Google Security Advisories: June 2024 — Google Security Advisories

Product	Status	Vendor	Package	Ecosystem
buildkitd	affected	chainguard	buildkitd	—
buildkitd	affected	wolfi	buildkitd	—
cadvisor	affected	chainguard	cadvisor	—
cadvisor	affected	wolfi	cadvisor	—
ctop	affected	wolfi	ctop	—
ctop	affected	chainguard	ctop	—
docker	affected	wolfi	docker	—
docker	affected	chainguard	docker	—
grype	affected	chainguard	grype	—
grype	affected	wolfi	grype	—
k3d	affected	chainguard	k3d	—
k3d	affected	wolfi	k3d	—
k3s	affected	chainguard	k3s	—
k3s	affected	wolfi	k3s	—
k9s	affected	wolfi	k9s	—
k9s	affected	chainguard	k9s	—
kaniko	affected	wolfi	kaniko	—
kaniko	affected	chainguard	kaniko	—
kots	affected	chainguard	kots	—
kots	affected	wolfi	kots	—
kubernetes-1.27	affected	wolfi	kubernetes-1.27	—
kubernetes-1.28	affected	wolfi	kubernetes-1.28	—
kubernetes-1.28	affected	chainguard	kubernetes-1.28	—
kubernetes-1.29	affected	chainguard	kubernetes-1.29	—
kubernetes-1.29	affected	wolfi	kubernetes-1.29	—
kubescape	affected	wolfi	kubescape	—
kubescape	affected	chainguard	kubescape	—
nerdctl	affected	wolfi	nerdctl	—
nerdctl	affected	chainguard	nerdctl	—
newrelic-infrastructure-agent	affected	chainguard	newrelic-infrastructure-agent	—
newrelic-infrastructure-agent	affected	wolfi	newrelic-infrastructure-agent	—
opencontainers/runc	affected	github.com	github.com/opencontainers/runc	—
podman	affected	chainguard	podman	—
podman	affected	wolfi	podman	—
runc	affected	wolfi	runc	—
runc	affected	chainguard	runc	—
skaffold	affected	wolfi	skaffold	—
skaffold	affected	chainguard	skaffold	—
skopeo	affected	wolfi	skopeo	—
skopeo	affected	chainguard	skopeo	—
syft	affected	chainguard	syft	—
syft	affected	wolfi	syft	—
trivy	affected	wolfi	trivy	—
trivy	affected	chainguard	trivy	—
wolfictl	affected	wolfi	wolfictl	—
wolfictl	affected	chainguard	wolfictl	—
zarf	affected	wolfi	zarf	—
zarf	affected	chainguard	zarf	—
zot	affected	chainguard	zot	—
zot	affected	wolfi	zot	—

CVE-2024-32896

GoogleExploitedCISA KEV listedHIGH2024-06-11

CVEs:CVE-2024-32896

CVE-2024-32896

Open SourceExploitedCISA KEV listedHIGH2024-06-11

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVEs:CVE-2024-32896

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32896

Project ZeroExploitedCISA KEV listed2024-06-11

there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.

CVEs:CVE-2024-32896

Upstream advisory

GoogleExploitedCISA KEV listedCRITICAL2024-06-09

In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we mu...

CVEs:CVE-2024-36971

Affected products

Product	Status	Vendor	Package	Ecosystem
debian_linux	affected	debian	—	—
linux_kernel	affected	linux	—	—

Upstream advisory

CVE-2024-4610

GoogleExploitedCISA KEV listedHIGH2024-06-07

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver allows a local non-privileged user to make improper GPU memory processing operations to gain access to already freed memory.This issue affects Bifrost ...

CVEs:CVE-2024-4610

Affected products

Product	Status	Vendor	Package	Ecosystem
bifrost_gpu_kernel_driver	affected	arm	—	—
valhall_gpu_kernel_driver	affected	arm	—	—

Upstream advisory

CVE-2024-4610

GoogleExploitedCISA KEV listedMEDIUM2024-06-07

CVEs:CVE-2024-4610

Upstream advisory

CVE-2024-4610

Project ZeroExploitedCISA KEV listed2024-06-07

Mali GPU Kernel Driver allows improper GPU memory processing operations

Product	Status	Vendor	Package	Ecosystem
collector/config/configgrpc	affected	go.opentelemetry.io	go.opentelemetry.io/collector/config/configgrpc	—
collector/config/confighttp	affected	go.opentelemetry.io	go.opentelemetry.io/collector/config/confighttp	—

Upstream advisory

CVE-2024-36129

Open SourceActive exploitation (sightings)HIGH2024-06-05

Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC

CVEs:CVE-2024-36129

Affected products

Product	Status	Vendor	Package	Ecosystem
collector/config/configgrpc	affected	go.opentelemetry.io	go.opentelemetry.io/collector/config/configgrpc	—
collector/config/confighttp	affected	go.opentelemetry.io	go.opentelemetry.io/collector/config/confighttp	—

Upstream advisory

CVE-2024-36129

Open SourceActive exploitation (sightings)HIGH2024-06-05

The OpenTelemetry Collector offers a vendor-agnostic implementation on how to receive, process and export telemetry data. An unsafe decompression vulnerability allows unauthenticated attackers to crash the collector via excessive memory consumption. OT...

CVEs:CVE-2024-36129

Affected products

Product	Status	Vendor	Package	Ecosystem
configgrpc	affected	opentelemetry	—	—
confighttp	affected	opentelemetry	—	—
opentelemetry_collector	affected	opentelemetry	—	—

Upstream advisory

CVE-2024-36129

GoogleActive exploitation (sightings)2024-06-05

OpenTelemetry Collector has a Denial of Service via Zip/Decompression Bomb sent over HTTP or gRPC

Product	Status	Vendor	Package	Ecosystem
eap8-activemq-artemis	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis	—
eap8-activemq-artemis-cli	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-cli	—
eap8-activemq-artemis-commons	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-commons	—
eap8-activemq-artemis-core-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-core-client	—
eap8-activemq-artemis-dto	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-dto	—
eap8-activemq-artemis-hornetq-protocol	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-hornetq-protocol	—
eap8-activemq-artemis-hqclient-protocol	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-hqclient-protocol	—
eap8-activemq-artemis-jakarta-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-jakarta-client	—
eap8-activemq-artemis-jakarta-ra	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-jakarta-ra	—
eap8-activemq-artemis-jakarta-server	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-jakarta-server	—
eap8-activemq-artemis-jakarta-service-extensions	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-jakarta-service-extensions	—
eap8-activemq-artemis-jdbc-store	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-jdbc-store	—
eap8-activemq-artemis-journal	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-journal	—
eap8-activemq-artemis-selector	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-selector	—
eap8-activemq-artemis-server	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-activemq-artemis-server	—
eap8-amazon-ion-java	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-amazon-ion-java	—
eap8-angus	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-angus	—
eap8-angus-activation	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-angus-activation	—
eap8-angus-mail	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-angus-mail	—
eap8-antlr4	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-antlr4	—
eap8-antlr4-runtime	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-antlr4-runtime	—
eap8-apache-commons-beanutils	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-apache-commons-beanutils	—
eap8-apache-commons-codec	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-apache-commons-codec	—
eap8-apache-commons-io	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-apache-commons-io	—
eap8-apache-cxf	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-apache-cxf	—
eap8-apache-cxf-rt	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-apache-cxf-rt	—
eap8-apache-cxf-services	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-apache-cxf-services	—
eap8-apache-cxf-tools	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-apache-cxf-tools	—
eap8-apache-sshd	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-apache-sshd	—
eap8-atinject	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-atinject	—
eap8-caffeine	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-caffeine	—
eap8-codemodel	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-codemodel	—
eap8-elytron-web	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-elytron-web	—
eap8-fge-btf	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-fge-btf	—
eap8-fge-msg-simple	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-fge-msg-simple	—
eap8-gson	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-gson	—
eap8-guava	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-guava	—
eap8-guava-failureaccess	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-guava-failureaccess	—
eap8-guava-libraries	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-guava-libraries	—
eap8-hal-console	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hal-console	—
eap8-hibernate	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate	—
eap8-hibernate-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-core	—
eap8-hibernate-envers	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-envers	—
eap8-hibernate-search	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-search	—
eap8-hibernate-search-backend-elasticsearch	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-search-backend-elasticsearch	—
eap8-hibernate-search-backend-lucene	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-search-backend-lucene	—
eap8-hibernate-search-engine	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-search-engine	—
eap8-hibernate-search-mapper-orm-orm6	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-search-mapper-orm-orm6	—
eap8-hibernate-search-mapper-pojo-base	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-search-mapper-pojo-base	—
eap8-hibernate-search-util-common	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-search-util-common	—
eap8-hibernate-validator	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-validator	—
eap8-hibernate-validator-cdi	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-hibernate-validator-cdi	—
eap8-httpcomponents-asyncclient	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-httpcomponents-asyncclient	—
eap8-httpcomponents-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-httpcomponents-client	—
eap8-httpcomponents-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-httpcomponents-core	—
eap8-infinispan	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan	—
eap8-infinispan-cachestore-jdbc-common-jakarta	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-cachestore-jdbc-common-jakarta	—
eap8-infinispan-cachestore-jdbc-jakarta	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-cachestore-jdbc-jakarta	—
eap8-infinispan-cachestore-remote	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-cachestore-remote	—
eap8-infinispan-cdi-common-jakarta	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-cdi-common-jakarta	—
eap8-infinispan-cdi-embedded-jakarta	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-cdi-embedded-jakarta	—
eap8-infinispan-cdi-remote-jakarta	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-cdi-remote-jakarta	—
eap8-infinispan-client-hotrod-jakarta	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-client-hotrod-jakarta	—
eap8-infinispan-clustered-counter	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-clustered-counter	—
eap8-infinispan-clustered-lock	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-clustered-lock	—
eap8-infinispan-commons-jakarta	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-commons-jakarta	—
eap8-infinispan-component-annotations	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-component-annotations	—
eap8-infinispan-core-jakarta	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-core-jakarta	—
eap8-infinispan-hibernate-cache-commons	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-hibernate-cache-commons	—
eap8-infinispan-hibernate-cache-spi	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-hibernate-cache-spi	—
eap8-infinispan-hibernate-cache-v62	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-hibernate-cache-v62	—
eap8-infinispan-objectfilter	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-objectfilter	—
eap8-infinispan-query	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-query	—
eap8-infinispan-query-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-query-core	—
eap8-infinispan-query-dsl	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-query-dsl	—
eap8-infinispan-remote-query-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-infinispan-remote-query-client	—
eap8-insights-java-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-insights-java-client	—
eap8-ironjacamar	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar	—
eap8-ironjacamar-common-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar-common-api	—
eap8-ironjacamar-common-impl	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar-common-impl	—
eap8-ironjacamar-common-spi	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar-common-spi	—
eap8-ironjacamar-core-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar-core-api	—
eap8-ironjacamar-core-impl	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar-core-impl	—
eap8-ironjacamar-deployers-common	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar-deployers-common	—
eap8-ironjacamar-jdbc	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar-jdbc	—
eap8-ironjacamar-validator	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ironjacamar-validator	—
eap8-istack-commons-runtime	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-istack-commons-runtime	—
eap8-istack-commons-tools	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-istack-commons-tools	—
eap8-jackson-annotations	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-annotations	—
eap8-jackson-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-core	—
eap8-jackson-databind	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-databind	—
eap8-jackson-dataformat-cbor	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-dataformat-cbor	—
eap8-jackson-dataformats-binary	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-dataformats-binary	—
eap8-jackson-datatype-jdk8	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-datatype-jdk8	—
eap8-jackson-datatype-jsr310	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-datatype-jsr310	—
eap8-jackson-jaxrs-base	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-jaxrs-base	—
eap8-jackson-jaxrs-json-provider	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-jaxrs-json-provider	—
eap8-jackson-jaxrs-providers	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-jaxrs-providers	—
eap8-jackson-module-jakarta-xmlbind-annotations	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-module-jakarta-xmlbind-annotations	—
eap8-jackson-modules-base	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-modules-base	—
eap8-jackson-modules-java8	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jackson-modules-java8	—
eap8-jakarta-activation	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-activation	—
eap8-jakarta-annotation-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-annotation-api	—
eap8-jakarta-batch-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-batch-api	—
eap8-jakarta-interceptor-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-interceptor-api	—
eap8-jakarta-jms-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-jms-api	—
eap8-jakarta-json	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-json	—
eap8-jakarta-json-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-json-api	—
eap8-jakarta-mail	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-mail	—
eap8-jakarta-servlet-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-servlet-api	—
eap8-jakarta-transaction-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-transaction-api	—
eap8-jakarta-validation-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-validation-api	—
eap8-jakarta-ws-rs-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-ws-rs-api	—
eap8-jakarta-xml-bind-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jakarta-xml-bind-api	—
eap8-jasypt	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jasypt	—
eap8-java-classmate	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-java-classmate	—
eap8-javaee-jpa-spec	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-javaee-jpa-spec	—
eap8-jaxb	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jaxb	—
eap8-jaxb-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jaxb-core	—
eap8-jaxb-jxc	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jaxb-jxc	—
eap8-jaxb-runtime	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jaxb-runtime	—
eap8-jaxb-xjc	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jaxb-xjc	—
eap8-jberet	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jberet	—
eap8-jberet-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jberet-core	—
eap8-jboss-cert-helper	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jboss-cert-helper	—
eap8-jboss-ejb-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jboss-ejb-client	—
eap8-jboss-modules	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jboss-modules	—
eap8-jgroups	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jgroups	—
eap8-jgroups-kubernetes	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jgroups-kubernetes	—
eap8-joda-time	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-joda-time	—
eap8-jose4j	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-jose4j	—
eap8-log4j2-jboss-logmanager	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-log4j2-jboss-logmanager	—
eap8-lucene-analyzers-common	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-lucene-analyzers-common	—
eap8-lucene-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-lucene-core	—
eap8-lucene-facet	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-lucene-facet	—
eap8-lucene-join	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-lucene-join	—
eap8-lucene-queries	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-lucene-queries	—
eap8-lucene-queryparser	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-lucene-queryparser	—
eap8-lucene-solr	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-lucene-solr	—
eap8-narayana	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana	—
eap8-narayana-jbosstxbridge	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana-jbosstxbridge	—
eap8-narayana-jbossxts	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana-jbossxts	—
eap8-narayana-jts-idlj	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana-jts-idlj	—
eap8-narayana-jts-integration	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana-jts-integration	—
eap8-narayana-restat-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana-restat-api	—
eap8-narayana-restat-bridge	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana-restat-bridge	—
eap8-narayana-restat-integration	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana-restat-integration	—
eap8-narayana-restat-util	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-narayana-restat-util	—
eap8-netty	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty	—
eap8-netty-buffer	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-buffer	—
eap8-netty-codec	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-codec	—
eap8-netty-codec-dns	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-codec-dns	—
eap8-netty-codec-http	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-codec-http	—
eap8-netty-codec-socks	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-codec-socks	—
eap8-netty-common	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-common	—
eap8-netty-handler	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-handler	—
eap8-netty-handler-proxy	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-handler-proxy	—
eap8-netty-resolver	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-resolver	—
eap8-netty-resolver-dns	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-resolver-dns	—
eap8-netty-transport	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-transport	—
eap8-netty-transport-classes-epoll	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-transport-classes-epoll	—
eap8-netty-transport-native-epoll	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-transport-native-epoll	—
eap8-netty-transport-native-epoll-debuginfo	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-transport-native-epoll-debuginfo	—
eap8-netty-transport-native-unix-common	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-netty-transport-native-unix-common	—
eap8-protostream	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-protostream	—
eap8-reactive-streams	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-reactive-streams	—
eap8-relaxng-datatype	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-relaxng-datatype	—
eap8-resteasy	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy	—
eap8-resteasy-atom-provider	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-atom-provider	—
eap8-resteasy-cdi	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-cdi	—
eap8-resteasy-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-client	—
eap8-resteasy-client-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-client-api	—
eap8-resteasy-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-core	—
eap8-resteasy-core-spi	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-core-spi	—
eap8-resteasy-crypto	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-crypto	—
eap8-resteasy-jackson2-provider	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-jackson2-provider	—
eap8-resteasy-jaxb-provider	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-jaxb-provider	—
eap8-resteasy-jsapi	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-jsapi	—
eap8-resteasy-json-binding-provider	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-json-binding-provider	—
eap8-resteasy-json-p-provider	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-json-p-provider	—
eap8-resteasy-multipart-provider	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-multipart-provider	—
eap8-resteasy-rxjava2	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-rxjava2	—
eap8-resteasy-validator-provider	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-resteasy-validator-provider	—
eap8-rngom	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-rngom	—
eap8-slf4j	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-slf4j	—
eap8-slf4j-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-slf4j-api	—
eap8-snakeyaml	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-snakeyaml	—
eap8-stax2-api	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-stax2-api	—
eap8-sun-istack-commons	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-sun-istack-commons	—
eap8-txw2	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-txw2	—
eap8-velocity	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-velocity	—
eap8-velocity-engine-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-velocity-engine-core	—
eap8-wildfly	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly	—
eap8-wildfly-elytron	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-elytron	—
eap8-wildfly-elytron-tool	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-elytron-tool	—
eap8-wildfly-http-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-http-client	—
eap8-wildfly-http-client-common	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-http-client-common	—
eap8-wildfly-http-ejb-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-http-ejb-client	—
eap8-wildfly-http-naming-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-http-naming-client	—
eap8-wildfly-http-transaction-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-http-transaction-client	—
eap8-wildfly-java-jdk11	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-java-jdk11	—
eap8-wildfly-java-jdk17	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-java-jdk17	—
eap8-wildfly-modules	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-modules	—
eap8-wildfly-transaction-client	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wildfly-transaction-client	—
eap8-woodstox-core	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-woodstox-core	—
eap8-ws-commons-XmlSchema	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-ws-commons-XmlSchema	—
eap8-wsdl4j	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wsdl4j	—
eap8-wss4j	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wss4j	—
eap8-wss4j-bindings	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wss4j-bindings	—
eap8-wss4j-policy	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wss4j-policy	—
eap8-wss4j-ws-security-common	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wss4j-ws-security-common	—
eap8-wss4j-ws-security-dom	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wss4j-ws-security-dom	—
eap8-wss4j-ws-security-policy-stax	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wss4j-ws-security-policy-stax	—
eap8-wss4j-ws-security-stax	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-wss4j-ws-security-stax	—
eap8-xsom	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-xsom	—
eap8-yasson	affected	Red Hat:jboss_enterprise_application_platform:8.0::el9	eap8-yasson	—

Upstream advisory

CVE-2024-31317

Open SourceActive exploitation (sightings)HIGH2024-06-03

In multiple functions of ZygoteProcess.java, there is a possible way to achieve code execution as any app via WRITE_SECURE_SETTINGS due to unsafe deserialization. This could lead to local escalation of privilege with User execution privileges needed. U...

CVEs:CVE-2024-31317

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

GO-2024-2785

Open SourceActive exploitation (sightings)2024-06-04

CoreDNS may return invalid cache entries in github.com/coredns/coredns

Affected products

Product	Status	Vendor	Package	Ecosystem
cloudflared	affected	chainguard	cloudflared	—
cloudflared	affected	wolfi	cloudflared	—
coredns/coredns	affected	github.com	github.com/coredns/coredns	—
juicefs-1.2	affected	chainguard	juicefs-1.2	—
juicefs-1.3	affected	chainguard	juicefs-1.3	—
juicefs-1.3	affected	wolfi	juicefs-1.3	—
kubernetes-dns-node-cache	affected	wolfi	kubernetes-dns-node-cache	—
kubernetes-dns-node-cache	affected	chainguard	kubernetes-dns-node-cache	—

Upstream advisory

DEBIAN-CVE-2024-24792

Open SourceActive exploitation (sightings)HIGH2024-06-27

DEBIAN-CVE-2024-24792

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-golang-x-image	affected	Debian:11	golang-golang-x-image	—
golang-golang-x-image	affected	Debian:12	golang-golang-x-image	—
golang-golang-x-image	affected	Debian:13	golang-golang-x-image	—
golang-golang-x-image	affected	Debian:14	golang-golang-x-image	—

Upstream advisory

CVE-2024-24792

Open SourceActive exploitation (sightings)HIGH2024-06-26

Panic when parsing invalid palette-color images in golang.org/x/image

CVEs:CVE-2024-24792

Affected products

Product	Status	Vendor	Package	Ecosystem
x/image	affected	golang.org	golang.org/x/image	—

Upstream advisory

GHSA-9phm-fm57-rhg8

Open SourceActive exploitation (sightings)HIGH2024-06-26

Panic when parsing invalid palette-color images in golang.org/x/image

Affected products

Product	Status	Vendor	Package	Ecosystem
x/image	affected	golang.org	golang.org/x/image	—

Upstream advisory

GHSA-9phm-fm57-rhg8

Open SourceActive exploitation (sightings)HIGH2024-06-26

Panic when parsing invalid palette-color images in golang.org/x/image

Affected products

Product	Status	Vendor	Package	Ecosystem
chainctl	affected	chainguard	chainctl	—
gotenberg	affected	chainguard	gotenberg	—
hugo	affected	chainguard	hugo	—
hugo	affected	wolfi	hugo	—
hugo-extended	affected	wolfi	hugo-extended	—
hugo-extended	affected	chainguard	hugo-extended	—
mattermost-9	affected	chainguard	mattermost-9	—
mattermost-9	affected	wolfi	mattermost-9	—
ollama	affected	chainguard	ollama	—
ollama	affected	wolfi	ollama	—
x/image	affected	golang.org	golang.org/x/image	—

Upstream advisory

CVE-2024-24792

GoogleActive exploitation (sightings)HIGH2024-06-25

Parsing a corrupt or malicious image with invalid color indices can cause a panic.

CVEs:CVE-2024-24792

Upstream advisory

CVE-2024-24792

GoogleActive exploitation (sightings)2024-06-25

Parsing a corrupt or malicious image with invalid color indices can cause a panic.

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-6290

GoogleActive exploitation (sightings)CRITICAL2024-06-24

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6290

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-6290

GoogleActive exploitation (sightings)2024-06-24

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6290

Upstream advisory

CVE-2024-6290

GoogleActive exploitation (sightings)HIGH2024-06-24

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-5836

GoogleActive exploitation (sightings)CRITICAL2024-06-11

Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)

CVEs:CVE-2024-5836

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5836

GoogleActive exploitation (sightings)HIGH2024-06-11

CVEs:CVE-2024-5836

Upstream advisory

CVE-2024-5836

GoogleActive exploitation (sightings)2024-06-11

Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: High)

CVEs:CVE-2024-5836

Upstream advisory

CVE-2024-38083

GoogleActive exploitation (sightings)MEDIUM2024-06-13

CVEs:CVE-2024-38083

Upstream advisory

CVE-2024-38083

Open SourceActive exploitation (sightings)MEDIUM2024-06-11

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVEs:CVE-2024-38083

Affected products

Product	Status	Vendor	Package	Ecosystem
edge_chromium	affected	microsoft	—	—

Upstream advisory

CVE-2024-7024

GoogleActive exploitation (sightings)CRITICAL2024-06-11

CVEs:CVE-2024-7024

Upstream advisory

CVE-2024-7024

GoogleActive exploitation (sightings)2024-06-11

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVEs:CVE-2024-7024

Upstream advisory

CVE-2024-7024

GoogleActive exploitation (sightings)CRITICAL2024-06-11

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

CVEs:CVE-2024-7024

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—

Upstream advisory

CVE-2024-32894

GoogleActive exploitation (sightings)HIGH2024-06-11

CVEs:CVE-2024-32894

Upstream advisory

CVE-2024-32894

Open SourceActive exploitation (sightings)HIGH2024-06-11

In bc_get_converted_received_bearer of bc_utilities.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed...

CVEs:CVE-2024-32894

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-295200489

GoogleActive exploitation (sightings)MEDIUM2024-06-01

PUB-A-295200489

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32924

GoogleActive exploitation (sightings)HIGH2024-06-11

CVEs:CVE-2024-32924

Upstream advisory

CVE-2024-32924

Open SourceActive exploitation (sightings)HIGH2024-06-11

In DeregAcceptProcINT of cn_NrmmStateDeregInit.cpp, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for e...

CVEs:CVE-2024-32924

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-313798746

GoogleActive exploitation (sightings)MEDIUM2024-06-01

PUB-A-313798746

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

GO-2024-2861

Open SourceActive exploitation (sightings)2024-06-04

azure-file-csi-driver leaks service account tokens in the logs in sigs.k8s.io/azurefile-csi-driver

Affected products

Product	Status	Vendor	Package	Ecosystem
azurefile-csi-driver	affected	sigs.k8s.io	sigs.k8s.io/azurefile-csi-driver	—

Upstream advisory

CVE-2024-32897

Open SourceActive exploitation (sightings)MEDIUM2024-06-11

In ProtocolCdmaCallWaitingIndAdapter::GetCwInfo() of protocolsmsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with baseband firmware compromise required. User interac...

CVEs:CVE-2024-32897

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32897

GoogleActive exploitation (sightings)MEDIUM2024-06-11

CVEs:CVE-2024-32897

Upstream advisory

PUB-A-320994624

GoogleActive exploitation (sightings)MEDIUM2024-06-01

PUB-A-320994624

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-4755

GoogleActive exploitation (sightings)MEDIUM2024-06-21

GoogleActive exploitation (sightings)2024-06-01

ASB-A-329094549

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-38272

GoogleActive exploitation (sightings)HIGH2024-06-26

There exists a vulnerability in Quick Share/Nearby, where an attacker can bypass the accept file dialog on Quick Share Windows. Normally in Quick Share Windows app we can't send a file without the user accept from the receiving device if the visibilit...

