | — |
| render-template | affected | chainguard | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| s5cmd | affected | chainguard | s5cmd | — |
| s5cmd | affected | wolfi | s5cmd | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | chainguard | shfmt | — |
| shfmt | affected | wolfi | shfmt | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| src | affected | chainguard | src | — |
| src | affected | wolfi | src | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| supercronic | affected | wolfi | supercronic | — |
| supercronic | affected | chainguard | supercronic | — |
| tailscale | affected | chainguard | tailscale | — |
| tailscale | affected | wolfi | tailscale | — |
| task | affected | chainguard | task | — |
| task | affected | wolfi | task | — |
| tctl | affected | wolfi | tctl | — |
| tctl | affected | chainguard | tctl | — |
| tctl-fips | affected | chainguard | tctl-fips | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-fips-1.5 | affected | chainguard | terraform-fips-1.5 | — |
| tflint | affected | wolfi | tflint | — |
| tflint | affected | chainguard | tflint | — |
| thanos | affected | wolfi | thanos | — |
| thanos | affected | chainguard | thanos | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator-fips | affected | chainguard | thanos-operator-fips | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-1.32 | affected | wolfi | tigera-operator-1.32 | — |
| tigera-operator-1.32 | affected | chainguard | tigera-operator-1.32 | — |
| tigera-operator-1.33 | affected | wolfi | tigera-operator-1.33 | — |
| tigera-operator-1.33 | affected | chainguard | tigera-operator-1.33 | — |
| tigera-operator-fips | affected | chainguard | tigera-operator-fips | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| traefik-fips | affected | chainguard | traefik-fips | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | chainguard | up | — |
| up | affected | wolfi | up | — |
| vault-csi-provider | affected | wolfi | vault-csi-provider | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-fips-1.14 | affected | chainguard | vault-fips-1.14 | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| vite | affected | wolfi | vite | — |
| vite | affected | chainguard | vite | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | wolfi | vt-cli | — |
| vt-cli | affected | chainguard | vt-cli | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | wolfi | wazero | — |
| wazero | affected | chainguard | wazero | — |
| wire-go | affected | chainguard | wire-go | — |
| wire-go | affected | wolfi | wire-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| yam | affected | wolfi | yam | — |
| yam | affected | chainguard | yam | — |
| yq | affected | wolfi | yq | — |
| yq | affected | chainguard | yq | — |
| ytt | affected | chainguard | ytt | — |
| ytt | affected | wolfi | ytt | — |
CVE-2024-24784 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2024-24784 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2024-24784 affecting package golang 1.25.7-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:3 | golang | — |
DEBIAN-CVE-2024-24784
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-1.15 | affected | Debian:11 | golang-1.15 | — |
| golang-1.19 | affected | Debian:12 | golang-1.19 | — |
Comments in display names are incorrectly handled in net/mail
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| amass | affected | chainguard | amass | — |
| amass | affected | wolfi | amass | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bom | affected | wolfi | bom | — |
| bom | affected | chainguard | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd | affected | chainguard | buildkitd | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| cadvisor | affected | wolfi | cadvisor | — |
| cadvisor | affected | chainguard | cadvisor | — |
| capslock | affected | chainguard | capslock | — |
| capslock | affected | wolfi | capslock | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cfssl | affected | chainguard | cfssl | — |
| cfssl | affected | wolfi | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| controller-gen | affected | wolfi | controller-gen | — |
| controller-gen | affected | chainguard | controller-gen | — |
| cortex | affected | chainguard | cortex | — |
| cortex | affected | wolfi | cortex | — |
| cri-tools | affected | wolfi | cri-tools | — |
| cri-tools | affected | chainguard | cri-tools | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| ctop | affected | wolfi | ctop | — |
| ctop | affected | chainguard | ctop | — |
| cue | affected | wolfi | cue | — |
| cue | affected | chainguard | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | wolfi | dagger | — |
| dagger | affected | chainguard | dagger | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| delve | affected | wolfi | delve | — |
| delve | affected | chainguard | delve | — |
| dex | affected | chainguard | dex | — |
| dex | affected | wolfi | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| direnv | affected | wolfi | direnv | — |
| direnv | affected | chainguard | direnv | — |
| dive | affected | wolfi | dive | — |
| dive | affected | chainguard | dive | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | wolfi | eksctl | — |
| eksctl | affected | chainguard | eksctl | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | wolfi | esbuild | — |
| esbuild | affected | chainguard | esbuild | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | wolfi | ferretdb | — |
| ferretdb | affected | chainguard | ferretdb | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| fq | affected | chainguard | fq | — |
| fq | affected | wolfi | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | wolfi | gh | — |
| gh | affected | chainguard | gh | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-bindata | affected | chainguard | go-bindata | — |
| go-bindata | affected | wolfi | go-bindata | — |
| gobuster | affected | chainguard | gobuster | — |
| gobuster | affected | wolfi | gobuster | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-md2man | affected | chainguard | go-md2man | — |
| go-md2man | affected | wolfi | go-md2man | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gops | affected | chainguard | gops | — |
| gops | affected | wolfi | gops | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| gosu | affected | wolfi | gosu | — |
| gosu | affected | chainguard | gosu | — |
| govulncheck | affected | wolfi | govulncheck | — |
| govulncheck | affected | chainguard | govulncheck | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grype | affected | wolfi | grype | — |
| grype | affected | chainguard | grype | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| helm | affected | wolfi | helm | — |
| helm | affected | chainguard | helm | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| hey | affected | wolfi | hey | — |
| hey | affected | chainguard | hey | — |
| http-echo | affected | chainguard | http-echo | — |
| http-echo | affected | wolfi | http-echo | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | chainguard | influx | — |
| influx | affected | wolfi | influx | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | wolfi | k3d | — |
| k3d | affected | chainguard | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | wolfi | kaf | — |
| kaf | affected | chainguard | kaf | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | chainguard | kind | — |
| kind | affected | wolfi | kind | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kor | affected | wolfi | kor | — |
| kor | affected | chainguard | kor | — |
| kpt | affected | wolfi | kpt | — |
| kpt | affected | chainguard | kpt | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kustomize | affected | wolfi | kustomize | — |
| kustomize | affected | chainguard | kustomize | — |
| kwok | affected | chainguard | kwok | — |
| kwok | affected | wolfi | kwok | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | wolfi | litefs | — |
| litefs | affected | chainguard | litefs | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| mage | affected | wolfi | mage | — |
| mage | affected | chainguard | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| metallb | affected | chainguard | metallb | — |
| metallb | affected | wolfi | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | wolfi | mockery | — |
| mockery | affected | chainguard | mockery | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nats-server | affected | wolfi | nats-server | — |
| nats-server | affected | chainguard | nats-server | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nuclei | affected | wolfi | nuclei | — |
| nuclei | affected | chainguard | nuclei | — |
| oras | affected | wolfi | oras | — |
| oras | affected | chainguard | oras | — |
| paranoia | affected | wolfi | paranoia | — |
| paranoia | affected | chainguard | paranoia | — |
| petname | affected | chainguard | petname | — |
| petname | affected | wolfi | petname | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| pombump | affected | wolfi | pombump | — |
| pombump | affected | chainguard | pombump | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| q | affected | wolfi | q | — |
| q | affected | chainguard | q | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| regclient | affected | wolfi | regclient | — |
| regclient | affected | chainguard | regclient | — |
| render-template | affected | wolfi | render-template | — |
| render-template | affected | chainguard | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | wolfi | rqlite | — |
| rqlite | affected | chainguard | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| s5cmd | affected | wolfi | s5cmd | — |
| s5cmd | affected | chainguard | s5cmd | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | wolfi | shfmt | — |
| shfmt | affected | chainguard | shfmt | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator | affected | wolfi | spark-operator | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| src | affected | chainguard | src | — |
| src | affected | wolfi | src | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| stdlib | affected | Go | stdlib | — |
| supercronic | affected | wolfi | supercronic | — |
| supercronic | affected | chainguard | supercronic | — |
| tailscale | affected | chainguard | tailscale | — |
| tailscale | affected | wolfi | tailscale | — |
| task | affected | chainguard | task | — |
| task | affected | wolfi | task | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | chainguard | terraform | — |
| terraform | affected | wolfi | terraform | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| tflint | affected | wolfi | tflint | — |
| tflint | affected | chainguard | tflint | — |
| thanos | affected | chainguard | thanos | — |
| thanos | affected | wolfi | thanos | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | chainguard | timoni | — |
| timoni | affected | wolfi | timoni | — |
| trillian | affected | chainguard | trillian | — |
| trillian | affected | wolfi | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | wolfi | up | — |
| up | affected | chainguard | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | chainguard | velero | — |
| velero | affected | wolfi | velero | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| vite | affected | wolfi | vite | — |
| vite | affected | chainguard | vite | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | wolfi | vt-cli | — |
| vt-cli | affected | chainguard | vt-cli | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | chainguard | wazero | — |
| wazero | affected | wolfi | wazero | — |
| wire-go | affected | wolfi | wire-go | — |
| wire-go | affected | chainguard | wire-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| yam | affected | wolfi | yam | — |
| yam | affected | chainguard | yam | — |
| yq | affected | wolfi | yq | — |
| yq | affected | chainguard | yq | — |
| ytt | affected | chainguard | ytt | — |
| ytt | affected | wolfi | ytt | — |
Improper sanitization of CSS values in html/template
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Improper handling of empty HTML attributes in html/template
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Improper handling of HTML-like comments in script contexts in html/template
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Denial of service while parsing a tar file due to lack of folders count validation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| node-tar | affected | npm | node-tar | — |
| tar | affected | npm | tar | — |
Denial of service while parsing a tar file due to lack of folders count validation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| lerna | affected | chainguard | lerna | — |
| lerna | affected | wolfi | lerna | — |
| nodejs-14 | affected | chainguard | nodejs-14 | — |
| node-tar | affected | npm | node-tar | — |
| npm | affected | wolfi | npm | — |
| npm | affected | chainguard | npm | — |
| opensearch-dashboards-2 | affected | wolfi | opensearch-dashboards-2 | — |
| opensearch-dashboards-2 | affected | chainguard | opensearch-dashboards-2 | — |
| opensearch-dashboards-2-fips | affected | chainguard | opensearch-dashboards-2-fips | — |
| pnpm-stage0 | affected | chainguard | pnpm-stage0 | — |
| pnpm-stage0 | affected | wolfi | pnpm-stage0 | — |
| py3-jupyterlab | affected | chainguard | py3-jupyterlab | — |
| py3-jupyterlab | affected | wolfi | py3-jupyterlab | — |
| sqlpad | affected | wolfi | sqlpad | — |
| sqlpad | affected | chainguard | sqlpad | — |
| tar | affected | npm | tar | — |
| tensorflow-cpu-jupyter | affected | chainguard | tensorflow-cpu-jupyter | — |
Improper handling of special tags within script contexts in html/template
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Incorrect detection of reserved device names on Windows in path/filepath
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Read and Write outside of bounds in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Unsanitized NUL in environment variables on Windows in syscall and os/exec
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | — | — |
| golang | affected | Bitnami | golang | — |
Incorrect calculation on P256 curves in crypto/internal/nistec
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Errors returned from JSON marshaling may break template escaping in html/template
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
GHSA-j6m3-gc37-6r6q
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| amass | affected | chainguard | amass | — |
| amass | affected | wolfi | amass | — |
| argo-cd-2.7 | affected | wolfi | argo-cd-2.7 | — |
| argo-cd-2.7 | affected | chainguard | argo-cd-2.7 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.9 | affected | chainguard | argo-cd-fips-2.9 | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver | affected | wolfi | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver-1.18 | affected | chainguard | aws-ebs-csi-driver-1.18 | — |
| aws-ebs-csi-driver-1.19 | affected | chainguard | aws-ebs-csi-driver-1.19 | — |
| aws-ebs-csi-driver-fips | affected | chainguard | aws-ebs-csi-driver-fips | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-efs-csi-driver-fips-1.6 | affected | chainguard | aws-efs-csi-driver-fips-1.6 | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-2.4.5 | affected | chainguard | aws-load-balancer-controller-2.4.5 | — |
| aws-load-balancer-controller-2.5 | affected | chainguard | aws-load-balancer-controller-2.5 | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bom | affected | wolfi | bom | — |
| bom | affected | chainguard | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd | affected | chainguard | buildkitd | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| cadvisor | affected | wolfi | cadvisor | — |
| cadvisor | affected | chainguard | cadvisor | — |
| calico | affected | chainguard | calico | — |
| calico | affected | wolfi | calico | — |
| calico-fips | affected | chainguard | calico-fips | — |
| capslock | affected | wolfi | capslock | — |
| capslock | affected | chainguard | capslock | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cert-manager-fips-1.13 | affected | chainguard | cert-manager-fips-1.13 | — |
| cert-manager-fips-1.14 | affected | chainguard | cert-manager-fips-1.14 | — |
| cfssl | affected | chainguard | cfssl | — |
| cfssl | affected | wolfi | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| cloud-sql-proxy | affected | wolfi | cloud-sql-proxy | — |
| cloud-sql-proxy | affected | chainguard | cloud-sql-proxy | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-api-controller | affected | wolfi | cluster-api-controller | — |
| cluster-api-controller | affected | chainguard | cluster-api-controller | — |
| cluster-autoscaler-1.25 | affected | chainguard | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.25 | affected | wolfi | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-fips-1.25 | affected | chainguard | cluster-autoscaler-fips-1.25 | — |
| cluster-autoscaler-fips-1.26 | affected | chainguard | cluster-autoscaler-fips-1.26 | — |
| cluster-autoscaler-fips-1.27 | affected | chainguard | cluster-autoscaler-fips-1.27 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| clusterctl | affected | wolfi | clusterctl | — |
| clusterctl | affected | chainguard | clusterctl | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| consul-1.15 | affected | wolfi | consul-1.15 | — |
| consul-1.15 | affected | chainguard | consul-1.15 | — |
| consul-1.16 | affected | wolfi | consul-1.16 | — |
| consul-1.16 | affected | chainguard | consul-1.16 | — |
| consul-1.17 | affected | chainguard | consul-1.17 | — |
| consul-1.17-fips | affected | chainguard | consul-1.17-fips | — |
| controller-gen | affected | chainguard | controller-gen | — |
| controller-gen | affected | wolfi | controller-gen | — |
| coredns | affected | wolfi | coredns | — |
| coredns | affected | chainguard | coredns | — |
| cortex | affected | wolfi | cortex | — |
| cortex | affected | chainguard | cortex | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| ctop | affected | chainguard | ctop | — |
| ctop | affected | wolfi | ctop | — |
| cue | affected | wolfi | cue | — |
| cue | affected | chainguard | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | wolfi | dagger | — |
| dagger | affected | chainguard | dagger | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| datadog-agent | affected | wolfi | datadog-agent | — |
| datadog-agent | affected | chainguard | datadog-agent | — |
| datadog-agent-fips | affected | chainguard | datadog-agent-fips | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| delve | affected | wolfi | delve | — |
| delve | affected | chainguard | delve | — |
| dex | affected | chainguard | dex | — |
| dex | affected | wolfi | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| direnv | affected | chainguard | direnv | — |
| direnv | affected | wolfi | direnv | — |
| dive | affected | chainguard | dive | — |
| dive | affected | wolfi | dive | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | wolfi | eksctl | — |
| eksctl | affected | chainguard | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | wolfi | esbuild | — |
| esbuild | affected | chainguard | esbuild | — |
| etcd-3.5 | affected | wolfi | etcd-3.5 | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-dns | affected | wolfi | external-dns | — |
| external-dns | affected | chainguard | external-dns | — |
| external-dns-0.13.5 | affected | chainguard | external-dns-0.13.5 | — |
| external-dns-fips | affected | chainguard | external-dns-fips | — |
| external-secrets-0.7 | affected | chainguard | external-secrets-0.7 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falco | affected | chainguard | falco | — |
| falco | affected | wolfi | falco | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| filebeat | affected | wolfi | filebeat | — |
| filebeat | affected | chainguard | filebeat | — |
| filebeat-fips | affected | chainguard | filebeat-fips | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flux | affected | chainguard | flux | — |
| flux | affected | wolfi | flux | — |
| flux-0 | affected | chainguard | flux-0 | — |
| flux-0.37 | affected | chainguard | flux-0.37 | — |
| flux-2.0 | affected | chainguard | flux-2.0 | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller-0.37 | affected | chainguard | flux-helm-controller-0.37 | — |
| flux-helm-controller-2.0 | affected | chainguard | flux-helm-controller-2.0 | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller-0 | affected | chainguard | flux-image-automation-controller-0 | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller-0 | affected | chainguard | flux-image-reflector-controller-0 | — |
| flux-kustomize-controller-0 | affected | chainguard | flux-kustomize-controller-0 | — |
| flux-kustomize-controller-0.37 | affected | chainguard | flux-kustomize-controller-0.37 | — |
| flux-kustomize-controller-2.0 | affected | chainguard | flux-kustomize-controller-2.0 | — |
| flux-notification-controller-0 | affected | chainguard | flux-notification-controller-0 | — |
| flux-notification-controller-0.37 | affected | chainguard | flux-notification-controller-0.37 | — |
| flux-notification-controller-2.0 | affected | chainguard | flux-notification-controller-2.0 | — |
| fq | affected | chainguard | fq | — |
| fq | affected | wolfi | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gatekeeper-3.12 | affected | chainguard | gatekeeper-3.12 | — |
| gatekeeper-3.12 | affected | wolfi | gatekeeper-3.12 | — |
| gatekeeper-3.13 | affected | chainguard | gatekeeper-3.13 | — |
| gatekeeper-3.13 | affected | wolfi | gatekeeper-3.13 | — |
| gatekeeper-3.14 | affected | wolfi | gatekeeper-3.14 | — |
| gatekeeper-3.14 | affected | chainguard | gatekeeper-3.14 | — |
| gatekeeper-fips-3.13 | affected | chainguard | gatekeeper-fips-3.13 | — |
| gatekeeper-fips-3.14 | affected | chainguard | gatekeeper-fips-3.14 | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | chainguard | gh | — |
| gh | affected | wolfi | gh | — |
| gitlab-rails-ee-17.0 | affected | chainguard | gitlab-rails-ee-17.0 | — |
| gitlab-rails-ee-17.3 | affected | chainguard | gitlab-rails-ee-17.3 | — |
| gitlab-rails-ee-fips-17.0 | affected | chainguard | gitlab-rails-ee-fips-17.0 | — |
| gitlab-rails-ee-fips-17.1 | affected | chainguard | gitlab-rails-ee-fips-17.1 | — |
| gitlab-runner | affected | wolfi | gitlab-runner | — |
| gitlab-runner | affected | chainguard | gitlab-runner | — |
| gitness | affected | wolfi | gitness | — |
| gitness | affected | chainguard | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-bindata | affected | chainguard | go-bindata | — |
| go-bindata | affected | wolfi | go-bindata | — |
| gobuster | affected | chainguard | gobuster | — |
| gobuster | affected | wolfi | gobuster | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-md2man | affected | wolfi | go-md2man | — |
| go-md2man | affected | chainguard | go-md2man | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate | affected | wolfi | gomplate | — |
| gops | affected | chainguard | gops | — |
| gops | affected | wolfi | gops | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser-1.18 | affected | wolfi | goreleaser-1.18 | — |
| goreleaser-1.18 | affected | chainguard | goreleaser-1.18 | — |
| gosu | affected | chainguard | gosu | — |
| gosu | affected | wolfi | gosu | — |
| govulncheck | affected | wolfi | govulncheck | — |
| govulncheck | affected | chainguard | govulncheck | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grype | affected | chainguard | grype | — |
| grype | affected | wolfi | grype | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| helm | affected | wolfi | helm | — |
| helm | affected | chainguard | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| hey | affected | wolfi | hey | — |
| hey | affected | chainguard | hey | — |
| http-echo | affected | chainguard | http-echo | — |
| http-echo | affected | wolfi | http-echo | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui-backend | affected | chainguard | hubble-ui-backend | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | wolfi | influx | — |
| influx | affected | chainguard | influx | — |
| ingress-nginx-controller | affected | chainguard | ingress-nginx-controller | — |
| ingress-nginx-controller | affected | wolfi | ingress-nginx-controller | — |
| ingress-nginx-controller-fips | affected | chainguard | ingress-nginx-controller-fips | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| istio-operator-fips-1.19 | affected | chainguard | istio-operator-fips-1.19 | — |
| istio-pilot-agent-fips-1.19 | affected | chainguard | istio-pilot-agent-fips-1.19 | — |
| istio-pilot-discovery-fips-1.19 | affected | chainguard | istio-pilot-discovery-fips-1.19 | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | wolfi | k3d | — |
| k3d | affected | chainguard | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | wolfi | kaf | — |
| kaf | affected | chainguard | kaf | — |
| karpenter-0.23 | affected | chainguard | karpenter-0.23 | — |
| keda | affected | chainguard | keda | — |
| keda | affected | wolfi | keda | — |
| keda-2.8 | affected | chainguard | keda-2.8 | — |
| keda-2.9 | affected | chainguard | keda-2.9 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | wolfi | kind | — |
| kind | affected | chainguard | kind | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kpt | affected | chainguard | kpt | — |
| kpt | affected | wolfi | kpt | — |
| kubeadm-bootstrap-controller | affected | wolfi | kubeadm-bootstrap-controller | — |
| kubeadm-bootstrap-controller | affected | chainguard | kubeadm-bootstrap-controller | — |
| kubeadm-controlplane-controller | affected | chainguard | kubeadm-controlplane-controller | — |
| kubeadm-controlplane-controller | affected | wolfi | kubeadm-controlplane-controller | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.19 | affected | chainguard | kubernetes-1.19 | — |
| kubernetes-1.20 | affected | chainguard | kubernetes-1.20 | — |
| kubernetes-1.21 | affected | chainguard | kubernetes-1.21 | — |
| kubernetes-1.22 | affected | chainguard | kubernetes-1.22 | — |
| kubernetes-1.23 | affected | chainguard | kubernetes-1.23 | — |
| kubernetes-1.24 | affected | wolfi | kubernetes-1.24 | — |
| kubernetes-1.24 | affected | chainguard | kubernetes-1.24 | — |
| kubernetes-1.26 | affected | wolfi | kubernetes-1.26 | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-csi-external-attacher-4.3 | affected | chainguard | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.3 | affected | wolfi | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.4 | affected | chainguard | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-4.4 | affected | wolfi | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-fips-4.3 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.3 | — |
| kubernetes-csi-external-attacher-fips-4.4 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.4 | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer-1.8 | affected | chainguard | kubernetes-csi-external-resizer-1.8 | — |
| kubernetes-csi-external-resizer-fips-1.8 | affected | chainguard | kubernetes-csi-external-resizer-fips-1.8 | — |
| kubernetes-csi-external-snapshotter | affected | wolfi | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter | affected | chainguard | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter-6.0 | affected | chainguard | kubernetes-csi-external-snapshotter-6.0 | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-fips-2.8 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.8 | — |
| kubernetes-csi-node-driver-registrar-fips-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.9 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics-2.2.0 | affected | chainguard | kube-state-metrics-2.2.0 | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kustomize | affected | chainguard | kustomize | — |
| kustomize | affected | wolfi | kustomize | — |
| kwok | affected | wolfi | kwok | — |
| kwok | affected | chainguard | kwok | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter-2.11 | affected | chainguard | kyverno-policy-reporter-2.11 | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin-1.5 | affected | chainguard | kyverno-policy-reporter-kyverno-plugin-1.5 | — |
| lazygit | affected | chainguard | lazygit | — |
| lazygit | affected | wolfi | lazygit | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| logstash-jre-bcfips | affected | chainguard | logstash-jre-bcfips | — |
| loki | affected | chainguard | loki | — |
| loki | affected | wolfi | loki | — |
| mage | affected | chainguard | mage | — |
| mage | affected | wolfi | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| metallb | affected | wolfi | metallb | — |
| metallb | affected | chainguard | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | chainguard | mockery | — |
| mockery | affected | wolfi | mockery | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nats-server | affected | wolfi | nats-server | — |
| nats-server | affected | chainguard | nats-server | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent-1.43 | affected | chainguard | newrelic-infrastructure-agent-1.43 | — |
| newrelic-nri-kube-events-1.9 | affected | chainguard | newrelic-nri-kube-events-1.9 | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| node-problem-detector-0.8 | affected | wolfi | node-problem-detector-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kubernetes-2.13 | affected | chainguard | nri-kubernetes-2.13 | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| opentofu | affected | wolfi | opentofu | — |
| opentofu | affected | chainguard | opentofu | — |
| oras | affected | wolfi | oras | — |
| oras | affected | chainguard | oras | — |
| paranoia | affected | chainguard | paranoia | — |
| paranoia | affected | wolfi | paranoia | — |
| petname | affected | chainguard | petname | — |
| petname | affected | wolfi | petname | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| pombump | affected | wolfi | pombump | — |
| pombump | affected | chainguard | pombump | — |
| prometheus | affected | wolfi | prometheus | — |
| prometheus | affected | chainguard | prometheus | — |
| prometheus-2.45 | affected | chainguard | prometheus-2.45 | — |
| prometheus-2.45 | affected | wolfi | prometheus-2.45 | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter | affected | wolfi | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | wolfi | prometheus-bind-exporter | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter | affected | wolfi | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter | affected | wolfi | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-fips | affected | chainguard | prometheus-fips | — |
| prometheus-fips-2.38 | affected | chainguard | prometheus-fips-2.38 | — |
| prometheus-fips-2.45 | affected | chainguard | prometheus-fips-2.45 | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter | affected | wolfi | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-mysqld-exporter | affected | wolfi | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter | affected | wolfi | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter | affected | wolfi | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-0.13 | affected | chainguard | prometheus-postgres-exporter-0.13 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | wolfi | prometheus-redis-exporter | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-redis-exporter-fips-1.44 | affected | chainguard | prometheus-redis-exporter-fips-1.44 | — |
| prometheus-statsd-exporter | affected | wolfi | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-0.22 | affected | chainguard | prometheus-statsd-exporter-0.22 | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| q | affected | chainguard | q | — |
| q | affected | wolfi | q | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| regclient | affected | chainguard | regclient | — |
| regclient | affected | wolfi | regclient | — |
| render-template | affected | wolfi | render-template | — |
| render-template | affected | chainguard | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | wolfi | runc | — |
| runc | affected | chainguard | runc | — |
| s5cmd | affected | wolfi | s5cmd | — |
| s5cmd | affected | chainguard | s5cmd | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | chainguard | shfmt | — |
| shfmt | affected | wolfi | shfmt | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| src | affected | chainguard | src | — |
| src | affected | wolfi | src | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| supercronic | affected | wolfi | supercronic | — |
| supercronic | affected | chainguard | supercronic | — |
| tailscale | affected | wolfi | tailscale | — |
| tailscale | affected | chainguard | tailscale | — |
| task | affected | wolfi | task | — |
| task | affected | chainguard | task | — |
| tctl | affected | chainguard | tctl | — |
| tctl | affected | wolfi | tctl | — |
| tctl-fips | affected | chainguard | tctl-fips | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-fips-1.5 | affected | chainguard | terraform-fips-1.5 | — |
| tflint | affected | chainguard | tflint | — |
| tflint | affected | wolfi | tflint | — |
| thanos | affected | wolfi | thanos | — |
| thanos | affected | chainguard | thanos | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator-fips | affected | chainguard | thanos-operator-fips | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-1.32 | affected | wolfi | tigera-operator-1.32 | — |
| tigera-operator-1.32 | affected | chainguard | tigera-operator-1.32 | — |
| tigera-operator-1.33 | affected | chainguard | tigera-operator-1.33 | — |
| tigera-operator-1.33 | affected | wolfi | tigera-operator-1.33 | — |
| tigera-operator-fips | affected | chainguard | tigera-operator-fips | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | chainguard | timoni | — |
| timoni | affected | wolfi | timoni | — |
| traefik-fips | affected | chainguard | traefik-fips | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | wolfi | up | — |
| up | affected | chainguard | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-csi-provider | affected | wolfi | vault-csi-provider | — |
| vault-fips-1.14 | affected | chainguard | vault-fips-1.14 | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | wolfi | velero | — |
| velero | affected | chainguard | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| vite | affected | wolfi | vite | — |
| vite | affected | chainguard | vite | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | chainguard | vt-cli | — |
| vt-cli | affected | wolfi | vt-cli | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | chainguard | wazero | — |
| wazero | affected | wolfi | wazero | — |
| wire-go | affected | wolfi | wire-go | — |
| wire-go | affected | chainguard | wire-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| yam | affected | chainguard | yam | — |
| yam | affected | wolfi | yam | — |
| yq | affected | chainguard | yq | — |
| yq | affected | wolfi | yq | — |
| ytt | affected | wolfi | ytt | — |
| ytt | affected | chainguard | ytt | — |
CVE-2024-24785 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2024-24785 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2024-24785 affecting package golang 1.25.7-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:3 | golang | — |
DEBIAN-CVE-2024-24785
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-1.15 | affected | Debian:11 | golang-1.15 | — |
| golang-1.19 | affected | Debian:12 | golang-1.19 | — |
Errors returned from JSON marshaling may break template escaping in html/template
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| amass | affected | wolfi | amass | — |
| amass | affected | chainguard | amass | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bom | affected | wolfi | bom | — |
| bom | affected | chainguard | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | chainguard | buildkitd | — |
| buildkitd | affected | wolfi | buildkitd | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| cadvisor | affected | chainguard | cadvisor | — |
| cadvisor | affected | wolfi | cadvisor | — |
| capslock | affected | chainguard | capslock | — |
| capslock | affected | wolfi | capslock | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cfssl | affected | wolfi | cfssl | — |
| cfssl | affected | chainguard | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| controller-gen | affected | wolfi | controller-gen | — |
| controller-gen | affected | chainguard | controller-gen | — |
| cortex | affected | chainguard | cortex | — |
| cortex | affected | wolfi | cortex | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| ctop | affected | wolfi | ctop | — |
| ctop | affected | chainguard | ctop | — |
| cue | affected | chainguard | cue | — |
| cue | affected | wolfi | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | chainguard | dagger | — |
| dagger | affected | wolfi | dagger | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| delve | affected | wolfi | delve | — |
| delve | affected | chainguard | delve | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | chainguard | dgraph | — |
| dgraph | affected | wolfi | dgraph | — |
| direnv | affected | chainguard | direnv | — |
| direnv | affected | wolfi | direnv | — |
| dive | affected | wolfi | dive | — |
| dive | affected | chainguard | dive | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | chainguard | eksctl | — |
| eksctl | affected | wolfi | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | wolfi | esbuild | — |
| esbuild | affected | chainguard | esbuild | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flux | affected | chainguard | flux | — |
| flux | affected | wolfi | flux | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| fq | affected | wolfi | fq | — |
| fq | affected | chainguard | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gh | affected | chainguard | gh | — |
| gh | affected | wolfi | gh | — |
| gitness | affected | chainguard | gitness | — |
| gitness | affected | wolfi | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-bindata | affected | wolfi | go-bindata | — |
| go-bindata | affected | chainguard | go-bindata | — |
| gobuster | affected | chainguard | gobuster | — |
| gobuster | affected | wolfi | gobuster | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-md2man | affected | wolfi | go-md2man | — |
| go-md2man | affected | chainguard | go-md2man | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gops | affected | chainguard | gops | — |
| gops | affected | wolfi | gops | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser | affected | wolfi | goreleaser | — |
| gosu | affected | wolfi | gosu | — |
| gosu | affected | chainguard | gosu | — |
| govulncheck | affected | chainguard | govulncheck | — |
| govulncheck | affected | wolfi | govulncheck | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grype | affected | wolfi | grype | — |
| grype | affected | chainguard | grype | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| helm | affected | wolfi | helm | — |
| helm | affected | chainguard | helm | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | wolfi | helm-push | — |
| helm-push | affected | chainguard | helm-push | — |
| hey | affected | wolfi | hey | — |
| hey | affected | chainguard | hey | — |
| http-echo | affected | wolfi | http-echo | — |
| http-echo | affected | chainguard | http-echo | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | chainguard | influx | — |
| influx | affected | wolfi | influx | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | chainguard | k3d | — |
| k3d | affected | wolfi | k3d | — |
| k3s | affected | chainguard | k3s | — |
| k3s | affected | wolfi | k3s | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | chainguard | kaf | — |
| kaf | affected | wolfi | kaf | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | chainguard | kind | — |
| kind | affected | wolfi | kind | — |
| kine | affected | chainguard | kine | — |
| kine | affected | wolfi | kine | — |
| kor | affected | wolfi | kor | — |
| kor | affected | chainguard | kor | — |
| kpt | affected | chainguard | kpt | — |
| kpt | affected | wolfi | kpt | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | chainguard | kubevela | — |
| kubevela | affected | wolfi | kubevela | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kustomize | affected | chainguard | kustomize | — |
| kustomize | affected | wolfi | kustomize | — |
| kwok | affected | wolfi | kwok | — |
| kwok | affected | chainguard | kwok | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| mage | affected | wolfi | mage | — |
| mage | affected | chainguard | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| metallb | affected | chainguard | metallb | — |
| metallb | affected | wolfi | metallb | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | chainguard | mockery | — |
| mockery | affected | wolfi | mockery | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| nats | affected | chainguard | nats | — |
| nats | affected | wolfi | nats | — |
| nats-server | affected | wolfi | nats-server | — |
| nats-server | affected | chainguard | nats-server | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| oras | affected | wolfi | oras | — |
| oras | affected | chainguard | oras | — |
| paranoia | affected | chainguard | paranoia | — |
| paranoia | affected | wolfi | paranoia | — |
| petname | affected | wolfi | petname | — |