CVEs:CVE-2024-38272

Affected products

Product	Status	Vendor	Package	Ecosystem
nearby	affected	google	—	—

Upstream advisory

CVE-2024-38272

GoogleActive exploitation (sightings)HIGH2024-06-26

GoogleActive exploitation (sightings)HIGH2024-06-01

PUB-A-326987969

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-31324

GoogleActive exploitation (sightings)HIGH2024-06-03

Open SourceCoalition ESS > 63%HIGH2024-06-11

GHSA-fchp-8m28-g68f

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	wolfi	chromium	—
chromium	affected	chainguard	chromium	—

Upstream advisory

CVE-2024-5830

GoogleCoalition ESS > 63%2024-06-11

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5830

Upstream advisory

CVE-2024-5830

GoogleCoalition ESS > 63%HIGH2024-06-11

CVEs:CVE-2024-5830

Upstream advisory

CVE-2024-5830

GoogleCoalition ESS > 63%HIGH2024-06-11

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5830

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

DEBIAN-CVE-2024-5830

Open SourceCoalition ESS > 63%HIGH2024-06-11

DEBIAN-CVE-2024-5830

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

openSUSE-SU-2024:13880-1

Open SourcePoC exploit2024-06-15

kubernetes1.27-apiserver-1.27.13-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.27	affected	openSUSE:Tumbleweed	kubernetes1.27	—

Upstream advisory

openSUSE-SU-2024:13881-1

Open SourcePoC exploit2024-06-15

kubernetes1.28-apiserver-1.28.9-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.28	affected	openSUSE:Tumbleweed	kubernetes1.28	—

Upstream advisory

openSUSE-SU-2024:13882-1

Open SourcePoC exploit2024-06-15

kubernetes1.29-apiserver-1.29.4-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.29	affected	openSUSE:Tumbleweed	kubernetes1.29	—

Upstream advisory

RLSA-2024:3259

Open SourcePoC exploitHIGH2024-06-14

Important: go-toolset:rhel8 security update

Affected products

Product	Status	Vendor	Package	Ecosystem
delve	affected	Rocky Linux:8	delve	—
golang	affected	Rocky Linux:8	golang	—
go-toolset	affected	Rocky Linux:8	go-toolset	—

Upstream advisory

openSUSE-SU-2024:12794-1

Open SourcePoC exploit2024-06-15

ruby3.1-rubygem-grpc-1.52.0-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
rubygem-grpc	affected	openSUSE:Tumbleweed	rubygem-grpc	—

Upstream advisory

openSUSE-SU-2024:13956-1

Open SourcePoC exploit2024-06-15

ruby3.3-rubygem-grpc-1.63.0-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
rubygem-grpc	affected	openSUSE:Tumbleweed	rubygem-grpc	—

Upstream advisory

openSUSE-SU-2024:13026-1

Open SourcePoC exploit2024-06-15

chromedriver-114.0.5735.198-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:13092-1

Open SourcePoC exploit2024-06-15

chromedriver-115.0.5790.170-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:13102-1

Open SourcePoC exploit2024-06-15

ungoogled-chromium-115.0.5790.170-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:12545-1

Open SourcePoC exploit2024-06-15

chromedriver-108.0.5359.71-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:12758-1

GooglePoC exploit2024-06-15

google-guest-agent-20230221.00-2.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
google-guest-agent	affected	openSUSE:Tumbleweed	google-guest-agent	—

Upstream advisory

openSUSE-SU-2024:12759-1

GooglePoC exploit2024-06-15

google-osconfig-agent-20230222.00-2.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
google-osconfig-agent	affected	openSUSE:Tumbleweed	google-osconfig-agent	—

Upstream advisory

GHSA-2p57-rm9w-gvfp

GooglePoC exploitHIGH2024-06-02

ip SSRF improper categorization in isPublic

Affected products

Product	Status	Vendor	Package	Ecosystem
ip	affected	npm	ip	—
ip	affected	npm	—	—

Upstream advisory

GHSA-2p57-rm9w-gvfp

Open SourcePoC exploitHIGH2024-06-02

ip SSRF improper categorization in isPublic

Affected products

Product	Status	Vendor	Package	Ecosystem
ip	affected	npm	ip	—
kibana-7	affected	chainguard	kibana-7	—
kibana-7.17	affected	chainguard	kibana-7.17	—
kibana-8	affected	chainguard	kibana-8	—
py3-jupyterlab	affected	wolfi	py3-jupyterlab	—
py3-jupyterlab	affected	chainguard	py3-jupyterlab	—
sqlpad	affected	chainguard	sqlpad	—
sqlpad	affected	wolfi	sqlpad	—
tensorflow-cpu-jupyter	affected	chainguard	tensorflow-cpu-jupyter	—

Upstream advisory

openSUSE-SU-2024:12259-1

Open SourcePoC exploit2024-06-15

golang-github-prometheus-node_exporter-1.3.1-2.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-prometheus-node_exporter	affected	openSUSE:Tumbleweed	golang-github-prometheus-node_exporter	—

Upstream advisory

openSUSE-SU-2024:13109-1

Open SourcePoC exploit2024-06-15

golang-github-lusitaniae-apache_exporter-1.0.0-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-lusitaniae-apache_exporter	affected	openSUSE:Tumbleweed	golang-github-lusitaniae-apache_exporter	—

Upstream advisory

openSUSE-SU-2024:13143-1

Open SourcePoC exploit2024-06-15

golang-github-prometheus-prometheus-2.46.0-2.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-prometheus-prometheus	affected	openSUSE:Tumbleweed	golang-github-prometheus-prometheus	—

Upstream advisory

openSUSE-SU-2024:12637-1

Open SourcePoC exploit2024-06-15

golang-github-prometheus-node_exporter-1.5.0-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-prometheus-node_exporter	affected	openSUSE:Tumbleweed	golang-github-prometheus-node_exporter	—

Upstream advisory

RHSA-2024:4118

Open SourcePoC exploitHIGH2024-06-26

Red Hat Security Advisory: Red Hat Ceph Storage 5.3 security, bug fix, and enhancement update

Affected products

Product	Status	Vendor	Package	Ecosystem
ceph	affected	Red Hat:ceph_storage:5.3::el8	ceph	—
ceph	affected	Red Hat:ceph_storage:5.3::el9	ceph	—
cephadm	affected	Red Hat:ceph_storage:5.3::el9	cephadm	—
cephadm	affected	Red Hat:ceph_storage:5.3::el8	cephadm	—
ceph-ansible	affected	Red Hat:ceph_storage:5.3::el8	ceph-ansible	—
ceph-base	affected	Red Hat:ceph_storage:5.3::el9	ceph-base	—
ceph-base	affected	Red Hat:ceph_storage:5.3::el8	ceph-base	—
ceph-base-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-base-debuginfo	—
ceph-base-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-base-debuginfo	—
ceph-common	affected	Red Hat:ceph_storage:5.3::el8	ceph-common	—
ceph-common	affected	Red Hat:ceph_storage:5.3::el9	ceph-common	—
ceph-common-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-common-debuginfo	—
ceph-common-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-common-debuginfo	—
ceph-debugsource	affected	Red Hat:ceph_storage:5.3::el8	ceph-debugsource	—
ceph-debugsource	affected	Red Hat:ceph_storage:5.3::el9	ceph-debugsource	—
cephfs-mirror	affected	Red Hat:ceph_storage:5.3::el8	cephfs-mirror	—
cephfs-mirror-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	cephfs-mirror-debuginfo	—
cephfs-mirror-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	cephfs-mirror-debuginfo	—
cephfs-top	affected	Red Hat:ceph_storage:5.3::el9	cephfs-top	—
cephfs-top	affected	Red Hat:ceph_storage:5.3::el8	cephfs-top	—
ceph-fuse	affected	Red Hat:ceph_storage:5.3::el8	ceph-fuse	—
ceph-fuse	affected	Red Hat:ceph_storage:5.3::el9	ceph-fuse	—
ceph-fuse-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-fuse-debuginfo	—
ceph-fuse-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-fuse-debuginfo	—
ceph-grafana-dashboards	affected	Red Hat:ceph_storage:5.3::el8	ceph-grafana-dashboards	—
ceph-immutable-object-cache	affected	Red Hat:ceph_storage:5.3::el9	ceph-immutable-object-cache	—
ceph-immutable-object-cache	affected	Red Hat:ceph_storage:5.3::el8	ceph-immutable-object-cache	—
ceph-immutable-object-cache-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-immutable-object-cache-debuginfo	—
ceph-immutable-object-cache-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-immutable-object-cache-debuginfo	—
ceph-mds	affected	Red Hat:ceph_storage:5.3::el8	ceph-mds	—
ceph-mds-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-mds-debuginfo	—
ceph-mds-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-mds-debuginfo	—
ceph-mgr	affected	Red Hat:ceph_storage:5.3::el8	ceph-mgr	—
ceph-mgr-cephadm	affected	Red Hat:ceph_storage:5.3::el8	ceph-mgr-cephadm	—
ceph-mgr-dashboard	affected	Red Hat:ceph_storage:5.3::el8	ceph-mgr-dashboard	—
ceph-mgr-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-mgr-debuginfo	—
ceph-mgr-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-mgr-debuginfo	—
ceph-mgr-diskprediction-local	affected	Red Hat:ceph_storage:5.3::el8	ceph-mgr-diskprediction-local	—
ceph-mgr-k8sevents	affected	Red Hat:ceph_storage:5.3::el8	ceph-mgr-k8sevents	—
ceph-mgr-modules-core	affected	Red Hat:ceph_storage:5.3::el8	ceph-mgr-modules-core	—
ceph-mgr-rook	affected	Red Hat:ceph_storage:5.3::el8	ceph-mgr-rook	—
ceph-mib	affected	Red Hat:ceph_storage:5.3::el9	ceph-mib	—
ceph-mib	affected	Red Hat:ceph_storage:5.3::el8	ceph-mib	—
ceph-mon	affected	Red Hat:ceph_storage:5.3::el8	ceph-mon	—
ceph-mon-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-mon-debuginfo	—
ceph-mon-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-mon-debuginfo	—
ceph-osd	affected	Red Hat:ceph_storage:5.3::el8	ceph-osd	—
ceph-osd-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-osd-debuginfo	—
ceph-osd-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-osd-debuginfo	—
ceph-prometheus-alerts	affected	Red Hat:ceph_storage:5.3::el8	ceph-prometheus-alerts	—
ceph-radosgw	affected	Red Hat:ceph_storage:5.3::el8	ceph-radosgw	—
ceph-radosgw-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-radosgw-debuginfo	—
ceph-radosgw-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-radosgw-debuginfo	—
ceph-resource-agents	affected	Red Hat:ceph_storage:5.3::el8	ceph-resource-agents	—
ceph-resource-agents	affected	Red Hat:ceph_storage:5.3::el9	ceph-resource-agents	—
ceph-selinux	affected	Red Hat:ceph_storage:5.3::el9	ceph-selinux	—
ceph-selinux	affected	Red Hat:ceph_storage:5.3::el8	ceph-selinux	—
ceph-test	affected	Red Hat:ceph_storage:5.3::el8	ceph-test	—
ceph-test-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	ceph-test-debuginfo	—
ceph-test-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	ceph-test-debuginfo	—
libcephfs2	affected	Red Hat:ceph_storage:5.3::el9	libcephfs2	—
libcephfs2	affected	Red Hat:ceph_storage:5.3::el8	libcephfs2	—
libcephfs2-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	libcephfs2-debuginfo	—
libcephfs2-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	libcephfs2-debuginfo	—
libcephfs-devel	affected	Red Hat:ceph_storage:5.3::el9	libcephfs-devel	—
libcephfs-devel	affected	Red Hat:ceph_storage:5.3::el8	libcephfs-devel	—
libcephsqlite	affected	Red Hat:ceph_storage:5.3::el8	libcephsqlite	—
libcephsqlite-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	libcephsqlite-debuginfo	—
libcephsqlite-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	libcephsqlite-debuginfo	—
librados2	affected	Red Hat:ceph_storage:5.3::el9	librados2	—
librados2	affected	Red Hat:ceph_storage:5.3::el8	librados2	—
librados2-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	librados2-debuginfo	—
librados2-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	librados2-debuginfo	—
librados-devel	affected	Red Hat:ceph_storage:5.3::el8	librados-devel	—
librados-devel	affected	Red Hat:ceph_storage:5.3::el9	librados-devel	—
librados-devel-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	librados-devel-debuginfo	—
librados-devel-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	librados-devel-debuginfo	—
libradospp-devel	affected	Red Hat:ceph_storage:5.3::el9	libradospp-devel	—
libradospp-devel	affected	Red Hat:ceph_storage:5.3::el8	libradospp-devel	—
libradosstriper1	affected	Red Hat:ceph_storage:5.3::el8	libradosstriper1	—
libradosstriper1	affected	Red Hat:ceph_storage:5.3::el9	libradosstriper1	—
libradosstriper1-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	libradosstriper1-debuginfo	—
libradosstriper1-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	libradosstriper1-debuginfo	—
librbd1	affected	Red Hat:ceph_storage:5.3::el8	librbd1	—
librbd1	affected	Red Hat:ceph_storage:5.3::el9	librbd1	—
librbd1-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	librbd1-debuginfo	—
librbd1-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	librbd1-debuginfo	—
librbd-devel	affected	Red Hat:ceph_storage:5.3::el9	librbd-devel	—
librbd-devel	affected	Red Hat:ceph_storage:5.3::el8	librbd-devel	—
librgw2	affected	Red Hat:ceph_storage:5.3::el9	librgw2	—
librgw2	affected	Red Hat:ceph_storage:5.3::el8	librgw2	—
librgw2-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	librgw2-debuginfo	—
librgw2-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	librgw2-debuginfo	—
librgw-devel	affected	Red Hat:ceph_storage:5.3::el9	librgw-devel	—
librgw-devel	affected	Red Hat:ceph_storage:5.3::el8	librgw-devel	—
python3-ceph-argparse	affected	Red Hat:ceph_storage:5.3::el9	python3-ceph-argparse	—
python3-ceph-argparse	affected	Red Hat:ceph_storage:5.3::el8	python3-ceph-argparse	—
python3-ceph-common	affected	Red Hat:ceph_storage:5.3::el9	python3-ceph-common	—
python3-ceph-common	affected	Red Hat:ceph_storage:5.3::el8	python3-ceph-common	—
python3-cephfs	affected	Red Hat:ceph_storage:5.3::el9	python3-cephfs	—
python3-cephfs	affected	Red Hat:ceph_storage:5.3::el8	python3-cephfs	—
python3-cephfs-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	python3-cephfs-debuginfo	—
python3-cephfs-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	python3-cephfs-debuginfo	—
python3-rados	affected	Red Hat:ceph_storage:5.3::el9	python3-rados	—
python3-rados	affected	Red Hat:ceph_storage:5.3::el8	python3-rados	—
python3-rados-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	python3-rados-debuginfo	—
python3-rados-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	python3-rados-debuginfo	—
python3-rbd	affected	Red Hat:ceph_storage:5.3::el8	python3-rbd	—
python3-rbd	affected	Red Hat:ceph_storage:5.3::el9	python3-rbd	—
python3-rbd-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	python3-rbd-debuginfo	—
python3-rbd-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	python3-rbd-debuginfo	—
python3-rgw	affected	Red Hat:ceph_storage:5.3::el9	python3-rgw	—
python3-rgw	affected	Red Hat:ceph_storage:5.3::el8	python3-rgw	—
python3-rgw-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	python3-rgw-debuginfo	—
python3-rgw-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	python3-rgw-debuginfo	—
rbd-fuse-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	rbd-fuse-debuginfo	—
rbd-fuse-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	rbd-fuse-debuginfo	—
rbd-mirror	affected	Red Hat:ceph_storage:5.3::el8	rbd-mirror	—
rbd-mirror-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	rbd-mirror-debuginfo	—
rbd-mirror-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	rbd-mirror-debuginfo	—
rbd-nbd	affected	Red Hat:ceph_storage:5.3::el8	rbd-nbd	—
rbd-nbd	affected	Red Hat:ceph_storage:5.3::el9	rbd-nbd	—
rbd-nbd-debuginfo	affected	Red Hat:ceph_storage:5.3::el8	rbd-nbd-debuginfo	—
rbd-nbd-debuginfo	affected	Red Hat:ceph_storage:5.3::el9	rbd-nbd-debuginfo	—

Upstream advisory

openSUSE-SU-2024:12810-1

Open SourcePoC exploit2024-06-15

kubernetes1.25-apiserver-1.25.7-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.25	affected	openSUSE:Tumbleweed	kubernetes1.25	—

Upstream advisory

GO-2024-2746

Open SourcePoC exploit2024-06-04

Kubernetes allows bypassing mountable secrets policy imposed by the ServiceAccount admission plugin in k8s.io/kubernetes

Affected products

Product	Status	Vendor	Package	Ecosystem
argocd-image-updater	affected	wolfi	argocd-image-updater	—
argocd-image-updater	affected	chainguard	argocd-image-updater	—
argocd-image-updater-fips	affected	chainguard	argocd-image-updater-fips	—
aws-ebs-csi-driver	affected	chainguard	aws-ebs-csi-driver	—
aws-efs-csi-driver	affected	chainguard	aws-efs-csi-driver	—
aws-efs-csi-driver	affected	wolfi	aws-efs-csi-driver	—
aws-efs-csi-driver-fips	affected	chainguard	aws-efs-csi-driver-fips	—
ip-masq-agent	affected	wolfi	ip-masq-agent	—
ip-masq-agent	affected	chainguard	ip-masq-agent	—
kubeflow-pipelines	affected	chainguard	kubeflow-pipelines	—
kubeflow-pipelines	affected	wolfi	kubeflow-pipelines	—
kubernetes	affected	k8s.io	k8s.io/kubernetes	—
kubernetes-1.28	affected	chainguard	kubernetes-1.28	—
kubernetes-1.28	affected	wolfi	kubernetes-1.28	—
kubernetes-csi-driver-hostpath	affected	wolfi	kubernetes-csi-driver-hostpath	—
kubernetes-csi-driver-hostpath	affected	chainguard	kubernetes-csi-driver-hostpath	—
kubernetes-dns-node-cache	affected	wolfi	kubernetes-dns-node-cache	—
kubernetes-dns-node-cache	affected	chainguard	kubernetes-dns-node-cache	—
local-static-provisioner	affected	wolfi	local-static-provisioner	—
local-static-provisioner	affected	chainguard	local-static-provisioner	—
nodetaint	affected	chainguard	nodetaint	—
nodetaint	affected	wolfi	nodetaint	—
rancher-webhook-0.4	affected	chainguard	rancher-webhook-0.4	—
rancher-webhook-fips-0.4	affected	chainguard	rancher-webhook-fips-0.4	—
spark-operator	affected	wolfi	spark-operator	—
spark-operator	affected	chainguard	spark-operator	—

Upstream advisory

openSUSE-SU-2024:13003-1

Open SourcePoC exploit2024-06-15

kubernetes1.23-apiserver-1.23.17-4.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.23	affected	openSUSE:Tumbleweed	kubernetes1.23	—

Upstream advisory

openSUSE-SU-2024:13011-1

Open SourcePoC exploit2024-06-15

kubernetes1.24-apiserver-1.24.15-2.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.24	affected	openSUSE:Tumbleweed	kubernetes1.24	—

Upstream advisory

RHSA-2024:0045

Open SourcePoC exploitHIGH2024-06-27

Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security update

Affected products

Product	Status	Vendor	Package	Ecosystem
butane	affected	Red Hat:openshift:4.16::el8	butane	—
butane-debuginfo	affected	Red Hat:openshift:4.16::el8	butane-debuginfo	—
butane-debugsource	affected	Red Hat:openshift:4.16::el8	butane-debugsource	—
butane-redistributable	affected	Red Hat:openshift:4.16::el8	butane-redistributable	—
cri-o	affected	Red Hat:openshift:4.16::el8	cri-o	—
cri-o	affected	Red Hat:openshift:4.16::el9	cri-o	—
cri-o-debuginfo	affected	Red Hat:openshift:4.16::el8	cri-o-debuginfo	—
cri-o-debuginfo	affected	Red Hat:openshift:4.16::el9	cri-o-debuginfo	—
cri-o-debugsource	affected	Red Hat:openshift:4.16::el9	cri-o-debugsource	—
cri-o-debugsource	affected	Red Hat:openshift:4.16::el8	cri-o-debugsource	—
cri-tools	affected	Red Hat:openshift:4.16::el8	cri-tools	—
cri-tools	affected	Red Hat:openshift:4.16::el9	cri-tools	—
cri-tools-debuginfo	affected	Red Hat:openshift:4.16::el9	cri-tools-debuginfo	—
cri-tools-debuginfo	affected	Red Hat:openshift:4.16::el8	cri-tools-debuginfo	—
cri-tools-debugsource	affected	Red Hat:openshift:4.16::el9	cri-tools-debugsource	—
cri-tools-debugsource	affected	Red Hat:openshift:4.16::el8	cri-tools-debugsource	—
golang-github-prometheus-promu	affected	Red Hat:openshift:4.16::el9	golang-github-prometheus-promu	—
ignition	affected	Red Hat:openshift:4.16::el9	ignition	—
ignition-debuginfo	affected	Red Hat:openshift:4.16::el9	ignition-debuginfo	—
ignition-debugsource	affected	Red Hat:openshift:4.16::el9	ignition-debugsource	—
ignition-validate	affected	Red Hat:openshift:4.16::el9	ignition-validate	—
ignition-validate-debuginfo	affected	Red Hat:openshift:4.16::el9	ignition-validate-debuginfo	—
openshift	affected	Red Hat:openshift:4.16::el8	openshift	—
openshift	affected	Red Hat:openshift:4.16::el9	openshift	—
openshift-hyperkube	affected	Red Hat:openshift:4.16::el9	openshift-hyperkube	—
openshift-hyperkube	affected	Red Hat:openshift:4.16::el8	openshift-hyperkube	—
openshift-kube-apiserver	affected	Red Hat:openshift:4.16::el8	openshift-kube-apiserver	—
openshift-kube-apiserver	affected	Red Hat:openshift:4.16::el9	openshift-kube-apiserver	—
openshift-kube-controller-manager	affected	Red Hat:openshift:4.16::el8	openshift-kube-controller-manager	—
openshift-kube-controller-manager	affected	Red Hat:openshift:4.16::el9	openshift-kube-controller-manager	—
openshift-kubelet	affected	Red Hat:openshift:4.16::el9	openshift-kubelet	—
openshift-kubelet	affected	Red Hat:openshift:4.16::el8	openshift-kubelet	—
openshift-kube-scheduler	affected	Red Hat:openshift:4.16::el9	openshift-kube-scheduler	—
openshift-kube-scheduler	affected	Red Hat:openshift:4.16::el8	openshift-kube-scheduler	—
openshift-prometheus-promu	affected	Red Hat:openshift:4.16::el9	openshift-prometheus-promu	—
ose-aws-ecr-image-credential-provider	affected	Red Hat:openshift:4.16::el9	ose-aws-ecr-image-credential-provider	—
ose-aws-ecr-image-credential-provider	affected	Red Hat:openshift:4.16::el8	ose-aws-ecr-image-credential-provider	—
ose-azure-acr-image-credential-provider	affected	Red Hat:openshift:4.16::el8	ose-azure-acr-image-credential-provider	—
ose-azure-acr-image-credential-provider	affected	Red Hat:openshift:4.16::el9	ose-azure-acr-image-credential-provider	—
ose-gcp-gcr-image-credential-provider	affected	Red Hat:openshift:4.16::el9	ose-gcp-gcr-image-credential-provider	—
ose-gcp-gcr-image-credential-provider	affected	Red Hat:openshift:4.16::el8	ose-gcp-gcr-image-credential-provider	—
podman	affected	Red Hat:openshift:4.16::el9	podman	—
podman	affected	Red Hat:openshift:4.16::el8	podman	—
podman-catatonit	affected	Red Hat:openshift:4.16::el8	podman-catatonit	—
podman-catatonit-debuginfo	affected	Red Hat:openshift:4.16::el8	podman-catatonit-debuginfo	—
podman-debuginfo	affected	Red Hat:openshift:4.16::el9	podman-debuginfo	—
podman-debuginfo	affected	Red Hat:openshift:4.16::el8	podman-debuginfo	—
podman-debugsource	affected	Red Hat:openshift:4.16::el8	podman-debugsource	—
podman-debugsource	affected	Red Hat:openshift:4.16::el9	podman-debugsource	—
podman-docker	affected	Red Hat:openshift:4.16::el9	podman-docker	—
podman-docker	affected	Red Hat:openshift:4.16::el8	podman-docker	—
podman-gvproxy	affected	Red Hat:openshift:4.16::el8	podman-gvproxy	—
podman-gvproxy-debuginfo	affected	Red Hat:openshift:4.16::el8	podman-gvproxy-debuginfo	—
podman-plugins	affected	Red Hat:openshift:4.16::el8	podman-plugins	—
podman-plugins	affected	Red Hat:openshift:4.16::el9	podman-plugins	—
podman-plugins-debuginfo	affected	Red Hat:openshift:4.16::el8	podman-plugins-debuginfo	—
podman-plugins-debuginfo	affected	Red Hat:openshift:4.16::el9	podman-plugins-debuginfo	—
podman-remote	affected	Red Hat:openshift:4.16::el9	podman-remote	—
podman-remote	affected	Red Hat:openshift:4.16::el8	podman-remote	—
podman-remote-debuginfo	affected	Red Hat:openshift:4.16::el9	podman-remote-debuginfo	—
podman-remote-debuginfo	affected	Red Hat:openshift:4.16::el8	podman-remote-debuginfo	—
podman-tests	affected	Red Hat:openshift:4.16::el8	podman-tests	—
podman-tests	affected	Red Hat:openshift:4.16::el9	podman-tests	—
python3-eventlet	affected	Red Hat:openshift_ironic:4.16::el9	python3-eventlet	—
python-eventlet	affected	Red Hat:openshift_ironic:4.16::el9	python-eventlet	—
runc	affected	Red Hat:openshift:4.16::el8	runc	—
runc	affected	Red Hat:openshift:4.16::el9	runc	—
runc-debuginfo	affected	Red Hat:openshift:4.16::el8	runc-debuginfo	—
runc-debuginfo	affected	Red Hat:openshift:4.16::el9	runc-debuginfo	—
runc-debugsource	affected	Red Hat:openshift:4.16::el9	runc-debugsource	—
runc-debugsource	affected	Red Hat:openshift:4.16::el8	runc-debugsource	—
skopeo	affected	Red Hat:openshift:4.16::el8	skopeo	—
skopeo	affected	Red Hat:openshift:4.16::el9	skopeo	—
skopeo-debuginfo	affected	Red Hat:openshift:4.16::el9	skopeo-debuginfo	—
skopeo-debugsource	affected	Red Hat:openshift:4.16::el9	skopeo-debugsource	—
skopeo-tests	affected	Red Hat:openshift:4.16::el9	skopeo-tests	—
skopeo-tests	affected	Red Hat:openshift:4.16::el8	skopeo-tests	—

Upstream advisory

GO-2023-2331

Open SourcePoC exploitCRITICAL2024-06-27

Denial of service in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc

Affected products

Product	Status	Vendor	Package	Ecosystem
aws-ebs-csi-driver	affected	chainguard	aws-ebs-csi-driver	—
buildkitd	affected	wolfi	buildkitd	—
buildkitd	affected	chainguard	buildkitd	—
contrib/instrumentation/google.golang.org/grpc/otelgrpc	affected	go.opentelemetry.io	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	—
cri-tools	affected	wolfi	cri-tools	—
cri-tools	affected	chainguard	cri-tools	—
docker-compose	affected	chainguard	docker-compose	—
docker-compose	affected	wolfi	docker-compose	—
envoy-ratelimit	affected	wolfi	envoy-ratelimit	—
envoy-ratelimit	affected	chainguard	envoy-ratelimit	—
k3s	affected	wolfi	k3s	—
k3s	affected	chainguard	k3s	—
kine	affected	chainguard	kine	—
kine	affected	wolfi	kine	—
kube-oidc-proxy	affected	chainguard	kube-oidc-proxy	—
kubernetes-1.27	affected	wolfi	kubernetes-1.27	—
kubernetes-1.28	affected	chainguard	kubernetes-1.28	—
kubernetes-1.28	affected	wolfi	kubernetes-1.28	—
kubernetes-1.29	affected	chainguard	kubernetes-1.29	—
kubernetes-1.29	affected	wolfi	kubernetes-1.29	—
kubernetes-csi-external-resizer	affected	chainguard	kubernetes-csi-external-resizer	—
kubernetes-csi-external-resizer	affected	wolfi	kubernetes-csi-external-resizer	—
kubescape	affected	chainguard	kubescape	—
kubescape	affected	wolfi	kubescape	—
kubevela	affected	chainguard	kubevela	—
kubevela	affected	wolfi	kubevela	—
metrics-server	affected	chainguard	metrics-server	—
metrics-server	affected	wolfi	metrics-server	—
metrics-server-fips	affected	chainguard	metrics-server-fips	—
prometheus-adapter-0.10	affected	chainguard	prometheus-adapter-0.10	—
prometheus-adapter-fips	affected	chainguard	prometheus-adapter-fips	—
prometheus-adapter-fips-0.10	affected	chainguard	prometheus-adapter-fips-0.10	—
rancher-webhook-0.4	affected	chainguard	rancher-webhook-0.4	—
rancher-webhook-fips-0.4	affected	chainguard	rancher-webhook-fips-0.4	—
temporal	affected	wolfi	temporal	—
temporal	affected	chainguard	temporal	—
temporal-fips	affected	chainguard	temporal-fips	—
temporal-server	affected	chainguard	temporal-server	—
temporal-server	affected	wolfi	temporal-server	—
temporal-server-fips	affected	chainguard	temporal-server-fips	—
volume-modifier-for-k8s	affected	wolfi	volume-modifier-for-k8s	—
volume-modifier-for-k8s	affected	chainguard	volume-modifier-for-k8s	—

Upstream advisory

OESA-2024-1770

Open SourcePoC exploit2024-06-28

golang security update

Affected products

Product	Status	Vendor	Package	Ecosystem
golang	affected	openEuler:24.03-LTS	golang	—

Upstream advisory

MGASA-2024-0217

Open SourcePoC exploit2024-06-14

Updated golang packages fix security vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
golang	affected	Mageia:9	golang	—

Upstream advisory

GHSA-7jmw-8259-q9jx

Open SourcePoC exploitNONE2024-06-11

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

Affected products

Product	Status	Vendor	Package	Ecosystem
github.com/golang/go	affected	go	—	—
github.com/traefik/traefik/v3	affected	go	—	—
go	affected	go	—	—
Go	affected	go	—	—
net	affected	go	—	—
net/netip	affected	Go	—	—
traefik	affected	chainguard	traefik	—
traefik	affected	wolfi	traefik	—
traefik-fips	affected	chainguard	traefik-fips	—
traefik/traefik	affected	github.com	—	—
traefik/traefik	affected	github.com	github.com/traefik/traefik	—
traefik/traefik/v2	affected	github.com	—	—
traefik/traefik/v2	affected	github.com	github.com/traefik/traefik/v2	—
traefik/traefik/v3	affected	github.com	—	—
traefik/traefik/v3	affected	github.com	github.com/traefik/traefik/v3	—

Upstream advisory

GHSA-7jmw-8259-q9jx

GooglePoC exploitNONE2024-06-11

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

Affected products

Product	Status	Vendor	Package	Ecosystem
traefik/traefik	affected	github.com	github.com/traefik/traefik	—
traefik/traefik/v2	affected	github.com	github.com/traefik/traefik/v2	—
traefik/traefik/v3	affected	github.com	github.com/traefik/traefik/v3	—

Upstream advisory

BIT-golang-2024-24790

Open SourcePoC exploitCRITICAL2024-06-07

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

Affected products

Product	Status	Vendor	Package	Ecosystem
golang	affected	Bitnami	golang	—

Upstream advisory

GHSA-49gw-vxvf-fc2g

Open SourcePoC exploitCRITICAL2024-06-05

GHSA-49gw-vxvf-fc2g

Affected products

Product	Status	Vendor	Package	Ecosystem
aactl	affected	chainguard	aactl	—
aactl	affected	wolfi	aactl	—
actions-runner-controller	affected	wolfi	actions-runner-controller	—
actions-runner-controller	affected	chainguard	actions-runner-controller	—
actions-runner-controller-fips	affected	chainguard	actions-runner-controller-fips	—
addon-resizer	affected	wolfi	addon-resizer	—
addon-resizer	affected	chainguard	addon-resizer	—
addon-resizer-fips	affected	chainguard	addon-resizer-fips	—
age	affected	chainguard	age	—
age	affected	wolfi	age	—
amass	affected	chainguard	amass	—
amass	affected	wolfi	amass	—
argo-cd-2.9	affected	wolfi	argo-cd-2.9	—
argo-cd-2.9	affected	chainguard	argo-cd-2.9	—
argo-cd-fips-2.10	affected	chainguard	argo-cd-fips-2.10	—
argo-cd-fips-2.8	affected	chainguard	argo-cd-fips-2.8	—
argo-cd-fips-2.9	affected	chainguard	argo-cd-fips-2.9	—
argo-workflows	affected	wolfi	argo-workflows	—
argo-workflows	affected	chainguard	argo-workflows	—
argo-workflows-fips	affected	chainguard	argo-workflows-fips	—
atlantis	affected	wolfi	atlantis	—
atlantis	affected	chainguard	atlantis	—
atlantis-fips	affected	chainguard	atlantis-fips	—
aws-ebs-csi-driver	affected	wolfi	aws-ebs-csi-driver	—
aws-ebs-csi-driver	affected	chainguard	aws-ebs-csi-driver	—
aws-ebs-csi-driver-fips	affected	chainguard	aws-ebs-csi-driver-fips	—
aws-efs-csi-driver-fips	affected	chainguard	aws-efs-csi-driver-fips	—
aws-flb-cloudwatch	affected	wolfi	aws-flb-cloudwatch	—
aws-flb-cloudwatch	affected	chainguard	aws-flb-cloudwatch	—
aws-flb-cloudwatch-fips	affected	chainguard	aws-flb-cloudwatch-fips	—
aws-flb-firehose	affected	chainguard	aws-flb-firehose	—
aws-flb-firehose	affected	wolfi	aws-flb-firehose	—
aws-flb-firehose-fips	affected	chainguard	aws-flb-firehose-fips	—
aws-flb-kinesis	affected	wolfi	aws-flb-kinesis	—
aws-flb-kinesis	affected	chainguard	aws-flb-kinesis	—
aws-flb-kinesis-fips	affected	chainguard	aws-flb-kinesis-fips	—
aws-load-balancer-controller	affected	chainguard	aws-load-balancer-controller	—
aws-load-balancer-controller	affected	wolfi	aws-load-balancer-controller	—
aws-load-balancer-controller-fips	affected	chainguard	aws-load-balancer-controller-fips	—
azure-aad-pod-identity-mic	affected	chainguard	azure-aad-pod-identity-mic	—
bank-vaults	affected	chainguard	bank-vaults	—
bank-vaults	affected	wolfi	bank-vaults	—
bank-vaults-fips	affected	chainguard	bank-vaults-fips	—
bazelisk	affected	chainguard	bazelisk	—
bazelisk	affected	wolfi	bazelisk	—
bom	affected	chainguard	bom	—
bom	affected	wolfi	bom	—
boring-registry	affected	chainguard	boring-registry	—
boring-registry	affected	wolfi	boring-registry	—
boring-registry-fips	affected	chainguard	boring-registry-fips	—
buf	affected	wolfi	buf	—
buf	affected	chainguard	buf	—
buildah	affected	wolfi	buildah	—
buildah	affected	chainguard	buildah	—
buildkitd	affected	chainguard	buildkitd	—
buildkitd	affected	wolfi	buildkitd	—
caddy	affected	chainguard	caddy	—
caddy	affected	wolfi	caddy	—
caddy-fips	affected	chainguard	caddy-fips	—
cadvisor	affected	chainguard	cadvisor	—
cadvisor	affected	wolfi	cadvisor	—
cadvisor-fips	affected	chainguard	cadvisor-fips	—
calico-fips-3.25	affected	chainguard	calico-fips-3.25	—
capslock	affected	wolfi	capslock	—
capslock	affected	chainguard	capslock	—
cass-operator	affected	wolfi	cass-operator	—
cass-operator	affected	chainguard	cass-operator	—
cass-operator-fips	affected	chainguard	cass-operator-fips	—
cass-operator-fips-no-pvc-delete	affected	chainguard	cass-operator-fips-no-pvc-delete	—
cert-exporter	affected	wolfi	cert-exporter	—
cert-exporter	affected	chainguard	cert-exporter	—
cert-exporter-fips	affected	chainguard	cert-exporter-fips	—
certificate-transparency	affected	wolfi	certificate-transparency	—
certificate-transparency	affected	chainguard	certificate-transparency	—
certificate-transparency-fips	affected	chainguard	certificate-transparency-fips	—
cert-manager-1.12	affected	wolfi	cert-manager-1.12	—
cert-manager-1.12	affected	chainguard	cert-manager-1.12	—
cert-manager-1.13	affected	chainguard	cert-manager-1.13	—
cert-manager-1.13	affected	wolfi	cert-manager-1.13	—
cert-manager-1.14	affected	chainguard	cert-manager-1.14	—
cert-manager-1.14	affected	wolfi	cert-manager-1.14	—
cert-manager-fips-1.12	affected	chainguard	cert-manager-fips-1.12	—
cert-manager-fips-1.13	affected	chainguard	cert-manager-fips-1.13	—
cert-manager-fips-1.14	affected	chainguard	cert-manager-fips-1.14	—
cert-manager-webhook-pdns	affected	chainguard	cert-manager-webhook-pdns	—
cert-manager-webhook-pdns	affected	wolfi	cert-manager-webhook-pdns	—
cert-manager-webhook-pdns-fips	affected	chainguard	cert-manager-webhook-pdns-fips	—
cfssl	affected	wolfi	cfssl	—
cfssl	affected	chainguard	cfssl	—
chainctl	affected	chainguard	chainctl	—
chartmuseum	affected	wolfi	chartmuseum	—
chartmuseum	affected	chainguard	chartmuseum	—
chezmoi	affected	wolfi	chezmoi	—
chezmoi	affected	chainguard	chezmoi	—
cilium-1.14	affected	wolfi	cilium-1.14	—
cilium-1.14	affected	chainguard	cilium-1.14	—
cilium-1.15	affected	chainguard	cilium-1.15	—
cilium-1.15	affected	wolfi	cilium-1.15	—
cilium-cli	affected	chainguard	cilium-cli	—
cilium-cli	affected	wolfi	cilium-cli	—
cilium-fips-1.15	affected	chainguard	cilium-fips-1.15	—
cloudflared	affected	wolfi	cloudflared	—
cloudflared	affected	chainguard	cloudflared	—
cloud-sql-proxy	affected	wolfi	cloud-sql-proxy	—
cloud-sql-proxy	affected	chainguard	cloud-sql-proxy	—
cloud-sql-proxy-fips	affected	chainguard	cloud-sql-proxy-fips	—
cluster-api-controller	affected	wolfi	cluster-api-controller	—
cluster-api-controller	affected	chainguard	cluster-api-controller	—
cluster-autoscaler-1.25	affected	wolfi	cluster-autoscaler-1.25	—
cluster-autoscaler-1.25	affected	chainguard	cluster-autoscaler-1.25	—
cluster-autoscaler-1.26	affected	wolfi	cluster-autoscaler-1.26	—
cluster-autoscaler-1.26	affected	chainguard	cluster-autoscaler-1.26	—
cluster-autoscaler-1.27	affected	chainguard	cluster-autoscaler-1.27	—
cluster-autoscaler-1.27	affected	wolfi	cluster-autoscaler-1.27	—
cluster-autoscaler-1.28	affected	chainguard	cluster-autoscaler-1.28	—
cluster-autoscaler-1.28	affected	wolfi	cluster-autoscaler-1.28	—
cluster-autoscaler-1.29	affected	chainguard	cluster-autoscaler-1.29	—
cluster-autoscaler-1.29	affected	wolfi	cluster-autoscaler-1.29	—
cluster-autoscaler-fips-1.26	affected	chainguard	cluster-autoscaler-fips-1.26	—
cluster-autoscaler-fips-1.27	affected	chainguard	cluster-autoscaler-fips-1.27	—
cluster-autoscaler-fips-1.28	affected	chainguard	cluster-autoscaler-fips-1.28	—
cluster-autoscaler-fips-1.29	affected	chainguard	cluster-autoscaler-fips-1.29	—
clusterctl	affected	chainguard	clusterctl	—
clusterctl	affected	wolfi	clusterctl	—
cluster-proportional-autoscaler	affected	chainguard	cluster-proportional-autoscaler	—
cluster-proportional-autoscaler	affected	wolfi	cluster-proportional-autoscaler	—
cni-plugins	affected	chainguard	cni-plugins	—
cni-plugins	affected	wolfi	cni-plugins	—
cni-plugins-fips	affected	chainguard	cni-plugins-fips	—
configmap-reload	affected	wolfi	configmap-reload	—
configmap-reload	affected	chainguard	configmap-reload	—
configmap-reload-fips	affected	chainguard	configmap-reload-fips	—
configmap-reload-fips-0.11	affected	chainguard	configmap-reload-fips-0.11	—
confluent-common-docker	affected	wolfi	confluent-common-docker	—
confluent-common-docker	affected	chainguard	confluent-common-docker	—
conftest	affected	chainguard	conftest	—
conftest	affected	wolfi	conftest	—
conftest-fips	affected	chainguard	conftest-fips	—
consul-1.15	affected	wolfi	consul-1.15	—
consul-1.15	affected	chainguard	consul-1.15	—
consul-1.16	affected	chainguard	consul-1.16	—
consul-1.16	affected	wolfi	consul-1.16	—
consul-1.17	affected	chainguard	consul-1.17	—
consul-1.17-fips	affected	chainguard	consul-1.17-fips	—
controller-gen	affected	chainguard	controller-gen	—
controller-gen	affected	wolfi	controller-gen	—
coredns	affected	wolfi	coredns	—
coredns	affected	chainguard	coredns	—
coredns-fips	affected	chainguard	coredns-fips	—
cortex	affected	wolfi	cortex	—
cortex	affected	chainguard	cortex	—
cortex-fips	affected	chainguard	cortex-fips	—
cosign	affected	wolfi	cosign	—
cosign	affected	chainguard	cosign	—
cosign-fips	affected	chainguard	cosign-fips	—
cosign-fips	affected	wolfi	cosign-fips	—
crane	affected	chainguard	crane	—
crane	affected	wolfi	crane	—
cri-tools	affected	wolfi	cri-tools	—
cri-tools	affected	chainguard	cri-tools	—
croc	affected	chainguard	croc	—
croc	affected	wolfi	croc	—
crossplane	affected	chainguard	crossplane	—
crossplane	affected	wolfi	crossplane	—
crossplane-provider-aws	affected	wolfi	crossplane-provider-aws	—
crossplane-provider-aws	affected	chainguard	crossplane-provider-aws	—
crossplane-provider-azure	affected	chainguard	crossplane-provider-azure	—
crossplane-provider-azure	affected	wolfi	crossplane-provider-azure	—
crossplane-provider-gcp	affected	chainguard	crossplane-provider-gcp	—
crossplane-provider-gcp	affected	wolfi	crossplane-provider-gcp	—
ctop	affected	wolfi	ctop	—
ctop	affected	chainguard	ctop	—
cue-fips	affected	chainguard	cue-fips	—
dagdotdev	affected	wolfi	dagdotdev	—
dagdotdev	affected	chainguard	dagdotdev	—
dagger	affected	chainguard	dagger	—
dagger	affected	wolfi	dagger	—
dask-gateway	affected	chainguard	dask-gateway	—
dask-gateway	affected	wolfi	dask-gateway	—
datadog-agent	affected	wolfi	datadog-agent	—
datadog-agent	affected	chainguard	datadog-agent	—
dataplaneapi	affected	chainguard	dataplaneapi	—
dataplaneapi	affected	wolfi	dataplaneapi	—
dataplaneapi-fips	affected	chainguard	dataplaneapi-fips	—
delve	affected	chainguard	delve	—
delve	affected	wolfi	delve	—
dex	affected	wolfi	dex	—
dex	affected	chainguard	dex	—
dex-fips	affected	chainguard	dex-fips	—
dex-k8s-authenticator	affected	chainguard	dex-k8s-authenticator	—
dgraph	affected	wolfi	dgraph	—
dgraph	affected	chainguard	dgraph	—
direnv	affected	chainguard	direnv	—
direnv	affected	wolfi	direnv	—
dive	affected	chainguard	dive	—
dive	affected	wolfi	dive	—
docker	affected	chainguard	docker	—
docker	affected	wolfi	docker	—
docker-compose	affected	wolfi	docker-compose	—
docker-compose	affected	chainguard	docker-compose	—
docker-credential-acr-env	affected	chainguard	docker-credential-acr-env	—
docker-credential-acr-env	affected	wolfi	docker-credential-acr-env	—
docker-credential-ecr-login	affected	chainguard	docker-credential-ecr-login	—
docker-credential-ecr-login	affected	wolfi	docker-credential-ecr-login	—
docker-credential-gcr	affected	chainguard	docker-credential-gcr	—
docker-credential-gcr	affected	wolfi	docker-credential-gcr	—
dockerize	affected	wolfi	dockerize	—
dockerize	affected	chainguard	dockerize	—
dockerize-fips	affected	chainguard	dockerize-fips	—
doppler-kubernetes-operator	affected	wolfi	doppler-kubernetes-operator	—
doppler-kubernetes-operator	affected	chainguard	doppler-kubernetes-operator	—
dynamic-localpv-provisioner	affected	wolfi	dynamic-localpv-provisioner	—
dynamic-localpv-provisioner	affected	chainguard	dynamic-localpv-provisioner	—
dynamic-localpv-provisioner-fips	affected	chainguard	dynamic-localpv-provisioner-fips	—
envoy-ratelimit	affected	wolfi	envoy-ratelimit	—
envoy-ratelimit	affected	chainguard	envoy-ratelimit	—
envoy-ratelimit-fips	affected	chainguard	envoy-ratelimit-fips	—
etcd-3.4	affected	chainguard	etcd-3.4	—
etcd-3.5	affected	chainguard	etcd-3.5	—
etcd-3.5	affected	wolfi	etcd-3.5	—
etcd-fips-3.4	affected	chainguard	etcd-fips-3.4	—
etcd-fips-3.5	affected	chainguard	etcd-fips-3.5	—
external-dns	affected	chainguard	external-dns	—
external-dns	affected	wolfi	external-dns	—
external-dns-fips	affected	chainguard	external-dns-fips	—
external-secrets-0.7	affected	chainguard	external-secrets-0.7	—
external-secrets-fips	affected	chainguard	external-secrets-fips	—
extism	affected	wolfi	extism	—
extism	affected	chainguard	extism	—
falcoctl	affected	wolfi	falcoctl	—
falcoctl	affected	chainguard	falcoctl	—
falcoctl-fips	affected	chainguard	falcoctl-fips	—
falcoctl-fips-0.4	affected	chainguard	falcoctl-fips-0.4	—
falcosidekick	affected	wolfi	falcosidekick	—
falcosidekick	affected	chainguard	falcosidekick	—
falcosidekick-fips	affected	chainguard	falcosidekick-fips	—
ferretdb	affected	chainguard	ferretdb	—
ferretdb	affected	wolfi	ferretdb	—
filebeat-7.17	affected	chainguard	filebeat-7.17	—
filebeat-7.17-fips	affected	chainguard	filebeat-7.17-fips	—
filebeat-fips	affected	chainguard	filebeat-fips	—
flannel	affected	wolfi	flannel	—
flannel	affected	chainguard	flannel	—
flannel-cni-plugin	affected	chainguard	flannel-cni-plugin	—
flannel-cni-plugin	affected	wolfi	flannel-cni-plugin	—
fluent-bit-plugin-loki	affected	chainguard	fluent-bit-plugin-loki	—
fluent-bit-plugin-loki	affected	wolfi	fluent-bit-plugin-loki	—
fluent-operator	affected	chainguard	fluent-operator	—
fluent-operator	affected	wolfi	fluent-operator	—
fluent-operator-fips	affected	chainguard	fluent-operator-fips	—
flux	affected	chainguard	flux	—
flux	affected	wolfi	flux	—
flux-helm-controller	affected	wolfi	flux-helm-controller	—
flux-helm-controller	affected	chainguard	flux-helm-controller	—
flux-image-automation-controller	affected	chainguard	flux-image-automation-controller	—
flux-image-automation-controller	affected	wolfi	flux-image-automation-controller	—
flux-image-reflector-controller	affected	chainguard	flux-image-reflector-controller	—
flux-image-reflector-controller	affected	wolfi	flux-image-reflector-controller	—
flux-kustomize-controller	affected	wolfi	flux-kustomize-controller	—
flux-kustomize-controller	affected	chainguard	flux-kustomize-controller	—
flux-notification-controller	affected	chainguard	flux-notification-controller	—
flux-notification-controller	affected	wolfi	flux-notification-controller	—
flux-source-controller	affected	wolfi	flux-source-controller	—
flux-source-controller	affected	chainguard	flux-source-controller	—
flyte	affected	wolfi	flyte	—
flyte	affected	chainguard	flyte	—
fq	affected	wolfi	fq	—
fq	affected	chainguard	fq	—
frp	affected	chainguard	frp	—
frp	affected	wolfi	frp	—
fulcio	affected	wolfi	fulcio	—
fulcio	affected	chainguard	fulcio	—
fulcio-fips	affected	chainguard	fulcio-fips	—
fuse-overlayfs-snapshotter	affected	wolfi	fuse-overlayfs-snapshotter	—
fuse-overlayfs-snapshotter	affected	chainguard	fuse-overlayfs-snapshotter	—
gatekeeper-3.15	affected	chainguard	gatekeeper-3.15	—
gatekeeper-3.15	affected	wolfi	gatekeeper-3.15	—
gatekeeper-3.16	affected	chainguard	gatekeeper-3.16	—
gatekeeper-3.16	affected	wolfi	gatekeeper-3.16	—
gatekeeper-fips-3.13	affected	chainguard	gatekeeper-fips-3.13	—
gatekeeper-fips-3.14	affected	chainguard	gatekeeper-fips-3.14	—
gatekeeper-fips-3.15	affected	chainguard	gatekeeper-fips-3.15	—
gcsfuse	affected	chainguard	gcsfuse	—
gcsfuse	affected	wolfi	gcsfuse	—
gh	affected	wolfi	gh	—
gh	affected	chainguard	gh	—
ghaudit	affected	chainguard	ghaudit	—
ghaudit	affected	wolfi	ghaudit	—
gitlab-kas	affected	wolfi	gitlab-kas	—
gitlab-kas	affected	chainguard	gitlab-kas	—
gitlab-pages	affected	chainguard	gitlab-pages	—
gitlab-pages	affected	wolfi	gitlab-pages	—
gitlab-rails-ee-17.0	affected	chainguard	gitlab-rails-ee-17.0	—
gitlab-rails-ee-17.3	affected	chainguard	gitlab-rails-ee-17.3	—
gitlab-rails-ee-fips-17.0	affected	chainguard	gitlab-rails-ee-fips-17.0	—
gitlab-rails-ee-fips-17.1	affected	chainguard	gitlab-rails-ee-fips-17.1	—
gitlab-runner	affected	wolfi	gitlab-runner	—
gitlab-runner	affected	chainguard	gitlab-runner	—
gitleaks	affected	chainguard	gitleaks	—
gitleaks	affected	wolfi	gitleaks	—
git-lfs	affected	wolfi	git-lfs	—
git-lfs	affected	chainguard	git-lfs	—
git-lfs-fips	affected	chainguard	git-lfs-fips	—
gitness	affected	wolfi	gitness	—
gitness	affected	chainguard	gitness	—
gitsign	affected	chainguard	gitsign	—
gitsign	affected	wolfi	gitsign	—
gke-gcloud-auth-plugin	affected	wolfi	gke-gcloud-auth-plugin	—
gke-gcloud-auth-plugin	affected	chainguard	gke-gcloud-auth-plugin	—
glab	affected	wolfi	glab	—
glab	affected	chainguard	glab	—
go-1.21	affected	wolfi	go-1.21	—
go-1.21	affected	chainguard	go-1.21	—
go-1.22	affected	wolfi	go-1.22	—
go-1.22	affected	chainguard	go-1.22	—
go-bindata	affected	chainguard	go-bindata	—
go-bindata	affected	wolfi	go-bindata	—
gobump	affected	wolfi	gobump	—
gobump	affected	chainguard	gobump	—
gobuster	affected	chainguard	gobuster	—
gobuster	affected	wolfi	gobuster	—
go-fips-1.21	affected	chainguard	go-fips-1.21	—
go-fips-1.21	affected	wolfi	go-fips-1.21	—
go-ipfs-fips	affected	chainguard	go-ipfs-fips	—
golangci-lint	affected	chainguard	golangci-lint	—
golangci-lint	affected	wolfi	golangci-lint	—
go-licenses	affected	wolfi	go-licenses	—
go-licenses	affected	chainguard	go-licenses	—
go-md2man	affected	chainguard	go-md2man	—
go-md2man	affected	wolfi	go-md2man	—
gomplate	affected	chainguard	gomplate	—
gomplate	affected	wolfi	gomplate	—
gomplate-fips	affected	chainguard	gomplate-fips	—
gops	affected	chainguard	gops	—
gops	affected	wolfi	gops	—
gostatsd	affected	chainguard	gostatsd	—
gostatsd	affected	wolfi	gostatsd	—
gosu	affected	wolfi	gosu	—
gosu	affected	chainguard	gosu	—
gosu-1.11	affected	chainguard	gosu-1.11	—
govulncheck	affected	wolfi	govulncheck	—
govulncheck	affected	chainguard	govulncheck	—
gpu-feature-discovery	affected	chainguard	gpu-feature-discovery	—
gpu-operator	affected	chainguard	gpu-operator	—
grafana-10.4	affected	chainguard	grafana-10.4	—
grafana-10.4	affected	wolfi	grafana-10.4	—
grafana-11.0	affected	wolfi	grafana-11.0	—
grafana-11.0	affected	chainguard	grafana-11.0	—
grafana-9	affected	chainguard	grafana-9	—
grafana-9-fips	affected	chainguard	grafana-9-fips	—
grafana-agent-operator	affected	chainguard	grafana-agent-operator	—
grafana-agent-operator	affected	wolfi	grafana-agent-operator	—
grafana-fips-10.3	affected	chainguard	grafana-fips-10.3	—
grafana-fips-10.4	affected	chainguard	grafana-fips-10.4	—
grafana-mimir	affected	wolfi	grafana-mimir	—
grafana-mimir	affected	chainguard	grafana-mimir	—
grafana-operator	affected	wolfi	grafana-operator	—
grafana-operator	affected	chainguard	grafana-operator	—
grafana-operator-fips	affected	chainguard	grafana-operator-fips	—
grafana-rollout-operator-0.14	affected	wolfi	grafana-rollout-operator-0.14	—
grafana-rollout-operator-0.14	affected	chainguard	grafana-rollout-operator-0.14	—
grpc-health-probe	affected	chainguard	grpc-health-probe	—
grpc-health-probe	affected	wolfi	grpc-health-probe	—
grpc-health-probe-fips	affected	chainguard	grpc-health-probe-fips	—
grpcurl	affected	wolfi	grpcurl	—
grpcurl	affected	chainguard	grpcurl	—
grype	affected	wolfi	grype	—
grype	affected	chainguard	grype	—
haproxy-ingress	affected	wolfi	haproxy-ingress	—
haproxy-ingress	affected	chainguard	haproxy-ingress	—
harbor-2.10	affected	wolfi	harbor-2.10	—
harbor-2.10	affected	chainguard	harbor-2.10	—
harbor-2.8	affected	chainguard	harbor-2.8	—
harbor-2.9	affected	chainguard	harbor-2.9	—
harbor-cli	affected	chainguard	harbor-cli	—
harbor-cli	affected	wolfi	harbor-cli	—
harbor-fips-2.10	affected	chainguard	harbor-fips-2.10	—
harbor-fips-2.8	affected	chainguard	harbor-fips-2.8	—
harbor-fips-2.9	affected	chainguard	harbor-fips-2.9	—
harbor-registry	affected	chainguard	harbor-registry	—
harbor-registry	affected	wolfi	harbor-registry	—
harbor-registry-fips	affected	chainguard	harbor-registry-fips	—
harbor-scanner-trivy	affected	wolfi	harbor-scanner-trivy	—
harbor-scanner-trivy	affected	chainguard	harbor-scanner-trivy	—
harbor-scanner-trivy-fips	affected	chainguard	harbor-scanner-trivy-fips	—
hcloud	affected	wolfi	hcloud	—
hcloud	affected	chainguard	hcloud	—
hello-world-golang	affected	chainguard	hello-world-golang	—
hello-world-golang	affected	wolfi	hello-world-golang	—
helm	affected	chainguard	helm	—
helm	affected	wolfi	helm	—
helm-3	affected	wolfi	helm-3	—
helm-3	affected	chainguard	helm-3	—
helm-4	affected	chainguard	helm-4	—
helm-4	affected	wolfi	helm-4	—
helm-docs	affected	wolfi	helm-docs	—
helm-docs	affected	chainguard	helm-docs	—
helm-fips	affected	chainguard	helm-fips	—
helm-fips-3	affected	chainguard	helm-fips-3	—
helm-fips-4	affected	chainguard	helm-fips-4	—
helm-operator	affected	chainguard	helm-operator	—
helm-operator	affected	wolfi	helm-operator	—
helm-operator-fips	affected	chainguard	helm-operator-fips	—
helm-push	affected	wolfi	helm-push	—
helm-push	affected	chainguard	helm-push	—
hey	affected	chainguard	hey	—
hey	affected	wolfi	hey	—
hivemind	affected	chainguard	hivemind	—
hivemind	affected	wolfi	hivemind	—
http-echo	affected	wolfi	http-echo	—
http-echo	affected	chainguard	http-echo	—
hubble-ui	affected	chainguard	hubble-ui	—
hubble-ui	affected	wolfi	hubble-ui	—
hubble-ui-backend-fips	affected	chainguard	hubble-ui-backend-fips	—
influx	affected	wolfi	influx	—
influx	affected	chainguard	influx	—
influxd	affected	chainguard	influxd	—
influxd	affected	wolfi	influxd	—
ingress-nginx-controller	affected	chainguard	ingress-nginx-controller	—
ingress-nginx-controller	affected	wolfi	ingress-nginx-controller	—
ingress-nginx-controller-1.9	affected	chainguard	ingress-nginx-controller-1.9	—
ingress-nginx-controller-fips	affected	chainguard	ingress-nginx-controller-fips	—
ingress-nginx-controller-fips-1.9	affected	chainguard	ingress-nginx-controller-fips-1.9	—
ipfs	affected	wolfi	ipfs	—
ipfs	affected	chainguard	ipfs	—
ip-masq-agent	affected	wolfi	ip-masq-agent	—
ip-masq-agent	affected	chainguard	ip-masq-agent	—
istio-cni-1.20	affected	chainguard	istio-cni-1.20	—
istio-cni-1.20	affected	wolfi	istio-cni-1.20	—
istio-cni-1.21	affected	wolfi	istio-cni-1.21	—
istio-cni-1.21	affected	chainguard	istio-cni-1.21	—
istio-cni-1.22	affected	wolfi	istio-cni-1.22	—
istio-cni-1.22	affected	chainguard	istio-cni-1.22	—
istio-fips-1.20	affected	chainguard	istio-fips-1.20	—
istio-fips-1.21	affected	chainguard	istio-fips-1.21	—
istio-operator-1.20	affected	wolfi	istio-operator-1.20	—
istio-operator-1.20	affected	chainguard	istio-operator-1.20	—
istio-operator-1.21	affected	chainguard	istio-operator-1.21	—
istio-operator-1.21	affected	wolfi	istio-operator-1.21	—
istio-operator-1.22	affected	chainguard	istio-operator-1.22	—
istio-operator-1.22	affected	wolfi	istio-operator-1.22	—
istio-pilot-agent-1.20	affected	wolfi	istio-pilot-agent-1.20	—
istio-pilot-agent-1.20	affected	chainguard	istio-pilot-agent-1.20	—
istio-pilot-agent-1.21	affected	wolfi	istio-pilot-agent-1.21	—
istio-pilot-agent-1.21	affected	chainguard	istio-pilot-agent-1.21	—
istio-pilot-agent-1.22	affected	wolfi	istio-pilot-agent-1.22	—
istio-pilot-agent-1.22	affected	chainguard	istio-pilot-agent-1.22	—
istio-pilot-discovery-1.20	affected	wolfi	istio-pilot-discovery-1.20	—
istio-pilot-discovery-1.20	affected	chainguard	istio-pilot-discovery-1.20	—
istio-pilot-discovery-1.21	affected	chainguard	istio-pilot-discovery-1.21	—
istio-pilot-discovery-1.21	affected	wolfi	istio-pilot-discovery-1.21	—
istio-pilot-discovery-1.22	affected	wolfi	istio-pilot-discovery-1.22	—
istio-pilot-discovery-1.22	affected	chainguard	istio-pilot-discovery-1.22	—
jitsucom-bulker	affected	chainguard	jitsucom-bulker	—
jitsucom-bulker	affected	wolfi	jitsucom-bulker	—
jsonnet-bundler	affected	chainguard	jsonnet-bundler	—
k3d	affected	chainguard	k3d	—
k3d	affected	wolfi	k3d	—
k3s	affected	wolfi	k3s	—
k3s	affected	chainguard	k3s	—
k8s-device-plugin	affected	chainguard	k8s-device-plugin	—
k8s-device-plugin	affected	wolfi	k8s-device-plugin	—
k8sgpt	affected	chainguard	k8sgpt	—
k8sgpt	affected	wolfi	k8sgpt	—
k8ssandra-operator	affected	wolfi	k8ssandra-operator	—
k8ssandra-operator	affected	chainguard	k8ssandra-operator	—
k8ssandra-operator-fips	affected	chainguard	k8ssandra-operator-fips	—
k9s	affected	chainguard	k9s	—
k9s	affected	wolfi	k9s	—
kaf	affected	wolfi	kaf	—
kaf	affected	chainguard	kaf	—
kafka_exporter	affected	chainguard	kafka_exporter	—
kafka_exporter	affected	wolfi	kafka_exporter	—
kafka-proxy	affected	wolfi	kafka-proxy	—
kafka-proxy	affected	chainguard	kafka-proxy	—
kaniko	affected	wolfi	kaniko	—
kaniko	affected	chainguard	kaniko	—
kargo	affected	chainguard	kargo	—
kargo	affected	wolfi	kargo	—
karpenter	affected	wolfi	karpenter	—
karpenter	affected	chainguard	karpenter	—
karpenter-0.23	affected	chainguard	karpenter-0.23	—
karpenter-0.35	affected	chainguard	karpenter-0.35	—
karpenter-fips-0.35	affected	chainguard	karpenter-fips-0.35	—
karpenter-fips-0.36	affected	chainguard	karpenter-fips-0.36	—
keda-2.13	affected	wolfi	keda-2.13	—
keda-2.13	affected	chainguard	keda-2.13	—
keda-2.14	affected	chainguard	keda-2.14	—
keda-2.14	affected	wolfi	keda-2.14	—
keda-fips	affected	chainguard	keda-fips	—
kiam	affected	chainguard	kiam	—
kind	affected	wolfi	kind	—
kind	affected	chainguard	kind	—
ko	affected	chainguard	ko	—
ko	affected	wolfi	ko	—
ko-fips	affected	chainguard	ko-fips	—
ko-fips	affected	wolfi	ko-fips	—
kots	affected	chainguard	kots	—
kots	affected	wolfi	kots	—
kpt	affected	wolfi	kpt	—
kpt	affected	chainguard	kpt	—
ksops	affected	wolfi	ksops	—
ksops	affected	chainguard	ksops	—
kubeadm-bootstrap-controller	affected	wolfi	kubeadm-bootstrap-controller	—
kubeadm-bootstrap-controller	affected	chainguard	kubeadm-bootstrap-controller	—
kubeadm-controlplane-controller	affected	chainguard	kubeadm-controlplane-controller	—
kubeadm-controlplane-controller	affected	wolfi	kubeadm-controlplane-controller	—
kube-bench	affected	wolfi	kube-bench	—
kube-bench	affected	chainguard	kube-bench	—
kube-bench-fips	affected	chainguard	kube-bench-fips	—
kubebuilder	affected	chainguard	kubebuilder	—
kubebuilder	affected	wolfi	kubebuilder	—
kubecolor	affected	wolfi	kubecolor	—
kubecolor	affected	chainguard	kubecolor	—
kubeflow-katib	affected	wolfi	kubeflow-katib	—
kubeflow-katib	affected	chainguard	kubeflow-katib	—
kube-fluentd-operator	affected	chainguard	kube-fluentd-operator	—
kube-fluentd-operator	affected	wolfi	kube-fluentd-operator	—
kube-logging-logging-operator-3.17	affected	chainguard	kube-logging-logging-operator-3.17	—
kube-logging-logging-operator-4.1	affected	chainguard	kube-logging-logging-operator-4.1	—
kube-logging-operator	affected	chainguard	kube-logging-operator	—
kube-logging-operator	affected	wolfi	kube-logging-operator	—
kube-oidc-proxy	affected	chainguard	kube-oidc-proxy	—
kuberay-operator	affected	wolfi	kuberay-operator	—
kuberay-operator	affected	chainguard	kuberay-operator	—
kube-rbac-proxy-fips	affected	chainguard	kube-rbac-proxy-fips	—
kubernetes-1.27	affected	chainguard	kubernetes-1.27	—
kubernetes-1.27	affected	wolfi	kubernetes-1.27	—
kubernetes-1.28	affected	wolfi	kubernetes-1.28	—
kubernetes-1.28	affected	chainguard	kubernetes-1.28	—
kubernetes-1.29	affected	chainguard	kubernetes-1.29	—
kubernetes-1.29	affected	wolfi	kubernetes-1.29	—
kubernetes-1.30	affected	chainguard	kubernetes-1.30	—
kubernetes-1.30	affected	wolfi	kubernetes-1.30	—
kubernetes-csi-driver-hostpath	affected	chainguard	kubernetes-csi-driver-hostpath	—
kubernetes-csi-driver-hostpath	affected	wolfi	kubernetes-csi-driver-hostpath	—
kubernetes-csi-external-attacher-4.3	affected	wolfi	kubernetes-csi-external-attacher-4.3	—
kubernetes-csi-external-attacher-4.3	affected	chainguard	kubernetes-csi-external-attacher-4.3	—
kubernetes-csi-external-attacher-4.4	affected	wolfi	kubernetes-csi-external-attacher-4.4	—
kubernetes-csi-external-attacher-4.4	affected	chainguard	kubernetes-csi-external-attacher-4.4	—
kubernetes-csi-external-attacher-fips-4.3	affected	chainguard	kubernetes-csi-external-attacher-fips-4.3	—
kubernetes-csi-external-attacher-fips-4.4	affected	chainguard	kubernetes-csi-external-attacher-fips-4.4	—
kubernetes-csi-external-provisioner	affected	wolfi	kubernetes-csi-external-provisioner	—
kubernetes-csi-external-provisioner	affected	chainguard	kubernetes-csi-external-provisioner	—
kubernetes-csi-external-resizer-1.10	affected	chainguard	kubernetes-csi-external-resizer-1.10	—
kubernetes-csi-external-resizer-1.10	affected	wolfi	kubernetes-csi-external-resizer-1.10	—
kubernetes-csi-external-resizer-1.8	affected	chainguard	kubernetes-csi-external-resizer-1.8	—
kubernetes-csi-external-resizer-1.9	affected	chainguard	kubernetes-csi-external-resizer-1.9	—
kubernetes-csi-external-resizer-fips-1.10	affected	chainguard	kubernetes-csi-external-resizer-fips-1.10	—
kubernetes-csi-external-resizer-fips-1.8	affected	chainguard	kubernetes-csi-external-resizer-fips-1.8	—
kubernetes-csi-external-resizer-fips-1.9	affected	chainguard	kubernetes-csi-external-resizer-fips-1.9	—
kubernetes-csi-external-snapshotter	affected	chainguard	kubernetes-csi-external-snapshotter	—
kubernetes-csi-external-snapshotter	affected	wolfi	kubernetes-csi-external-snapshotter	—
kubernetes-csi-external-snapshotter-6.0	affected	chainguard	kubernetes-csi-external-snapshotter-6.0	—
kubernetes-csi-livenessprobe	affected	wolfi	kubernetes-csi-livenessprobe	—
kubernetes-csi-livenessprobe	affected	chainguard	kubernetes-csi-livenessprobe	—
kubernetes-csi-livenessprobe-2.10	affected	chainguard	kubernetes-csi-livenessprobe-2.10	—
kubernetes-csi-livenessprobe-fips	affected	chainguard	kubernetes-csi-livenessprobe-fips	—
kubernetes-csi-livenessprobe-fips-2.10	affected	chainguard	kubernetes-csi-livenessprobe-fips-2.10	—