| petname | affected | chainguard | petname | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| pombump | affected | wolfi | pombump | — |
| pombump | affected | chainguard | pombump | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| q | affected | wolfi | q | — |
| q | affected | chainguard | q | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| regclient | affected | chainguard | regclient | — |
| regclient | affected | wolfi | regclient | — |
| render-template | affected | wolfi | render-template | — |
| render-template | affected | chainguard | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| s5cmd | affected | chainguard | s5cmd | — |
| s5cmd | affected | wolfi | s5cmd | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | wolfi | shfmt | — |
| shfmt | affected | chainguard | shfmt | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| stdlib | affected | Go | stdlib | — |
| supercronic | affected | wolfi | supercronic | — |
| supercronic | affected | chainguard | supercronic | — |
| tailscale | affected | chainguard | tailscale | — |
| tailscale | affected | wolfi | tailscale | — |
| task | affected | wolfi | task | — |
| task | affected | chainguard | task | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| tflint | affected | chainguard | tflint | — |
| tflint | affected | wolfi | tflint | — |
| thanos | affected | chainguard | thanos | — |
| thanos | affected | wolfi | thanos | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | wolfi | up | — |
| up | affected | chainguard | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | wolfi | velero | — |
| velero | affected | chainguard | velero | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| vite | affected | wolfi | vite | — |
| vite | affected | chainguard | vite | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | chainguard | vt-cli | — |
| vt-cli | affected | wolfi | vt-cli | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | chainguard | wazero | — |
| wazero | affected | wolfi | wazero | — |
| wire-go | affected | wolfi | wire-go | — |
| wire-go | affected | chainguard | wire-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| yam | affected | wolfi | yam | — |
| yam | affected | chainguard | yam | — |
| yq | affected | wolfi | yq | — |
| yq | affected | chainguard | yq | — |
| ytt | affected | wolfi | ytt | — |
| ytt | affected | chainguard | ytt | — |
ASB-A-316206835
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Verify panics on certificates with an unknown public key algorithm in crypto/x509
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
GHSA-3q2c-pvp5-3cqp
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| amass | affected | wolfi | amass | — |
| amass | affected | chainguard | amass | — |
| argo-cd-2.7 | affected | wolfi | argo-cd-2.7 | — |
| argo-cd-2.7 | affected | chainguard | argo-cd-2.7 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.9 | affected | chainguard | argo-cd-fips-2.9 | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver | affected | wolfi | aws-ebs-csi-driver | — |
| aws-ebs-csi-driver-1.18 | affected | chainguard | aws-ebs-csi-driver-1.18 | — |
| aws-ebs-csi-driver-1.19 | affected | chainguard | aws-ebs-csi-driver-1.19 | — |
| aws-ebs-csi-driver-fips | affected | chainguard | aws-ebs-csi-driver-fips | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-efs-csi-driver-fips-1.6 | affected | chainguard | aws-efs-csi-driver-fips-1.6 | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-2.4.5 | affected | chainguard | aws-load-balancer-controller-2.4.5 | — |
| aws-load-balancer-controller-2.5 | affected | chainguard | aws-load-balancer-controller-2.5 | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bom | affected | chainguard | bom | — |
| bom | affected | wolfi | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd | affected | chainguard | buildkitd | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| cadvisor | affected | wolfi | cadvisor | — |
| cadvisor | affected | chainguard | cadvisor | — |
| calico | affected | chainguard | calico | — |
| calico | affected | wolfi | calico | — |
| calico-fips | affected | chainguard | calico-fips | — |
| capslock | affected | chainguard | capslock | — |
| capslock | affected | wolfi | capslock | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cert-manager-fips-1.13 | affected | chainguard | cert-manager-fips-1.13 | — |
| cert-manager-fips-1.14 | affected | chainguard | cert-manager-fips-1.14 | — |
| cfssl | affected | chainguard | cfssl | — |
| cfssl | affected | wolfi | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy | affected | wolfi | cloud-sql-proxy | — |
| cloud-sql-proxy | affected | chainguard | cloud-sql-proxy | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-api-controller | affected | chainguard | cluster-api-controller | — |
| cluster-api-controller | affected | wolfi | cluster-api-controller | — |
| cluster-autoscaler-1.25 | affected | chainguard | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.25 | affected | wolfi | cluster-autoscaler-1.25 | — |
| cluster-autoscaler-1.29 | affected | chainguard | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-1.29 | affected | wolfi | cluster-autoscaler-1.29 | — |
| cluster-autoscaler-fips-1.25 | affected | chainguard | cluster-autoscaler-fips-1.25 | — |
| cluster-autoscaler-fips-1.26 | affected | chainguard | cluster-autoscaler-fips-1.26 | — |
| cluster-autoscaler-fips-1.27 | affected | chainguard | cluster-autoscaler-fips-1.27 | — |
| cluster-autoscaler-fips-1.28 | affected | chainguard | cluster-autoscaler-fips-1.28 | — |
| clusterctl | affected | chainguard | clusterctl | — |
| clusterctl | affected | wolfi | clusterctl | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| consul-1.15 | affected | wolfi | consul-1.15 | — |
| consul-1.15 | affected | chainguard | consul-1.15 | — |
| consul-1.16 | affected | wolfi | consul-1.16 | — |
| consul-1.16 | affected | chainguard | consul-1.16 | — |
| consul-1.17 | affected | chainguard | consul-1.17 | — |
| consul-1.17-fips | affected | chainguard | consul-1.17-fips | — |
| controller-gen | affected | chainguard | controller-gen | — |
| controller-gen | affected | wolfi | controller-gen | — |
| coredns | affected | wolfi | coredns | — |
| coredns | affected | chainguard | coredns | — |
| cortex | affected | chainguard | cortex | — |
| cortex | affected | wolfi | cortex | — |
| cri-tools | affected | wolfi | cri-tools | — |
| cri-tools | affected | chainguard | cri-tools | — |
| crossplane | affected | wolfi | crossplane | — |
| crossplane | affected | chainguard | crossplane | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| ctop | affected | chainguard | ctop | — |
| ctop | affected | wolfi | ctop | — |
| cue | affected | chainguard | cue | — |
| cue | affected | wolfi | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | chainguard | dagger | — |
| dagger | affected | wolfi | dagger | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| datadog-agent | affected | chainguard | datadog-agent | — |
| datadog-agent | affected | wolfi | datadog-agent | — |
| datadog-agent-fips | affected | chainguard | datadog-agent-fips | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| delve | affected | wolfi | delve | — |
| delve | affected | chainguard | delve | — |
| dex | affected | wolfi | dex | — |
| dex | affected | chainguard | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | chainguard | dgraph | — |
| dgraph | affected | wolfi | dgraph | — |
| direnv | affected | chainguard | direnv | — |
| direnv | affected | wolfi | direnv | — |
| dive | affected | chainguard | dive | — |
| dive | affected | wolfi | dive | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | wolfi | eksctl | — |
| eksctl | affected | chainguard | eksctl | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | chainguard | esbuild | — |
| esbuild | affected | wolfi | esbuild | — |
| etcd-3.5 | affected | wolfi | etcd-3.5 | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-dns | affected | chainguard | external-dns | — |
| external-dns | affected | wolfi | external-dns | — |
| external-dns-0.13.5 | affected | chainguard | external-dns-0.13.5 | — |
| external-dns-fips | affected | chainguard | external-dns-fips | — |
| external-secrets-0.7 | affected | chainguard | external-secrets-0.7 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falco | affected | chainguard | falco | — |
| falco | affected | wolfi | falco | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| filebeat | affected | chainguard | filebeat | — |
| filebeat | affected | wolfi | filebeat | — |
| filebeat-fips | affected | chainguard | filebeat-fips | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flux | affected | wolfi | flux | — |
| flux | affected | chainguard | flux | — |
| flux-0 | affected | chainguard | flux-0 | — |
| flux-0.37 | affected | chainguard | flux-0.37 | — |
| flux-2.0 | affected | chainguard | flux-2.0 | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller-0.37 | affected | chainguard | flux-helm-controller-0.37 | — |
| flux-helm-controller-2.0 | affected | chainguard | flux-helm-controller-2.0 | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-automation-controller-0 | affected | chainguard | flux-image-automation-controller-0 | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| flux-image-reflector-controller-0 | affected | chainguard | flux-image-reflector-controller-0 | — |
| flux-kustomize-controller-0 | affected | chainguard | flux-kustomize-controller-0 | — |
| flux-kustomize-controller-0.37 | affected | chainguard | flux-kustomize-controller-0.37 | — |
| flux-kustomize-controller-2.0 | affected | chainguard | flux-kustomize-controller-2.0 | — |
| flux-notification-controller-0 | affected | chainguard | flux-notification-controller-0 | — |
| flux-notification-controller-0.37 | affected | chainguard | flux-notification-controller-0.37 | — |
| flux-notification-controller-2.0 | affected | chainguard | flux-notification-controller-2.0 | — |
| fq | affected | wolfi | fq | — |
| fq | affected | chainguard | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gatekeeper-3.12 | affected | chainguard | gatekeeper-3.12 | — |
| gatekeeper-3.12 | affected | wolfi | gatekeeper-3.12 | — |
| gatekeeper-3.13 | affected | chainguard | gatekeeper-3.13 | — |
| gatekeeper-3.13 | affected | wolfi | gatekeeper-3.13 | — |
| gatekeeper-3.14 | affected | wolfi | gatekeeper-3.14 | — |
| gatekeeper-3.14 | affected | chainguard | gatekeeper-3.14 | — |
| gatekeeper-fips-3.13 | affected | chainguard | gatekeeper-fips-3.13 | — |
| gatekeeper-fips-3.14 | affected | chainguard | gatekeeper-fips-3.14 | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gh | affected | wolfi | gh | — |
| gh | affected | chainguard | gh | — |
| gitlab-rails-ee-17.0 | affected | chainguard | gitlab-rails-ee-17.0 | — |
| gitlab-rails-ee-17.3 | affected | chainguard | gitlab-rails-ee-17.3 | — |
| gitlab-rails-ee-fips-17.0 | affected | chainguard | gitlab-rails-ee-fips-17.0 | — |
| gitlab-rails-ee-fips-17.1 | affected | chainguard | gitlab-rails-ee-fips-17.1 | — |
| gitlab-runner | affected | chainguard | gitlab-runner | — |
| gitlab-runner | affected | wolfi | gitlab-runner | — |
| gitness | affected | chainguard | gitness | — |
| gitness | affected | wolfi | gitness | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-bindata | affected | chainguard | go-bindata | — |
| go-bindata | affected | wolfi | go-bindata | — |
| gobuster | affected | wolfi | gobuster | — |
| gobuster | affected | chainguard | gobuster | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-md2man | affected | chainguard | go-md2man | — |
| go-md2man | affected | wolfi | go-md2man | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate | affected | wolfi | gomplate | — |
| gops | affected | wolfi | gops | — |
| gops | affected | chainguard | gops | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser | affected | chainguard | goreleaser | — |
| goreleaser-1.18 | affected | chainguard | goreleaser-1.18 | — |
| goreleaser-1.18 | affected | wolfi | goreleaser-1.18 | — |
| gosu | affected | wolfi | gosu | — |
| gosu | affected | chainguard | gosu | — |
| govulncheck | affected | wolfi | govulncheck | — |
| govulncheck | affected | chainguard | govulncheck | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grype | affected | chainguard | grype | — |
| grype | affected | wolfi | grype | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| helm | affected | chainguard | helm | — |
| helm | affected | wolfi | helm | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | chainguard | helm-push | — |
| helm-push | affected | wolfi | helm-push | — |
| hey | affected | chainguard | hey | — |
| hey | affected | wolfi | hey | — |
| http-echo | affected | chainguard | http-echo | — |
| http-echo | affected | wolfi | http-echo | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui-backend | affected | chainguard | hubble-ui-backend | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | chainguard | influx | — |
| influx | affected | wolfi | influx | — |
| ingress-nginx-controller | affected | wolfi | ingress-nginx-controller | — |
| ingress-nginx-controller | affected | chainguard | ingress-nginx-controller | — |
| ingress-nginx-controller-fips | affected | chainguard | ingress-nginx-controller-fips | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| istio-operator-fips-1.19 | affected | chainguard | istio-operator-fips-1.19 | — |
| istio-pilot-agent-fips-1.19 | affected | chainguard | istio-pilot-agent-fips-1.19 | — |
| istio-pilot-discovery-fips-1.19 | affected | chainguard | istio-pilot-discovery-fips-1.19 | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | chainguard | k3d | — |
| k3d | affected | wolfi | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | chainguard | kaf | — |
| kaf | affected | wolfi | kaf | — |
| karpenter-0.23 | affected | chainguard | karpenter-0.23 | — |
| keda | affected | chainguard | keda | — |
| keda | affected | wolfi | keda | — |
| keda-2.8 | affected | chainguard | keda-2.8 | — |
| keda-2.9 | affected | chainguard | keda-2.9 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | wolfi | kind | — |
| kind | affected | chainguard | kind | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kpt | affected | wolfi | kpt | — |
| kpt | affected | chainguard | kpt | — |
| kubeadm-bootstrap-controller | affected | chainguard | kubeadm-bootstrap-controller | — |
| kubeadm-bootstrap-controller | affected | wolfi | kubeadm-bootstrap-controller | — |
| kubeadm-controlplane-controller | affected | wolfi | kubeadm-controlplane-controller | — |
| kubeadm-controlplane-controller | affected | chainguard | kubeadm-controlplane-controller | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.19 | affected | chainguard | kubernetes-1.19 | — |
| kubernetes-1.20 | affected | chainguard | kubernetes-1.20 | — |
| kubernetes-1.21 | affected | chainguard | kubernetes-1.21 | — |
| kubernetes-1.22 | affected | chainguard | kubernetes-1.22 | — |
| kubernetes-1.23 | affected | chainguard | kubernetes-1.23 | — |
| kubernetes-1.24 | affected | chainguard | kubernetes-1.24 | — |
| kubernetes-1.24 | affected | wolfi | kubernetes-1.24 | — |
| kubernetes-1.26 | affected | wolfi | kubernetes-1.26 | — |
| kubernetes-1.26 | affected | chainguard | kubernetes-1.26 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-csi-external-attacher-4.3 | affected | wolfi | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.3 | affected | chainguard | kubernetes-csi-external-attacher-4.3 | — |
| kubernetes-csi-external-attacher-4.4 | affected | wolfi | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-4.4 | affected | chainguard | kubernetes-csi-external-attacher-4.4 | — |
| kubernetes-csi-external-attacher-fips-4.3 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.3 | — |
| kubernetes-csi-external-attacher-fips-4.4 | affected | chainguard | kubernetes-csi-external-attacher-fips-4.4 | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer-1.8 | affected | chainguard | kubernetes-csi-external-resizer-1.8 | — |
| kubernetes-csi-external-resizer-fips-1.8 | affected | chainguard | kubernetes-csi-external-resizer-fips-1.8 | — |
| kubernetes-csi-external-snapshotter | affected | chainguard | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter | affected | wolfi | kubernetes-csi-external-snapshotter | — |
| kubernetes-csi-external-snapshotter-6.0 | affected | chainguard | kubernetes-csi-external-snapshotter-6.0 | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | wolfi | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-2.9 | — |
| kubernetes-csi-node-driver-registrar-fips-2.8 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.8 | — |
| kubernetes-csi-node-driver-registrar-fips-2.9 | affected | chainguard | kubernetes-csi-node-driver-registrar-fips-2.9 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-2.2.0 | affected | chainguard | kube-state-metrics-2.2.0 | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kustomize | affected | chainguard | kustomize | — |
| kustomize | affected | wolfi | kustomize | — |
| kwok | affected | chainguard | kwok | — |
| kwok | affected | wolfi | kwok | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter-2.11 | affected | chainguard | kyverno-policy-reporter-2.11 | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin-1.5 | affected | chainguard | kyverno-policy-reporter-kyverno-plugin-1.5 | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| logstash-jre-bcfips | affected | chainguard | logstash-jre-bcfips | — |
| loki | affected | wolfi | loki | — |
| loki | affected | chainguard | loki | — |
| mage | affected | wolfi | mage | — |
| mage | affected | chainguard | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| metallb | affected | wolfi | metallb | — |
| metallb | affected | chainguard | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | chainguard | mockery | — |
| mockery | affected | wolfi | mockery | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nats-server | affected | wolfi | nats-server | — |
| nats-server | affected | chainguard | nats-server | — |
| nerdctl | affected | wolfi | nerdctl | — |
| nerdctl | affected | chainguard | nerdctl | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent-1.43 | affected | chainguard | newrelic-infrastructure-agent-1.43 | — |
| newrelic-nri-kube-events-1.9 | affected | chainguard | newrelic-nri-kube-events-1.9 | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | wolfi | node-problem-detector-0.8 | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kubernetes-2.13 | affected | chainguard | nri-kubernetes-2.13 | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nuclei | affected | chainguard | nuclei | — |
| nuclei | affected | wolfi | nuclei | — |
| opentofu | affected | chainguard | opentofu | — |
| opentofu | affected | wolfi | opentofu | — |
| oras | affected | wolfi | oras | — |
| oras | affected | chainguard | oras | — |
| paranoia | affected | wolfi | paranoia | — |
| paranoia | affected | chainguard | paranoia | — |
| petname | affected | chainguard | petname | — |
| petname | affected | wolfi | petname | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| pombump | affected | wolfi | pombump | — |
| pombump | affected | chainguard | pombump | — |
| prometheus | affected | wolfi | prometheus | — |
| prometheus | affected | chainguard | prometheus | — |
| prometheus-2.45 | affected | wolfi | prometheus-2.45 | — |
| prometheus-2.45 | affected | chainguard | prometheus-2.45 | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | wolfi | prometheus-beat-exporter | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-bind-exporter | affected | wolfi | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | wolfi | prometheus-blackbox-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | wolfi | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-fips | affected | chainguard | prometheus-fips | — |
| prometheus-fips-2.38 | affected | chainguard | prometheus-fips-2.38 | — |
| prometheus-fips-2.45 | affected | chainguard | prometheus-fips-2.45 | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter | affected | wolfi | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-mysqld-exporter | affected | wolfi | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter | affected | wolfi | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter | affected | wolfi | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-0.13 | affected | chainguard | prometheus-postgres-exporter-0.13 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter | affected | wolfi | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-redis-exporter-fips-1.44 | affected | chainguard | prometheus-redis-exporter-fips-1.44 | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter | affected | wolfi | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-0.22 | affected | chainguard | prometheus-statsd-exporter-0.22 | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| q | affected | chainguard | q | — |