kubernetes-csi-node-driver-registrar-2.10	affected	wolfi	kubernetes-csi-node-driver-registrar-2.10	—
kubernetes-csi-node-driver-registrar-2.10	affected	chainguard	kubernetes-csi-node-driver-registrar-2.10	—
kubernetes-csi-node-driver-registrar-2.11	affected	wolfi	kubernetes-csi-node-driver-registrar-2.11	—
kubernetes-csi-node-driver-registrar-2.11	affected	chainguard	kubernetes-csi-node-driver-registrar-2.11	—
kubernetes-csi-node-driver-registrar-2.6	affected	chainguard	kubernetes-csi-node-driver-registrar-2.6	—
kubernetes-csi-node-driver-registrar-2.7	affected	chainguard	kubernetes-csi-node-driver-registrar-2.7	—
kubernetes-csi-node-driver-registrar-2.8	affected	chainguard	kubernetes-csi-node-driver-registrar-2.8	—
kubernetes-csi-node-driver-registrar-2.9	affected	wolfi	kubernetes-csi-node-driver-registrar-2.9	—
kubernetes-csi-node-driver-registrar-2.9	affected	chainguard	kubernetes-csi-node-driver-registrar-2.9	—
kubernetes-csi-node-driver-registrar-fips-2.10	affected	chainguard	kubernetes-csi-node-driver-registrar-fips-2.10	—
kubernetes-csi-node-driver-registrar-fips-2.6	affected	chainguard	kubernetes-csi-node-driver-registrar-fips-2.6	—
kubernetes-csi-node-driver-registrar-fips-2.7	affected	chainguard	kubernetes-csi-node-driver-registrar-fips-2.7	—
kubernetes-csi-node-driver-registrar-fips-2.8	affected	chainguard	kubernetes-csi-node-driver-registrar-fips-2.8	—
kubernetes-csi-node-driver-registrar-fips-2.9	affected	chainguard	kubernetes-csi-node-driver-registrar-fips-2.9	—
kubernetes-dashboard	affected	wolfi	kubernetes-dashboard	—
kubernetes-dashboard	affected	chainguard	kubernetes-dashboard	—
kubernetes-dashboard-fips	affected	chainguard	kubernetes-dashboard-fips	—
kubernetes-dashboard-metrics-scraper	affected	chainguard	kubernetes-dashboard-metrics-scraper	—
kubernetes-dashboard-metrics-scraper	affected	wolfi	kubernetes-dashboard-metrics-scraper	—
kubernetes-dashboard-metrics-scraper-fips	affected	chainguard	kubernetes-dashboard-metrics-scraper-fips	—
kubernetes-dns-node-cache	affected	chainguard	kubernetes-dns-node-cache	—
kubernetes-dns-node-cache	affected	wolfi	kubernetes-dns-node-cache	—
kubernetes-event-exporter	affected	chainguard	kubernetes-event-exporter	—
kubernetes-event-exporter	affected	wolfi	kubernetes-event-exporter	—
kubernetes-fips-1.27	affected	chainguard	kubernetes-fips-1.27	—
kubernetes-fips-1.28	affected	chainguard	kubernetes-fips-1.28	—
kubernetes-ingress-defaultbackend	affected	chainguard	kubernetes-ingress-defaultbackend	—
kubernetes-ingress-defaultbackend	affected	wolfi	kubernetes-ingress-defaultbackend	—
kubescape	affected	chainguard	kubescape	—
kubescape	affected	wolfi	kubescape	—
kube-state-metrics	affected	chainguard	kube-state-metrics	—
kube-state-metrics	affected	wolfi	kube-state-metrics	—
kube-state-metrics-2.2.0	affected	chainguard	kube-state-metrics-2.2.0	—
kube-state-metrics-2.6	affected	chainguard	kube-state-metrics-2.6	—
kube-state-metrics-fips	affected	chainguard	kube-state-metrics-fips	—
kubevela	affected	wolfi	kubevela	—
kubevela	affected	chainguard	kubevela	—
kube-vip	affected	chainguard	kube-vip	—
kube-vip	affected	wolfi	kube-vip	—
kube-vip-fips	affected	chainguard	kube-vip-fips	—
kubewatch	affected	wolfi	kubewatch	—
kubewatch	affected	chainguard	kubewatch	—
kustomize	affected	chainguard	kustomize	—
kustomize	affected	wolfi	kustomize	—
kustomize-fips	affected	chainguard	kustomize-fips	—
kwok	affected	wolfi	kwok	—
kwok	affected	chainguard	kwok	—
kyverno	affected	chainguard	kyverno	—
kyverno	affected	wolfi	kyverno	—
kyverno-fips	affected	chainguard	kyverno-fips	—
kyverno-policy-reporter	affected	chainguard	kyverno-policy-reporter	—
kyverno-policy-reporter	affected	wolfi	kyverno-policy-reporter	—
kyverno-policy-reporter-2.11	affected	chainguard	kyverno-policy-reporter-2.11	—
kyverno-policy-reporter-kyverno-plugin	affected	chainguard	kyverno-policy-reporter-kyverno-plugin	—
kyverno-policy-reporter-kyverno-plugin	affected	wolfi	kyverno-policy-reporter-kyverno-plugin	—
kyverno-policy-reporter-kyverno-plugin-1.5	affected	chainguard	kyverno-policy-reporter-kyverno-plugin-1.5	—
kyverno-policy-reporter-ui	affected	chainguard	kyverno-policy-reporter-ui	—
kyverno-policy-reporter-ui	affected	wolfi	kyverno-policy-reporter-ui	—
kyverno-policy-reporter-ui-1.7	affected	chainguard	kyverno-policy-reporter-ui-1.7	—
lazygit	affected	wolfi	lazygit	—
lazygit	affected	chainguard	lazygit	—
libnvidia-container	affected	wolfi	libnvidia-container	—
libnvidia-container	affected	chainguard	libnvidia-container	—
litefs	affected	chainguard	litefs	—
litefs	affected	wolfi	litefs	—
litestream	affected	wolfi	litestream	—
litestream	affected	chainguard	litestream	—
local-path-provisioner	affected	chainguard	local-path-provisioner	—
local-path-provisioner	affected	wolfi	local-path-provisioner	—
local-static-provisioner	affected	chainguard	local-static-provisioner	—
local-static-provisioner	affected	wolfi	local-static-provisioner	—
logstash	affected	chainguard	logstash	—
logstash	affected	wolfi	logstash	—
logstash-exporter	affected	chainguard	logstash-exporter	—
logstash-exporter	affected	wolfi	logstash-exporter	—
logstash-exporter-fips	affected	chainguard	logstash-exporter-fips	—
logstash-jre-bcfips	affected	chainguard	logstash-jre-bcfips	—
loki-2.9	affected	chainguard	loki-2.9	—
loki-3.0	affected	chainguard	loki-3.0	—
loki-3.0	affected	wolfi	loki-3.0	—
mage	affected	chainguard	mage	—
mage	affected	wolfi	mage	—
mc	affected	wolfi	mc	—
mc	affected	chainguard	mc	—
mc-fips	affected	chainguard	mc-fips	—
memcached-exporter	affected	chainguard	memcached-exporter	—
memcached-exporter	affected	wolfi	memcached-exporter	—
metacontroller	affected	wolfi	metacontroller	—
metacontroller	affected	chainguard	metacontroller	—
metallb	affected	wolfi	metallb	—
metallb	affected	chainguard	metallb	—
metallb-fips	affected	chainguard	metallb-fips	—
metrics-server	affected	chainguard	metrics-server	—
metrics-server	affected	wolfi	metrics-server	—
metrics-server-fips	affected	chainguard	metrics-server-fips	—
minify	affected	chainguard	minify	—
minify	affected	wolfi	minify	—
minify-fips	affected	chainguard	minify-fips	—
mkcert	affected	chainguard	mkcert	—
mkcert	affected	wolfi	mkcert	—
mockery	affected	chainguard	mockery	—
mockery	affected	wolfi	mockery	—
mods	affected	wolfi	mods	—
mods	affected	chainguard	mods	—
mongo-tools	affected	chainguard	mongo-tools	—
mongo-tools	affected	wolfi	mongo-tools	—
multus-cni-fips	affected	chainguard	multus-cni-fips	—
nats	affected	wolfi	nats	—
nats	affected	chainguard	nats	—
nats-server	affected	wolfi	nats-server	—
nats-server	affected	chainguard	nats-server	—
nerdctl	affected	chainguard	nerdctl	—
nerdctl	affected	wolfi	nerdctl	—
neuvector-agent	affected	chainguard	neuvector-agent	—
neuvector-agent	affected	wolfi	neuvector-agent	—
neuvector-dbgen	affected	wolfi	neuvector-dbgen	—
neuvector-dbgen	affected	chainguard	neuvector-dbgen	—
neuvector-dbgen-fips	affected	chainguard	neuvector-dbgen-fips	—
neuvector-scanner	affected	wolfi	neuvector-scanner	—
neuvector-scanner	affected	chainguard	neuvector-scanner	—
neuvector-scanner-fips	affected	chainguard	neuvector-scanner-fips	—
neuvector-sigstore-interface	affected	wolfi	neuvector-sigstore-interface	—
neuvector-sigstore-interface	affected	chainguard	neuvector-sigstore-interface	—
neuvector-sigstore-interface-fips	affected	chainguard	neuvector-sigstore-interface-fips	—
newrelic-fluent-bit-output	affected	chainguard	newrelic-fluent-bit-output	—
newrelic-fluent-bit-output	affected	wolfi	newrelic-fluent-bit-output	—
newrelic-infra-operator	affected	wolfi	newrelic-infra-operator	—
newrelic-infra-operator	affected	chainguard	newrelic-infra-operator	—
newrelic-infrastructure-agent	affected	chainguard	newrelic-infrastructure-agent	—
newrelic-infrastructure-agent	affected	wolfi	newrelic-infrastructure-agent	—
newrelic-infrastructure-agent-1.43	affected	chainguard	newrelic-infrastructure-agent-1.43	—
newrelic-nri-kube-events	affected	wolfi	newrelic-nri-kube-events	—
newrelic-nri-kube-events	affected	chainguard	newrelic-nri-kube-events	—
newrelic-nri-kube-events-1.9	affected	chainguard	newrelic-nri-kube-events-1.9	—
newrelic-nri-statsd	affected	chainguard	newrelic-nri-statsd	—
newrelic-nri-statsd	affected	wolfi	newrelic-nri-statsd	—
newrelic-prometheus-configurator	affected	chainguard	newrelic-prometheus-configurator	—
newrelic-prometheus-configurator	affected	wolfi	newrelic-prometheus-configurator	—
nfs-subdir-external-provisioner	affected	wolfi	nfs-subdir-external-provisioner	—
nfs-subdir-external-provisioner	affected	chainguard	nfs-subdir-external-provisioner	—
nfs-subdir-external-provisioner-fips	affected	chainguard	nfs-subdir-external-provisioner-fips	—
node-feature-discovery-0.14	affected	chainguard	node-feature-discovery-0.14	—
node-feature-discovery-0.15	affected	chainguard	node-feature-discovery-0.15	—
node-feature-discovery-0.15	affected	wolfi	node-feature-discovery-0.15	—
node-feature-discovery-0.16	affected	chainguard	node-feature-discovery-0.16	—
node-feature-discovery-0.16	affected	wolfi	node-feature-discovery-0.16	—
node-problem-detector-0.8	affected	chainguard	node-problem-detector-0.8	—
node-problem-detector-0.8	affected	wolfi	node-problem-detector-0.8	—
nodetaint	affected	chainguard	nodetaint	—
nodetaint	affected	wolfi	nodetaint	—
nri-apache	affected	chainguard	nri-apache	—
nri-apache	affected	wolfi	nri-apache	—
nri-cassandra	affected	wolfi	nri-cassandra	—
nri-cassandra	affected	chainguard	nri-cassandra	—
nri-consul	affected	chainguard	nri-consul	—
nri-consul	affected	wolfi	nri-consul	—
nri-couchbase	affected	wolfi	nri-couchbase	—
nri-couchbase	affected	chainguard	nri-couchbase	—
nri-discovery-kubernetes	affected	chainguard	nri-discovery-kubernetes	—
nri-discovery-kubernetes	affected	wolfi	nri-discovery-kubernetes	—
nri-elasticsearch	affected	wolfi	nri-elasticsearch	—
nri-elasticsearch	affected	chainguard	nri-elasticsearch	—
nri-f5	affected	wolfi	nri-f5	—
nri-f5	affected	chainguard	nri-f5	—
nri-haproxy	affected	chainguard	nri-haproxy	—
nri-haproxy	affected	wolfi	nri-haproxy	—
nri-jmx	affected	wolfi	nri-jmx	—
nri-jmx	affected	chainguard	nri-jmx	—
nri-kafka	affected	chainguard	nri-kafka	—
nri-kafka	affected	wolfi	nri-kafka	—
nri-kubernetes	affected	chainguard	nri-kubernetes	—
nri-kubernetes	affected	wolfi	nri-kubernetes	—
nri-kubernetes-2.13	affected	chainguard	nri-kubernetes-2.13	—
nri-memcached	affected	chainguard	nri-memcached	—
nri-memcached	affected	wolfi	nri-memcached	—
nri-mongodb	affected	chainguard	nri-mongodb	—
nri-mongodb	affected	wolfi	nri-mongodb	—
nri-mssql	affected	chainguard	nri-mssql	—
nri-mssql	affected	wolfi	nri-mssql	—
nri-mysql	affected	wolfi	nri-mysql	—
nri-mysql	affected	chainguard	nri-mysql	—
nri-nagios	affected	wolfi	nri-nagios	—
nri-nagios	affected	chainguard	nri-nagios	—
nri-nginx	affected	chainguard	nri-nginx	—
nri-nginx	affected	wolfi	nri-nginx	—
nri-postgresql	affected	wolfi	nri-postgresql	—
nri-postgresql	affected	chainguard	nri-postgresql	—
nri-prometheus	affected	wolfi	nri-prometheus	—
nri-prometheus	affected	chainguard	nri-prometheus	—
nri-rabbitmq	affected	wolfi	nri-rabbitmq	—
nri-rabbitmq	affected	chainguard	nri-rabbitmq	—
nri-redis	affected	wolfi	nri-redis	—
nri-redis	affected	chainguard	nri-redis	—
nsc	affected	chainguard	nsc	—
nsc	affected	wolfi	nsc	—
nvidia-container-toolkit	affected	chainguard	nvidia-container-toolkit	—
nvidia-container-toolkit	affected	wolfi	nvidia-container-toolkit	—
nvidia-nsight-compute-12.8	affected	chainguard	nvidia-nsight-compute-12.8	—
oauth2-proxy	affected	wolfi	oauth2-proxy	—
oauth2-proxy	affected	chainguard	oauth2-proxy	—
octo-sts	affected	wolfi	octo-sts	—
octo-sts	affected	chainguard	octo-sts	—
ollama	affected	wolfi	ollama	—
ollama	affected	chainguard	ollama	—
opa	affected	chainguard	opa	—
opa	affected	wolfi	opa	—
opa-fips	affected	chainguard	opa-fips	—
opentelemetry-collector-fips	affected	chainguard	opentelemetry-collector-fips	—
opentofu	affected	chainguard	opentofu	—
opentofu	affected	wolfi	opentofu	—
oras	affected	chainguard	oras	—
oras	affected	wolfi	oras	—
osv-scanner	affected	chainguard	osv-scanner	—
osv-scanner	affected	wolfi	osv-scanner	—
overmind	affected	wolfi	overmind	—
overmind	affected	chainguard	overmind	—
paranoia	affected	chainguard	paranoia	—
paranoia	affected	wolfi	paranoia	—
petname	affected	wolfi	petname	—
petname	affected	chainguard	petname	—
php-fpm_exporter	affected	wolfi	php-fpm_exporter	—
php-fpm_exporter	affected	chainguard	php-fpm_exporter	—
pluto	affected	wolfi	pluto	—
pluto	affected	chainguard	pluto	—
policy-controller	affected	wolfi	policy-controller	—
policy-controller	affected	chainguard	policy-controller	—
policy-controller-fips	affected	chainguard	policy-controller-fips	—
pombump	affected	wolfi	pombump	—
pombump	affected	chainguard	pombump	—
postgres-operator	affected	chainguard	postgres-operator	—
postgres-operator	affected	wolfi	postgres-operator	—
postgres-operator-fips	affected	chainguard	postgres-operator-fips	—
prometheus-2.45	affected	chainguard	prometheus-2.45	—
prometheus-2.45	affected	wolfi	prometheus-2.45	—
prometheus-2.51	affected	chainguard	prometheus-2.51	—
prometheus-2.52	affected	chainguard	prometheus-2.52	—
prometheus-2.52	affected	wolfi	prometheus-2.52	—
prometheus-adapter	affected	chainguard	prometheus-adapter	—
prometheus-adapter	affected	wolfi	prometheus-adapter	—
prometheus-adapter-0.10	affected	chainguard	prometheus-adapter-0.10	—
prometheus-alertmanager	affected	wolfi	prometheus-alertmanager	—
prometheus-alertmanager	affected	chainguard	prometheus-alertmanager	—
prometheus-alertmanager-fips	affected	chainguard	prometheus-alertmanager-fips	—
prometheus-beat-exporter	affected	wolfi	prometheus-beat-exporter	—
prometheus-beat-exporter	affected	chainguard	prometheus-beat-exporter	—
prometheus-beat-exporter-fips	affected	chainguard	prometheus-beat-exporter-fips	—
prometheus-bind-exporter	affected	wolfi	prometheus-bind-exporter	—
prometheus-bind-exporter	affected	chainguard	prometheus-bind-exporter	—
prometheus-blackbox-exporter	affected	chainguard	prometheus-blackbox-exporter	—
prometheus-blackbox-exporter	affected	wolfi	prometheus-blackbox-exporter	—
prometheus-elasticsearch-exporter	affected	chainguard	prometheus-elasticsearch-exporter	—
prometheus-elasticsearch-exporter	affected	wolfi	prometheus-elasticsearch-exporter	—
prometheus-elasticsearch-exporter-fips	affected	chainguard	prometheus-elasticsearch-exporter-fips	—
prometheus-fips	affected	chainguard	prometheus-fips	—
prometheus-fips-2.45	affected	chainguard	prometheus-fips-2.45	—
prometheus-mongodb-exporter	affected	chainguard	prometheus-mongodb-exporter	—
prometheus-mongodb-exporter	affected	wolfi	prometheus-mongodb-exporter	—
prometheus-mongodb-exporter-0.37	affected	chainguard	prometheus-mongodb-exporter-0.37	—
prometheus-mongodb-exporter-fips	affected	chainguard	prometheus-mongodb-exporter-fips	—
prometheus-mysqld-exporter	affected	chainguard	prometheus-mysqld-exporter	—
prometheus-mysqld-exporter	affected	wolfi	prometheus-mysqld-exporter	—
prometheus-nats-exporter	affected	wolfi	prometheus-nats-exporter	—
prometheus-nats-exporter	affected	chainguard	prometheus-nats-exporter	—
prometheus-node-exporter	affected	chainguard	prometheus-node-exporter	—
prometheus-node-exporter	affected	wolfi	prometheus-node-exporter	—
prometheus-node-exporter-1.4	affected	chainguard	prometheus-node-exporter-1.4	—
prometheus-node-exporter-1.5	affected	chainguard	prometheus-node-exporter-1.5	—
prometheus-node-exporter-fips	affected	chainguard	prometheus-node-exporter-fips	—
prometheus-operator	affected	chainguard	prometheus-operator	—
prometheus-operator	affected	wolfi	prometheus-operator	—
prometheus-operator-fips	affected	chainguard	prometheus-operator-fips	—
prometheus-postgres-exporter	affected	chainguard	prometheus-postgres-exporter	—
prometheus-postgres-exporter	affected	wolfi	prometheus-postgres-exporter	—
prometheus-postgres-exporter-0.10	affected	chainguard	prometheus-postgres-exporter-0.10	—
prometheus-postgres-exporter-0.13	affected	chainguard	prometheus-postgres-exporter-0.13	—
prometheus-postgres-exporter-fips	affected	chainguard	prometheus-postgres-exporter-fips	—
prometheus-pushgateway	affected	wolfi	prometheus-pushgateway	—
prometheus-pushgateway	affected	chainguard	prometheus-pushgateway	—
prometheus-pushgateway-1.4	affected	chainguard	prometheus-pushgateway-1.4	—
prometheus-pushgateway-fips	affected	chainguard	prometheus-pushgateway-fips	—
prometheus-pushgateway-fips-1.4	affected	chainguard	prometheus-pushgateway-fips-1.4	—
prometheus-redis-exporter	affected	wolfi	prometheus-redis-exporter	—
prometheus-redis-exporter	affected	chainguard	prometheus-redis-exporter	—
prometheus-redis-exporter-fips	affected	chainguard	prometheus-redis-exporter-fips	—
prometheus-redis-exporter-fips-1.44	affected	chainguard	prometheus-redis-exporter-fips-1.44	—
prometheus-stackdriver-exporter	affected	chainguard	prometheus-stackdriver-exporter	—
prometheus-stackdriver-exporter	affected	wolfi	prometheus-stackdriver-exporter	—
prometheus-statsd-exporter	affected	wolfi	prometheus-statsd-exporter	—
prometheus-statsd-exporter	affected	chainguard	prometheus-statsd-exporter	—
prometheus-statsd-exporter-0.22	affected	chainguard	prometheus-statsd-exporter-0.22	—
prometheus-statsd-exporter-fips	affected	chainguard	prometheus-statsd-exporter-fips	—
prometheus-statsd-exporter-fips-0.22	affected	chainguard	prometheus-statsd-exporter-fips-0.22	—
protoc-gen-go	affected	wolfi	protoc-gen-go	—
protoc-gen-go	affected	chainguard	protoc-gen-go	—
protoc-gen-go-grpc	affected	chainguard	protoc-gen-go-grpc	—
protoc-gen-go-grpc	affected	wolfi	protoc-gen-go-grpc	—
pulumi-kubernetes-operator	affected	chainguard	pulumi-kubernetes-operator	—
pulumi-kubernetes-operator	affected	wolfi	pulumi-kubernetes-operator	—
pulumi-language-dotnet	affected	wolfi	pulumi-language-dotnet	—
pulumi-language-dotnet	affected	chainguard	pulumi-language-dotnet	—
pulumi-language-java	affected	chainguard	pulumi-language-java	—
pulumi-language-java	affected	wolfi	pulumi-language-java	—
q	affected	wolfi	q	—
q	affected	chainguard	q	—
rabbitmq-cluster-operator	affected	wolfi	rabbitmq-cluster-operator	—
rabbitmq-cluster-operator	affected	chainguard	rabbitmq-cluster-operator	—
rabbitmq-default-user-credential-updater	affected	wolfi	rabbitmq-default-user-credential-updater	—
rabbitmq-default-user-credential-updater	affected	chainguard	rabbitmq-default-user-credential-updater	—
rabbitmq-messaging-topology-operator	affected	wolfi	rabbitmq-messaging-topology-operator	—
rabbitmq-messaging-topology-operator	affected	chainguard	rabbitmq-messaging-topology-operator	—
rclone	affected	wolfi	rclone	—
rclone	affected	chainguard	rclone	—
redka	affected	wolfi	redka	—
redka	affected	chainguard	redka	—
regclient	affected	wolfi	regclient	—
regclient	affected	chainguard	regclient	—
rekor	affected	chainguard	rekor	—
rekor	affected	wolfi	rekor	—
rekor-fips	affected	chainguard	rekor-fips	—
render-template	affected	chainguard	render-template	—
render-template	affected	wolfi	render-template	—
request-1279	affected	chainguard	request-1279	—
request-1279-1-12	affected	chainguard	request-1279-1-12	—
restic	affected	wolfi	restic	—
restic	affected	chainguard	restic	—
restic-fips	affected	chainguard	restic-fips	—
rook	affected	wolfi	rook	—
rook	affected	chainguard	rook	—
rootlesskit	affected	chainguard	rootlesskit	—
rootlesskit	affected	wolfi	rootlesskit	—
runc	affected	chainguard	runc	—
runc	affected	wolfi	runc	—
s5cmd	affected	wolfi	s5cmd	—
s5cmd	affected	chainguard	s5cmd	—
sbomqs	affected	chainguard	sbomqs	—
sbomqs	affected	wolfi	sbomqs	—
sbom-scorecard	affected	chainguard	sbom-scorecard	—
sbom-scorecard	affected	wolfi	sbom-scorecard	—
scorecard	affected	wolfi	scorecard	—
scorecard	affected	chainguard	scorecard	—
secrets-store-csi-driver	affected	chainguard	secrets-store-csi-driver	—
secrets-store-csi-driver	affected	wolfi	secrets-store-csi-driver	—
secrets-store-csi-driver-provider-aws	affected	chainguard	secrets-store-csi-driver-provider-aws	—
secrets-store-csi-driver-provider-aws	affected	wolfi	secrets-store-csi-driver-provider-aws	—
secrets-store-csi-driver-provider-azure	affected	chainguard	secrets-store-csi-driver-provider-azure	—
secrets-store-csi-driver-provider-azure	affected	wolfi	secrets-store-csi-driver-provider-azure	—
secrets-store-csi-driver-provider-gcp	affected	wolfi	secrets-store-csi-driver-provider-gcp	—
secrets-store-csi-driver-provider-gcp	affected	chainguard	secrets-store-csi-driver-provider-gcp	—
shfmt	affected	wolfi	shfmt	—
shfmt	affected	chainguard	shfmt	—
sigstore-scaffolding	affected	chainguard	sigstore-scaffolding	—
sigstore-scaffolding	affected	wolfi	sigstore-scaffolding	—
sigstore-scaffolding-fips	affected	chainguard	sigstore-scaffolding-fips	—
skaffold	affected	chainguard	skaffold	—
skaffold	affected	wolfi	skaffold	—
skopeo	affected	wolfi	skopeo	—
skopeo	affected	chainguard	skopeo	—
slsa-verifier	affected	chainguard	slsa-verifier	—
slsa-verifier	affected	wolfi	slsa-verifier	—
smarter-device-manager	affected	chainguard	smarter-device-manager	—
smarter-device-manager	affected	wolfi	smarter-device-manager	—
smarter-device-manager-fips	affected	chainguard	smarter-device-manager-fips	—
snyk-cli	affected	chainguard	snyk-cli	—
snyk-cli	affected	wolfi	snyk-cli	—
sonobuoy	affected	chainguard	sonobuoy	—
sonobuoy	affected	wolfi	sonobuoy	—
sops	affected	wolfi	sops	—
sops	affected	chainguard	sops	—
speedtest-go	affected	wolfi	speedtest-go	—
speedtest-go	affected	chainguard	speedtest-go	—
spegel	affected	wolfi	spegel	—
spegel	affected	chainguard	spegel	—
spicedb	affected	wolfi	spicedb	—
spicedb	affected	chainguard	spicedb	—
spire-server	affected	wolfi	spire-server	—
spire-server	affected	chainguard	spire-server	—
spire-server-fips	affected	chainguard	spire-server-fips	—
spqr	affected	wolfi	spqr	—
spqr	affected	chainguard	spqr	—
src	affected	wolfi	src	—
src	affected	chainguard	src	—
src-fingerprint	affected	wolfi	src-fingerprint	—
src-fingerprint	affected	chainguard	src-fingerprint	—
src-fingerprint-fips	affected	chainguard	src-fingerprint-fips	—
stakater-reloader-0.0.119	affected	chainguard	stakater-reloader-0.0.119	—
stakater-reloader-0.0.128	affected	chainguard	stakater-reloader-0.0.128	—
step	affected	wolfi	step	—
step	affected	chainguard	step	—
step-ca	affected	wolfi	step-ca	—
step-ca	affected	chainguard	step-ca	—
step-ca-fips	affected	chainguard	step-ca-fips	—
step-fips	affected	chainguard	step-fips	—
step-issuer	affected	chainguard	step-issuer	—
step-issuer	affected	wolfi	step-issuer	—
step-issuer-fips	affected	chainguard	step-issuer-fips	—
stern	affected	chainguard	stern	—
stern	affected	wolfi	stern	—
supercronic	affected	chainguard	supercronic	—
supercronic	affected	wolfi	supercronic	—
swagger	affected	chainguard	swagger	—
swagger	affected	wolfi	swagger	—
syft	affected	chainguard	syft	—
syft	affected	wolfi	syft	—
tailscale	affected	chainguard	tailscale	—
tailscale	affected	wolfi	tailscale	—
task	affected	chainguard	task	—
task	affected	wolfi	task	—
tctl	affected	wolfi	tctl	—
tctl	affected	chainguard	tctl	—
tekton-chains	affected	chainguard	tekton-chains	—
tekton-chains	affected	wolfi	tekton-chains	—
tekton-chains-fips	affected	chainguard	tekton-chains-fips	—
tekton-pipelines	affected	wolfi	tekton-pipelines	—
tekton-pipelines	affected	chainguard	tekton-pipelines	—
tekton-pipelines-fips	affected	chainguard	tekton-pipelines-fips	—
telegraf-1.29	affected	chainguard	telegraf-1.29	—
telegraf-1.29	affected	wolfi	telegraf-1.29	—
telegraf-1.30	affected	wolfi	telegraf-1.30	—
telegraf-1.30	affected	chainguard	telegraf-1.30	—
teleport	affected	wolfi	teleport	—
teleport	affected	chainguard	teleport	—
tempo	affected	wolfi	tempo	—
tempo	affected	chainguard	tempo	—
tempo-2.3	affected	chainguard	tempo-2.3	—
tempo-fips	affected	chainguard	tempo-fips	—
temporal	affected	wolfi	temporal	—
temporal	affected	chainguard	temporal	—
temporal-fips	affected	chainguard	temporal-fips	—
temporal-ui-server	affected	wolfi	temporal-ui-server	—
temporal-ui-server	affected	chainguard	temporal-ui-server	—
temporal-ui-server-fips	affected	chainguard	temporal-ui-server-fips	—
terraform	affected	chainguard	terraform	—
terraform	affected	wolfi	terraform	—
terraform-docs	affected	wolfi	terraform-docs	—
terraform-docs	affected	chainguard	terraform-docs	—
terraform-fips-1.5	affected	chainguard	terraform-fips-1.5	—
terraform-provider-aws	affected	wolfi	terraform-provider-aws	—
terraform-provider-aws	affected	chainguard	terraform-provider-aws	—
terraform-provider-azurerm	affected	chainguard	terraform-provider-azurerm	—
terraform-provider-azurerm	affected	wolfi	terraform-provider-azurerm	—
terraform-provider-google	affected	chainguard	terraform-provider-google	—
terraform-provider-google	affected	wolfi	terraform-provider-google	—
terragrunt	affected	wolfi	terragrunt	—
terragrunt	affected	chainguard	terragrunt	—
tflint	affected	chainguard	tflint	—
tflint	affected	wolfi	tflint	—
tfsec	affected	chainguard	tfsec	—
tfsec	affected	wolfi	tfsec	—
thanos	affected	wolfi	thanos	—
thanos	affected	chainguard	thanos	—
thanos-fips	affected	chainguard	thanos-fips	—
thanos-operator	affected	chainguard	thanos-operator	—
thanos-operator	affected	wolfi	thanos-operator	—
thanos-operator-fips	affected	chainguard	thanos-operator-fips	—
tigera-operator-1.28	affected	chainguard	tigera-operator-1.28	—
tigera-operator-1.29	affected	chainguard	tigera-operator-1.29	—
tigera-operator-1.30	affected	wolfi	tigera-operator-1.30	—
tigera-operator-1.30	affected	chainguard	tigera-operator-1.30	—
tigera-operator-1.31	affected	chainguard	tigera-operator-1.31	—
tigera-operator-1.31	affected	wolfi	tigera-operator-1.31	—
tigera-operator-1.32	affected	wolfi	tigera-operator-1.32	—
tigera-operator-1.32	affected	chainguard	tigera-operator-1.32	—
tigera-operator-fips	affected	chainguard	tigera-operator-fips	—
tigera-operator-fips-1.29	affected	chainguard	tigera-operator-fips-1.29	—
timestamp-authority	affected	wolfi	timestamp-authority	—
timestamp-authority	affected	chainguard	timestamp-authority	—
timestamp-authority-fips	affected	chainguard	timestamp-authority-fips	—
timoni	affected	wolfi	timoni	—
timoni	affected	chainguard	timoni	—
tkn	affected	wolfi	tkn	—
tkn	affected	chainguard	tkn	—
tkn-fips	affected	chainguard	tkn-fips	—
traefik	affected	wolfi	traefik	—
traefik	affected	chainguard	traefik	—
traefik-fips	affected	chainguard	traefik-fips	—
trillian	affected	wolfi	trillian	—
trillian	affected	chainguard	trillian	—
trillian-fips	affected	chainguard	trillian-fips	—
trivy	affected	chainguard	trivy	—
trivy	affected	wolfi	trivy	—
trivy-fips	affected	chainguard	trivy-fips	—
trust-manager	affected	wolfi	trust-manager	—
trust-manager	affected	chainguard	trust-manager	—
trust-manager-fips	affected	chainguard	trust-manager-fips	—
up	affected	chainguard	up	—
up	affected	wolfi	up	—
vault-1.14	affected	chainguard	vault-1.14	—
vault-1.14	affected	wolfi	vault-1.14	—
vault-1.15	affected	chainguard	vault-1.15	—
vault-csi-provider	affected	wolfi	vault-csi-provider	—
vault-csi-provider	affected	chainguard	vault-csi-provider	—
vault-fips-1.14	affected	chainguard	vault-fips-1.14	—
vault-fips-1.15	affected	chainguard	vault-fips-1.15	—
vault-fips-1.16	affected	chainguard	vault-fips-1.16	—
vault-k8s	affected	wolfi	vault-k8s	—
vault-k8s	affected	chainguard	vault-k8s	—
vault-k8s-fips	affected	chainguard	vault-k8s-fips	—
vcluster	affected	chainguard	vcluster	—
vcluster	affected	wolfi	vcluster	—
velero	affected	chainguard	velero	—
velero	affected	wolfi	velero	—
velero-fips	affected	chainguard	velero-fips	—
velero-plugin-for-aws	affected	wolfi	velero-plugin-for-aws	—
velero-plugin-for-aws	affected	chainguard	velero-plugin-for-aws	—
velero-plugin-for-aws-fips	affected	chainguard	velero-plugin-for-aws-fips	—
velero-plugin-for-csi	affected	wolfi	velero-plugin-for-csi	—
velero-plugin-for-csi	affected	chainguard	velero-plugin-for-csi	—
velero-plugin-for-csi-fips	affected	chainguard	velero-plugin-for-csi-fips	—
vexctl	affected	chainguard	vexctl	—
vexctl	affected	wolfi	vexctl	—
volume-modifier-for-k8s	affected	wolfi	volume-modifier-for-k8s	—
volume-modifier-for-k8s	affected	chainguard	volume-modifier-for-k8s	—
vt-cli	affected	chainguard	vt-cli	—
vt-cli	affected	wolfi	vt-cli	—
wait-for-port	affected	chainguard	wait-for-port	—
wait-for-port	affected	wolfi	wait-for-port	—
wave	affected	chainguard	wave	—
wave	affected	wolfi	wave	—
wave-fips	affected	chainguard	wave-fips	—
wavefront-collector-for-kubernetes-1.12	affected	chainguard	wavefront-collector-for-kubernetes-1.12	—
wavefront-collector-for-kubernetes-1.13	affected	chainguard	wavefront-collector-for-kubernetes-1.13	—
wazero	affected	chainguard	wazero	—
wazero	affected	wolfi	wazero	—
weaviate	affected	chainguard	weaviate	—
weaviate	affected	wolfi	weaviate	—
wgcf	affected	wolfi	wgcf	—
wgcf	affected	chainguard	wgcf	—
wire-go	affected	chainguard	wire-go	—
wire-go	affected	wolfi	wire-go	—
wireguard-go	affected	chainguard	wireguard-go	—
wireguard-go	affected	wolfi	wireguard-go	—
wolfictl	affected	chainguard	wolfictl	—
wolfictl	affected	wolfi	wolfictl	—
xcaddy	affected	chainguard	xcaddy	—
xcaddy	affected	wolfi	xcaddy	—
yam	affected	wolfi	yam	—
yam	affected	chainguard	yam	—
yq	affected	chainguard	yq	—
yq	affected	wolfi	yq	—
yq-fips	affected	chainguard	yq-fips	—
ytt	affected	wolfi	ytt	—
ytt	affected	chainguard	ytt	—
zarf	affected	wolfi	zarf	—
zarf	affected	chainguard	zarf	—