| q | affected | wolfi | q | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| regclient | affected | chainguard | regclient | — |
| regclient | affected | wolfi | regclient | — |
| render-template | affected | wolfi | render-template | — |
| render-template | affected | chainguard | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | chainguard | runc | — |
| runc | affected | wolfi | runc | — |
| s5cmd | affected | chainguard | s5cmd | — |
| s5cmd | affected | wolfi | s5cmd | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | chainguard | shfmt | — |
| shfmt | affected | wolfi | shfmt | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| spark-operator | affected | chainguard | spark-operator | — |
| spark-operator | affected | wolfi | spark-operator | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| supercronic | affected | chainguard | supercronic | — |
| supercronic | affected | wolfi | supercronic | — |
| tailscale | affected | wolfi | tailscale | — |
| tailscale | affected | chainguard | tailscale | — |
| task | affected | chainguard | task | — |
| task | affected | wolfi | task | — |
| tctl | affected | chainguard | tctl | — |
| tctl | affected | wolfi | tctl | — |
| tctl-fips | affected | chainguard | tctl-fips | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | wolfi | terraform | — |
| terraform | affected | chainguard | terraform | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| terraform-fips-1.5 | affected | chainguard | terraform-fips-1.5 | — |
| tflint | affected | wolfi | tflint | — |
| tflint | affected | chainguard | tflint | — |
| thanos | affected | chainguard | thanos | — |
| thanos | affected | wolfi | thanos | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator-fips | affected | chainguard | thanos-operator-fips | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-1.32 | affected | wolfi | tigera-operator-1.32 | — |
| tigera-operator-1.32 | affected | chainguard | tigera-operator-1.32 | — |
| tigera-operator-1.33 | affected | chainguard | tigera-operator-1.33 | — |
| tigera-operator-1.33 | affected | wolfi | tigera-operator-1.33 | — |
| tigera-operator-fips | affected | chainguard | tigera-operator-fips | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| traefik-fips | affected | chainguard | traefik-fips | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | chainguard | up | — |
| up | affected | wolfi | up | — |
| vault-csi-provider | affected | wolfi | vault-csi-provider | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-fips-1.14 | affected | chainguard | vault-fips-1.14 | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | wolfi | velero | — |
| velero | affected | chainguard | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | chainguard | vexctl | — |
| vexctl | affected | wolfi | vexctl | — |
| vite | affected | chainguard | vite | — |
| vite | affected | wolfi | vite | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | wolfi | vt-cli | — |
| vt-cli | affected | chainguard | vt-cli | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | chainguard | wazero | — |
| wazero | affected | wolfi | wazero | — |
| wire-go | affected | wolfi | wire-go | — |
| wire-go | affected | chainguard | wire-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| yam | affected | wolfi | yam | — |
| yam | affected | chainguard | yam | — |
| yq | affected | wolfi | yq | — |
| yq | affected | chainguard | yq | — |
| ytt | affected | chainguard | ytt | — |
| ytt | affected | wolfi | ytt | — |
CVE-2024-24783 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2024-24783 affecting package golang for versions less than 1.21.6-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:2 | golang | — |
CVE-2024-24783 affecting package golang 1.25.7-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Azure Linux:3 | golang | — |
DEBIAN-CVE-2024-24783
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-1.15 | affected | Debian:11 | golang-1.15 | — |
| golang-1.19 | affected | Debian:12 | golang-1.19 | — |
Verify panics on certificates with an unknown public key algorithm in crypto/x509
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| actions-runner-controller | affected | chainguard | actions-runner-controller | — |
| actions-runner-controller | affected | wolfi | actions-runner-controller | — |
| amass | affected | chainguard | amass | — |
| amass | affected | wolfi | amass | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| atlantis-fips | affected | chainguard | atlantis-fips | — |
| aws-ebs-csi-driver | affected | chainguard | aws-ebs-csi-driver | — |
| aws-efs-csi-driver | affected | wolfi | aws-efs-csi-driver | — |
| aws-efs-csi-driver | affected | chainguard | aws-efs-csi-driver | — |
| aws-efs-csi-driver-fips | affected | chainguard | aws-efs-csi-driver-fips | — |
| aws-flb-cloudwatch | affected | chainguard | aws-flb-cloudwatch | — |
| aws-flb-cloudwatch | affected | wolfi | aws-flb-cloudwatch | — |
| aws-flb-firehose | affected | wolfi | aws-flb-firehose | — |
| aws-flb-firehose | affected | chainguard | aws-flb-firehose | — |
| aws-flb-kinesis | affected | wolfi | aws-flb-kinesis | — |
| aws-flb-kinesis | affected | chainguard | aws-flb-kinesis | — |
| aws-load-balancer-controller | affected | wolfi | aws-load-balancer-controller | — |
| aws-load-balancer-controller | affected | chainguard | aws-load-balancer-controller | — |
| aws-load-balancer-controller-fips | affected | chainguard | aws-load-balancer-controller-fips | — |
| azure-aad-pod-identity-mic | affected | chainguard | azure-aad-pod-identity-mic | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| bazelisk | affected | wolfi | bazelisk | — |
| bazelisk | affected | chainguard | bazelisk | — |
| bom | affected | wolfi | bom | — |
| bom | affected | chainguard | bom | — |
| boring-registry-fips | affected | chainguard | boring-registry-fips | — |
| buildkitd | affected | wolfi | buildkitd | — |
| buildkitd | affected | chainguard | buildkitd | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| cadvisor | affected | chainguard | cadvisor | — |
| cadvisor | affected | wolfi | cadvisor | — |
| capslock | affected | wolfi | capslock | — |
| capslock | affected | chainguard | capslock | — |
| cass-operator | affected | chainguard | cass-operator | — |
| cass-operator | affected | wolfi | cass-operator | — |
| cass-operator-fips | affected | chainguard | cass-operator-fips | — |
| cass-operator-fips-no-pvc-delete | affected | chainguard | cass-operator-fips-no-pvc-delete | — |
| cert-exporter | affected | wolfi | cert-exporter | — |
| cert-exporter | affected | chainguard | cert-exporter | — |
| cert-exporter-fips | affected | chainguard | cert-exporter-fips | — |
| cfssl | affected | chainguard | cfssl | — |
| cfssl | affected | wolfi | cfssl | — |
| chainctl | affected | chainguard | chainctl | — |
| chartmuseum | affected | wolfi | chartmuseum | — |
| chartmuseum | affected | chainguard | chartmuseum | — |
| cloud-sql-proxy-fips | affected | chainguard | cloud-sql-proxy-fips | — |
| cluster-proportional-autoscaler | affected | chainguard | cluster-proportional-autoscaler | — |
| cluster-proportional-autoscaler | affected | wolfi | cluster-proportional-autoscaler | — |
| cni-plugins | affected | wolfi | cni-plugins | — |
| cni-plugins | affected | chainguard | cni-plugins | — |
| cni-plugins-fips | affected | chainguard | cni-plugins-fips | — |
| configmap-reload | affected | wolfi | configmap-reload | — |
| configmap-reload | affected | chainguard | configmap-reload | — |
| configmap-reload-fips | affected | chainguard | configmap-reload-fips | — |
| configmap-reload-fips-0.11 | affected | chainguard | configmap-reload-fips-0.11 | — |
| controller-gen | affected | chainguard | controller-gen | — |
| controller-gen | affected | wolfi | controller-gen | — |
| cortex | affected | chainguard | cortex | — |
| cortex | affected | wolfi | cortex | — |
| cri-tools | affected | chainguard | cri-tools | — |
| cri-tools | affected | wolfi | cri-tools | — |
| crossplane-provider-azure | affected | wolfi | crossplane-provider-azure | — |
| crossplane-provider-azure | affected | chainguard | crossplane-provider-azure | — |
| ctop | affected | chainguard | ctop | — |
| ctop | affected | wolfi | ctop | — |
| cue | affected | chainguard | cue | — |
| cue | affected | wolfi | cue | — |
| cue-fips | affected | chainguard | cue-fips | — |
| dagger | affected | wolfi | dagger | — |
| dagger | affected | chainguard | dagger | — |
| dask-gateway | affected | chainguard | dask-gateway | — |
| dask-gateway | affected | wolfi | dask-gateway | — |
| dataplaneapi | affected | wolfi | dataplaneapi | — |
| dataplaneapi | affected | chainguard | dataplaneapi | — |
| delve | affected | chainguard | delve | — |
| delve | affected | wolfi | delve | — |
| dex | affected | chainguard | dex | — |
| dex | affected | wolfi | dex | — |
| dex-k8s-authenticator | affected | chainguard | dex-k8s-authenticator | — |
| dgraph | affected | wolfi | dgraph | — |
| dgraph | affected | chainguard | dgraph | — |
| direnv | affected | chainguard | direnv | — |
| direnv | affected | wolfi | direnv | — |
| dive | affected | chainguard | dive | — |
| dive | affected | wolfi | dive | — |
| docker-cli | affected | wolfi | docker-cli | — |
| docker-cli | affected | chainguard | docker-cli | — |
| docker-credential-acr-env | affected | chainguard | docker-credential-acr-env | — |
| docker-credential-acr-env | affected | wolfi | docker-credential-acr-env | — |
| docker-credential-ecr-login | affected | wolfi | docker-credential-ecr-login | — |
| docker-credential-ecr-login | affected | chainguard | docker-credential-ecr-login | — |
| docker-credential-gcr | affected | chainguard | docker-credential-gcr | — |
| docker-credential-gcr | affected | wolfi | docker-credential-gcr | — |
| dockerize | affected | wolfi | dockerize | — |
| dockerize | affected | chainguard | dockerize | — |
| dockerize-fips | affected | chainguard | dockerize-fips | — |
| doppler-kubernetes-operator | affected | chainguard | doppler-kubernetes-operator | — |
| doppler-kubernetes-operator | affected | wolfi | doppler-kubernetes-operator | — |
| dynamic-localpv-provisioner | affected | wolfi | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner | affected | chainguard | dynamic-localpv-provisioner | — |
| dynamic-localpv-provisioner-fips | affected | chainguard | dynamic-localpv-provisioner-fips | — |
| eksctl | affected | wolfi | eksctl | — |
| eksctl | affected | chainguard | eksctl | — |
| envoy-ratelimit | affected | chainguard | envoy-ratelimit | — |
| envoy-ratelimit | affected | wolfi | envoy-ratelimit | — |
| envoy-ratelimit-fips | affected | chainguard | envoy-ratelimit-fips | — |
| esbuild | affected | wolfi | esbuild | — |
| esbuild | affected | chainguard | esbuild | — |
| etcd-3.5 | affected | chainguard | etcd-3.5 | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl-fips-0.4 | affected | chainguard | falcoctl-fips-0.4 | — |
| ferretdb | affected | chainguard | ferretdb | — |
| ferretdb | affected | wolfi | ferretdb | — |
| flannel-cni-plugin | affected | wolfi | flannel-cni-plugin | — |
| flannel-cni-plugin | affected | chainguard | flannel-cni-plugin | — |
| flux | affected | chainguard | flux | — |
| flux | affected | wolfi | flux | — |
| flux-helm-controller | affected | wolfi | flux-helm-controller | — |
| flux-helm-controller | affected | chainguard | flux-helm-controller | — |
| flux-image-automation-controller | affected | chainguard | flux-image-automation-controller | — |
| flux-image-automation-controller | affected | wolfi | flux-image-automation-controller | — |
| flux-image-reflector-controller | affected | chainguard | flux-image-reflector-controller | — |
| flux-image-reflector-controller | affected | wolfi | flux-image-reflector-controller | — |
| fq | affected | wolfi | fq | — |
| fq | affected | chainguard | fq | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| fuse-overlayfs-snapshotter | affected | wolfi | fuse-overlayfs-snapshotter | — |
| fuse-overlayfs-snapshotter | affected | chainguard | fuse-overlayfs-snapshotter | — |
| gcsfuse | affected | chainguard | gcsfuse | — |
| gcsfuse | affected | wolfi | gcsfuse | — |
| gh | affected | chainguard | gh | — |
| gh | affected | wolfi | gh | — |
| gitness | affected | chainguard | gitness | — |
| gitness | affected | wolfi | gitness | — |
| gke-gcloud-auth-plugin | affected | chainguard | gke-gcloud-auth-plugin | — |
| gke-gcloud-auth-plugin | affected | wolfi | gke-gcloud-auth-plugin | — |
| go-1.20 | affected | chainguard | go-1.20 | — |
| go-1.20 | affected | wolfi | go-1.20 | — |
| go-bindata | affected | wolfi | go-bindata | — |
| go-bindata | affected | chainguard | go-bindata | — |
| gobuster | affected | wolfi | gobuster | — |
| gobuster | affected | chainguard | gobuster | — |
| golangci-lint | affected | wolfi | golangci-lint | — |
| golangci-lint | affected | chainguard | golangci-lint | — |
| go-licenses | affected | wolfi | go-licenses | — |
| go-licenses | affected | chainguard | go-licenses | — |
| go-md2man | affected | chainguard | go-md2man | — |
| go-md2man | affected | wolfi | go-md2man | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate | affected | wolfi | gomplate | — |
| gops | affected | wolfi | gops | — |
| gops | affected | chainguard | gops | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser | affected | chainguard | goreleaser | — |
| gosu | affected | chainguard | gosu | — |
| gosu | affected | wolfi | gosu | — |
| govulncheck | affected | wolfi | govulncheck | — |
| govulncheck | affected | chainguard | govulncheck | — |
| grafana-operator | affected | wolfi | grafana-operator | — |
| grafana-operator | affected | chainguard | grafana-operator | — |
| grafana-operator-fips | affected | chainguard | grafana-operator-fips | — |
| grpcurl | affected | chainguard | grpcurl | — |
| grpcurl | affected | wolfi | grpcurl | — |
| grype | affected | chainguard | grype | — |
| grype | affected | wolfi | grype | — |
| haproxy-ingress | affected | chainguard | haproxy-ingress | — |
| haproxy-ingress | affected | wolfi | haproxy-ingress | — |
| hello-world-golang | affected | chainguard | hello-world-golang | — |
| hello-world-golang | affected | wolfi | hello-world-golang | — |
| helm | affected | chainguard | helm | — |
| helm | affected | wolfi | helm | — |
| helm-3 | affected | wolfi | helm-3 | — |
| helm-3 | affected | chainguard | helm-3 | — |
| helm-4 | affected | wolfi | helm-4 | — |
| helm-4 | affected | chainguard | helm-4 | — |
| helm-operator | affected | chainguard | helm-operator | — |
| helm-operator | affected | wolfi | helm-operator | — |
| helm-operator-fips | affected | chainguard | helm-operator-fips | — |
| helm-push | affected | wolfi | helm-push | — |
| helm-push | affected | chainguard | helm-push | — |
| hey | affected | chainguard | hey | — |
| hey | affected | wolfi | hey | — |
| http-echo | affected | wolfi | http-echo | — |
| http-echo | affected | chainguard | http-echo | — |
| hubble-ui | affected | chainguard | hubble-ui | — |
| hubble-ui | affected | wolfi | hubble-ui | — |
| hubble-ui-backend-fips | affected | chainguard | hubble-ui-backend-fips | — |
| influx | affected | chainguard | influx | — |
| influx | affected | wolfi | influx | — |
| ip-masq-agent | affected | wolfi | ip-masq-agent | — |
| ip-masq-agent | affected | chainguard | ip-masq-agent | — |
| jsonnet-bundler | affected | chainguard | jsonnet-bundler | — |
| k3d | affected | chainguard | k3d | — |
| k3d | affected | wolfi | k3d | — |
| k3s | affected | wolfi | k3s | — |
| k3s | affected | chainguard | k3s | — |
| k8sgpt | affected | chainguard | k8sgpt | — |
| k8sgpt | affected | wolfi | k8sgpt | — |
| k8sgpt-operator | affected | wolfi | k8sgpt-operator | — |
| k8sgpt-operator | affected | chainguard | k8sgpt-operator | — |
| k8ssandra-operator | affected | chainguard | k8ssandra-operator | — |
| k8ssandra-operator | affected | wolfi | k8ssandra-operator | — |
| k8ssandra-operator-fips | affected | chainguard | k8ssandra-operator-fips | — |
| kaf | affected | wolfi | kaf | — |
| kaf | affected | chainguard | kaf | — |
| kiam | affected | chainguard | kiam | — |
| kind | affected | wolfi | kind | — |
| kind | affected | chainguard | kind | — |
| kine | affected | wolfi | kine | — |
| kine | affected | chainguard | kine | — |
| kor | affected | chainguard | kor | — |
| kor | affected | wolfi | kor | — |
| kpt | affected | chainguard | kpt | — |
| kpt | affected | wolfi | kpt | — |
| kube-bench | affected | chainguard | kube-bench | — |
| kube-bench | affected | wolfi | kube-bench | — |
| kubebuilder | affected | chainguard | kubebuilder | — |
| kubebuilder | affected | wolfi | kubebuilder | — |
| kubeflow-katib | affected | chainguard | kubeflow-katib | — |
| kubeflow-katib | affected | wolfi | kubeflow-katib | — |
| kubeflow-pipelines | affected | wolfi | kubeflow-pipelines | — |
| kubeflow-pipelines | affected | chainguard | kubeflow-pipelines | — |
| kube-logging-logging-operator-3.17 | affected | chainguard | kube-logging-logging-operator-3.17 | — |
| kube-logging-logging-operator-4.1 | affected | chainguard | kube-logging-logging-operator-4.1 | — |
| kube-logging-operator | affected | chainguard | kube-logging-operator | — |
| kube-logging-operator | affected | wolfi | kube-logging-operator | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kuberay-operator | affected | chainguard | kuberay-operator | — |
| kuberay-operator | affected | wolfi | kuberay-operator | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-csi-external-provisioner | affected | wolfi | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-provisioner | affected | chainguard | kubernetes-csi-external-provisioner | — |
| kubernetes-csi-external-resizer | affected | chainguard | kubernetes-csi-external-resizer | — |
| kubernetes-csi-external-resizer | affected | wolfi | kubernetes-csi-external-resizer | — |
| kubernetes-csi-livenessprobe | affected | wolfi | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe | affected | chainguard | kubernetes-csi-livenessprobe | — |
| kubernetes-csi-livenessprobe-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-2.10 | — |
| kubernetes-csi-livenessprobe-fips | affected | chainguard | kubernetes-csi-livenessprobe-fips | — |
| kubernetes-csi-livenessprobe-fips-2.10 | affected | chainguard | kubernetes-csi-livenessprobe-fips-2.10 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-dashboard-metrics-scraper | affected | wolfi | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper | affected | chainguard | kubernetes-dashboard-metrics-scraper | — |
| kubernetes-dashboard-metrics-scraper-fips | affected | chainguard | kubernetes-dashboard-metrics-scraper-fips | — |
| kubernetes-dns-node-cache | affected | chainguard | kubernetes-dns-node-cache | — |
| kubernetes-dns-node-cache | affected | wolfi | kubernetes-dns-node-cache | — |
| kubernetes-event-exporter | affected | wolfi | kubernetes-event-exporter | — |
| kubernetes-event-exporter | affected | chainguard | kubernetes-event-exporter | — |
| kube-state-metrics | affected | wolfi | kube-state-metrics | — |
| kube-state-metrics | affected | chainguard | kube-state-metrics | — |
| kube-state-metrics-fips | affected | chainguard | kube-state-metrics-fips | — |
| kubevela | affected | wolfi | kubevela | — |
| kubevela | affected | chainguard | kubevela | — |
| kubewatch | affected | chainguard | kubewatch | — |
| kubewatch | affected | wolfi | kubewatch | — |
| kustomize | affected | wolfi | kustomize | — |
| kustomize | affected | chainguard | kustomize | — |
| kwok | affected | chainguard | kwok | — |
| kwok | affected | wolfi | kwok | — |
| kyverno-policy-reporter | affected | chainguard | kyverno-policy-reporter | — |
| kyverno-policy-reporter | affected | wolfi | kyverno-policy-reporter | — |
| kyverno-policy-reporter-kyverno-plugin | affected | wolfi | kyverno-policy-reporter-kyverno-plugin | — |
| kyverno-policy-reporter-kyverno-plugin | affected | chainguard | kyverno-policy-reporter-kyverno-plugin | — |
| lazygit | affected | wolfi | lazygit | — |
| lazygit | affected | chainguard | lazygit | — |
| litefs | affected | chainguard | litefs | — |
| litefs | affected | wolfi | litefs | — |
| local-path-provisioner | affected | chainguard | local-path-provisioner | — |
| local-path-provisioner | affected | wolfi | local-path-provisioner | — |
| logstash-exporter | affected | wolfi | logstash-exporter | — |
| logstash-exporter | affected | chainguard | logstash-exporter | — |
| logstash-exporter-fips | affected | chainguard | logstash-exporter-fips | — |
| mage | affected | chainguard | mage | — |
| mage | affected | wolfi | mage | — |
| mc-fips | affected | chainguard | mc-fips | — |
| memcached-exporter | affected | chainguard | memcached-exporter | — |
| memcached-exporter | affected | wolfi | memcached-exporter | — |
| metallb | affected | wolfi | metallb | — |
| metallb | affected | chainguard | metallb | — |
| metrics-server | affected | chainguard | metrics-server | — |
| metrics-server | affected | wolfi | metrics-server | — |
| metrics-server-fips | affected | chainguard | metrics-server-fips | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| mockery | affected | chainguard | mockery | — |
| mockery | affected | wolfi | mockery | — |
| mongo-tools | affected | chainguard | mongo-tools | — |
| mongo-tools | affected | wolfi | mongo-tools | — |
| nats | affected | wolfi | nats | — |
| nats | affected | chainguard | nats | — |
| nats-server | affected | chainguard | nats-server | — |
| nats-server | affected | wolfi | nats-server | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| newrelic-fluent-bit-output | affected | wolfi | newrelic-fluent-bit-output | — |
| newrelic-fluent-bit-output | affected | chainguard | newrelic-fluent-bit-output | — |
| newrelic-infra-operator | affected | wolfi | newrelic-infra-operator | — |
| newrelic-infra-operator | affected | chainguard | newrelic-infra-operator | — |
| newrelic-infrastructure-agent | affected | wolfi | newrelic-infrastructure-agent | — |
| newrelic-infrastructure-agent | affected | chainguard | newrelic-infrastructure-agent | — |
| newrelic-prometheus-configurator | affected | wolfi | newrelic-prometheus-configurator | — |
| newrelic-prometheus-configurator | affected | chainguard | newrelic-prometheus-configurator | — |
| nfs-subdir-external-provisioner | affected | chainguard | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner | affected | wolfi | nfs-subdir-external-provisioner | — |
| nfs-subdir-external-provisioner-fips | affected | chainguard | nfs-subdir-external-provisioner-fips | — |
| node-problem-detector-0.8 | affected | chainguard | node-problem-detector-0.8 | — |
| nodetaint | affected | wolfi | nodetaint | — |
| nodetaint | affected | chainguard | nodetaint | — |
| nri-apache | affected | wolfi | nri-apache | — |
| nri-apache | affected | chainguard | nri-apache | — |
| nri-cassandra | affected | wolfi | nri-cassandra | — |
| nri-cassandra | affected | chainguard | nri-cassandra | — |
| nri-couchbase | affected | chainguard | nri-couchbase | — |
| nri-couchbase | affected | wolfi | nri-couchbase | — |
| nri-discovery-kubernetes | affected | chainguard | nri-discovery-kubernetes | — |
| nri-discovery-kubernetes | affected | wolfi | nri-discovery-kubernetes | — |
| nri-elasticsearch | affected | wolfi | nri-elasticsearch | — |
| nri-elasticsearch | affected | chainguard | nri-elasticsearch | — |
| nri-f5 | affected | chainguard | nri-f5 | — |
| nri-f5 | affected | wolfi | nri-f5 | — |
| nri-haproxy | affected | wolfi | nri-haproxy | — |
| nri-haproxy | affected | chainguard | nri-haproxy | — |
| nri-kafka | affected | chainguard | nri-kafka | — |
| nri-kafka | affected | wolfi | nri-kafka | — |
| nri-memcached | affected | wolfi | nri-memcached | — |
| nri-memcached | affected | chainguard | nri-memcached | — |
| nri-mongodb | affected | wolfi | nri-mongodb | — |
| nri-mongodb | affected | chainguard | nri-mongodb | — |
| nri-mssql | affected | wolfi | nri-mssql | — |
| nri-mssql | affected | chainguard | nri-mssql | — |
| nri-mysql | affected | wolfi | nri-mysql | — |
| nri-mysql | affected | chainguard | nri-mysql | — |
| nri-nagios | affected | chainguard | nri-nagios | — |
| nri-nagios | affected | wolfi | nri-nagios | — |
| nri-nginx | affected | chainguard | nri-nginx | — |
| nri-nginx | affected | wolfi | nri-nginx | — |
| nri-prometheus | affected | wolfi | nri-prometheus | — |
| nri-prometheus | affected | chainguard | nri-prometheus | — |
| nri-rabbitmq | affected | wolfi | nri-rabbitmq | — |
| nri-rabbitmq | affected | chainguard | nri-rabbitmq | — |
| nri-redis | affected | wolfi | nri-redis | — |
| nri-redis | affected | chainguard | nri-redis | — |
| nuclei | affected | wolfi | nuclei | — |
| nuclei | affected | chainguard | nuclei | — |
| oras | affected | wolfi | oras | — |
| oras | affected | chainguard | oras | — |
| paranoia | affected | chainguard | paranoia | — |
| paranoia | affected | wolfi | paranoia | — |
| petname | affected | chainguard | petname | — |
| petname | affected | wolfi | petname | — |
| php-fpm_exporter | affected | wolfi | php-fpm_exporter | — |
| php-fpm_exporter | affected | chainguard | php-fpm_exporter | — |
| pombump | affected | chainguard | pombump | — |
| pombump | affected | wolfi | pombump | — |
| prometheus-adapter | affected | wolfi | prometheus-adapter | — |
| prometheus-adapter | affected | chainguard | prometheus-adapter | — |
| prometheus-adapter-0.10 | affected | chainguard | prometheus-adapter-0.10 | — |
| prometheus-adapter-fips | affected | chainguard | prometheus-adapter-fips | — |
| prometheus-adapter-fips-0.10 | affected | chainguard | prometheus-adapter-fips-0.10 | — |
| prometheus-alertmanager | affected | chainguard | prometheus-alertmanager | — |
| prometheus-alertmanager | affected | wolfi | prometheus-alertmanager | — |
| prometheus-alertmanager-fips | affected | chainguard | prometheus-alertmanager-fips | — |
| prometheus-beat-exporter | affected | chainguard | prometheus-beat-exporter | — |
| prometheus-beat-exporter-fips | affected | chainguard | prometheus-beat-exporter-fips | — |
| prometheus-bind-exporter | affected | chainguard | prometheus-bind-exporter | — |
| prometheus-blackbox-exporter | affected | chainguard | prometheus-blackbox-exporter | — |
| prometheus-elasticsearch-exporter | affected | chainguard | prometheus-elasticsearch-exporter | — |
| prometheus-elasticsearch-exporter-fips | affected | chainguard | prometheus-elasticsearch-exporter-fips | — |
| prometheus-mongodb-exporter | affected | chainguard | prometheus-mongodb-exporter | — |
| prometheus-mongodb-exporter-0.37 | affected | chainguard | prometheus-mongodb-exporter-0.37 | — |
| prometheus-mongodb-exporter-fips | affected | chainguard | prometheus-mongodb-exporter-fips | — |
| prometheus-mongodb-exporter-fips-0.37 | affected | chainguard | prometheus-mongodb-exporter-fips-0.37 | — |
| prometheus-mysqld-exporter | affected | chainguard | prometheus-mysqld-exporter | — |
| prometheus-node-exporter | affected | chainguard | prometheus-node-exporter | — |
| prometheus-node-exporter-1.4 | affected | chainguard | prometheus-node-exporter-1.4 | — |
| prometheus-node-exporter-1.5 | affected | chainguard | prometheus-node-exporter-1.5 | — |
| prometheus-node-exporter-fips | affected | chainguard | prometheus-node-exporter-fips | — |
| prometheus-operator | affected | wolfi | prometheus-operator | — |
| prometheus-operator | affected | chainguard | prometheus-operator | — |
| prometheus-operator-fips | affected | chainguard | prometheus-operator-fips | — |
| prometheus-postgres-exporter | affected | chainguard | prometheus-postgres-exporter | — |
| prometheus-postgres-exporter-0.10 | affected | chainguard | prometheus-postgres-exporter-0.10 | — |
| prometheus-postgres-exporter-fips | affected | chainguard | prometheus-postgres-exporter-fips | — |
| prometheus-pushgateway | affected | wolfi | prometheus-pushgateway | — |
| prometheus-pushgateway | affected | chainguard | prometheus-pushgateway | — |
| prometheus-pushgateway-1.4 | affected | chainguard | prometheus-pushgateway-1.4 | — |
| prometheus-pushgateway-fips | affected | chainguard | prometheus-pushgateway-fips | — |
| prometheus-pushgateway-fips-1.4 | affected | chainguard | prometheus-pushgateway-fips-1.4 | — |
| prometheus-redis-exporter | affected | chainguard | prometheus-redis-exporter | — |
| prometheus-redis-exporter-fips | affected | chainguard | prometheus-redis-exporter-fips | — |
| prometheus-statsd-exporter | affected | chainguard | prometheus-statsd-exporter | — |
| prometheus-statsd-exporter-fips | affected | chainguard | prometheus-statsd-exporter-fips | — |
| prometheus-statsd-exporter-fips-0.22 | affected | chainguard | prometheus-statsd-exporter-fips-0.22 | — |
| protoc-gen-go-grpc | affected | wolfi | protoc-gen-go-grpc | — |
| protoc-gen-go-grpc | affected | chainguard | protoc-gen-go-grpc | — |
| pulumi | affected | wolfi | pulumi | — |
| pulumi | affected | chainguard | pulumi | — |
| pulumi-kubernetes-operator | affected | chainguard | pulumi-kubernetes-operator | — |
| pulumi-kubernetes-operator | affected | wolfi | pulumi-kubernetes-operator | — |
| pulumi-language-java | affected | wolfi | pulumi-language-java | — |
| pulumi-language-java | affected | chainguard | pulumi-language-java | — |
| pulumi-language-yaml | affected | chainguard | pulumi-language-yaml | — |
| pulumi-language-yaml | affected | wolfi | pulumi-language-yaml | — |
| q | affected | chainguard | q | — |
| q | affected | wolfi | q | — |
| rabbitmq-cluster-operator | affected | chainguard | rabbitmq-cluster-operator | — |
| rabbitmq-cluster-operator | affected | wolfi | rabbitmq-cluster-operator | — |
| regclient | affected | chainguard | regclient | — |
| regclient | affected | wolfi | regclient | — |
| render-template | affected | wolfi | render-template | — |
| render-template | affected | chainguard | render-template | — |
| request-1279 | affected | chainguard | request-1279 | — |
| rqlite | affected | chainguard | rqlite | — |
| rqlite | affected | wolfi | rqlite | — |
| runc | affected | wolfi | runc | — |
| runc | affected | chainguard | runc | — |
| s5cmd | affected | wolfi | s5cmd | — |
| s5cmd | affected | chainguard | s5cmd | — |
| sbomqs | affected | chainguard | sbomqs | — |
| sbomqs | affected | wolfi | sbomqs | — |
| sbom-scorecard | affected | wolfi | sbom-scorecard | — |
| sbom-scorecard | affected | chainguard | sbom-scorecard | — |
| scorecard | affected | wolfi | scorecard | — |
| scorecard | affected | chainguard | scorecard | — |
| secrets-store-csi-driver-provider-aws | affected | wolfi | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-aws | affected | chainguard | secrets-store-csi-driver-provider-aws | — |
| secrets-store-csi-driver-provider-azure | affected | wolfi | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-azure | affected | chainguard | secrets-store-csi-driver-provider-azure | — |
| secrets-store-csi-driver-provider-gcp | affected | chainguard | secrets-store-csi-driver-provider-gcp | — |
| secrets-store-csi-driver-provider-gcp | affected | wolfi | secrets-store-csi-driver-provider-gcp | — |
| shfmt | affected | chainguard | shfmt | — |
| shfmt | affected | wolfi | shfmt | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| smarter-device-manager | affected | wolfi | smarter-device-manager | — |
| smarter-device-manager | affected | chainguard | smarter-device-manager | — |
| smarter-device-manager-fips | affected | chainguard | smarter-device-manager-fips | — |
| sonobuoy | affected | wolfi | sonobuoy | — |
| sonobuoy | affected | chainguard | sonobuoy | — |
| spark-operator | affected | wolfi | spark-operator | — |
| spark-operator | affected | chainguard | spark-operator | — |
| speedtest-go | affected | wolfi | speedtest-go | — |
| speedtest-go | affected | chainguard | speedtest-go | — |
| src | affected | wolfi | src | — |
| src | affected | chainguard | src | — |
| src-fingerprint | affected | wolfi | src-fingerprint | — |
| src-fingerprint | affected | chainguard | src-fingerprint | — |
| stakater-reloader | affected | chainguard | stakater-reloader | — |
| stakater-reloader | affected | wolfi | stakater-reloader | — |
| stakater-reloader-0.0.119 | affected | chainguard | stakater-reloader-0.0.119 | — |
| stakater-reloader-0.0.128 | affected | chainguard | stakater-reloader-0.0.128 | — |
| stdlib | affected | Go | stdlib | — |
| supercronic | affected | wolfi | supercronic | — |
| supercronic | affected | chainguard | supercronic | — |
| tailscale | affected | wolfi | tailscale | — |
| tailscale | affected | chainguard | tailscale | — |
| task | affected | chainguard | task | — |
| task | affected | wolfi | task | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-server | affected | chainguard | temporal-server | — |
| temporal-server | affected | wolfi | temporal-server | — |
| temporal-server-fips | affected | chainguard | temporal-server-fips | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terraform | affected | chainguard | terraform | — |
| terraform | affected | wolfi | terraform | — |
| terraform-docs | affected | wolfi | terraform-docs | — |
| terraform-docs | affected | chainguard | terraform-docs | — |
| tflint | affected | chainguard | tflint | — |
| tflint | affected | wolfi | tflint | — |
| thanos | affected | wolfi | thanos | — |
| thanos | affected | chainguard | thanos | — |
| thanos-operator | affected | chainguard | thanos-operator | — |
| thanos-operator | affected | wolfi | thanos-operator | — |
| tigera-operator-1.28 | affected | chainguard | tigera-operator-1.28 | — |
| tigera-operator-1.29 | affected | chainguard | tigera-operator-1.29 | — |
| tigera-operator-fips-1.29 | affected | chainguard | tigera-operator-fips-1.29 | — |
| timoni | affected | wolfi | timoni | — |
| timoni | affected | chainguard | timoni | — |
| trillian | affected | chainguard | trillian | — |
| trillian | affected | wolfi | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| up | affected | chainguard | up | — |
| up | affected | wolfi | up | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-k8s | affected | chainguard | vault-k8s | — |
| vault-k8s | affected | wolfi | vault-k8s | — |
| vault-k8s-fips | affected | chainguard | vault-k8s-fips | — |
| velero | affected | wolfi | velero | — |
| velero | affected | chainguard | velero | — |
| vertical-pod-autoscaler | affected | wolfi | vertical-pod-autoscaler | — |
| vertical-pod-autoscaler | affected | chainguard | vertical-pod-autoscaler | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| vite | affected | wolfi | vite | — |
| vite | affected | chainguard | vite | — |
| volume-modifier-for-k8s | affected | wolfi | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s | affected | chainguard | volume-modifier-for-k8s | — |
| volume-modifier-for-k8s-fips | affected | chainguard | volume-modifier-for-k8s-fips | — |
| vt-cli | affected | wolfi | vt-cli | — |
| vt-cli | affected | chainguard | vt-cli | — |
| wait-for-port | affected | wolfi | wait-for-port | — |
| wait-for-port | affected | chainguard | wait-for-port | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
| wazero | affected | chainguard | wazero | — |
| wazero | affected | wolfi | wazero | — |
| wire-go | affected | wolfi | wire-go | — |
| wire-go | affected | chainguard | wire-go | — |
| wireguard-go | affected | wolfi | wireguard-go | — |
| wireguard-go | affected | chainguard | wireguard-go | — |
| yam | affected | chainguard | yam | — |
| yam | affected | wolfi | yam | — |
| yq | affected | chainguard | yq | — |
| yq | affected | wolfi | yq | — |
| ytt | affected | chainguard | ytt | — |
| ytt | affected | wolfi | ytt | — |
Empty Cmd.Path can trigger unintended binary in os/exec on Windows
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Arbitrary code execution due to YAML deserialization
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Unsafe behavior in setuid/setgid binaries in runtime
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
`SparseFillEmptyRows` heap OOB read
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in `SparseBinCount`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
GHSA-j7h3-fcrw-g6j8
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
DEBIAN-CVE-2024-2625
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2024-2625
Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2625
Object lifecycle issue in V8 in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2625
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
BIT-golang-2020-16845
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2022-28327
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-31525
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-protobuf-2021-3121
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| protobuf | affected | Bitnami | protobuf | — |
BIT-golang-2021-33198
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2022-24921
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2022-29526
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2020-15586
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2020-7919
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2021-27918
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Arbitrary code execution via the go command with cgo in cmd/go
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Arbitrary code execution in go command with cgo in cmd/go and cmd/cgo
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2020-28851
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Failure to strip relative path components in net/url
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
CVEs:CVE-2024-26163
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVEs:CVE-2024-26163
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| edge_chromium | affected | microsoft | — | — |
BIT-golang-2020-29510
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Decompression bomb vulnerability in github.com/go-jose/go-jose
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | chainguard | aactl | — |
| aactl | affected | wolfi | aactl | — |
| apko | affected | chainguard | apko | — |
| apko | affected | wolfi | apko | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| cilium-1.15 | affected | chainguard | cilium-1.15 | — |
| cloudflared | affected | chainguard | cloudflared | — |
| cloudflared | affected | wolfi | cloudflared | — |
| cosign | affected | wolfi | cosign | — |
| cosign | affected | chainguard | cosign | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| dex | affected | chainguard | dex | — |
| dex | affected | wolfi | dex | — |
| dex-fips | affected | chainguard | dex-fips | — |
| dgraph | affected | chainguard | dgraph | — |
| dgraph | affected | wolfi | dgraph | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| frp | affected | chainguard | frp | — |
| frp | affected | wolfi | frp | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| gitsign | affected | wolfi | gitsign | — |
| gitsign | affected | chainguard | gitsign | — |
| go-jose/go-jose.v2 | affected | gopkg.in | gopkg.in/go-jose/go-jose.v2 | — |
| go-jose/go-jose/v3 | affected | github.com | github.com/go-jose/go-jose/v3 | — |
| go-jose/go-jose/v4 | affected | github.com | github.com/go-jose/go-jose/v4 | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate-fips | affected | chainguard | gomplate-fips | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser | affected | chainguard | goreleaser | — |
| grpc-health-probe | affected | wolfi | grpc-health-probe | — |
| grpc-health-probe | affected | chainguard | grpc-health-probe | — |
| guac | affected | chainguard | guac | — |
| guac | affected | wolfi | guac | — |
| influxd-2.7 | affected | chainguard | influxd-2.7 | — |
| influxd-2.8 | affected | chainguard | influxd-2.8 | — |
| influxd-2.9 | affected | chainguard | influxd-2.9 | — |
| influxd-fips-2.7 | affected | chainguard | influxd-fips-2.7 | — |
| influxd-fips-2.8 | affected | chainguard | influxd-fips-2.8 | — |
| influxd-fips-2.9 | affected | chainguard | influxd-fips-2.9 | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k3s-1.32 | affected | wolfi | k3s-1.32 | — |
| k3s-1.32 | affected | chainguard | k3s-1.32 | — |
| kargo | affected | chainguard | kargo | — |
| kargo | affected | wolfi | kargo | — |
| kcp-0.29 | affected | chainguard | kcp-0.29 | — |
| kcp-0.30 | affected | chainguard | kcp-0.30 | — |
| kcp-0.31 | affected | chainguard | kcp-0.31 | — |
| kcp-0.32 | affected | chainguard | kcp-0.32 | — |
| kcp-fips-0.29 | affected | chainguard | kcp-fips-0.29 | — |
| kcp-fips-0.30 | affected | chainguard | kcp-fips-0.30 | — |
| kcp-fips-0.31 | affected | chainguard | kcp-fips-0.31 | — |
| kcp-fips-0.32 | affected | chainguard | kcp-fips-0.32 | — |
| ko | affected | chainguard | ko | — |
| ko | affected | wolfi | ko | — |
| ko-fips | affected | chainguard | ko-fips | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubescape | affected | wolfi | kubescape | — |
| kubescape | affected | chainguard | kubescape | — |
| melange | affected | wolfi | melange | — |
| melange | affected | chainguard | melange | — |
| minio | affected | wolfi | minio | — |