Upstream advisory

AZL-42386

Open SourcePoC exploitCRITICAL2024-06-05

CVE-2024-24790 affecting package msft-golang for versions less than 1.21.6-1

Affected products

Product	Status	Vendor	Package	Ecosystem
msft-golang	affected	Azure Linux:2	msft-golang	—

Upstream advisory

AZL-42395

Open SourcePoC exploitCRITICAL2024-06-05

CVE-2024-24790 affecting package golang for versions less than 1.22.3-1

Affected products

Product	Status	Vendor	Package	Ecosystem
golang	affected	Azure Linux:2	golang	—

Upstream advisory

AZL-42403

Open SourcePoC exploitCRITICAL2024-06-05

CVE-2024-24790 affecting package golang for versions less than 1.21.11-1

Affected products

Product	Status	Vendor	Package	Ecosystem
golang	affected	Azure Linux:2	golang	—

Upstream advisory

AZL-42409

Open SourcePoC exploitCRITICAL2024-06-05

CVE-2024-24790 affecting package golang for versions less than 1.18.8-4

Affected products

Product	Status	Vendor	Package	Ecosystem
golang	affected	Azure Linux:2	golang	—

Upstream advisory

AZL-79050

Open SourcePoC exploitCRITICAL2024-06-05

CVE-2024-24790 affecting package golang 1.25.7-1

Affected products

Product	Status	Vendor	Package	Ecosystem
golang	affected	Azure Linux:3	golang	—

Upstream advisory

DEBIAN-CVE-2024-24790

Open SourcePoC exploitCRITICAL2024-06-05

DEBIAN-CVE-2024-24790

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-1.15	affected	Debian:11	golang-1.15	—
golang-1.19	affected	Debian:12	golang-1.19	—

Upstream advisory

GO-2024-2887

Open SourcePoC exploit2024-06-04

Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip

Affected products

Product	Status	Vendor	Package	Ecosystem
aactl	affected	chainguard	aactl	—
aactl	affected	wolfi	aactl	—
actions-runner-controller	affected	wolfi	actions-runner-controller	—
actions-runner-controller	affected	chainguard	actions-runner-controller	—
actions-runner-controller-fips	affected	chainguard	actions-runner-controller-fips	—
addon-resizer	affected	chainguard	addon-resizer	—
addon-resizer	affected	wolfi	addon-resizer	—
addon-resizer-fips	affected	chainguard	addon-resizer-fips	—
age	affected	chainguard	age	—
age	affected	wolfi	age	—
amass	affected	chainguard	amass	—
amass	affected	wolfi	amass	—
argo-workflows	affected	chainguard	argo-workflows	—
argo-workflows	affected	wolfi	argo-workflows	—
argo-workflows-fips	affected	chainguard	argo-workflows-fips	—
atlantis	affected	chainguard	atlantis	—
atlantis	affected	wolfi	atlantis	—
atlantis-fips	affected	chainguard	atlantis-fips	—
aws-ebs-csi-driver	affected	chainguard	aws-ebs-csi-driver	—
aws-efs-csi-driver-fips	affected	chainguard	aws-efs-csi-driver-fips	—
aws-flb-cloudwatch	affected	wolfi	aws-flb-cloudwatch	—
aws-flb-cloudwatch	affected	chainguard	aws-flb-cloudwatch	—
aws-flb-cloudwatch-fips	affected	chainguard	aws-flb-cloudwatch-fips	—
aws-flb-firehose	affected	wolfi	aws-flb-firehose	—
aws-flb-firehose	affected	chainguard	aws-flb-firehose	—
aws-flb-firehose-fips	affected	chainguard	aws-flb-firehose-fips	—
aws-flb-kinesis	affected	wolfi	aws-flb-kinesis	—
aws-flb-kinesis	affected	chainguard	aws-flb-kinesis	—
aws-flb-kinesis-fips	affected	chainguard	aws-flb-kinesis-fips	—
aws-load-balancer-controller	affected	wolfi	aws-load-balancer-controller	—
aws-load-balancer-controller	affected	chainguard	aws-load-balancer-controller	—
aws-load-balancer-controller-fips	affected	chainguard	aws-load-balancer-controller-fips	—
azure-aad-pod-identity-mic	affected	chainguard	azure-aad-pod-identity-mic	—
bank-vaults	affected	wolfi	bank-vaults	—
bank-vaults	affected	chainguard	bank-vaults	—
bank-vaults-fips	affected	chainguard	bank-vaults-fips	—
bazelisk	affected	wolfi	bazelisk	—
bazelisk	affected	chainguard	bazelisk	—
bom	affected	wolfi	bom	—
bom	affected	chainguard	bom	—
boring-registry	affected	wolfi	boring-registry	—
boring-registry	affected	chainguard	boring-registry	—
boring-registry-fips	affected	chainguard	boring-registry-fips	—
buf	affected	wolfi	buf	—
buf	affected	chainguard	buf	—
buildah	affected	chainguard	buildah	—
buildah	affected	wolfi	buildah	—
buildkitd	affected	chainguard	buildkitd	—
buildkitd	affected	wolfi	buildkitd	—
caddy	affected	wolfi	caddy	—
caddy	affected	chainguard	caddy	—
caddy-fips	affected	chainguard	caddy-fips	—
cadvisor	affected	chainguard	cadvisor	—
cadvisor	affected	wolfi	cadvisor	—
cadvisor-fips	affected	chainguard	cadvisor-fips	—
capslock	affected	chainguard	capslock	—
capslock	affected	wolfi	capslock	—
cass-operator	affected	chainguard	cass-operator	—
cass-operator	affected	wolfi	cass-operator	—
cass-operator-fips	affected	chainguard	cass-operator-fips	—
cass-operator-fips-no-pvc-delete	affected	chainguard	cass-operator-fips-no-pvc-delete	—
cert-exporter	affected	chainguard	cert-exporter	—
cert-exporter	affected	wolfi	cert-exporter	—
cert-exporter-fips	affected	chainguard	cert-exporter-fips	—
certificate-transparency	affected	chainguard	certificate-transparency	—
certificate-transparency	affected	wolfi	certificate-transparency	—
certificate-transparency-fips	affected	chainguard	certificate-transparency-fips	—
cert-manager-webhook-pdns	affected	chainguard	cert-manager-webhook-pdns	—
cert-manager-webhook-pdns	affected	wolfi	cert-manager-webhook-pdns	—
cert-manager-webhook-pdns-fips	affected	chainguard	cert-manager-webhook-pdns-fips	—
cfssl	affected	chainguard	cfssl	—
cfssl	affected	wolfi	cfssl	—
chainctl	affected	chainguard	chainctl	—
chartmuseum	affected	wolfi	chartmuseum	—
chartmuseum	affected	chainguard	chartmuseum	—
chezmoi	affected	wolfi	chezmoi	—
chezmoi	affected	chainguard	chezmoi	—
cilium-1.15	affected	chainguard	cilium-1.15	—
cilium-cli	affected	wolfi	cilium-cli	—
cilium-cli	affected	chainguard	cilium-cli	—
cilium-fips-1.15	affected	chainguard	cilium-fips-1.15	—
cloudflared	affected	chainguard	cloudflared	—
cloudflared	affected	wolfi	cloudflared	—
cloud-sql-proxy-fips	affected	chainguard	cloud-sql-proxy-fips	—
cluster-proportional-autoscaler	affected	wolfi	cluster-proportional-autoscaler	—
cluster-proportional-autoscaler	affected	chainguard	cluster-proportional-autoscaler	—
cni-plugins	affected	wolfi	cni-plugins	—
cni-plugins	affected	chainguard	cni-plugins	—
cni-plugins-fips	affected	chainguard	cni-plugins-fips	—
configmap-reload	affected	chainguard	configmap-reload	—
configmap-reload	affected	wolfi	configmap-reload	—
configmap-reload-fips	affected	chainguard	configmap-reload-fips	—
configmap-reload-fips-0.11	affected	chainguard	configmap-reload-fips-0.11	—
confluent-common-docker	affected	wolfi	confluent-common-docker	—
confluent-common-docker	affected	chainguard	confluent-common-docker	—
conftest	affected	wolfi	conftest	—
conftest	affected	chainguard	conftest	—
conftest-fips	affected	chainguard	conftest-fips	—
controller-gen	affected	wolfi	controller-gen	—
controller-gen	affected	chainguard	controller-gen	—
cortex	affected	wolfi	cortex	—
cortex	affected	chainguard	cortex	—
cortex-fips	affected	chainguard	cortex-fips	—
cosign	affected	chainguard	cosign	—
cosign	affected	wolfi	cosign	—
cosign-fips	affected	chainguard	cosign-fips	—
crane	affected	wolfi	crane	—
crane	affected	chainguard	crane	—
cri-tools	affected	chainguard	cri-tools	—
cri-tools	affected	wolfi	cri-tools	—
croc	affected	wolfi	croc	—
croc	affected	chainguard	croc	—
crossplane-provider-aws	affected	wolfi	crossplane-provider-aws	—
crossplane-provider-aws	affected	chainguard	crossplane-provider-aws	—
crossplane-provider-azure	affected	wolfi	crossplane-provider-azure	—
crossplane-provider-azure	affected	chainguard	crossplane-provider-azure	—
crossplane-provider-gcp	affected	chainguard	crossplane-provider-gcp	—
ctop	affected	wolfi	ctop	—
ctop	affected	chainguard	ctop	—
cue-fips	affected	chainguard	cue-fips	—
dagdotdev	affected	chainguard	dagdotdev	—
dagdotdev	affected	wolfi	dagdotdev	—
dagger	affected	wolfi	dagger	—
dagger	affected	chainguard	dagger	—
dask-gateway	affected	chainguard	dask-gateway	—
dask-gateway	affected	wolfi	dask-gateway	—
dataplaneapi	affected	wolfi	dataplaneapi	—
dataplaneapi	affected	chainguard	dataplaneapi	—
dataplaneapi-fips	affected	chainguard	dataplaneapi-fips	—
delve	affected	chainguard	delve	—
delve	affected	wolfi	delve	—
dex	affected	chainguard	dex	—
dex	affected	wolfi	dex	—
dex-fips	affected	chainguard	dex-fips	—
dex-k8s-authenticator	affected	chainguard	dex-k8s-authenticator	—
dgraph	affected	wolfi	dgraph	—
dgraph	affected	chainguard	dgraph	—
direnv	affected	chainguard	direnv	—
direnv	affected	wolfi	direnv	—
dive	affected	chainguard	dive	—
dive	affected	wolfi	dive	—
docker	affected	wolfi	docker	—
docker	affected	chainguard	docker	—
docker-compose	affected	chainguard	docker-compose	—
docker-compose	affected	wolfi	docker-compose	—
docker-credential-acr-env	affected	wolfi	docker-credential-acr-env	—
docker-credential-acr-env	affected	chainguard	docker-credential-acr-env	—
docker-credential-ecr-login	affected	wolfi	docker-credential-ecr-login	—
docker-credential-ecr-login	affected	chainguard	docker-credential-ecr-login	—
docker-credential-gcr	affected	wolfi	docker-credential-gcr	—
docker-credential-gcr	affected	chainguard	docker-credential-gcr	—
dockerize	affected	wolfi	dockerize	—
dockerize	affected	chainguard	dockerize	—
dockerize-fips	affected	chainguard	dockerize-fips	—
doppler-kubernetes-operator	affected	wolfi	doppler-kubernetes-operator	—
doppler-kubernetes-operator	affected	chainguard	doppler-kubernetes-operator	—
dynamic-localpv-provisioner	affected	wolfi	dynamic-localpv-provisioner	—
dynamic-localpv-provisioner	affected	chainguard	dynamic-localpv-provisioner	—
dynamic-localpv-provisioner-fips	affected	chainguard	dynamic-localpv-provisioner-fips	—
envoy-ratelimit	affected	wolfi	envoy-ratelimit	—
envoy-ratelimit	affected	chainguard	envoy-ratelimit	—
envoy-ratelimit-fips	affected	chainguard	envoy-ratelimit-fips	—
etcd-3.4	affected	chainguard	etcd-3.4	—
etcd-3.5	affected	chainguard	etcd-3.5	—
etcd-fips-3.4	affected	chainguard	etcd-fips-3.4	—
etcd-fips-3.5	affected	chainguard	etcd-fips-3.5	—
external-secrets-fips	affected	chainguard	external-secrets-fips	—
extism	affected	wolfi	extism	—
extism	affected	chainguard	extism	—
falcoctl	affected	wolfi	falcoctl	—
falcoctl	affected	chainguard	falcoctl	—
falcoctl-fips	affected	chainguard	falcoctl-fips	—
falcoctl-fips-0.4	affected	chainguard	falcoctl-fips-0.4	—
falcosidekick	affected	chainguard	falcosidekick	—
falcosidekick	affected	wolfi	falcosidekick	—
falcosidekick-fips	affected	chainguard	falcosidekick-fips	—
ferretdb	affected	wolfi	ferretdb	—
ferretdb	affected	chainguard	ferretdb	—
flannel	affected	wolfi	flannel	—
flannel	affected	chainguard	flannel	—
flannel-cni-plugin	affected	wolfi	flannel-cni-plugin	—
flannel-cni-plugin	affected	chainguard	flannel-cni-plugin	—
fluent-bit-plugin-loki	affected	chainguard	fluent-bit-plugin-loki	—
fluent-bit-plugin-loki	affected	wolfi	fluent-bit-plugin-loki	—
fluent-operator	affected	wolfi	fluent-operator	—
fluent-operator	affected	chainguard	fluent-operator	—
fluent-operator-fips	affected	chainguard	fluent-operator-fips	—
flux	affected	wolfi	flux	—
flux	affected	chainguard	flux	—
flux-helm-controller	affected	chainguard	flux-helm-controller	—
flux-helm-controller	affected	wolfi	flux-helm-controller	—
flux-image-automation-controller	affected	wolfi	flux-image-automation-controller	—
flux-image-automation-controller	affected	chainguard	flux-image-automation-controller	—
flux-image-reflector-controller	affected	wolfi	flux-image-reflector-controller	—
flux-image-reflector-controller	affected	chainguard	flux-image-reflector-controller	—
flux-kustomize-controller	affected	chainguard	flux-kustomize-controller	—
flux-kustomize-controller	affected	wolfi	flux-kustomize-controller	—
flux-notification-controller	affected	wolfi	flux-notification-controller	—
flux-notification-controller	affected	chainguard	flux-notification-controller	—
flux-source-controller	affected	chainguard	flux-source-controller	—
flux-source-controller	affected	wolfi	flux-source-controller	—
flyte	affected	wolfi	flyte	—
flyte	affected	chainguard	flyte	—
fq	affected	chainguard	fq	—
fq	affected	wolfi	fq	—
frp	affected	wolfi	frp	—
frp	affected	chainguard	frp	—
fulcio	affected	chainguard	fulcio	—
fulcio	affected	wolfi	fulcio	—
fulcio-fips	affected	chainguard	fulcio-fips	—
fuse-overlayfs-snapshotter	affected	wolfi	fuse-overlayfs-snapshotter	—
fuse-overlayfs-snapshotter	affected	chainguard	fuse-overlayfs-snapshotter	—
gcsfuse	affected	chainguard	gcsfuse	—
gcsfuse	affected	wolfi	gcsfuse	—
gh	affected	chainguard	gh	—
gh	affected	wolfi	gh	—
ghaudit	affected	wolfi	ghaudit	—
ghaudit	affected	chainguard	ghaudit	—
gitleaks	affected	chainguard	gitleaks	—
gitleaks	affected	wolfi	gitleaks	—
git-lfs	affected	wolfi	git-lfs	—
git-lfs	affected	chainguard	git-lfs	—
git-lfs-fips	affected	chainguard	git-lfs-fips	—
gitness	affected	chainguard	gitness	—
gitness	affected	wolfi	gitness	—
gitsign	affected	chainguard	gitsign	—
gitsign	affected	wolfi	gitsign	—
gke-gcloud-auth-plugin	affected	wolfi	gke-gcloud-auth-plugin	—
gke-gcloud-auth-plugin	affected	chainguard	gke-gcloud-auth-plugin	—
glab	affected	chainguard	glab	—
glab	affected	wolfi	glab	—
go-1.21	affected	chainguard	go-1.21	—
go-1.21	affected	wolfi	go-1.21	—
go-1.22	affected	wolfi	go-1.22	—
go-1.22	affected	chainguard	go-1.22	—
go-bindata	affected	wolfi	go-bindata	—
go-bindata	affected	chainguard	go-bindata	—
gobump	affected	wolfi	gobump	—
gobump	affected	chainguard	gobump	—
gobuster	affected	wolfi	gobuster	—
gobuster	affected	chainguard	gobuster	—
golangci-lint	affected	wolfi	golangci-lint	—
golangci-lint	affected	chainguard	golangci-lint	—
go-licenses	affected	chainguard	go-licenses	—
go-licenses	affected	wolfi	go-licenses	—
go-md2man	affected	chainguard	go-md2man	—
go-md2man	affected	wolfi	go-md2man	—
gomplate	affected	chainguard	gomplate	—
gomplate	affected	wolfi	gomplate	—
gomplate-fips	affected	chainguard	gomplate-fips	—
gops	affected	wolfi	gops	—
gops	affected	chainguard	gops	—
gostatsd	affected	chainguard	gostatsd	—
gostatsd	affected	wolfi	gostatsd	—
gosu	affected	chainguard	gosu	—
gosu	affected	wolfi	gosu	—
gosu-1.11	affected	chainguard	gosu-1.11	—
govulncheck	affected	chainguard	govulncheck	—
govulncheck	affected	wolfi	govulncheck	—
grafana-agent-operator	affected	wolfi	grafana-agent-operator	—
grafana-agent-operator	affected	chainguard	grafana-agent-operator	—
grafana-mimir	affected	chainguard	grafana-mimir	—
grafana-mimir	affected	wolfi	grafana-mimir	—
grafana-operator	affected	wolfi	grafana-operator	—
grafana-operator	affected	chainguard	grafana-operator	—
grafana-operator-fips	affected	chainguard	grafana-operator-fips	—
grpc-health-probe	affected	chainguard	grpc-health-probe	—
grpc-health-probe	affected	wolfi	grpc-health-probe	—
grpc-health-probe-fips	affected	chainguard	grpc-health-probe-fips	—
grpcurl	affected	wolfi	grpcurl	—
grpcurl	affected	chainguard	grpcurl	—
grype	affected	chainguard	grype	—
grype	affected	wolfi	grype	—
haproxy-ingress	affected	chainguard	haproxy-ingress	—
haproxy-ingress	affected	wolfi	haproxy-ingress	—
harbor-2.9	affected	chainguard	harbor-2.9	—
harbor-cli	affected	chainguard	harbor-cli	—
harbor-cli	affected	wolfi	harbor-cli	—
harbor-registry	affected	chainguard	harbor-registry	—
harbor-registry	affected	wolfi	harbor-registry	—
harbor-registry-fips	affected	chainguard	harbor-registry-fips	—
harbor-scanner-trivy	affected	chainguard	harbor-scanner-trivy	—
harbor-scanner-trivy	affected	wolfi	harbor-scanner-trivy	—
harbor-scanner-trivy-fips	affected	chainguard	harbor-scanner-trivy-fips	—
hcloud	affected	wolfi	hcloud	—
hcloud	affected	chainguard	hcloud	—
hello-world-golang	affected	wolfi	hello-world-golang	—
hello-world-golang	affected	chainguard	hello-world-golang	—
helm	affected	chainguard	helm	—
helm	affected	wolfi	helm	—
helm-3	affected	chainguard	helm-3	—
helm-3	affected	wolfi	helm-3	—
helm-4	affected	wolfi	helm-4	—
helm-4	affected	chainguard	helm-4	—
helm-docs	affected	wolfi	helm-docs	—
helm-docs	affected	chainguard	helm-docs	—
helm-fips	affected	chainguard	helm-fips	—
helm-fips-3	affected	chainguard	helm-fips-3	—
helm-fips-4	affected	chainguard	helm-fips-4	—
helm-operator	affected	wolfi	helm-operator	—
helm-operator	affected	chainguard	helm-operator	—
helm-operator-fips	affected	chainguard	helm-operator-fips	—
helm-push	affected	chainguard	helm-push	—
helm-push	affected	wolfi	helm-push	—
hey	affected	chainguard	hey	—
hey	affected	wolfi	hey	—
hivemind	affected	chainguard	hivemind	—
hivemind	affected	wolfi	hivemind	—
http-echo	affected	wolfi	http-echo	—
http-echo	affected	chainguard	http-echo	—
hubble-ui	affected	wolfi	hubble-ui	—
hubble-ui	affected	chainguard	hubble-ui	—
hubble-ui-backend-fips	affected	chainguard	hubble-ui-backend-fips	—
influx	affected	chainguard	influx	—
influx	affected	wolfi	influx	—
ip-masq-agent	affected	wolfi	ip-masq-agent	—
ip-masq-agent	affected	chainguard	ip-masq-agent	—
istio-pilot-agent-1.22	affected	chainguard	istio-pilot-agent-1.22	—
istio-pilot-discovery-1.22	affected	chainguard	istio-pilot-discovery-1.22	—
jitsucom-bulker	affected	wolfi	jitsucom-bulker	—
jitsucom-bulker	affected	chainguard	jitsucom-bulker	—
jsonnet-bundler	affected	chainguard	jsonnet-bundler	—
k3d	affected	chainguard	k3d	—
k3d	affected	wolfi	k3d	—
k3s	affected	chainguard	k3s	—
k3s	affected	wolfi	k3s	—
k8s-device-plugin	affected	chainguard	k8s-device-plugin	—
k8s-device-plugin	affected	wolfi	k8s-device-plugin	—
k8sgpt	affected	chainguard	k8sgpt	—
k8sgpt	affected	wolfi	k8sgpt	—
k8ssandra-operator	affected	chainguard	k8ssandra-operator	—
k8ssandra-operator	affected	wolfi	k8ssandra-operator	—
k8ssandra-operator-fips	affected	chainguard	k8ssandra-operator-fips	—
k9s	affected	wolfi	k9s	—
k9s	affected	chainguard	k9s	—
kaf	affected	wolfi	kaf	—
kaf	affected	chainguard	kaf	—
kafka_exporter	affected	chainguard	kafka_exporter	—
kafka_exporter	affected	wolfi	kafka_exporter	—
kafka-proxy	affected	chainguard	kafka-proxy	—
kafka-proxy	affected	wolfi	kafka-proxy	—
kaniko	affected	chainguard	kaniko	—
kaniko	affected	wolfi	kaniko	—
kargo	affected	chainguard	kargo	—
kargo	affected	wolfi	kargo	—
karpenter-0.35	affected	chainguard	karpenter-0.35	—
karpenter-fips-0.35	affected	chainguard	karpenter-fips-0.35	—
karpenter-fips-0.36	affected	chainguard	karpenter-fips-0.36	—
kiam	affected	chainguard	kiam	—
kind	affected	wolfi	kind	—
kind	affected	chainguard	kind	—
ko	affected	chainguard	ko	—
ko	affected	wolfi	ko	—
ko-fips	affected	chainguard	ko-fips	—
kots	affected	chainguard	kots	—
kots	affected	wolfi	kots	—
kpt	affected	wolfi	kpt	—
kpt	affected	chainguard	kpt	—
ksops	affected	wolfi	ksops	—
ksops	affected	chainguard	ksops	—
kube-bench	affected	chainguard	kube-bench	—
kube-bench	affected	wolfi	kube-bench	—
kube-bench-fips	affected	chainguard	kube-bench-fips	—
kubebuilder	affected	chainguard	kubebuilder	—
kubebuilder	affected	wolfi	kubebuilder	—
kubecolor	affected	chainguard	kubecolor	—
kubecolor	affected	wolfi	kubecolor	—
kubeflow-katib	affected	wolfi	kubeflow-katib	—
kubeflow-katib	affected	chainguard	kubeflow-katib	—
kube-fluentd-operator	affected	wolfi	kube-fluentd-operator	—
kube-fluentd-operator	affected	chainguard	kube-fluentd-operator	—
kube-logging-logging-operator-3.17	affected	chainguard	kube-logging-logging-operator-3.17	—
kube-logging-logging-operator-4.1	affected	chainguard	kube-logging-logging-operator-4.1	—
kube-logging-operator	affected	wolfi	kube-logging-operator	—
kube-logging-operator	affected	chainguard	kube-logging-operator	—
kube-oidc-proxy	affected	chainguard	kube-oidc-proxy	—
kuberay-operator	affected	wolfi	kuberay-operator	—
kuberay-operator	affected	chainguard	kuberay-operator	—
kube-rbac-proxy-fips	affected	chainguard	kube-rbac-proxy-fips	—
kubernetes-1.30	affected	chainguard	kubernetes-1.30	—
kubernetes-csi-driver-hostpath	affected	wolfi	kubernetes-csi-driver-hostpath	—
kubernetes-csi-driver-hostpath	affected	chainguard	kubernetes-csi-driver-hostpath	—
kubernetes-csi-external-provisioner	affected	wolfi	kubernetes-csi-external-provisioner	—
kubernetes-csi-external-provisioner	affected	chainguard	kubernetes-csi-external-provisioner	—
kubernetes-csi-livenessprobe	affected	wolfi	kubernetes-csi-livenessprobe	—
kubernetes-csi-livenessprobe	affected	chainguard	kubernetes-csi-livenessprobe	—
kubernetes-csi-livenessprobe-2.10	affected	chainguard	kubernetes-csi-livenessprobe-2.10	—
kubernetes-csi-livenessprobe-fips	affected	chainguard	kubernetes-csi-livenessprobe-fips	—
kubernetes-csi-livenessprobe-fips-2.10	affected	chainguard	kubernetes-csi-livenessprobe-fips-2.10	—
kubernetes-dashboard	affected	chainguard	kubernetes-dashboard	—
kubernetes-dashboard	affected	wolfi	kubernetes-dashboard	—
kubernetes-dashboard-fips	affected	chainguard	kubernetes-dashboard-fips	—
kubernetes-dashboard-metrics-scraper	affected	chainguard	kubernetes-dashboard-metrics-scraper	—
kubernetes-dashboard-metrics-scraper	affected	wolfi	kubernetes-dashboard-metrics-scraper	—
kubernetes-dashboard-metrics-scraper-fips	affected	chainguard	kubernetes-dashboard-metrics-scraper-fips	—
kubernetes-dns-node-cache	affected	wolfi	kubernetes-dns-node-cache	—
kubernetes-dns-node-cache	affected	chainguard	kubernetes-dns-node-cache	—
kubernetes-event-exporter	affected	chainguard	kubernetes-event-exporter	—
kubernetes-event-exporter	affected	wolfi	kubernetes-event-exporter	—
kubernetes-ingress-defaultbackend	affected	chainguard	kubernetes-ingress-defaultbackend	—
kubernetes-ingress-defaultbackend	affected	wolfi	kubernetes-ingress-defaultbackend	—
kubescape	affected	wolfi	kubescape	—
kubescape	affected	chainguard	kubescape	—
kube-state-metrics	affected	chainguard	kube-state-metrics	—
kube-state-metrics	affected	wolfi	kube-state-metrics	—
kube-state-metrics-2.6	affected	chainguard	kube-state-metrics-2.6	—
kube-state-metrics-fips	affected	chainguard	kube-state-metrics-fips	—
kubevela	affected	wolfi	kubevela	—
kubevela	affected	chainguard	kubevela	—
kube-vip	affected	chainguard	kube-vip	—
kube-vip	affected	wolfi	kube-vip	—
kube-vip-fips	affected	chainguard	kube-vip-fips	—
kubewatch	affected	wolfi	kubewatch	—
kubewatch	affected	chainguard	kubewatch	—
kustomize	affected	chainguard	kustomize	—
kustomize	affected	wolfi	kustomize	—
kustomize-fips	affected	chainguard	kustomize-fips	—
kwok	affected	wolfi	kwok	—
kwok	affected	chainguard	kwok	—
kyverno-policy-reporter	affected	chainguard	kyverno-policy-reporter	—
kyverno-policy-reporter	affected	wolfi	kyverno-policy-reporter	—
kyverno-policy-reporter-kyverno-plugin	affected	wolfi	kyverno-policy-reporter-kyverno-plugin	—
kyverno-policy-reporter-kyverno-plugin	affected	chainguard	kyverno-policy-reporter-kyverno-plugin	—
kyverno-policy-reporter-ui	affected	wolfi	kyverno-policy-reporter-ui	—
kyverno-policy-reporter-ui	affected	chainguard	kyverno-policy-reporter-ui	—
lazygit	affected	wolfi	lazygit	—
lazygit	affected	chainguard	lazygit	—
libnvidia-container	affected	chainguard	libnvidia-container	—
libnvidia-container	affected	wolfi	libnvidia-container	—
litefs	affected	wolfi	litefs	—
litefs	affected	chainguard	litefs	—
litestream	affected	chainguard	litestream	—
litestream	affected	wolfi	litestream	—
local-path-provisioner	affected	wolfi	local-path-provisioner	—
local-path-provisioner	affected	chainguard	local-path-provisioner	—
local-static-provisioner	affected	chainguard	local-static-provisioner	—
local-static-provisioner	affected	wolfi	local-static-provisioner	—
logstash-exporter	affected	wolfi	logstash-exporter	—
logstash-exporter	affected	chainguard	logstash-exporter	—
logstash-exporter-fips	affected	chainguard	logstash-exporter-fips	—
loki-2.9	affected	chainguard	loki-2.9	—
mage	affected	chainguard	mage	—
mage	affected	wolfi	mage	—
mc	affected	chainguard	mc	—
mc	affected	wolfi	mc	—
mc-fips	affected	chainguard	mc-fips	—
memcached-exporter	affected	wolfi	memcached-exporter	—
memcached-exporter	affected	chainguard	memcached-exporter	—
metacontroller	affected	wolfi	metacontroller	—
metacontroller	affected	chainguard	metacontroller	—
metallb	affected	wolfi	metallb	—
metallb	affected	chainguard	metallb	—
metallb-fips	affected	chainguard	metallb-fips	—
metrics-server	affected	wolfi	metrics-server	—
metrics-server	affected	chainguard	metrics-server	—
metrics-server-fips	affected	chainguard	metrics-server-fips	—
minify	affected	chainguard	minify	—
minify	affected	wolfi	minify	—
minify-fips	affected	chainguard	minify-fips	—
mkcert	affected	chainguard	mkcert	—
mkcert	affected	wolfi	mkcert	—
mockery	affected	wolfi	mockery	—
mockery	affected	chainguard	mockery	—
mods	affected	chainguard	mods	—
mods	affected	wolfi	mods	—
mongo-tools	affected	chainguard	mongo-tools	—
mongo-tools	affected	wolfi	mongo-tools	—
multus-cni-fips	affected	chainguard	multus-cni-fips	—
nats	affected	wolfi	nats	—
nats	affected	chainguard	nats	—
nats-server	affected	wolfi	nats-server	—
nats-server	affected	chainguard	nats-server	—
nerdctl	affected	wolfi	nerdctl	—
nerdctl	affected	chainguard	nerdctl	—
neuvector-dbgen	affected	wolfi	neuvector-dbgen	—
neuvector-dbgen	affected	chainguard	neuvector-dbgen	—
neuvector-dbgen-fips	affected	chainguard	neuvector-dbgen-fips	—
neuvector-scanner	affected	wolfi	neuvector-scanner	—
neuvector-scanner	affected	chainguard	neuvector-scanner	—
neuvector-scanner-fips	affected	chainguard	neuvector-scanner-fips	—
neuvector-sigstore-interface	affected	chainguard	neuvector-sigstore-interface	—
neuvector-sigstore-interface	affected	wolfi	neuvector-sigstore-interface	—
neuvector-sigstore-interface-fips	affected	chainguard	neuvector-sigstore-interface-fips	—
newrelic-fluent-bit-output	affected	wolfi	newrelic-fluent-bit-output	—
newrelic-fluent-bit-output	affected	chainguard	newrelic-fluent-bit-output	—
newrelic-infra-operator	affected	wolfi	newrelic-infra-operator	—
newrelic-infra-operator	affected	chainguard	newrelic-infra-operator	—
newrelic-infrastructure-agent	affected	chainguard	newrelic-infrastructure-agent	—
newrelic-infrastructure-agent	affected	wolfi	newrelic-infrastructure-agent	—
newrelic-nri-kube-events	affected	wolfi	newrelic-nri-kube-events	—
newrelic-nri-kube-events	affected	chainguard	newrelic-nri-kube-events	—
newrelic-nri-statsd	affected	chainguard	newrelic-nri-statsd	—
newrelic-nri-statsd	affected	wolfi	newrelic-nri-statsd	—
newrelic-prometheus-configurator	affected	wolfi	newrelic-prometheus-configurator	—
newrelic-prometheus-configurator	affected	chainguard	newrelic-prometheus-configurator	—
nfs-subdir-external-provisioner	affected	chainguard	nfs-subdir-external-provisioner	—
nfs-subdir-external-provisioner	affected	wolfi	nfs-subdir-external-provisioner	—
nfs-subdir-external-provisioner-fips	affected	chainguard	nfs-subdir-external-provisioner-fips	—
node-feature-discovery-0.16	affected	chainguard	node-feature-discovery-0.16	—
node-problem-detector-0.8	affected	chainguard	node-problem-detector-0.8	—
nodetaint	affected	wolfi	nodetaint	—
nodetaint	affected	chainguard	nodetaint	—
nri-apache	affected	chainguard	nri-apache	—
nri-apache	affected	wolfi	nri-apache	—
nri-cassandra	affected	wolfi	nri-cassandra	—
nri-cassandra	affected	chainguard	nri-cassandra	—
nri-consul	affected	wolfi	nri-consul	—
nri-consul	affected	chainguard	nri-consul	—
nri-couchbase	affected	chainguard	nri-couchbase	—
nri-couchbase	affected	wolfi	nri-couchbase	—
nri-discovery-kubernetes	affected	chainguard	nri-discovery-kubernetes	—
nri-discovery-kubernetes	affected	wolfi	nri-discovery-kubernetes	—
nri-elasticsearch	affected	wolfi	nri-elasticsearch	—
nri-elasticsearch	affected	chainguard	nri-elasticsearch	—
nri-f5	affected	wolfi	nri-f5	—
nri-f5	affected	chainguard	nri-f5	—
nri-haproxy	affected	wolfi	nri-haproxy	—
nri-haproxy	affected	chainguard	nri-haproxy	—
nri-jmx	affected	chainguard	nri-jmx	—
nri-jmx	affected	wolfi	nri-jmx	—
nri-kafka	affected	wolfi	nri-kafka	—
nri-kafka	affected	chainguard	nri-kafka	—
nri-kubernetes	affected	wolfi	nri-kubernetes	—
nri-kubernetes	affected	chainguard	nri-kubernetes	—
nri-memcached	affected	chainguard	nri-memcached	—
nri-memcached	affected	wolfi	nri-memcached	—
nri-mongodb	affected	chainguard	nri-mongodb	—
nri-mongodb	affected	wolfi	nri-mongodb	—
nri-mssql	affected	wolfi	nri-mssql	—
nri-mssql	affected	chainguard	nri-mssql	—
nri-mysql	affected	wolfi	nri-mysql	—
nri-mysql	affected	chainguard	nri-mysql	—
nri-nagios	affected	wolfi	nri-nagios	—
nri-nagios	affected	chainguard	nri-nagios	—
nri-nginx	affected	wolfi	nri-nginx	—
nri-nginx	affected	chainguard	nri-nginx	—
nri-postgresql	affected	chainguard	nri-postgresql	—
nri-postgresql	affected	wolfi	nri-postgresql	—
nri-prometheus	affected	wolfi	nri-prometheus	—
nri-prometheus	affected	chainguard	nri-prometheus	—
nri-rabbitmq	affected	wolfi	nri-rabbitmq	—
nri-rabbitmq	affected	chainguard	nri-rabbitmq	—
nri-redis	affected	chainguard	nri-redis	—
nri-redis	affected	wolfi	nri-redis	—
nsc	affected	chainguard	nsc	—
nsc	affected	wolfi	nsc	—
nvidia-container-toolkit	affected	wolfi	nvidia-container-toolkit	—
nvidia-container-toolkit	affected	chainguard	nvidia-container-toolkit	—
nvidia-nsight-compute-12.8	affected	chainguard	nvidia-nsight-compute-12.8	—
oauth2-proxy	affected	wolfi	oauth2-proxy	—
oauth2-proxy	affected	chainguard	oauth2-proxy	—
octo-sts	affected	wolfi	octo-sts	—
octo-sts	affected	chainguard	octo-sts	—
ollama	affected	wolfi	ollama	—
ollama	affected	chainguard	ollama	—
opa	affected	wolfi	opa	—
opa	affected	chainguard	opa	—
opa-fips	affected	chainguard	opa-fips	—
opentelemetry-collector-fips	affected	chainguard	opentelemetry-collector-fips	—
oras	affected	wolfi	oras	—
oras	affected	chainguard	oras	—
osv-scanner	affected	wolfi	osv-scanner	—
osv-scanner	affected	chainguard	osv-scanner	—
overmind	affected	wolfi	overmind	—
overmind	affected	chainguard	overmind	—
paranoia	affected	wolfi	paranoia	—
paranoia	affected	chainguard	paranoia	—
petname	affected	chainguard	petname	—
petname	affected	wolfi	petname	—
php-fpm_exporter	affected	wolfi	php-fpm_exporter	—
php-fpm_exporter	affected	chainguard	php-fpm_exporter	—
pluto	affected	chainguard	pluto	—
pluto	affected	wolfi	pluto	—
policy-controller	affected	chainguard	policy-controller	—
policy-controller	affected	wolfi	policy-controller	—
policy-controller-fips	affected	chainguard	policy-controller-fips	—
pombump	affected	chainguard	pombump	—
pombump	affected	wolfi	pombump	—
postgres-operator	affected	wolfi	postgres-operator	—
postgres-operator	affected	chainguard	postgres-operator	—
postgres-operator-fips	affected	chainguard	postgres-operator-fips	—
prometheus-2.51	affected	chainguard	prometheus-2.51	—
prometheus-adapter	affected	wolfi	prometheus-adapter	—
prometheus-adapter	affected	chainguard	prometheus-adapter	—
prometheus-adapter-0.10	affected	chainguard	prometheus-adapter-0.10	—
prometheus-alertmanager	affected	wolfi	prometheus-alertmanager	—
prometheus-alertmanager	affected	chainguard	prometheus-alertmanager	—
prometheus-alertmanager-fips	affected	chainguard	prometheus-alertmanager-fips	—
prometheus-beat-exporter	affected	chainguard	prometheus-beat-exporter	—
prometheus-beat-exporter-fips	affected	chainguard	prometheus-beat-exporter-fips	—
prometheus-bind-exporter	affected	chainguard	prometheus-bind-exporter	—
prometheus-blackbox-exporter	affected	chainguard	prometheus-blackbox-exporter	—
prometheus-elasticsearch-exporter	affected	chainguard	prometheus-elasticsearch-exporter	—
prometheus-elasticsearch-exporter-fips	affected	chainguard	prometheus-elasticsearch-exporter-fips	—
prometheus-mongodb-exporter	affected	chainguard	prometheus-mongodb-exporter	—
prometheus-mongodb-exporter-0.37	affected	chainguard	prometheus-mongodb-exporter-0.37	—
prometheus-mongodb-exporter-fips	affected	chainguard	prometheus-mongodb-exporter-fips	—
prometheus-mysqld-exporter	affected	chainguard	prometheus-mysqld-exporter	—
prometheus-nats-exporter	affected	chainguard	prometheus-nats-exporter	—
prometheus-node-exporter	affected	chainguard	prometheus-node-exporter	—
prometheus-node-exporter-1.4	affected	chainguard	prometheus-node-exporter-1.4	—
prometheus-node-exporter-1.5	affected	chainguard	prometheus-node-exporter-1.5	—
prometheus-node-exporter-fips	affected	chainguard	prometheus-node-exporter-fips	—
prometheus-operator	affected	wolfi	prometheus-operator	—
prometheus-operator	affected	chainguard	prometheus-operator	—
prometheus-operator-fips	affected	chainguard	prometheus-operator-fips	—
prometheus-postgres-exporter	affected	chainguard	prometheus-postgres-exporter	—
prometheus-postgres-exporter-0.10	affected	chainguard	prometheus-postgres-exporter-0.10	—
prometheus-postgres-exporter-fips	affected	chainguard	prometheus-postgres-exporter-fips	—
prometheus-pushgateway	affected	chainguard	prometheus-pushgateway	—
prometheus-pushgateway	affected	wolfi	prometheus-pushgateway	—
prometheus-pushgateway-1.4	affected	chainguard	prometheus-pushgateway-1.4	—
prometheus-pushgateway-fips	affected	chainguard	prometheus-pushgateway-fips	—
prometheus-pushgateway-fips-1.4	affected	chainguard	prometheus-pushgateway-fips-1.4	—
prometheus-redis-exporter	affected	chainguard	prometheus-redis-exporter	—
prometheus-redis-exporter-fips	affected	chainguard	prometheus-redis-exporter-fips	—
prometheus-stackdriver-exporter	affected	chainguard	prometheus-stackdriver-exporter	—
prometheus-statsd-exporter	affected	chainguard	prometheus-statsd-exporter	—
prometheus-statsd-exporter-fips	affected	chainguard	prometheus-statsd-exporter-fips	—
prometheus-statsd-exporter-fips-0.22	affected	chainguard	prometheus-statsd-exporter-fips-0.22	—
protoc-gen-go	affected	wolfi	protoc-gen-go	—
protoc-gen-go	affected	chainguard	protoc-gen-go	—
protoc-gen-go-grpc	affected	chainguard	protoc-gen-go-grpc	—
protoc-gen-go-grpc	affected	wolfi	protoc-gen-go-grpc	—
pulumi-kubernetes-operator	affected	chainguard	pulumi-kubernetes-operator	—
pulumi-kubernetes-operator	affected	wolfi	pulumi-kubernetes-operator	—
pulumi-language-dotnet	affected	wolfi	pulumi-language-dotnet	—
pulumi-language-dotnet	affected	chainguard	pulumi-language-dotnet	—
pulumi-language-java	affected	chainguard	pulumi-language-java	—
pulumi-language-java	affected	wolfi	pulumi-language-java	—
q	affected	chainguard	q	—
q	affected	wolfi	q	—
rabbitmq-cluster-operator	affected	chainguard	rabbitmq-cluster-operator	—
rabbitmq-cluster-operator	affected	wolfi	rabbitmq-cluster-operator	—
rabbitmq-default-user-credential-updater	affected	chainguard	rabbitmq-default-user-credential-updater	—
rabbitmq-default-user-credential-updater	affected	wolfi	rabbitmq-default-user-credential-updater	—
rabbitmq-messaging-topology-operator	affected	wolfi	rabbitmq-messaging-topology-operator	—
rabbitmq-messaging-topology-operator	affected	chainguard	rabbitmq-messaging-topology-operator	—
rclone	affected	chainguard	rclone	—
rclone	affected	wolfi	rclone	—
redka	affected	chainguard	redka	—
redka	affected	wolfi	redka	—
regclient	affected	chainguard	regclient	—
regclient	affected	wolfi	regclient	—
rekor	affected	wolfi	rekor	—
rekor	affected	chainguard	rekor	—
rekor-fips	affected	chainguard	rekor-fips	—
render-template	affected	wolfi	render-template	—
render-template	affected	chainguard	render-template	—
request-1279	affected	chainguard	request-1279	—
restic	affected	chainguard	restic	—
restic	affected	wolfi	restic	—
restic-fips	affected	chainguard	restic-fips	—
rook	affected	chainguard	rook	—
rook	affected	wolfi	rook	—
rootlesskit	affected	wolfi	rootlesskit	—
rootlesskit	affected	chainguard	rootlesskit	—
runc	affected	wolfi	runc	—
runc	affected	chainguard	runc	—
s5cmd	affected	wolfi	s5cmd	—
s5cmd	affected	chainguard	s5cmd	—
sbomqs	affected	chainguard	sbomqs	—
sbomqs	affected	wolfi	sbomqs	—
sbom-scorecard	affected	chainguard	sbom-scorecard	—
sbom-scorecard	affected	wolfi	sbom-scorecard	—
scorecard	affected	wolfi	scorecard	—
scorecard	affected	chainguard	scorecard	—
secrets-store-csi-driver	affected	wolfi	secrets-store-csi-driver	—
secrets-store-csi-driver	affected	chainguard	secrets-store-csi-driver	—
secrets-store-csi-driver-provider-aws	affected	wolfi	secrets-store-csi-driver-provider-aws	—
secrets-store-csi-driver-provider-aws	affected	chainguard	secrets-store-csi-driver-provider-aws	—
secrets-store-csi-driver-provider-azure	affected	chainguard	secrets-store-csi-driver-provider-azure	—
secrets-store-csi-driver-provider-azure	affected	wolfi	secrets-store-csi-driver-provider-azure	—
secrets-store-csi-driver-provider-gcp	affected	chainguard	secrets-store-csi-driver-provider-gcp	—
secrets-store-csi-driver-provider-gcp	affected	wolfi	secrets-store-csi-driver-provider-gcp	—
shfmt	affected	wolfi	shfmt	—
shfmt	affected	chainguard	shfmt	—
sigstore-scaffolding	affected	wolfi	sigstore-scaffolding	—
sigstore-scaffolding	affected	chainguard	sigstore-scaffolding	—
sigstore-scaffolding-fips	affected	chainguard	sigstore-scaffolding-fips	—
skaffold	affected	chainguard	skaffold	—
skaffold	affected	wolfi	skaffold	—
skopeo	affected	wolfi	skopeo	—
skopeo	affected	chainguard	skopeo	—
slsa-verifier	affected	wolfi	slsa-verifier	—
slsa-verifier	affected	chainguard	slsa-verifier	—
smarter-device-manager	affected	wolfi	smarter-device-manager	—
smarter-device-manager	affected	chainguard	smarter-device-manager	—
smarter-device-manager-fips	affected	chainguard	smarter-device-manager-fips	—
snyk-cli	affected	chainguard	snyk-cli	—
snyk-cli	affected	wolfi	snyk-cli	—
sonobuoy	affected	wolfi	sonobuoy	—
sonobuoy	affected	chainguard	sonobuoy	—
sops	affected	wolfi	sops	—
sops	affected	chainguard	sops	—
speedtest-go	affected	wolfi	speedtest-go	—
speedtest-go	affected	chainguard	speedtest-go	—
spegel	affected	chainguard	spegel	—
spegel	affected	wolfi	spegel	—
spicedb	affected	wolfi	spicedb	—
spicedb	affected	chainguard	spicedb	—
spire-server	affected	chainguard	spire-server	—
spire-server	affected	wolfi	spire-server	—
spire-server-fips	affected	chainguard	spire-server-fips	—
spqr	affected	chainguard	spqr	—
spqr	affected	wolfi	spqr	—
src	affected	chainguard	src	—
src	affected	wolfi	src	—
src-fingerprint	affected	wolfi	src-fingerprint	—
src-fingerprint	affected	chainguard	src-fingerprint	—
src-fingerprint-fips	affected	chainguard	src-fingerprint-fips	—
stakater-reloader-0.0.119	affected	chainguard	stakater-reloader-0.0.119	—
stakater-reloader-0.0.128	affected	chainguard	stakater-reloader-0.0.128	—
stdlib	affected	Go	stdlib	—
step	affected	chainguard	step	—
step	affected	wolfi	step	—
step-ca	affected	chainguard	step-ca	—
step-ca	affected	wolfi	step-ca	—
step-ca-fips	affected	chainguard	step-ca-fips	—
step-fips	affected	chainguard	step-fips	—
step-issuer	affected	chainguard	step-issuer	—
step-issuer	affected	wolfi	step-issuer	—
step-issuer-fips	affected	chainguard	step-issuer-fips	—
stern	affected	chainguard	stern	—
stern	affected	wolfi	stern	—
supercronic	affected	wolfi	supercronic	—
supercronic	affected	chainguard	supercronic	—
swagger	affected	chainguard	swagger	—
swagger	affected	wolfi	swagger	—
syft	affected	chainguard	syft	—
syft	affected	wolfi	syft	—
tailscale	affected	wolfi	tailscale	—
tailscale	affected	chainguard	tailscale	—
task	affected	wolfi	task	—
task	affected	chainguard	task	—
tekton-chains	affected	wolfi	tekton-chains	—
tekton-chains	affected	chainguard	tekton-chains	—
tekton-chains-fips	affected	chainguard	tekton-chains-fips	—
tempo	affected	chainguard	tempo	—
tempo	affected	wolfi	tempo	—
temporal	affected	wolfi	temporal	—
temporal	affected	chainguard	temporal	—
temporal-fips	affected	chainguard	temporal-fips	—
temporal-ui-server	affected	wolfi	temporal-ui-server	—
temporal-ui-server	affected	chainguard	temporal-ui-server	—
temporal-ui-server-fips	affected	chainguard	temporal-ui-server-fips	—
terraform	affected	wolfi	terraform	—
terraform	affected	chainguard	terraform	—
terraform-docs	affected	chainguard	terraform-docs	—
terraform-docs	affected	wolfi	terraform-docs	—
terraform-provider-aws	affected	wolfi	terraform-provider-aws	—
terraform-provider-aws	affected	chainguard	terraform-provider-aws	—
terraform-provider-azurerm	affected	chainguard	terraform-provider-azurerm	—
terraform-provider-azurerm	affected	wolfi	terraform-provider-azurerm	—
terraform-provider-google	affected	chainguard	terraform-provider-google	—
terraform-provider-google	affected	wolfi	terraform-provider-google	—
terragrunt	affected	wolfi	terragrunt	—
terragrunt	affected	chainguard	terragrunt	—
tflint	affected	chainguard	tflint	—
tflint	affected	wolfi	tflint	—
tfsec	affected	wolfi	tfsec	—
tfsec	affected	chainguard	tfsec	—
thanos	affected	wolfi	thanos	—
thanos	affected	chainguard	thanos	—
thanos-fips	affected	chainguard	thanos-fips	—
thanos-operator	affected	wolfi	thanos-operator	—
thanos-operator	affected	chainguard	thanos-operator	—
thanos-operator-fips	affected	chainguard	thanos-operator-fips	—
tigera-operator-1.28	affected	chainguard	tigera-operator-1.28	—
tigera-operator-1.29	affected	chainguard	tigera-operator-1.29	—
tigera-operator-fips-1.29	affected	chainguard	tigera-operator-fips-1.29	—
timestamp-authority	affected	chainguard	timestamp-authority	—
timestamp-authority	affected	wolfi	timestamp-authority	—
timestamp-authority-fips	affected	chainguard	timestamp-authority-fips	—
timoni	affected	wolfi	timoni	—
timoni	affected	chainguard	timoni	—
tkn	affected	chainguard	tkn	—
tkn	affected	wolfi	tkn	—
tkn-fips	affected	chainguard	tkn-fips	—
trillian	affected	chainguard	trillian	—
trillian	affected	wolfi	trillian	—
trillian-fips	affected	chainguard	trillian-fips	—
trivy	affected	wolfi	trivy	—
trivy	affected	chainguard	trivy	—
trivy-fips	affected	chainguard	trivy-fips	—
trust-manager	affected	chainguard	trust-manager	—
trust-manager	affected	wolfi	trust-manager	—
trust-manager-fips	affected	chainguard	trust-manager-fips	—
up	affected	wolfi	up	—
up	affected	chainguard	up	—
vault-csi-provider	affected	chainguard	vault-csi-provider	—
vault-k8s	affected	wolfi	vault-k8s	—
vault-k8s	affected	chainguard	vault-k8s	—
vault-k8s-fips	affected	chainguard	vault-k8s-fips	—
vcluster	affected	chainguard	vcluster	—
vcluster	affected	wolfi	vcluster	—
velero	affected	wolfi	velero	—
velero	affected	chainguard	velero	—
velero-fips	affected	chainguard	velero-fips	—
velero-plugin-for-aws	affected	wolfi	velero-plugin-for-aws	—
velero-plugin-for-aws	affected	chainguard	velero-plugin-for-aws	—
velero-plugin-for-aws-fips	affected	chainguard	velero-plugin-for-aws-fips	—
velero-plugin-for-csi	affected	wolfi	velero-plugin-for-csi	—
velero-plugin-for-csi	affected	chainguard	velero-plugin-for-csi	—
velero-plugin-for-csi-fips	affected	chainguard	velero-plugin-for-csi-fips	—
vexctl	affected	chainguard	vexctl	—
vexctl	affected	wolfi	vexctl	—
volume-modifier-for-k8s	affected	wolfi	volume-modifier-for-k8s	—
volume-modifier-for-k8s	affected	chainguard	volume-modifier-for-k8s	—
vt-cli	affected	chainguard	vt-cli	—
vt-cli	affected	wolfi	vt-cli	—
wait-for-port	affected	wolfi	wait-for-port	—
wait-for-port	affected	chainguard	wait-for-port	—
wave	affected	chainguard	wave	—
wave	affected	wolfi	wave	—
wave-fips	affected	chainguard	wave-fips	—
wavefront-collector-for-kubernetes-1.12	affected	chainguard	wavefront-collector-for-kubernetes-1.12	—
wavefront-collector-for-kubernetes-1.13	affected	chainguard	wavefront-collector-for-kubernetes-1.13	—
wazero	affected	chainguard	wazero	—
wazero	affected	wolfi	wazero	—
weaviate	affected	chainguard	weaviate	—
weaviate	affected	wolfi	weaviate	—
wgcf	affected	chainguard	wgcf	—
wgcf	affected	wolfi	wgcf	—
wire-go	affected	wolfi	wire-go	—
wire-go	affected	chainguard	wire-go	—
wireguard-go	affected	wolfi	wireguard-go	—
wireguard-go	affected	chainguard	wireguard-go	—
wolfictl	affected	wolfi	wolfictl	—
wolfictl	affected	chainguard	wolfictl	—
xcaddy	affected	wolfi	xcaddy	—
xcaddy	affected	chainguard	xcaddy	—
yam	affected	chainguard	yam	—
yam	affected	wolfi	yam	—
yq	affected	wolfi	yq	—
yq	affected	chainguard	yq	—
yq-fips	affected	chainguard	yq-fips	—
ytt	affected	wolfi	ytt	—
ytt	affected	chainguard	ytt	—
zarf	affected	wolfi	zarf	—
zarf	affected	chainguard	zarf	—