| minio | affected | chainguard | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| nerdctl | affected | chainguard | nerdctl | — |
| nerdctl | affected | wolfi | nerdctl | — |
| neuvector | affected | chainguard | neuvector | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| rabbitmq-messaging-topology-operator | affected | wolfi | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator | affected | chainguard | rabbitmq-messaging-topology-operator | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rekor | affected | wolfi | rekor | — |
| rekor | affected | chainguard | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| rook | affected | chainguard | rook | — |
| rook | affected | wolfi | rook | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | chainguard | skaffold | — |
| skaffold | affected | wolfi | skaffold | — |
| skopeo | affected | chainguard | skopeo | — |
| skopeo | affected | wolfi | skopeo | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| sops | affected | chainguard | sops | — |
| sops | affected | wolfi | sops | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server-fips | affected | chainguard | spire-server-fips | — |
| square/go-jose.v2 | affected | gopkg.in | gopkg.in/square/go-jose.v2 | — |
| step | affected | chainguard | step | — |
| step | affected | wolfi | step | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca | affected | chainguard | step-ca | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| temporal | affected | wolfi | temporal | — |
| temporal | affected | chainguard | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terragrunt | affected | chainguard | terragrunt | — |
| terragrunt | affected | wolfi | terragrunt | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| tkn | affected | chainguard | tkn | — |
| tkn | affected | wolfi | tkn | — |
| vault-1.17 | affected | chainguard | vault-1.17 | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| weaviate | affected | wolfi | weaviate | — |
| weaviate | affected | chainguard | weaviate | — |
| wolfictl | affected | chainguard | wolfictl | — |
| wolfictl | affected | wolfi | wolfictl | — |
| zarf | affected | chainguard | zarf | — |
| zarf | affected | wolfi | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
CVE-2024-28180 affecting package kubernetes for versions less than 1.28.4-12
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Azure Linux:2 | kubernetes | — |
CVE-2024-28180 affecting package kubernetes for versions less than 1.30.1-1
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| kubernetes | affected | Azure Linux:3 | kubernetes | — |
DEBIAN-CVE-2024-28180
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-github-go-jose-go-jose | affected | Debian:13 | golang-github-go-jose-go-jose | — |
| golang-github-go-jose-go-jose | affected | Debian:14 | golang-github-go-jose-go-jose | — |
| golang-gopkg-square-go-jose.v2 | affected | Debian:11 | golang-gopkg-square-go-jose.v2 | — |
| golang-gopkg-square-go-jose.v2 | affected | Debian:12 | golang-gopkg-square-go-jose.v2 | — |
| golang-gopkg-square-go-jose.v2 | affected | Debian:13 | golang-gopkg-square-go-jose.v2 | — |
| golang-gopkg-square-go-jose.v2 | affected | Debian:14 | golang-gopkg-square-go-jose.v2 | — |
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| aactl | affected | wolfi | aactl | — |
| aactl | affected | chainguard | aactl | — |
| apko | affected | wolfi | apko | — |
| apko | affected | chainguard | apko | — |
| argo-cd-2.10 | affected | wolfi | argo-cd-2.10 | — |
| argo-cd-2.10 | affected | chainguard | argo-cd-2.10 | — |
| argo-cd-2.8 | affected | wolfi | argo-cd-2.8 | — |
| argo-cd-2.8 | affected | chainguard | argo-cd-2.8 | — |
| argo-cd-2.9 | affected | chainguard | argo-cd-2.9 | — |
| argo-cd-2.9 | affected | wolfi | argo-cd-2.9 | — |
| argo-cd-fips-2.10 | affected | chainguard | argo-cd-fips-2.10 | — |
| argo-cd-fips-2.9 | affected | chainguard | argo-cd-fips-2.9 | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| bank-vaults | affected | wolfi | bank-vaults | — |
| bank-vaults | affected | chainguard | bank-vaults | — |
| bank-vaults-fips | affected | chainguard | bank-vaults-fips | — |
| caddy | affected | wolfi | caddy | — |
| caddy | affected | chainguard | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| cert-manager-1.12 | affected | wolfi | cert-manager-1.12 | — |
| cert-manager-1.12 | affected | chainguard | cert-manager-1.12 | — |
| cert-manager-1.14 | affected | chainguard | cert-manager-1.14 | — |
| cert-manager-1.14 | affected | wolfi | cert-manager-1.14 | — |
| cert-manager-fips-1.12 | affected | chainguard | cert-manager-fips-1.12 | — |
| cert-manager-fips-1.13 | affected | chainguard | cert-manager-fips-1.13 | — |
| cert-manager-fips-1.14 | affected | chainguard | cert-manager-fips-1.14 | — |
| cilium-1.14 | affected | chainguard | cilium-1.14 | — |
| cilium-1.14 | affected | wolfi | cilium-1.14 | — |
| cilium-1.15 | affected | chainguard | cilium-1.15 | — |
| cilium-1.15 | affected | wolfi | cilium-1.15 | — |
| cloudflared | affected | wolfi | cloudflared | — |
| cloudflared | affected | chainguard | cloudflared | — |
| containerd | affected | chainguard | containerd | — |
| containerd | affected | wolfi | containerd | — |
| cosign | affected | chainguard | cosign | — |
| cosign | affected | wolfi | cosign | — |
| cosign-fips | affected | wolfi | cosign-fips | — |
| cosign-fips | affected | chainguard | cosign-fips | — |
| dex | affected | chainguard | dex | — |
| dex | affected | wolfi | dex | — |
| dex-fips | affected | chainguard | dex-fips | — |
| dgraph | affected | chainguard | dgraph | — |
| dgraph | affected | wolfi | dgraph | — |
| external-secrets-fips | affected | chainguard | external-secrets-fips | — |
| external-secrets-operator | affected | wolfi | external-secrets-operator | — |
| external-secrets-operator | affected | chainguard | external-secrets-operator | — |
| falco | affected | chainguard | falco | — |
| falco | affected | wolfi | falco | — |
| falcoctl | affected | wolfi | falcoctl | — |
| falcoctl | affected | chainguard | falcoctl | — |
| falcoctl-fips | affected | chainguard | falcoctl-fips | — |
| flux-kustomize-controller | affected | chainguard | flux-kustomize-controller | — |
| flux-kustomize-controller | affected | wolfi | flux-kustomize-controller | — |
| flux-kustomize-controller-2.0 | affected | chainguard | flux-kustomize-controller-2.0 | — |
| flux-source-controller | affected | chainguard | flux-source-controller | — |
| flux-source-controller | affected | wolfi | flux-source-controller | — |
| frp | affected | chainguard | frp | — |
| frp | affected | wolfi | frp | — |
| fulcio | affected | wolfi | fulcio | — |
| fulcio | affected | chainguard | fulcio | — |
| fulcio-fips | affected | chainguard | fulcio-fips | — |
| gitsign | affected | chainguard | gitsign | — |
| gitsign | affected | wolfi | gitsign | — |
| go-ipfs-fips | affected | chainguard | go-ipfs-fips | — |
| go-jose/go-jose.v2 | affected | gopkg.in | gopkg.in/go-jose/go-jose.v2 | — |
| go-jose/go-jose/v3 | affected | github.com | github.com/go-jose/go-jose/v3 | — |
| go-jose/go-jose/v4 | affected | github.com | github.com/go-jose/go-jose/v4 | — |
| gomplate | affected | wolfi | gomplate | — |
| gomplate | affected | chainguard | gomplate | — |
| gomplate-fips | affected | chainguard | gomplate-fips | — |
| goreleaser | affected | wolfi | goreleaser | — |
| goreleaser | affected | chainguard | goreleaser | — |
| grafana | affected | chainguard | grafana | — |
| grafana | affected | wolfi | grafana | — |
| grafana-10.4 | affected | wolfi | grafana-10.4 | — |
| grafana-10.4 | affected | chainguard | grafana-10.4 | — |
| grafana-11.0 | affected | chainguard | grafana-11.0 | — |
| grafana-11.1 | affected | wolfi | grafana-11.1 | — |
| grafana-11.1 | affected | chainguard | grafana-11.1 | — |
| grafana-11.2 | affected | chainguard | grafana-11.2 | — |
| grafana-11.2 | affected | wolfi | grafana-11.2 | — |
| grafana-fips-10.4 | affected | chainguard | grafana-fips-10.4 | — |
| grpc-health-probe | affected | chainguard | grpc-health-probe | — |
| grpc-health-probe | affected | wolfi | grpc-health-probe | — |
| guac | affected | chainguard | guac | — |
| guac | affected | wolfi | guac | — |
| influxd-2.7 | affected | wolfi | influxd-2.7 | — |
| influxd-2.7 | affected | chainguard | influxd-2.7 | — |
| influxd-fips-2.7 | affected | chainguard | influxd-fips-2.7 | — |
| ipfs | affected | chainguard | ipfs | — |
| ipfs | affected | wolfi | ipfs | — |
| istio-cni-1.19 | affected | chainguard | istio-cni-1.19 | — |
| istio-cni-1.19 | affected | wolfi | istio-cni-1.19 | — |
| istio-cni-1.20 | affected | chainguard | istio-cni-1.20 | — |
| istio-cni-1.20 | affected | wolfi | istio-cni-1.20 | — |
| istio-cni-fips-1.19 | affected | chainguard | istio-cni-fips-1.19 | — |
| istio-fips-1.20 | affected | chainguard | istio-fips-1.20 | — |
| istio-operator-1.19 | affected | chainguard | istio-operator-1.19 | — |
| istio-operator-1.19 | affected | wolfi | istio-operator-1.19 | — |
| istio-operator-1.20 | affected | chainguard | istio-operator-1.20 | — |
| istio-operator-1.20 | affected | wolfi | istio-operator-1.20 | — |
| istio-operator-fips-1.19 | affected | chainguard | istio-operator-fips-1.19 | — |
| istio-pilot-agent-1.19 | affected | wolfi | istio-pilot-agent-1.19 | — |
| istio-pilot-agent-1.19 | affected | chainguard | istio-pilot-agent-1.19 | — |
| istio-pilot-agent-1.20 | affected | wolfi | istio-pilot-agent-1.20 | — |
| istio-pilot-agent-1.20 | affected | chainguard | istio-pilot-agent-1.20 | — |
| istio-pilot-agent-fips-1.19 | affected | chainguard | istio-pilot-agent-fips-1.19 | — |
| istio-pilot-discovery-1.19 | affected | chainguard | istio-pilot-discovery-1.19 | — |
| istio-pilot-discovery-1.19 | affected | wolfi | istio-pilot-discovery-1.19 | — |
| istio-pilot-discovery-1.20 | affected | wolfi | istio-pilot-discovery-1.20 | — |
| istio-pilot-discovery-1.20 | affected | chainguard | istio-pilot-discovery-1.20 | — |
| istio-pilot-discovery-fips-1.19 | affected | chainguard | istio-pilot-discovery-fips-1.19 | — |
| k3s-1.31 | affected | chainguard | k3s-1.31 | — |
| k3s-1.32 | affected | chainguard | k3s-1.32 | — |
| k3s-1.32 | affected | wolfi | k3s-1.32 | — |
| kargo | affected | wolfi | kargo | — |
| kargo | affected | chainguard | kargo | — |
| kcp-0.29 | affected | chainguard | kcp-0.29 | — |
| kcp-0.30 | affected | chainguard | kcp-0.30 | — |
| kcp-0.31 | affected | chainguard | kcp-0.31 | — |
| kcp-0.32 | affected | chainguard | kcp-0.32 | — |
| kcp-fips-0.29 | affected | chainguard | kcp-fips-0.29 | — |
| kcp-fips-0.30 | affected | chainguard | kcp-fips-0.30 | — |
| kcp-fips-0.31 | affected | chainguard | kcp-fips-0.31 | — |
| kcp-fips-0.32 | affected | chainguard | kcp-fips-0.32 | — |
| keda | affected | chainguard | keda | — |
| keda | affected | wolfi | keda | — |
| keda-2.11 | affected | wolfi | keda-2.11 | — |
| keda-2.11 | affected | chainguard | keda-2.11 | — |
| keda-fips | affected | chainguard | keda-fips | — |
| ko | affected | wolfi | ko | — |
| ko | affected | chainguard | ko | — |
| ko-fips | affected | wolfi | ko-fips | — |
| ko-fips | affected | chainguard | ko-fips | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| kube-oidc-proxy | affected | chainguard | kube-oidc-proxy | — |
| kube-rbac-proxy | affected | wolfi | kube-rbac-proxy | — |
| kube-rbac-proxy | affected | chainguard | kube-rbac-proxy | — |
| kube-rbac-proxy-fips | affected | chainguard | kube-rbac-proxy-fips | — |
| kubernetes-1.27 | affected | chainguard | kubernetes-1.27 | — |
| kubernetes-1.27 | affected | wolfi | kubernetes-1.27 | — |
| kubernetes-1.28 | affected | wolfi | kubernetes-1.28 | — |
| kubernetes-1.28 | affected | chainguard | kubernetes-1.28 | — |
| kubernetes-1.29 | affected | chainguard | kubernetes-1.29 | — |
| kubernetes-1.29 | affected | wolfi | kubernetes-1.29 | — |
| kubernetes-dashboard | affected | wolfi | kubernetes-dashboard | — |
| kubernetes-dashboard | affected | chainguard | kubernetes-dashboard | — |
| kubernetes-dashboard-fips | affected | chainguard | kubernetes-dashboard-fips | — |
| kubernetes-fips-1.27 | affected | chainguard | kubernetes-fips-1.27 | — |
| kubernetes-fips-1.28 | affected | chainguard | kubernetes-fips-1.28 | — |
| kubernetes-fips-1.29 | affected | chainguard | kubernetes-fips-1.29 | — |
| kubernetes-fips-1.30 | affected | chainguard | kubernetes-fips-1.30 | — |
| kubescape | affected | chainguard | kubescape | — |
| kubescape | affected | wolfi | kubescape | — |
| melange | affected | chainguard | melange | — |
| melange | affected | wolfi | melange | — |
| minio | affected | chainguard | minio | — |
| minio | affected | wolfi | minio | — |
| minio-fips | affected | chainguard | minio-fips | — |
| nerdctl | affected | wolfi | nerdctl | — |
| nerdctl | affected | chainguard | nerdctl | — |
| neuvector | affected | wolfi | neuvector | — |
| neuvector | affected | chainguard | neuvector | — |
| neuvector-fips | affected | chainguard | neuvector-fips | — |
| oauth2-proxy | affected | wolfi | oauth2-proxy | — |
| oauth2-proxy | affected | chainguard | oauth2-proxy | — |
| policy-controller | affected | wolfi | policy-controller | — |
| policy-controller | affected | chainguard | policy-controller | — |
| policy-controller-fips | affected | chainguard | policy-controller-fips | — |
| rabbitmq-messaging-topology-operator | affected | chainguard | rabbitmq-messaging-topology-operator | — |
| rabbitmq-messaging-topology-operator | affected | wolfi | rabbitmq-messaging-topology-operator | — |
| rancher-agent-2.10 | affected | wolfi | rancher-agent-2.10 | — |
| rancher-agent-2.10 | affected | chainguard | rancher-agent-2.10 | — |
| rekor | affected | wolfi | rekor | — |
| rekor | affected | chainguard | rekor | — |
| rekor-fips | affected | chainguard | rekor-fips | — |
| rook | affected | wolfi | rook | — |
| rook | affected | chainguard | rook | — |
| sigstore-scaffolding | affected | chainguard | sigstore-scaffolding | — |
| sigstore-scaffolding | affected | wolfi | sigstore-scaffolding | — |
| sigstore-scaffolding-fips | affected | chainguard | sigstore-scaffolding-fips | — |
| skaffold | affected | wolfi | skaffold | — |
| skaffold | affected | chainguard | skaffold | — |
| skopeo | affected | chainguard | skopeo | — |
| skopeo | affected | wolfi | skopeo | — |
| slsa-verifier | affected | chainguard | slsa-verifier | — |
| slsa-verifier | affected | wolfi | slsa-verifier | — |
| sops | affected | wolfi | sops | — |
| sops | affected | chainguard | sops | — |
| spire-server | affected | wolfi | spire-server | — |
| spire-server | affected | chainguard | spire-server | — |
| spire-server-fips | affected | chainguard | spire-server-fips | — |
| square/go-jose.v2 | affected | gopkg.in | gopkg.in/square/go-jose.v2 | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca | affected | wolfi | step-ca | — |
| tekton-chains | affected | wolfi | tekton-chains | — |
| tekton-chains | affected | chainguard | tekton-chains | — |
| tekton-pipelines | affected | chainguard | tekton-pipelines | — |
| tekton-pipelines | affected | wolfi | tekton-pipelines | — |
| temporal | affected | chainguard | temporal | — |
| temporal | affected | wolfi | temporal | — |
| temporal-fips | affected | chainguard | temporal-fips | — |
| temporal-ui-server | affected | wolfi | temporal-ui-server | — |
| temporal-ui-server | affected | chainguard | temporal-ui-server | — |
| temporal-ui-server-fips | affected | chainguard | temporal-ui-server-fips | — |
| terragrunt | affected | wolfi | terragrunt | — |
| terragrunt | affected | chainguard | terragrunt | — |
| timestamp-authority | affected | chainguard | timestamp-authority | — |
| timestamp-authority | affected | wolfi | timestamp-authority | — |
| timestamp-authority-fips | affected | chainguard | timestamp-authority-fips | — |
| tkn | affected | chainguard | tkn | — |
| tkn | affected | wolfi | tkn | — |
| traefik-3.2 | affected | chainguard | traefik-3.2 | — |
| traefik-3.2 | affected | wolfi | traefik-3.2 | — |
| traefik-fips-3.2 | affected | chainguard | traefik-fips-3.2 | — |
| vault-1.13 | affected | wolfi | vault-1.13 | — |
| vault-1.13 | affected | chainguard | vault-1.13 | — |
| vault-1.17 | affected | chainguard | vault-1.17 | — |
| vault-csi-provider | affected | chainguard | vault-csi-provider | — |
| vault-fips-1.17 | affected | chainguard | vault-fips-1.17 | — |
| vexctl | affected | wolfi | vexctl | — |
| vexctl | affected | chainguard | vexctl | — |
| weaviate | affected | wolfi | weaviate | — |
| weaviate | affected | chainguard | weaviate | — |
| wolfictl | affected | chainguard | wolfictl | — |
| wolfictl | affected | wolfi | wolfictl | — |
| zarf | affected | wolfi | zarf | — |
| zarf | affected | chainguard | zarf | — |
| zot | affected | wolfi | zot | — |
| zot | affected | chainguard | zot | — |
Go JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| go-jose/go-jose.v2 | affected | gopkg.in | gopkg.in/go-jose/go-jose.v2 | — |
| go-jose/go-jose/v3 | affected | github.com | github.com/go-jose/go-jose/v3 | — |
| go-jose/go-jose/v4 | affected | github.com | github.com/go-jose/go-jose/v4 | — |
| square/go-jose.v2 | affected | gopkg.in | gopkg.in/square/go-jose.v2 | — |
BIT-golang-2021-44717
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
BIT-golang-2020-14039
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Arbitrary code execution during build via line directives in cmd/go
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Memory leak in github.com/golang-fips/openssl/v2 and github.com/microsoft/go-crypto-openssl
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-fips/openssl/v2 | affected | github.com | github.com/golang-fips/openssl/v2 | — |
| microsoft/go-crypto-openssl | affected | github.com | github.com/microsoft/go-crypto-openssl | — |
Important: go-toolset:rhel8 security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| delve | affected | Rocky Linux:8 | delve | — |
| golang | affected | Rocky Linux:8 | golang | — |
| go-toolset | affected | Rocky Linux:8 | go-toolset | — |
Important: golang security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | AlmaLinux:9 | golang | — |
| golang-bin | affected | AlmaLinux:9 | golang-bin | — |
| golang-docs | affected | AlmaLinux:9 | golang-docs | — |
| golang-misc | affected | AlmaLinux:9 | golang-misc | — |
| golang-src | affected | AlmaLinux:9 | golang-src | — |
| golang-tests | affected | AlmaLinux:9 | golang-tests | — |
| go-toolset | affected | AlmaLinux:9 | go-toolset | — |
Important: go-toolset:rhel8 security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| delve | affected | AlmaLinux:8 | delve | — |
| golang | affected | AlmaLinux:8 | golang | — |
| golang-bin | affected | AlmaLinux:8 | golang-bin | — |
| golang-docs | affected | AlmaLinux:8 | golang-docs | — |
| golang-misc | affected | AlmaLinux:8 | golang-misc | — |
| golang-src | affected | AlmaLinux:8 | golang-src | — |
| golang-tests | affected | AlmaLinux:8 | golang-tests | — |
| go-toolset | affected | AlmaLinux:8 | go-toolset | — |
Memory leaks in code encrypting and verifying RSA payloads
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-fips/go | affected | github.com | github.com/golang-fips/go | — |
| golang-fips/openssl/v2 | affected | github.com | github.com/golang-fips/openssl/v2 | — |
| microsoft/go-crypto-openssl | affected | github.com | github.com/microsoft/go-crypto-openssl | — |
| microsoft/go-crypto-openssl/openssl | affected | github.com | github.com/microsoft/go-crypto-openssl/openssl | — |
Memory leaks in code encrypting and verifying RSA payloads
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-fips/go | affected | github.com | github.com/golang-fips/go | — |
| golang-fips/openssl/v2 | affected | github.com | github.com/golang-fips/openssl/v2 | — |
| microsoft/go-crypto-openssl | affected | github.com | github.com/microsoft/go-crypto-openssl | — |
| microsoft/go-crypto-openssl/openssl | affected | github.com | github.com/microsoft/go-crypto-openssl/openssl | — |
Memory leaks in code encrypting and verifying RSA payloads
CVEs:CVE-2024-1394
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-fips/go | affected | github.com | github.com/golang-fips/go | — |
| golang-fips/openssl/v2 | affected | github.com | github.com/golang-fips/openssl/v2 | — |
| microsoft/go-crypto-openssl | affected | github.com | github.com/microsoft/go-crypto-openssl | — |
| microsoft/go-crypto-openssl/openssl | affected | github.com | github.com/microsoft/go-crypto-openssl/openssl | — |
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. Th...
CVEs:CVE-2024-1394
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-fips/openssl | affected | github.com | — | — |