Upstream advisory

CVE-2024-24790

GooglePoC exploitCRITICAL2024-06-04

CVEs:CVE-2024-24790

Upstream advisory

CVE-2024-24790

GooglePoC exploit2024-06-04

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

CVEs:CVE-2024-24790

Upstream advisory

CVE-2024-24790

GooglePoC exploitCRITICAL2024-06-04

The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.

CVEs:CVE-2024-24790

Affected products

Product	Status	Vendor	Package	Ecosystem
go	affected	golang	—	—

Upstream advisory

openSUSE-SU-2024:11572-1

Open SourcePoC exploit2024-06-15

chromedriver-94.0.4606.81-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:13604-1

Open SourcePoC exploit2024-06-15

golang-github-prometheus-prometheus-2.48.1-2.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-prometheus-prometheus	affected	openSUSE:Tumbleweed	golang-github-prometheus-prometheus	—

Upstream advisory

openSUSE-SU-2024:13369-1

Open SourcePoC exploit2024-06-15

etcd-for-k8s1.25-3.5.9-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
etcd-for-k8s1.25	affected	openSUSE:Tumbleweed	etcd-for-k8s1.25	—

Upstream advisory

openSUSE-SU-2024:13370-1

Open SourcePoC exploit2024-06-15

etcd-for-k8s1.26-3.5.9-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
etcd-for-k8s1.26	affected	openSUSE:Tumbleweed	etcd-for-k8s1.26	—

Upstream advisory

openSUSE-SU-2024:13371-1

Open SourcePoC exploit2024-06-15

etcd-for-k8s1.27-3.5.9-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
etcd-for-k8s1.27	affected	openSUSE:Tumbleweed	etcd-for-k8s1.27	—

Upstream advisory

openSUSE-SU-2024:12158-1

Open SourcePoC exploit2024-06-15

chromedriver-103.0.5060.53-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:11739-1

Open SourcePoC exploit2024-06-15

chromedriver-97.0.4692.71-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

GO-2024-2791

Open SourcePoC exploit2024-06-04

CRI-O vulnerable to an arbitrary systemd property injection in github.com/cri-o/cri-o

Affected products

Product	Status	Vendor	Package	Ecosystem
buildah	affected	wolfi	buildah	—
buildah	affected	chainguard	buildah	—
cadvisor	affected	chainguard	cadvisor	—
cadvisor	affected	wolfi	cadvisor	—
cadvisor-fips	affected	chainguard	cadvisor-fips	—
cri-o/cri-o	affected	github.com	github.com/cri-o/cri-o	—
ctop	affected	wolfi	ctop	—
ctop	affected	chainguard	ctop	—
grype	affected	wolfi	grype	—
grype	affected	chainguard	grype	—
kubernetes-1.27	affected	wolfi	kubernetes-1.27	—
kubernetes-1.28	affected	chainguard	kubernetes-1.28	—
kubernetes-1.28	affected	wolfi	kubernetes-1.28	—
neuvector-scanner	affected	wolfi	neuvector-scanner	—
neuvector-scanner	affected	chainguard	neuvector-scanner	—
opentelemetry-collector-contrib	affected	wolfi	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib	affected	chainguard	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib-fips	affected	chainguard	opentelemetry-collector-contrib-fips	—
wolfictl	affected	chainguard	wolfictl	—
wolfictl	affected	wolfi	wolfictl	—

Upstream advisory

openSUSE-SU-2024:12650-1

Open SourcePoC exploit2024-06-15

golang-github-prometheus-prometheus-2.41.0-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-prometheus-prometheus	affected	openSUSE:Tumbleweed	golang-github-prometheus-prometheus	—

Upstream advisory

openSUSE-SU-2024:13838-1

Open SourcePoC exploit2024-06-15

kubernetes1.26-apiserver-1.26.15-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.26	affected	openSUSE:Tumbleweed	kubernetes1.26	—

Upstream advisory

openSUSE-SU-2024:13839-1

Open SourcePoC exploit2024-06-15

kubernetes1.27-apiserver-1.27.12-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.27	affected	openSUSE:Tumbleweed	kubernetes1.27	—

Upstream advisory

openSUSE-SU-2024:13840-1

Open SourcePoC exploit2024-06-15

kubernetes1.28-apiserver-1.28.8-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.28	affected	openSUSE:Tumbleweed	kubernetes1.28	—

Upstream advisory

openSUSE-SU-2024:13841-1

Open SourcePoC exploit2024-06-15

kubernetes1.29-apiserver-1.29.3-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.29	affected	openSUSE:Tumbleweed	kubernetes1.29	—

Upstream advisory

RLSA-2024:3830

Open SourcePoC exploitHIGH2024-06-14

Moderate: gvisor-tap-vsock security and bug fix update

Affected products

Product	Status	Vendor	Package	Ecosystem
gvisor-tap-vsock	affected	Rocky Linux	—	—
gvisor-tap-vsock	affected	Rocky Linux:9	gvisor-tap-vsock	—

Upstream advisory

RHSA-2024:3830

Open SourcePoC exploitMEDIUM2024-06-11

Red Hat Security Advisory: gvisor-tap-vsock security and bug fix update

Affected products

Product	Status	Vendor	Package	Ecosystem
gvisor-tap-vsock	affected	Red Hat:enterprise_linux:9::appstream	gvisor-tap-vsock	—
gvisor-tap-vsock-debuginfo	affected	Red Hat:enterprise_linux:9::appstream	gvisor-tap-vsock-debuginfo	—
gvisor-tap-vsock-debugsource	affected	Red Hat:enterprise_linux:9::appstream	gvisor-tap-vsock-debugsource	—

Upstream advisory

ALSA-2024:3830

Open SourcePoC exploitHIGH2024-06-11

Moderate: gvisor-tap-vsock security and bug fix update

Affected products

Product	Status	Vendor	Package	Ecosystem
gvisor-tap-vsock	affected	AlmaLinux:9	gvisor-tap-vsock	—

Upstream advisory

MGASA-2024-0233

Open SourcePoC exploitCRITICAL2024-06-24

Updated chromium-browser-stable packages fix security vulnerabilities

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium-browser-stable	affected	Mageia:9	chromium-browser-stable	—

Upstream advisory

GHSA-g779-vpj7-v6c4

Open SourcePoC exploitCRITICAL2024-06-20

GHSA-g779-vpj7-v6c4

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

DEBIAN-CVE-2024-6100

Open SourcePoC exploitCRITICAL2024-06-20

DEBIAN-CVE-2024-6100

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

DSA-5716-1

Open SourcePoC exploit2024-06-19

chromium - security update

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:12	chromium	—

Upstream advisory

CVE-2024-6100

GooglePoC exploitCRITICAL2024-06-18

Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6100

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—

Upstream advisory

CVE-2024-6100

GooglePoC exploitHIGH2024-06-18

CVEs:CVE-2024-6100

Upstream advisory

CVE-2024-6100

GooglePoC exploit2024-06-18

Type Confusion in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

Product	Status	Vendor	Package	Ecosystem
chromium	affected	wolfi	chromium	—
chromium	affected	chainguard	chromium	—