A memory leak flaw was found in Golang in the RSA encrypting/decrypting code, which might lead to a resource exhaustion vulnerability using attacker-controlled inputs. The memory leak happens in github.com/golang-fips/openssl/openssl/rsa.go#L113. The objects leaked are pkey and ctx. That function uses named return parameters to free pkey and ctx if there is an error initializing the context or setting the different properties. All return statements related to error cases follow the "return nil, nil, fail(...)" pattern, meaning that pkey and ctx will be nil inside the deferred function that should free them.
CVEs:CVE-2024-1394
GHSA-qccw-wmvp-8pv9
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
CVEs:CVE-2024-2885
DEBIAN-CVE-2024-2885
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2885
Use after free in Dawn in Google Chrome prior to 123.0.6312.86 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2885
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
BIT-golang-2022-27536
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Improper sanitization of Transfer-Encoding headers in net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Exposure of client IP addresses in net/http
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | — | — |
| golang | affected | Bitnami | golang | — |
Panic when processing post-handshake message on QUIC connections in crypto/tls
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Memory exhaustion in QUIC connection handling in crypto/tls
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Integer truncation in Shard API usage
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault and data corruption in tensorflow-lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-failures during Grappler's `IsSimplifiableReshape` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Session tickets lack random ticket_age_add in crypto/tls
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Integer overflows in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in Grappler's `IsConstant` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Data leak in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Denial of Service in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null-dereference in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Crash when type cannot be specialized in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Memory leak in decoding PNG images in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Crash due to erroneous `StatusOr` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Denial of Service in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Denial of Service in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
SQL injection in github.com/apache/age/drivers/golang
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| apache/age/drivers/golang | affected | github.com | github.com/apache/age/drivers/golang | — |
Heap buffer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Undefined behavior in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds write in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds access in tensorflow-lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Stack exhaustion due to deeply nested types in go/parser
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang | affected | Bitnami | golang | — |
Heap buffer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Data corruption in tensorflow-lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Undefined behavior in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
GHSA-7gq4-2ph9-c8g7
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
DEBIAN-CVE-2024-2627
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
CVEs:CVE-2024-2627
Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-2627
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-2627
`CHECK`-failures in binary ops in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-fails due to attempting to build a reference tensor in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `simplifyBroadcast` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds read in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Type confusion leading to segfault in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
SQL injection in github.com/jackc/pgx/v4
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| jackc/pgx | affected | github.com | github.com/jackc/pgx | — |
| jackc/pgx/v4 | affected | github.com | github.com/jackc/pgx/v4 | — |
| kots | affected | wolfi | kots | — |
| kots | affected | chainguard | kots | — |
| step | affected | wolfi | step | — |
| step | affected | chainguard | step | — |
| step-ca | affected | chainguard | step-ca | — |
| step-ca | affected | wolfi | step-ca | — |
| trillian | affected | wolfi | trillian | — |
| trillian | affected | chainguard | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
DEBIAN-CVE-2024-27289
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| golang-github-jackc-pgx | affected | Debian:11 | golang-github-jackc-pgx | — |
| golang-github-jackc-pgx | affected | Debian:12 | golang-github-jackc-pgx | — |
| golang-github-jackc-pgx | affected | Debian:13 | golang-github-jackc-pgx | — |
| golang-github-jackc-pgx | affected | Debian:14 | golang-github-jackc-pgx | — |
pgx SQL Injection via Line Comment Creation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| jackc/pgx | affected | github.com | github.com/jackc/pgx | — |
| jackc/pgx/v4 | affected | github.com | github.com/jackc/pgx/v4 | — |
pgx SQL Injection via Line Comment Creation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| argo-workflows | affected | chainguard | argo-workflows | — |
| argo-workflows | affected | wolfi | argo-workflows | — |
| argo-workflows-fips | affected | chainguard | argo-workflows-fips | — |
| caddy | affected | chainguard | caddy | — |
| caddy | affected | wolfi | caddy | — |
| caddy-fips | affected | chainguard | caddy-fips | — |
| jackc/pgx | affected | github.com | github.com/jackc/pgx | — |
| jackc/pgx/v4 | affected | github.com | github.com/jackc/pgx/v4 | — |
| kots | affected | chainguard | kots | — |
| kots | affected | wolfi | kots | — |
| kots-compat | affected | chainguard | kots-compat | — |
| step | affected | chainguard | step | — |
| step | affected | wolfi | step | — |
| step-ca | affected | wolfi | step-ca | — |
| step-ca | affected | chainguard | step-ca | — |
| telegraf-1.26 | affected | chainguard | telegraf-1.26 | — |
| telegraf-1.26 | affected | wolfi | telegraf-1.26 | — |
| telegraf-1.27 | affected | chainguard | telegraf-1.27 | — |
| telegraf-1.27 | affected | wolfi | telegraf-1.27 | — |
| telegraf-1.28 | affected | wolfi | telegraf-1.28 | — |
| telegraf-1.28 | affected | chainguard | telegraf-1.28 | — |
| telegraf-1.29 | affected | chainguard | telegraf-1.29 | — |
| telegraf-1.29 | affected | wolfi | telegraf-1.29 | — |
| telegraf-1.30 | affected | wolfi | telegraf-1.30 | — |
| telegraf-1.30 | affected | chainguard | telegraf-1.30 | — |
| trillian | affected | chainguard | trillian | — |
| trillian | affected | wolfi | trillian | — |
| trillian-fips | affected | chainguard | trillian-fips | — |
| vault-1.13 | affected | wolfi | vault-1.13 | — |
| vault-1.13 | affected | chainguard | vault-1.13 | — |
| wavefront-collector-for-kubernetes-1.12 | affected | chainguard | wavefront-collector-for-kubernetes-1.12 | — |
| wavefront-collector-for-kubernetes-1.13 | affected | chainguard | wavefront-collector-for-kubernetes-1.13 | — |
GHSA-34g8-74vq-q8mf
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2024-2630
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
| chromium | affected | Debian:11 | chromium | — |
CVEs:CVE-2024-2630
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-2630
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-2630
Out of bounds read and write in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Memory leak in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Memory corruption in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Memory exhaustion in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Abort caused by allocating a vector that is too large in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds read in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds read in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
GHSA-4www-jw36-m87h
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
DEBIAN-CVE-2024-2626
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-2626
CVEs:CVE-2024-2626
Out of bounds read in Swiftshader in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-2626
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Integer overflow in TFLite array creation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Denial of Service in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflows in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Multiple `CHECK`-fails in `function.cc` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in tensorflow-lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Stack overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow and uncaught divide by zero in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-failures in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Assertion failure based denial of service in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow leading to crash in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null-dereference in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-failures in `TensorByteSize` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Memory exhaustion in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault TFLite converter on per-channel quantized transposed convolutions in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Uninitialized variable access in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Denial of service in tensorflow-lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Undefined behavior in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segmentation fault in tensorflow-lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds access in tensorflow-lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Use after free in `DecodePng` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Denial of Service in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
GHSA-8q3q-73vf-jp8w
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
GHSA-xp9q-8p95-j7cm
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
DEBIAN-CVE-2024-2629
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
DEBIAN-CVE-2024-2631
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-2629
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Incorrect security UI in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVEs:CVE-2024-2629
CVEs:CVE-2024-2629
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2024-2631
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Inappropriate implementation in iOS in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVEs:CVE-2024-2631
CVEs:CVE-2024-2631
Memory leak in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` failure in `AvgPoolOp` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null-dereference in `mlir::tfg::TFOp::nameAttr` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` failures in `UnbatchGradOp` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
GHSA-9886-cqjq-qrvc
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | wolfi | chromium | — |
| chromium | affected | chainguard | chromium | — |
DEBIAN-CVE-2024-2400
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
chromium - security update
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:12 | chromium | — |
CVEs:CVE-2024-2400
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2400
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVEs:CVE-2024-2400
Int overflow in `RaggedRangeOp` in Tensoflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` failure in `TensorListReserve` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Assertion fail on MLIR empty edge names in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in math ops in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-fail in `tensorflow::full_type::SubstituteFromAttrs` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds read in filesystem glob matching in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds write in tensorflow-lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
GHSA-7gwc-2cwp-3w9v
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | chainguard | chromium | — |
| chromium | affected | wolfi | chromium | — |
DEBIAN-CVE-2024-2628
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chromium | affected | Debian:11 | chromium | — |
| chromium | affected | Debian:12 | chromium | — |
| chromium | affected | Debian:13 | chromium | — |
| chromium | affected | Debian:14 | chromium | — |
Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium)
CVEs:CVE-2024-2628
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| chrome | affected | — | — | |
| fedora | affected | fedoraproject | — | — |
Inappropriate implementation in Downloads in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to perform UI spoofing via a crafted URL. (Chromium security severity: Medium)
CVEs:CVE-2024-2628
CVEs:CVE-2024-2628
FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segmentation faultin TensorFlow when converting a Python string to tf.float16
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
OOB read in `Gather_nd` op in TensorFlow Lite Micro
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
OOB read in `Gather_nd` op in TensorFlow Lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds write in `scatter_nd` op in TensorFlow Lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27228
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27228
PUB-A-316354570
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-299946700
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Out of bounds write in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in 10Web 10Web Map Builder for Google Maps.This issue affects 10Web Map Builder for Google Maps: from n/a through 1.0.74.
CVEs:CVE-2024-31116
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| map_builder_for_google_maps | affected | 10web | — | — |
CVEs:CVE-2024-31116
Code injection in `saved_model_cli` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` failure in `SobolSample` via missing validation in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `TensorListScatter` and `TensorListScatterV2` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `CompositeTensorVariantToComponents` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `QuantizedInstanceNorm` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `QuantizedMatMul` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `QuantizeDownAndShrinkRange` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `QuantizedRelu` and `QuantizedRelu6`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `SparseBincount` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `RaggedBincount` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `Requantize` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `BlockLSTMGradV2` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `QuantizedAvgPool` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `QuantizedAdd` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `QuantizedBiasAdd` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `tf.linalg.matrix_rank` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `tf.sparse.cross` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `EmptyTensorList` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `tf.random.gamma` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail via inputs in `PyFunc` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` failure in tf.reshape in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` failures in `FractionalAvgPoolGrad` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `AvgPoolGrad` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `FractionalMaxPoolGrad` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `Save` and `SaveSlices` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `ParameterizedTruncatedNormal` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `LRNGrad` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `DenseBincount` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `MaxPool` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `TensorListFromTensor` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `SetSize` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `CollectiveGather` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `AudioSummaryV2` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Floating point exception in `Conv2D` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `Conv2DBackpropInput` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null dereference on MLIR on empty function attributes in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `DrawBoundingBoxes` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `Unbatch` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `RandomPoissonV2` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `FakeQuantWithMinMaxVarsGradient` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null dereference on MLIR on empty function attributes in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `QuantizeAndDequantizeV3` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow in `tf.keras.losses.poisson` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
`MirrorPadGrad` heap out of bounds read in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`tf.raw_ops.Mfcc` crashes in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`FractionalMaxPoolGrad` Heap out of bounds read in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail via inputs in `SparseFillEmptyRowsGrad` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail via inputs in `SdcaOptimizer` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK_EQ` fail via input in `SparseMatrixNNZ` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds write in grappler in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow in `ResizeNearestNeighborGrad` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-failures in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reachable Assertion in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Unckecked rank size in `tf.image.generate_bounding_box_proposals` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `BCast` overflow in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reachable Assertion in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow in `FusedResizeAndPadConv2D` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow in `ImageProjectiveTransformV2` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `tf.raw_ops.TensorListConcat` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-fails when building invalid tensor shapes in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` failures in `AvgPool3DGrad` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `LowerBound` and `UpperBound` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `Conv2DBackpropInput` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `FakeQuantWithMinMaxVars` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `FakeQuantWithMinMaxVarsPerChannelGradient` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK` fail in `RaggedTensorToVariant` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault via invalid attributes in `pywrap_tfe_src.cc` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
Invalid char to bool conversion when printing a tensor in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds read in `QuantizeAndDequantizeV2` in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
PUB-A-307537992
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-307538015
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
ThreadUnsafeUnigramCandidateSampler Heap out of bounds in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Type confusion leading to `CHECK`-failure based denial of service in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault and Out-of-bounds Write write due to incomplete validation in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Out of bounds segmentation fault due to unequal op inputs in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
ASB-A-319132171
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-27229
In ss_SendCallBarringPwdRequiredIndMsg of ss_CallBarring.c, there is a possible null pointer deref due to a missing null check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed f...
CVEs:CVE-2024-27229
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-289173691
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-23717
In access_secure_service_from_temp_bond of btm_sec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privilege...
CVEs:CVE-2024-23717
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Seg fault in `ndarray_tensor_bridge` due to zero and large inputs in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service via `GetSessionTensor` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-27206
there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27206
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-278886328
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Missing validation crashes `QuantizeAndDequantizeV4Grad` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-22011
In ss_ProcessRejectComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed ...
CVEs:CVE-2024-22011
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-299458846
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Missing validation results in undefined behavior in `SparseTensorDenseAdd` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation in `QuantizedConv2D` results in undefined behavior in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in `SpaceToBatchND` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service via `DeleteSessionTensor` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes `TensorSummaryV2` in TensorFlow to crash
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service in TensorFlow via `StagePeek`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service in TensorFlow via `Conv3DBackpropFilterV2`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service in TensorFlow via `UnsortedSegmentJoin`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service in TensorFlow via `SparseTensorToCSRSparseMatrix`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service in TensorFlow via `LoadAndRemapMatrix`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation causes denial of service in TensorFlow via `LSTMBlockCell`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault due to missing support for quantized types in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Undefined behavior when users supply invalid resource handles in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-27227
A malicious DNS response can trigger a number of OOB reads, writes, and other memory issues
CVEs:CVE-2024-27227
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-289507739
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Denial of service in TensorFlow due to lack of validation in `tf.ragged.constant`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Core dump when loading TFLite models with quantization in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
In smp_proc_sec_req of smp_act.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote (proximal/adjacent) information disclosure with no additional execution privileges needed. User interaction is not nee...
CVEs:CVE-2024-0045
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-0045
Segfault in TensorFlow if `tf.histogram_fixed_width` is called with NaN values
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
ASB-A-315373062
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Incomplete validation in signal ops leads to crashes in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in `QuantizeAndDequantizeV4Grad`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
PUB-A-308405635
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Heap buffer overflow in `BandedTriangularSolve`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS0...
CVEs:CVE-2024-20028
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20028
ASB-A-318310274
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
ASB-A-318310276
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
ASB-A-318316117
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Stack overflow due to looping TFLite subgraph
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Uninitialized memory access in Eigen types in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-27207
Exported broadcast receivers allowing malicious apps to bypass broadcast protection.
CVEs:CVE-2024-27207
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-211647527
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Heap buffer overflow caused by rounding
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Unitialized access in `EinsumHelper::ParseEquation`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Lack of validation in data format attributes in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Deadlock in mutually recursive `tf.function` objects
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Memory corruption in `DrawBoundingBoxesV2`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in `tf.raw_ops.CTCLoss`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Crash in `max_pool3d` when size argument is 0 or negative
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow/crash in `tf.tile` when tiling tensor is large
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow/crash in `tf.image.resize` when size is large
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in `tf.summary.create_file_writer`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Arbitrary memory read in `ImmutableConst`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in `SparseSparseMinimum`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB and null pointer dereference in `RaggedTensorToTensor`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in `SparseAdd`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Invalid validation in `SparseMatrixSparseCholesky`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Crash in `tf.strings.substr` due to `CHECK`-fail
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Crash in `tf.transpose` with complex inputs
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow due to incorrect hash function in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-22006
OOB read in the TMU plugin that allows for memory disclosure in the power management subsystem of the device.
CVEs:CVE-2024-22006
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-303630542
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Heap buffer overflow in `Conv3DBackprop*`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-0049
In multiple locations, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-0049
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Interpreter crash from `tf.io.decode_raw`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Access to invalid memory during shape inference in `Cudnn*` ops
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in TFLite memory allocation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in DrawBoundingBoxes
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
OOB read in `MatrixTriangularSolve`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to `nullptr` in `tf.ragged.cross`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Code injection in `saved_model_cli`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds access in MakeEdge in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `Conv2DBackpropFilter`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in TFLite's `Reshape` operator
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `MaxPoolGrad`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Write to immutable memory region in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Crash in `tf.math.segment_*` operations
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `RaggedBinCount`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds write in `RaggedBinCount`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `QuantizedMul`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `QuantizedReshape`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `QuantizedResizeBilinear`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `SparseSplit`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `MaxPool3DGradGrad`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `AvgPool3DGrad`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `FractionalAvgPoolGrad`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow and undefined behavior in `FusedBatchNorm`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Undefined behavior via `nullptr` reference binding in sparse matrix multiplication
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Use after free in `CollectiveReduceV2`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `Split`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow/crash in `tf.range`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `RaggedTensorToTensor`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in shape inference for `QuantizeV2`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in `tf.ragged.cross`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in `FusedBatchNorm` kernels
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null dereference in Grappler's `TrySimplify`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Stack overflow in `ParseAttrValue` with nested tensors
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Type confusion during tensor casts lead to dereferencing null pointers
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in `SparseReshape`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to null pointer in `MatrixDiag*` ops
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Session operations in eager mode lead to null pointer dereferences
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `Conv2DBackpropInput`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `QuantizedBiasAdd`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB access in `Dilation2DBackpropInput`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Undefined behavior in `MaxPool3DGradGrad`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in padding computation in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in optimized pooling implementations in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `SpaceToDepth`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `TransposeConv`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `GatherNd`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `BatchToSpaceNd`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's convolution code
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `DepthToSpace`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `EmbeddingLookup`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `SpaceToBatchNd`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `SVDF`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `OneHot`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB write in TFLite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Invalid validation in `QuantizeAndDequantizeV2`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference via invalid Ragged Tensors
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `Conv2D`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds read in `RaggedCross`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `StringNGrams`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in `QuantizeAndDequantizeV3`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB access in unicode ops
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds read in `RequantizationRange`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Overflow/denial of service in `tf.raw_ops.ReverseSequence`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in `tf.raw_ops.Dequantize`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in TFLite's implementation of `Minimum` or `Maximum`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to null in `ParameterizedTruncatedNormal`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
A use of uninitialized value vulnerability in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `tf.raw_ops.SparseCountSparseOutput`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow in TFLite concatentation
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in TensorFlow Lite's `Gather*` implementations
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in `Conv3D`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in SparseCross due to type confusion
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in SparseCountSparseOutput
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `Conv3DBackprop*`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in AddManySparseToTensorsMap
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `Conv2DBackpropFilter`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `QuantizedConv2D`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `QuantizedMul`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in tf.raw_ops.EncodePng
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in SparseConcat
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in `Conv2DBackpropFilter`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in tf.raw_ops.ImmutableConst
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in `StringNGrams`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in `CTCGreedyDecoder`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `SparseTensorToCSRSparseMatrix`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds in `QuantizedBatchNormWithGlobalNormalization`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `QuantizedBatchNormWithGlobalNormalization`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `QuantizedAdd`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `FractionalAvgPool`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-failure in `UnsortedSegmentJoin`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `DenseCountSparseOutput`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `FusedBatchNorm`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `Reverse`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `SparseMatMul`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in `LoadAndRemapMatrix`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in `tf.raw_ops.IRFFT`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in `tf.raw_ops.RFFT`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in `EditDistance`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in `SparseFillEmptyRows`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Lack of validation in `SparseDenseCwiseMul`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in `SdcaOptimizer`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `MaxPoolGradWithArgmax`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Undefined behavior and `CHECK`-fail in `FractionalMaxPoolGrad`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault in `CTCBeamSearchDecoder`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail due to integer overflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of `DepthwiseConv`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite's implementation of hashtable lookup
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in boosted trees in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation during checkpoint loading
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer exception in `DeserializeSparse`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer exception when `Exit` node is not preceded by `Enter` op
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault due to negative splits in `SplitV`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incorrect validation of `SaveV2` inputs in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in MKL requantization in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
ASB-A-316197619
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Segfault and heap buffer overflow in `{Experimental,}DatasetToTFRecord` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Use of unitialized value in TensorFlow Lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation of shapes in multiple TF ops
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in `MaxPoolGrad` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
PUB-A-305966313
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
Out of bounds read via null pointer dereference in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Crash in NMS ops caused by integer conversion to unsigned in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `FractionalAvgPoolGrad` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CHECK-fail in LSTM with zero-length input in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference and heap OOB read in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Use after free in boosted trees creation in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in `QuantizeV2` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in `RaggedTensorToVariant` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in unicode encoding in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in map operations in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in shape inference in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer exception in TensorFlow Lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Infinite loop in TensorFlow Lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Incomplete validation in boosted trees code
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in `SdcaOptimizerV2` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in TensorFlow Lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault on strings tensors with mistmatched dimensions in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in `UpperBound` and `LowerBound` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds access in sparse reduction operations in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in `RaggedTensorToTensor` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in `RaggedGather` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB and CHECK fail in `ResourceGather` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in `ResourceScatterUpdate` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in `RaggedTensorToSparse` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in `MatrixDiagV*` ops in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Reference binding to nullptr in `MatrixSetDiagV*` ops in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB in boosted trees in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in TensorFlow Lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in TensorFlow Lite MLIR optimizations
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Use after free and segfault in shape inference functions in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap buffer overflow in `Transpose`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in `CompressElement` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in `MatrixDiagPartOp` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in `SparseTensorSliceDataset` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Null pointer dereference in `UncompressElement` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in most convolution operators in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
Heap out of bounds read in `MaxPoolGradWithArgmax`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `ResourceScatterDiv` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Bad alloc in `StringNGrams` caused by integer conversion in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in inplace operations in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Crash caused by integer conversion to unsigned in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TensorFlow Lite `tf.raw_ops.UnravelIndex`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`CHECK`-fail in `MapStage` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | — | — |
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TensorFlow Lite division operations
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Floating point exception in `SparseDenseCwiseDiv` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer division by 0 in sparse reshaping in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
`std::abort` raised from `TensorListReserve` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer overflow due to conversion to unsigned in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by 0 in `ResourceGather` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TFLite in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in LSH in TensorFlow Lite
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Missing validation in shape inference for `Dequantize` in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-0047
In writeUserLP of UserManagerService.java, device policies are serialized with an incorrect tag due to a logic error in the code. This could lead to local denial of service when policies are deserialized on reboot with no additional execution privilege...
CVEs:CVE-2024-0047
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
Out of bounds read in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Segfault while copying constant resource tensor
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in `ParallelConcat`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
FPE in convolutions with zero size filters
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Division by zero in TensorFlow Lite pooling operations
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Integer division by 0 in `tf.raw_ops.AllToAll`
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
CVEs:CVE-2024-0051
In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-0051
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-314778564
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. U...
CVEs:CVE-2024-0048
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-0048
CVEs:CVE-2024-0050
In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed fo...
CVEs:CVE-2024-0050
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In tmu_reset_tmu_trip_counter of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-25993
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-25993
PUB-A-315315901
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-25988
In SAEMM_DiscloseGuti of SAEMM_RadioMessageCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed fo...
CVEs:CVE-2024-25988
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue ID: ALPS08528255.
CVEs:CVE-2024-20022
In lk, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08528255; Issue I...
CVEs:CVE-2024-20022
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| openwrt | affected | openwrt | — | — |
| rdkb | affected | rdkcentral | — | — |
| yocto | affected | linuxfoundation | — | — |
CVEs:CVE-2024-20022
ASB-A-318302377
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-299597028
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interac...
CVEs:CVE-2024-0046
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-0046
In EUTRAN_LCS_DecodeFacilityInformationElement of LPP_LcsManagement.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure after authenticating the cell connection with no additional ex...
CVEs:CVE-2024-27223
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27223
CVEs:CVE-2024-20020
In OPTEE, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08522504; Issue ...
CVEs:CVE-2024-20020
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-318302372
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-294120239
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-0053
In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not n...
CVEs:CVE-2024-0053
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In BroadcastSystemMessage of servicemgr.cpp, there is a possible Remote Code Execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita...
CVEs:CVE-2024-27213
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27213
PUB-A-304201945
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-20027
In da, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID...
CVEs:CVE-2024-20027
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-314790498
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel:Qualcomm | affected | Android | :linux_kernel:Qualcomm | — |
ASB-A-314791076
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel:Qualcomm | affected | Android | :linux_kernel:Qualcomm | — |
Insecure temporary file in Tensorflow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
ASB-A-314791623
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :linux_kernel:Qualcomm | affected | Android | :linux_kernel:Qualcomm | — |
In tmu_set_gov_active of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27204
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27204
CVEs:CVE-2024-27208
there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27208
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27219
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27219
PUB-A-314730477
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-315316369
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-315316417
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-25992
In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-25992
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-313619365
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-27212
In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27212
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: ALPS08541638.
CVEs:CVE-2024-20023
CVEs:CVE-2024-20023
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541638; Issue ID: A...
CVEs:CVE-2024-20023
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — | |
| openwrt | affected | openwrt | — | — |
| rdk-b | affected | rdkcentral | — | — |
| yocto | affected | linuxfoundation | — | — |
ASB-A-318302378
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-306592255
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-0052
In multiple functions of healthconnect, there is a possible leakage of exercise route data due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...
CVEs:CVE-2024-0052
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20024
In flashc, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541635; Issue ID: A...
CVEs:CVE-2024-20024
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-318316114
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-25991
In acpm_tmu_ipc_handler of tmu_plugin.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-25991
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20038
In pq, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495932; Issue ID: ...
CVEs:CVE-2024-20038
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-315315425
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-299130860
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In dvfs_plugin_caller of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-22010
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-22010
PUB-A-306615610
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-22005
there is a possible Authentication Bypass due to improperly used crypto. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-22005
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-310053150
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In lpm_req_handler of , there is a possible out of bounds memory access due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27220
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27220
CVEs:CVE-2024-20005
In da, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08355599; Issue ID:...
CVEs:CVE-2024-20005
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
ASB-A-318303317
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-303784655
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-22007
In constraint_check of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-22007
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-306612321
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In ppmp_unprotect_buf of drm_fw.c, there is a possible compromise of protected memory due to a logic error in the code. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is not need...
CVEs:CVE-2024-25986
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-25986
CVEs:CVE-2024-27209
there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27209
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-297569957
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-310630127
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In dumpBatteryDefend of dump_power.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-25984
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-25984
CVEs:CVE-2024-25985
In bigo_unlocked_ioctl of bigo.c, there is a possible UAF due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-25985
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27205
there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27205
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In tmu_config_gov_params of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27226
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27226
In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27236
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27236
PUB-A-300989443
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-312438904
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-312681873
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-313424730
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-315313461
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-27211
In AtiHandleAPOMsgType of ati_Main.c, there is a possible OOB write due to a missing null check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27211
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-306002547
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-27221
In update_policy_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27221
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploi...
CVEs:CVE-2024-27237
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27237
PUB-A-303202436
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-305099745
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In sendHciCommand of bluetooth_hci.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27225
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27225
CVEs:CVE-2024-20025
In da, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541686; Issue ID: ALPS...
CVEs:CVE-2024-20025
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In da, there is a possible out of bounds write due to lack of valudation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ID: ALPS0...
CVEs:CVE-2024-20031
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20031
ASB-A-318316115
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-261588845
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-22009
In init_data of , there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-22009
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-304240341
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2024-25989
In gpu_slc_liveness_update of pixel_gpu_slc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for expl...
CVEs:CVE-2024-25989
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27218
In update_freq_data of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27218
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27234
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27234
PUB-A-298264460
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-304240272
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-306614846
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In config_gov_time_windows of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-22008
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-22008
In pt_sysctl_command of pt.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-25987
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-25987
CVEs:CVE-2024-27235
In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27235
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-277333736
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-303632058
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-315313468
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In da, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08541632; Issue ...
CVEs:CVE-2024-20026
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-20026
In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27233
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27233
PUB-A-313507768
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In policy_check of fvp.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27210
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27210
In onSkipButtonClick of FaceEnrollFoldPage.java, there is a possible way to access the file the app cannot access due to Intent Redirect GRANT_URI_PERMISSIONS Attack. This could lead to local escalation of privilege with no additional execution privil...
CVEs:CVE-2024-27222
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27222
In strncpy of strncpy.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVEs:CVE-2024-27224
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-27224
CVEs:CVE-2024-27230
In ProtocolPsKeepAliveStatusAdapter::getCode() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction ...
CVEs:CVE-2024-27230
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
PUB-A-300461339
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-305721314
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-306615606
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-309476533
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
In pktproc_perftest_gen_rx_packet_sktbuf_mode of link_rx_pktproc.c, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not neede...
CVEs:CVE-2024-25990
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| android | affected | — | — |
CVEs:CVE-2024-25990
PUB-A-281554683
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
PUB-A-298187929
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| :unknown: | affected | Android | :unknown: | — |
CVEs:CVE-2023-25039
Missing Authorization vulnerability in CodePeople Google Maps CP.This issue affects Google Maps CP: from n/a through 1.0.43.
CVEs:CVE-2023-25039
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| google_maps_cp | affected | codepeople | — | — |
TensorFlow has Null Pointer Error in SparseSparseMaximum
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Denial of Service in TensorFlow
| Product | Status | Vendor | Package | Ecosystem |
|---|---|---|---|---|
| tensorflow | affected | Bitnami | tensorflow | — |
Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.