Upstream advisory

CVE-2024-5846

GooglePoC exploitCRITICAL2024-06-11

Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

CVEs:CVE-2024-5846

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5846

GooglePoC exploitHIGH2024-06-11

CVEs:CVE-2024-5846

Upstream advisory

CVE-2024-5846

GooglePoC exploit2024-06-11

Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

CVEs:CVE-2024-5846

Upstream advisory

CVE-2024-5847

GooglePoC exploitCRITICAL2024-06-11

Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

CVEs:CVE-2024-5847

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5847

GooglePoC exploit2024-06-11

Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

CVEs:CVE-2024-5847

Upstream advisory

CVE-2024-5847

GooglePoC exploitHIGH2024-06-11

Product	Status	Vendor	Package	Ecosystem
aactl	affected	chainguard	aactl	—
aactl	affected	wolfi	aactl	—
actions-runner-controller	affected	wolfi	actions-runner-controller	—
actions-runner-controller	affected	chainguard	actions-runner-controller	—
actions-runner-controller-fips	affected	chainguard	actions-runner-controller-fips	—
addon-resizer	affected	chainguard	addon-resizer	—
addon-resizer	affected	wolfi	addon-resizer	—
addon-resizer-fips	affected	chainguard	addon-resizer-fips	—
age	affected	chainguard	age	—
age	affected	wolfi	age	—
amass	affected	wolfi	amass	—
amass	affected	chainguard	amass	—
argo-workflows	affected	wolfi	argo-workflows	—
argo-workflows	affected	chainguard	argo-workflows	—
argo-workflows-fips	affected	chainguard	argo-workflows-fips	—
atlantis	affected	chainguard	atlantis	—
atlantis	affected	wolfi	atlantis	—
atlantis-fips	affected	chainguard	atlantis-fips	—
aws-ebs-csi-driver	affected	chainguard	aws-ebs-csi-driver	—
aws-efs-csi-driver-fips	affected	chainguard	aws-efs-csi-driver-fips	—
aws-flb-cloudwatch	affected	chainguard	aws-flb-cloudwatch	—
aws-flb-cloudwatch	affected	wolfi	aws-flb-cloudwatch	—
aws-flb-cloudwatch-fips	affected	chainguard	aws-flb-cloudwatch-fips	—
aws-flb-firehose	affected	chainguard	aws-flb-firehose	—
aws-flb-firehose	affected	wolfi	aws-flb-firehose	—
aws-flb-firehose-fips	affected	chainguard	aws-flb-firehose-fips	—
aws-flb-kinesis	affected	chainguard	aws-flb-kinesis	—
aws-flb-kinesis	affected	wolfi	aws-flb-kinesis	—
aws-flb-kinesis-fips	affected	chainguard	aws-flb-kinesis-fips	—
aws-load-balancer-controller	affected	wolfi	aws-load-balancer-controller	—
aws-load-balancer-controller	affected	chainguard	aws-load-balancer-controller	—
aws-load-balancer-controller-fips	affected	chainguard	aws-load-balancer-controller-fips	—
azure-aad-pod-identity-mic	affected	chainguard	azure-aad-pod-identity-mic	—
bank-vaults	affected	chainguard	bank-vaults	—
bank-vaults	affected	wolfi	bank-vaults	—
bank-vaults-fips	affected	chainguard	bank-vaults-fips	—
bazelisk	affected	chainguard	bazelisk	—
bazelisk	affected	wolfi	bazelisk	—
bom	affected	chainguard	bom	—
bom	affected	wolfi	bom	—
boring-registry	affected	chainguard	boring-registry	—
boring-registry	affected	wolfi	boring-registry	—
boring-registry-fips	affected	chainguard	boring-registry-fips	—
buf	affected	chainguard	buf	—
buf	affected	wolfi	buf	—
buildah	affected	wolfi	buildah	—
buildah	affected	chainguard	buildah	—
buildkitd	affected	chainguard	buildkitd	—
buildkitd	affected	wolfi	buildkitd	—
caddy	affected	chainguard	caddy	—
caddy	affected	wolfi	caddy	—
caddy-fips	affected	chainguard	caddy-fips	—
cadvisor	affected	chainguard	cadvisor	—
cadvisor	affected	wolfi	cadvisor	—
cadvisor-fips	affected	chainguard	cadvisor-fips	—
capslock	affected	wolfi	capslock	—
capslock	affected	chainguard	capslock	—
cass-operator	affected	chainguard	cass-operator	—
cass-operator	affected	wolfi	cass-operator	—
cass-operator-fips	affected	chainguard	cass-operator-fips	—
cass-operator-fips-no-pvc-delete	affected	chainguard	cass-operator-fips-no-pvc-delete	—
cert-exporter	affected	chainguard	cert-exporter	—
cert-exporter	affected	wolfi	cert-exporter	—
cert-exporter-fips	affected	chainguard	cert-exporter-fips	—
certificate-transparency	affected	wolfi	certificate-transparency	—
certificate-transparency	affected	chainguard	certificate-transparency	—
certificate-transparency-fips	affected	chainguard	certificate-transparency-fips	—
cert-manager-webhook-pdns	affected	chainguard	cert-manager-webhook-pdns	—
cert-manager-webhook-pdns	affected	wolfi	cert-manager-webhook-pdns	—
cert-manager-webhook-pdns-fips	affected	chainguard	cert-manager-webhook-pdns-fips	—
cfssl	affected	chainguard	cfssl	—
cfssl	affected	wolfi	cfssl	—
chainctl	affected	chainguard	chainctl	—
chartmuseum	affected	chainguard	chartmuseum	—
chartmuseum	affected	wolfi	chartmuseum	—
chezmoi	affected	chainguard	chezmoi	—
chezmoi	affected	wolfi	chezmoi	—
cilium-1.15	affected	chainguard	cilium-1.15	—
cilium-cli	affected	wolfi	cilium-cli	—
cilium-cli	affected	chainguard	cilium-cli	—
cilium-fips-1.15	affected	chainguard	cilium-fips-1.15	—
cloudflared	affected	wolfi	cloudflared	—
cloudflared	affected	chainguard	cloudflared	—
cloud-sql-proxy-fips	affected	chainguard	cloud-sql-proxy-fips	—
cluster-proportional-autoscaler	affected	chainguard	cluster-proportional-autoscaler	—
cluster-proportional-autoscaler	affected	wolfi	cluster-proportional-autoscaler	—
cni-plugins	affected	wolfi	cni-plugins	—
cni-plugins	affected	chainguard	cni-plugins	—
cni-plugins-fips	affected	chainguard	cni-plugins-fips	—
configmap-reload	affected	wolfi	configmap-reload	—
configmap-reload	affected	chainguard	configmap-reload	—
configmap-reload-fips	affected	chainguard	configmap-reload-fips	—
configmap-reload-fips-0.11	affected	chainguard	configmap-reload-fips-0.11	—
confluent-common-docker	affected	wolfi	confluent-common-docker	—
confluent-common-docker	affected	chainguard	confluent-common-docker	—
conftest	affected	wolfi	conftest	—
conftest	affected	chainguard	conftest	—
conftest-fips	affected	chainguard	conftest-fips	—
controller-gen	affected	wolfi	controller-gen	—
controller-gen	affected	chainguard	controller-gen	—
cortex	affected	wolfi	cortex	—
cortex	affected	chainguard	cortex	—
cortex-fips	affected	chainguard	cortex-fips	—
cosign	affected	chainguard	cosign	—
cosign	affected	wolfi	cosign	—
cosign-fips	affected	chainguard	cosign-fips	—
crane	affected	wolfi	crane	—
crane	affected	chainguard	crane	—
cri-tools	affected	wolfi	cri-tools	—
cri-tools	affected	chainguard	cri-tools	—
croc	affected	chainguard	croc	—
croc	affected	wolfi	croc	—
crossplane-provider-aws	affected	wolfi	crossplane-provider-aws	—
crossplane-provider-aws	affected	chainguard	crossplane-provider-aws	—
crossplane-provider-azure	affected	wolfi	crossplane-provider-azure	—
crossplane-provider-azure	affected	chainguard	crossplane-provider-azure	—
crossplane-provider-gcp	affected	chainguard	crossplane-provider-gcp	—
ctop	affected	chainguard	ctop	—
ctop	affected	wolfi	ctop	—
cue-fips	affected	chainguard	cue-fips	—
dagdotdev	affected	chainguard	dagdotdev	—
dagdotdev	affected	wolfi	dagdotdev	—
dagger	affected	chainguard	dagger	—
dagger	affected	wolfi	dagger	—
dask-gateway	affected	chainguard	dask-gateway	—
dask-gateway	affected	wolfi	dask-gateway	—
dataplaneapi	affected	chainguard	dataplaneapi	—
dataplaneapi	affected	wolfi	dataplaneapi	—
dataplaneapi-fips	affected	chainguard	dataplaneapi-fips	—
delve	affected	wolfi	delve	—
delve	affected	chainguard	delve	—
dex	affected	chainguard	dex	—
dex	affected	wolfi	dex	—
dex-fips	affected	chainguard	dex-fips	—
dex-k8s-authenticator	affected	chainguard	dex-k8s-authenticator	—
dgraph	affected	wolfi	dgraph	—
dgraph	affected	chainguard	dgraph	—
direnv	affected	wolfi	direnv	—
direnv	affected	chainguard	direnv	—
dive	affected	chainguard	dive	—
dive	affected	wolfi	dive	—
docker	affected	wolfi	docker	—
docker	affected	chainguard	docker	—
docker-compose	affected	chainguard	docker-compose	—
docker-compose	affected	wolfi	docker-compose	—
docker-credential-acr-env	affected	wolfi	docker-credential-acr-env	—
docker-credential-acr-env	affected	chainguard	docker-credential-acr-env	—
docker-credential-ecr-login	affected	wolfi	docker-credential-ecr-login	—
docker-credential-ecr-login	affected	chainguard	docker-credential-ecr-login	—
docker-credential-gcr	affected	chainguard	docker-credential-gcr	—
docker-credential-gcr	affected	wolfi	docker-credential-gcr	—
dockerize	affected	chainguard	dockerize	—
dockerize	affected	wolfi	dockerize	—
dockerize-fips	affected	chainguard	dockerize-fips	—
doppler-kubernetes-operator	affected	wolfi	doppler-kubernetes-operator	—
doppler-kubernetes-operator	affected	chainguard	doppler-kubernetes-operator	—
dynamic-localpv-provisioner	affected	wolfi	dynamic-localpv-provisioner	—
dynamic-localpv-provisioner	affected	chainguard	dynamic-localpv-provisioner	—
dynamic-localpv-provisioner-fips	affected	chainguard	dynamic-localpv-provisioner-fips	—
envoy-ratelimit	affected	wolfi	envoy-ratelimit	—
envoy-ratelimit	affected	chainguard	envoy-ratelimit	—
envoy-ratelimit-fips	affected	chainguard	envoy-ratelimit-fips	—
etcd-3.4	affected	chainguard	etcd-3.4	—
etcd-3.5	affected	chainguard	etcd-3.5	—
etcd-fips-3.4	affected	chainguard	etcd-fips-3.4	—
etcd-fips-3.5	affected	chainguard	etcd-fips-3.5	—
external-secrets-fips	affected	chainguard	external-secrets-fips	—
extism	affected	chainguard	extism	—
extism	affected	wolfi	extism	—
falcoctl	affected	chainguard	falcoctl	—
falcoctl	affected	wolfi	falcoctl	—
falcoctl-fips	affected	chainguard	falcoctl-fips	—
falcoctl-fips-0.4	affected	chainguard	falcoctl-fips-0.4	—
falcosidekick	affected	chainguard	falcosidekick	—
falcosidekick	affected	wolfi	falcosidekick	—
falcosidekick-fips	affected	chainguard	falcosidekick-fips	—
ferretdb	affected	chainguard	ferretdb	—
ferretdb	affected	wolfi	ferretdb	—
flannel	affected	wolfi	flannel	—
flannel	affected	chainguard	flannel	—
flannel-cni-plugin	affected	chainguard	flannel-cni-plugin	—
flannel-cni-plugin	affected	wolfi	flannel-cni-plugin	—
fluent-bit-plugin-loki	affected	chainguard	fluent-bit-plugin-loki	—
fluent-bit-plugin-loki	affected	wolfi	fluent-bit-plugin-loki	—
fluent-operator	affected	chainguard	fluent-operator	—
fluent-operator	affected	wolfi	fluent-operator	—
fluent-operator-fips	affected	chainguard	fluent-operator-fips	—
flux	affected	chainguard	flux	—
flux	affected	wolfi	flux	—
flux-helm-controller	affected	wolfi	flux-helm-controller	—
flux-helm-controller	affected	chainguard	flux-helm-controller	—
flux-image-automation-controller	affected	chainguard	flux-image-automation-controller	—
flux-image-automation-controller	affected	wolfi	flux-image-automation-controller	—
flux-image-reflector-controller	affected	chainguard	flux-image-reflector-controller	—
flux-image-reflector-controller	affected	wolfi	flux-image-reflector-controller	—
flux-kustomize-controller	affected	chainguard	flux-kustomize-controller	—
flux-kustomize-controller	affected	wolfi	flux-kustomize-controller	—
flux-notification-controller	affected	chainguard	flux-notification-controller	—
flux-notification-controller	affected	wolfi	flux-notification-controller	—
flux-source-controller	affected	wolfi	flux-source-controller	—
flux-source-controller	affected	chainguard	flux-source-controller	—
flyte	affected	wolfi	flyte	—
flyte	affected	chainguard	flyte	—
fq	affected	wolfi	fq	—
fq	affected	chainguard	fq	—
frp	affected	wolfi	frp	—
frp	affected	chainguard	frp	—
fulcio	affected	wolfi	fulcio	—
fulcio	affected	chainguard	fulcio	—
fulcio-fips	affected	chainguard	fulcio-fips	—
fuse-overlayfs-snapshotter	affected	wolfi	fuse-overlayfs-snapshotter	—
fuse-overlayfs-snapshotter	affected	chainguard	fuse-overlayfs-snapshotter	—
gcsfuse	affected	wolfi	gcsfuse	—
gcsfuse	affected	chainguard	gcsfuse	—
gh	affected	chainguard	gh	—
gh	affected	wolfi	gh	—
ghaudit	affected	chainguard	ghaudit	—
ghaudit	affected	wolfi	ghaudit	—
gitleaks	affected	chainguard	gitleaks	—
gitleaks	affected	wolfi	gitleaks	—
git-lfs	affected	wolfi	git-lfs	—
git-lfs	affected	chainguard	git-lfs	—
git-lfs-fips	affected	chainguard	git-lfs-fips	—
gitness	affected	chainguard	gitness	—
gitness	affected	wolfi	gitness	—
gitsign	affected	chainguard	gitsign	—
gitsign	affected	wolfi	gitsign	—
gke-gcloud-auth-plugin	affected	chainguard	gke-gcloud-auth-plugin	—
gke-gcloud-auth-plugin	affected	wolfi	gke-gcloud-auth-plugin	—
glab	affected	chainguard	glab	—
glab	affected	wolfi	glab	—
go-1.21	affected	chainguard	go-1.21	—
go-1.21	affected	wolfi	go-1.21	—
go-1.22	affected	chainguard	go-1.22	—
go-1.22	affected	wolfi	go-1.22	—
go-bindata	affected	chainguard	go-bindata	—
go-bindata	affected	wolfi	go-bindata	—
gobump	affected	wolfi	gobump	—
gobump	affected	chainguard	gobump	—
gobuster	affected	wolfi	gobuster	—
gobuster	affected	chainguard	gobuster	—
golangci-lint	affected	wolfi	golangci-lint	—
golangci-lint	affected	chainguard	golangci-lint	—
go-licenses	affected	chainguard	go-licenses	—
go-licenses	affected	wolfi	go-licenses	—
go-md2man	affected	chainguard	go-md2man	—
go-md2man	affected	wolfi	go-md2man	—
gomplate	affected	wolfi	gomplate	—
gomplate	affected	chainguard	gomplate	—
gomplate-fips	affected	chainguard	gomplate-fips	—
gops	affected	chainguard	gops	—
gops	affected	wolfi	gops	—
gostatsd	affected	chainguard	gostatsd	—
gostatsd	affected	wolfi	gostatsd	—
gosu	affected	wolfi	gosu	—
gosu	affected	chainguard	gosu	—
gosu-1.11	affected	chainguard	gosu-1.11	—
govulncheck	affected	wolfi	govulncheck	—
govulncheck	affected	chainguard	govulncheck	—
grafana-agent-operator	affected	chainguard	grafana-agent-operator	—
grafana-agent-operator	affected	wolfi	grafana-agent-operator	—
grafana-mimir	affected	wolfi	grafana-mimir	—
grafana-mimir	affected	chainguard	grafana-mimir	—
grafana-operator	affected	wolfi	grafana-operator	—
grafana-operator	affected	chainguard	grafana-operator	—
grafana-operator-fips	affected	chainguard	grafana-operator-fips	—
grpc-health-probe	affected	wolfi	grpc-health-probe	—
grpc-health-probe	affected	chainguard	grpc-health-probe	—
grpc-health-probe-fips	affected	chainguard	grpc-health-probe-fips	—
grpcurl	affected	wolfi	grpcurl	—
grpcurl	affected	chainguard	grpcurl	—
grype	affected	chainguard	grype	—
grype	affected	wolfi	grype	—
haproxy-ingress	affected	chainguard	haproxy-ingress	—
haproxy-ingress	affected	wolfi	haproxy-ingress	—
harbor-2.9	affected	chainguard	harbor-2.9	—
harbor-cli	affected	wolfi	harbor-cli	—
harbor-cli	affected	chainguard	harbor-cli	—
harbor-registry	affected	chainguard	harbor-registry	—
harbor-registry	affected	wolfi	harbor-registry	—
harbor-registry-fips	affected	chainguard	harbor-registry-fips	—
harbor-scanner-trivy	affected	wolfi	harbor-scanner-trivy	—
harbor-scanner-trivy	affected	chainguard	harbor-scanner-trivy	—
harbor-scanner-trivy-fips	affected	chainguard	harbor-scanner-trivy-fips	—
hcloud	affected	wolfi	hcloud	—
hcloud	affected	chainguard	hcloud	—
hello-world-golang	affected	chainguard	hello-world-golang	—
hello-world-golang	affected	wolfi	hello-world-golang	—
helm	affected	wolfi	helm	—
helm	affected	chainguard	helm	—
helm-3	affected	wolfi	helm-3	—
helm-3	affected	chainguard	helm-3	—
helm-4	affected	wolfi	helm-4	—
helm-4	affected	chainguard	helm-4	—
helm-docs	affected	wolfi	helm-docs	—
helm-docs	affected	chainguard	helm-docs	—
helm-fips	affected	chainguard	helm-fips	—
helm-fips-3	affected	chainguard	helm-fips-3	—
helm-fips-4	affected	chainguard	helm-fips-4	—
helm-operator	affected	chainguard	helm-operator	—
helm-operator	affected	wolfi	helm-operator	—
helm-operator-fips	affected	chainguard	helm-operator-fips	—
helm-push	affected	chainguard	helm-push	—
helm-push	affected	wolfi	helm-push	—
hey	affected	chainguard	hey	—
hey	affected	wolfi	hey	—
hivemind	affected	chainguard	hivemind	—
hivemind	affected	wolfi	hivemind	—
http-echo	affected	chainguard	http-echo	—
http-echo	affected	wolfi	http-echo	—
hubble-ui	affected	wolfi	hubble-ui	—
hubble-ui	affected	chainguard	hubble-ui	—
hubble-ui-backend-fips	affected	chainguard	hubble-ui-backend-fips	—
influx	affected	wolfi	influx	—
influx	affected	chainguard	influx	—
ip-masq-agent	affected	chainguard	ip-masq-agent	—
ip-masq-agent	affected	wolfi	ip-masq-agent	—
istio-pilot-agent-1.22	affected	chainguard	istio-pilot-agent-1.22	—
istio-pilot-discovery-1.22	affected	chainguard	istio-pilot-discovery-1.22	—
jitsucom-bulker	affected	chainguard	jitsucom-bulker	—
jitsucom-bulker	affected	wolfi	jitsucom-bulker	—
jsonnet-bundler	affected	chainguard	jsonnet-bundler	—
k3d	affected	wolfi	k3d	—
k3d	affected	chainguard	k3d	—
k3s	affected	chainguard	k3s	—
k3s	affected	wolfi	k3s	—
k8s-device-plugin	affected	wolfi	k8s-device-plugin	—
k8s-device-plugin	affected	chainguard	k8s-device-plugin	—
k8sgpt	affected	wolfi	k8sgpt	—
k8sgpt	affected	chainguard	k8sgpt	—
k8ssandra-operator	affected	wolfi	k8ssandra-operator	—
k8ssandra-operator	affected	chainguard	k8ssandra-operator	—
k8ssandra-operator-fips	affected	chainguard	k8ssandra-operator-fips	—
k9s	affected	chainguard	k9s	—
k9s	affected	wolfi	k9s	—
kaf	affected	chainguard	kaf	—
kaf	affected	wolfi	kaf	—
kafka_exporter	affected	chainguard	kafka_exporter	—
kafka_exporter	affected	wolfi	kafka_exporter	—
kafka-proxy	affected	wolfi	kafka-proxy	—
kafka-proxy	affected	chainguard	kafka-proxy	—
kaniko	affected	chainguard	kaniko	—
kaniko	affected	wolfi	kaniko	—
kargo	affected	wolfi	kargo	—
kargo	affected	chainguard	kargo	—
karpenter-0.35	affected	chainguard	karpenter-0.35	—
karpenter-fips-0.35	affected	chainguard	karpenter-fips-0.35	—
karpenter-fips-0.36	affected	chainguard	karpenter-fips-0.36	—
kiam	affected	chainguard	kiam	—
kind	affected	wolfi	kind	—
kind	affected	chainguard	kind	—
ko	affected	chainguard	ko	—
ko	affected	wolfi	ko	—
ko-fips	affected	chainguard	ko-fips	—
kots	affected	chainguard	kots	—
kots	affected	wolfi	kots	—
kpt	affected	chainguard	kpt	—
kpt	affected	wolfi	kpt	—
ksops	affected	wolfi	ksops	—
ksops	affected	chainguard	ksops	—
kube-bench	affected	wolfi	kube-bench	—
kube-bench	affected	chainguard	kube-bench	—
kube-bench-fips	affected	chainguard	kube-bench-fips	—
kubebuilder	affected	chainguard	kubebuilder	—
kubebuilder	affected	wolfi	kubebuilder	—
kubecolor	affected	chainguard	kubecolor	—
kubecolor	affected	wolfi	kubecolor	—
kubeflow-katib	affected	chainguard	kubeflow-katib	—
kubeflow-katib	affected	wolfi	kubeflow-katib	—
kube-fluentd-operator	affected	wolfi	kube-fluentd-operator	—
kube-fluentd-operator	affected	chainguard	kube-fluentd-operator	—
kube-logging-logging-operator-3.17	affected	chainguard	kube-logging-logging-operator-3.17	—
kube-logging-logging-operator-4.1	affected	chainguard	kube-logging-logging-operator-4.1	—
kube-logging-operator	affected	wolfi	kube-logging-operator	—
kube-logging-operator	affected	chainguard	kube-logging-operator	—
kube-oidc-proxy	affected	chainguard	kube-oidc-proxy	—
kuberay-operator	affected	chainguard	kuberay-operator	—
kuberay-operator	affected	wolfi	kuberay-operator	—
kube-rbac-proxy-fips	affected	chainguard	kube-rbac-proxy-fips	—
kubernetes-1.30	affected	chainguard	kubernetes-1.30	—
kubernetes-csi-driver-hostpath	affected	wolfi	kubernetes-csi-driver-hostpath	—
kubernetes-csi-driver-hostpath	affected	chainguard	kubernetes-csi-driver-hostpath	—
kubernetes-csi-external-provisioner	affected	chainguard	kubernetes-csi-external-provisioner	—
kubernetes-csi-external-provisioner	affected	wolfi	kubernetes-csi-external-provisioner	—
kubernetes-csi-livenessprobe	affected	wolfi	kubernetes-csi-livenessprobe	—
kubernetes-csi-livenessprobe	affected	chainguard	kubernetes-csi-livenessprobe	—
kubernetes-csi-livenessprobe-2.10	affected	chainguard	kubernetes-csi-livenessprobe-2.10	—
kubernetes-csi-livenessprobe-fips	affected	chainguard	kubernetes-csi-livenessprobe-fips	—
kubernetes-csi-livenessprobe-fips-2.10	affected	chainguard	kubernetes-csi-livenessprobe-fips-2.10	—
kubernetes-dashboard	affected	wolfi	kubernetes-dashboard	—
kubernetes-dashboard	affected	chainguard	kubernetes-dashboard	—
kubernetes-dashboard-fips	affected	chainguard	kubernetes-dashboard-fips	—
kubernetes-dashboard-metrics-scraper	affected	chainguard	kubernetes-dashboard-metrics-scraper	—
kubernetes-dashboard-metrics-scraper	affected	wolfi	kubernetes-dashboard-metrics-scraper	—
kubernetes-dashboard-metrics-scraper-fips	affected	chainguard	kubernetes-dashboard-metrics-scraper-fips	—
kubernetes-dns-node-cache	affected	chainguard	kubernetes-dns-node-cache	—
kubernetes-dns-node-cache	affected	wolfi	kubernetes-dns-node-cache	—
kubernetes-event-exporter	affected	wolfi	kubernetes-event-exporter	—
kubernetes-event-exporter	affected	chainguard	kubernetes-event-exporter	—
kubernetes-ingress-defaultbackend	affected	chainguard	kubernetes-ingress-defaultbackend	—
kubernetes-ingress-defaultbackend	affected	wolfi	kubernetes-ingress-defaultbackend	—
kubescape	affected	chainguard	kubescape	—
kubescape	affected	wolfi	kubescape	—
kube-state-metrics	affected	wolfi	kube-state-metrics	—
kube-state-metrics	affected	chainguard	kube-state-metrics	—
kube-state-metrics-2.6	affected	chainguard	kube-state-metrics-2.6	—
kube-state-metrics-fips	affected	chainguard	kube-state-metrics-fips	—
kubevela	affected	chainguard	kubevela	—
kubevela	affected	wolfi	kubevela	—
kube-vip	affected	chainguard	kube-vip	—
kube-vip	affected	wolfi	kube-vip	—
kube-vip-fips	affected	chainguard	kube-vip-fips	—
kubewatch	affected	chainguard	kubewatch	—
kubewatch	affected	wolfi	kubewatch	—
kustomize	affected	wolfi	kustomize	—
kustomize	affected	chainguard	kustomize	—
kustomize-fips	affected	chainguard	kustomize-fips	—
kwok	affected	chainguard	kwok	—
kwok	affected	wolfi	kwok	—
kyverno-policy-reporter	affected	wolfi	kyverno-policy-reporter	—
kyverno-policy-reporter	affected	chainguard	kyverno-policy-reporter	—
kyverno-policy-reporter-kyverno-plugin	affected	wolfi	kyverno-policy-reporter-kyverno-plugin	—
kyverno-policy-reporter-kyverno-plugin	affected	chainguard	kyverno-policy-reporter-kyverno-plugin	—
kyverno-policy-reporter-ui	affected	wolfi	kyverno-policy-reporter-ui	—
kyverno-policy-reporter-ui	affected	chainguard	kyverno-policy-reporter-ui	—
lazygit	affected	chainguard	lazygit	—
lazygit	affected	wolfi	lazygit	—
libnvidia-container	affected	chainguard	libnvidia-container	—
libnvidia-container	affected	wolfi	libnvidia-container	—
litefs	affected	wolfi	litefs	—
litefs	affected	chainguard	litefs	—
litestream	affected	chainguard	litestream	—
litestream	affected	wolfi	litestream	—
local-path-provisioner	affected	chainguard	local-path-provisioner	—
local-path-provisioner	affected	wolfi	local-path-provisioner	—
local-static-provisioner	affected	chainguard	local-static-provisioner	—
local-static-provisioner	affected	wolfi	local-static-provisioner	—
logstash-exporter	affected	chainguard	logstash-exporter	—
logstash-exporter	affected	wolfi	logstash-exporter	—
logstash-exporter-fips	affected	chainguard	logstash-exporter-fips	—
loki-2.9	affected	chainguard	loki-2.9	—
mage	affected	chainguard	mage	—
mage	affected	wolfi	mage	—
mc	affected	wolfi	mc	—
mc	affected	chainguard	mc	—
mc-fips	affected	chainguard	mc-fips	—
memcached-exporter	affected	chainguard	memcached-exporter	—
memcached-exporter	affected	wolfi	memcached-exporter	—
metacontroller	affected	chainguard	metacontroller	—
metacontroller	affected	wolfi	metacontroller	—
metallb	affected	wolfi	metallb	—
metallb	affected	chainguard	metallb	—
metallb-fips	affected	chainguard	metallb-fips	—
metrics-server	affected	chainguard	metrics-server	—
metrics-server	affected	wolfi	metrics-server	—
metrics-server-fips	affected	chainguard	metrics-server-fips	—
minify	affected	chainguard	minify	—
minify	affected	wolfi	minify	—
minify-fips	affected	chainguard	minify-fips	—
mkcert	affected	wolfi	mkcert	—
mkcert	affected	chainguard	mkcert	—
mockery	affected	wolfi	mockery	—
mockery	affected	chainguard	mockery	—
mods	affected	chainguard	mods	—
mods	affected	wolfi	mods	—
mongo-tools	affected	wolfi	mongo-tools	—
mongo-tools	affected	chainguard	mongo-tools	—
multus-cni-fips	affected	chainguard	multus-cni-fips	—
nats	affected	chainguard	nats	—
nats	affected	wolfi	nats	—
nats-server	affected	chainguard	nats-server	—
nats-server	affected	wolfi	nats-server	—
nerdctl	affected	wolfi	nerdctl	—
nerdctl	affected	chainguard	nerdctl	—
neuvector-dbgen	affected	wolfi	neuvector-dbgen	—
neuvector-dbgen	affected	chainguard	neuvector-dbgen	—
neuvector-dbgen-fips	affected	chainguard	neuvector-dbgen-fips	—
neuvector-scanner	affected	wolfi	neuvector-scanner	—
neuvector-scanner	affected	chainguard	neuvector-scanner	—
neuvector-scanner-fips	affected	chainguard	neuvector-scanner-fips	—
neuvector-sigstore-interface	affected	chainguard	neuvector-sigstore-interface	—
neuvector-sigstore-interface	affected	wolfi	neuvector-sigstore-interface	—
neuvector-sigstore-interface-fips	affected	chainguard	neuvector-sigstore-interface-fips	—
newrelic-fluent-bit-output	affected	wolfi	newrelic-fluent-bit-output	—
newrelic-fluent-bit-output	affected	chainguard	newrelic-fluent-bit-output	—
newrelic-infra-operator	affected	chainguard	newrelic-infra-operator	—
newrelic-infra-operator	affected	wolfi	newrelic-infra-operator	—
newrelic-infrastructure-agent	affected	chainguard	newrelic-infrastructure-agent	—
newrelic-infrastructure-agent	affected	wolfi	newrelic-infrastructure-agent	—
newrelic-nri-kube-events	affected	wolfi	newrelic-nri-kube-events	—
newrelic-nri-kube-events	affected	chainguard	newrelic-nri-kube-events	—
newrelic-nri-statsd	affected	wolfi	newrelic-nri-statsd	—
newrelic-nri-statsd	affected	chainguard	newrelic-nri-statsd	—
newrelic-prometheus-configurator	affected	chainguard	newrelic-prometheus-configurator	—
newrelic-prometheus-configurator	affected	wolfi	newrelic-prometheus-configurator	—
nfs-subdir-external-provisioner	affected	chainguard	nfs-subdir-external-provisioner	—
nfs-subdir-external-provisioner	affected	wolfi	nfs-subdir-external-provisioner	—
nfs-subdir-external-provisioner-fips	affected	chainguard	nfs-subdir-external-provisioner-fips	—
node-feature-discovery-0.16	affected	chainguard	node-feature-discovery-0.16	—
node-problem-detector-0.8	affected	chainguard	node-problem-detector-0.8	—
nodetaint	affected	wolfi	nodetaint	—
nodetaint	affected	chainguard	nodetaint	—
nri-apache	affected	wolfi	nri-apache	—
nri-apache	affected	chainguard	nri-apache	—
nri-cassandra	affected	chainguard	nri-cassandra	—
nri-cassandra	affected	wolfi	nri-cassandra	—
nri-consul	affected	chainguard	nri-consul	—
nri-consul	affected	wolfi	nri-consul	—
nri-couchbase	affected	wolfi	nri-couchbase	—
nri-couchbase	affected	chainguard	nri-couchbase	—
nri-discovery-kubernetes	affected	wolfi	nri-discovery-kubernetes	—
nri-discovery-kubernetes	affected	chainguard	nri-discovery-kubernetes	—
nri-elasticsearch	affected	chainguard	nri-elasticsearch	—
nri-elasticsearch	affected	wolfi	nri-elasticsearch	—
nri-f5	affected	chainguard	nri-f5	—
nri-f5	affected	wolfi	nri-f5	—
nri-haproxy	affected	chainguard	nri-haproxy	—
nri-haproxy	affected	wolfi	nri-haproxy	—
nri-jmx	affected	wolfi	nri-jmx	—
nri-jmx	affected	chainguard	nri-jmx	—
nri-kafka	affected	wolfi	nri-kafka	—
nri-kafka	affected	chainguard	nri-kafka	—
nri-kubernetes	affected	wolfi	nri-kubernetes	—
nri-kubernetes	affected	chainguard	nri-kubernetes	—
nri-memcached	affected	chainguard	nri-memcached	—
nri-memcached	affected	wolfi	nri-memcached	—
nri-mongodb	affected	wolfi	nri-mongodb	—
nri-mongodb	affected	chainguard	nri-mongodb	—
nri-mssql	affected	chainguard	nri-mssql	—
nri-mssql	affected	wolfi	nri-mssql	—
nri-mysql	affected	wolfi	nri-mysql	—
nri-mysql	affected	chainguard	nri-mysql	—
nri-nagios	affected	chainguard	nri-nagios	—
nri-nagios	affected	wolfi	nri-nagios	—
nri-nginx	affected	wolfi	nri-nginx	—
nri-nginx	affected	chainguard	nri-nginx	—
nri-postgresql	affected	chainguard	nri-postgresql	—
nri-postgresql	affected	wolfi	nri-postgresql	—
nri-prometheus	affected	wolfi	nri-prometheus	—
nri-prometheus	affected	chainguard	nri-prometheus	—
nri-rabbitmq	affected	chainguard	nri-rabbitmq	—
nri-rabbitmq	affected	wolfi	nri-rabbitmq	—
nri-redis	affected	wolfi	nri-redis	—
nri-redis	affected	chainguard	nri-redis	—
nsc	affected	wolfi	nsc	—
nsc	affected	chainguard	nsc	—
nvidia-container-toolkit	affected	wolfi	nvidia-container-toolkit	—
nvidia-container-toolkit	affected	chainguard	nvidia-container-toolkit	—
nvidia-nsight-compute-12.8	affected	chainguard	nvidia-nsight-compute-12.8	—
oauth2-proxy	affected	chainguard	oauth2-proxy	—
oauth2-proxy	affected	wolfi	oauth2-proxy	—
octo-sts	affected	chainguard	octo-sts	—
octo-sts	affected	wolfi	octo-sts	—
ollama	affected	wolfi	ollama	—
ollama	affected	chainguard	ollama	—
opa	affected	wolfi	opa	—
opa	affected	chainguard	opa	—
opa-fips	affected	chainguard	opa-fips	—
opentelemetry-collector-fips	affected	chainguard	opentelemetry-collector-fips	—
oras	affected	chainguard	oras	—
oras	affected	wolfi	oras	—
osv-scanner	affected	chainguard	osv-scanner	—
osv-scanner	affected	wolfi	osv-scanner	—
overmind	affected	wolfi	overmind	—
overmind	affected	chainguard	overmind	—
paranoia	affected	chainguard	paranoia	—
paranoia	affected	wolfi	paranoia	—
petname	affected	wolfi	petname	—
petname	affected	chainguard	petname	—
php-fpm_exporter	affected	wolfi	php-fpm_exporter	—
php-fpm_exporter	affected	chainguard	php-fpm_exporter	—
pluto	affected	wolfi	pluto	—
pluto	affected	chainguard	pluto	—
policy-controller	affected	chainguard	policy-controller	—
policy-controller	affected	wolfi	policy-controller	—
policy-controller-fips	affected	chainguard	policy-controller-fips	—
pombump	affected	wolfi	pombump	—
pombump	affected	chainguard	pombump	—
postgres-operator	affected	chainguard	postgres-operator	—
postgres-operator	affected	wolfi	postgres-operator	—
postgres-operator-fips	affected	chainguard	postgres-operator-fips	—
prometheus-2.51	affected	chainguard	prometheus-2.51	—
prometheus-adapter	affected	chainguard	prometheus-adapter	—
prometheus-adapter	affected	wolfi	prometheus-adapter	—
prometheus-adapter-0.10	affected	chainguard	prometheus-adapter-0.10	—
prometheus-alertmanager	affected	wolfi	prometheus-alertmanager	—
prometheus-alertmanager	affected	chainguard	prometheus-alertmanager	—
prometheus-alertmanager-fips	affected	chainguard	prometheus-alertmanager-fips	—
prometheus-beat-exporter	affected	chainguard	prometheus-beat-exporter	—
prometheus-beat-exporter-fips	affected	chainguard	prometheus-beat-exporter-fips	—
prometheus-bind-exporter	affected	chainguard	prometheus-bind-exporter	—
prometheus-blackbox-exporter	affected	chainguard	prometheus-blackbox-exporter	—
prometheus-elasticsearch-exporter	affected	chainguard	prometheus-elasticsearch-exporter	—
prometheus-elasticsearch-exporter-fips	affected	chainguard	prometheus-elasticsearch-exporter-fips	—
prometheus-mongodb-exporter	affected	chainguard	prometheus-mongodb-exporter	—
prometheus-mongodb-exporter-0.37	affected	chainguard	prometheus-mongodb-exporter-0.37	—
prometheus-mongodb-exporter-fips	affected	chainguard	prometheus-mongodb-exporter-fips	—
prometheus-mysqld-exporter	affected	chainguard	prometheus-mysqld-exporter	—
prometheus-nats-exporter	affected	chainguard	prometheus-nats-exporter	—
prometheus-node-exporter	affected	chainguard	prometheus-node-exporter	—
prometheus-node-exporter-1.4	affected	chainguard	prometheus-node-exporter-1.4	—
prometheus-node-exporter-1.5	affected	chainguard	prometheus-node-exporter-1.5	—
prometheus-node-exporter-fips	affected	chainguard	prometheus-node-exporter-fips	—
prometheus-operator	affected	wolfi	prometheus-operator	—
prometheus-operator	affected	chainguard	prometheus-operator	—
prometheus-operator-fips	affected	chainguard	prometheus-operator-fips	—
prometheus-postgres-exporter	affected	chainguard	prometheus-postgres-exporter	—
prometheus-postgres-exporter-0.10	affected	chainguard	prometheus-postgres-exporter-0.10	—
prometheus-postgres-exporter-fips	affected	chainguard	prometheus-postgres-exporter-fips	—
prometheus-pushgateway	affected	chainguard	prometheus-pushgateway	—
prometheus-pushgateway	affected	wolfi	prometheus-pushgateway	—
prometheus-pushgateway-1.4	affected	chainguard	prometheus-pushgateway-1.4	—
prometheus-pushgateway-fips	affected	chainguard	prometheus-pushgateway-fips	—
prometheus-pushgateway-fips-1.4	affected	chainguard	prometheus-pushgateway-fips-1.4	—
prometheus-redis-exporter	affected	chainguard	prometheus-redis-exporter	—
prometheus-redis-exporter-fips	affected	chainguard	prometheus-redis-exporter-fips	—
prometheus-stackdriver-exporter	affected	chainguard	prometheus-stackdriver-exporter	—
prometheus-statsd-exporter	affected	chainguard	prometheus-statsd-exporter	—
prometheus-statsd-exporter-fips	affected	chainguard	prometheus-statsd-exporter-fips	—
prometheus-statsd-exporter-fips-0.22	affected	chainguard	prometheus-statsd-exporter-fips-0.22	—
protoc-gen-go	affected	chainguard	protoc-gen-go	—
protoc-gen-go	affected	wolfi	protoc-gen-go	—
protoc-gen-go-grpc	affected	wolfi	protoc-gen-go-grpc	—
protoc-gen-go-grpc	affected	chainguard	protoc-gen-go-grpc	—
pulumi-kubernetes-operator	affected	chainguard	pulumi-kubernetes-operator	—
pulumi-kubernetes-operator	affected	wolfi	pulumi-kubernetes-operator	—
pulumi-language-dotnet	affected	wolfi	pulumi-language-dotnet	—
pulumi-language-dotnet	affected	chainguard	pulumi-language-dotnet	—
pulumi-language-java	affected	chainguard	pulumi-language-java	—
pulumi-language-java	affected	wolfi	pulumi-language-java	—
q	affected	wolfi	q	—
q	affected	chainguard	q	—
rabbitmq-cluster-operator	affected	wolfi	rabbitmq-cluster-operator	—
rabbitmq-cluster-operator	affected	chainguard	rabbitmq-cluster-operator	—
rabbitmq-default-user-credential-updater	affected	wolfi	rabbitmq-default-user-credential-updater	—
rabbitmq-default-user-credential-updater	affected	chainguard	rabbitmq-default-user-credential-updater	—
rabbitmq-messaging-topology-operator	affected	wolfi	rabbitmq-messaging-topology-operator	—
rabbitmq-messaging-topology-operator	affected	chainguard	rabbitmq-messaging-topology-operator	—
rclone	affected	wolfi	rclone	—
rclone	affected	chainguard	rclone	—
redka	affected	chainguard	redka	—
redka	affected	wolfi	redka	—
regclient	affected	chainguard	regclient	—
regclient	affected	wolfi	regclient	—
rekor	affected	wolfi	rekor	—
rekor	affected	chainguard	rekor	—
rekor-fips	affected	chainguard	rekor-fips	—
render-template	affected	chainguard	render-template	—
render-template	affected	wolfi	render-template	—
request-1279	affected	chainguard	request-1279	—
restic	affected	chainguard	restic	—
restic	affected	wolfi	restic	—
restic-fips	affected	chainguard	restic-fips	—
rook	affected	chainguard	rook	—
rook	affected	wolfi	rook	—
rootlesskit	affected	wolfi	rootlesskit	—
rootlesskit	affected	chainguard	rootlesskit	—
runc	affected	wolfi	runc	—
runc	affected	chainguard	runc	—
s5cmd	affected	wolfi	s5cmd	—
s5cmd	affected	chainguard	s5cmd	—
sbomqs	affected	wolfi	sbomqs	—
sbomqs	affected	chainguard	sbomqs	—
sbom-scorecard	affected	wolfi	sbom-scorecard	—
sbom-scorecard	affected	chainguard	sbom-scorecard	—
scorecard	affected	chainguard	scorecard	—
scorecard	affected	wolfi	scorecard	—
secrets-store-csi-driver	affected	chainguard	secrets-store-csi-driver	—
secrets-store-csi-driver	affected	wolfi	secrets-store-csi-driver	—
secrets-store-csi-driver-provider-aws	affected	chainguard	secrets-store-csi-driver-provider-aws	—
secrets-store-csi-driver-provider-aws	affected	wolfi	secrets-store-csi-driver-provider-aws	—
secrets-store-csi-driver-provider-azure	affected	wolfi	secrets-store-csi-driver-provider-azure	—
secrets-store-csi-driver-provider-azure	affected	chainguard	secrets-store-csi-driver-provider-azure	—
secrets-store-csi-driver-provider-gcp	affected	wolfi	secrets-store-csi-driver-provider-gcp	—
secrets-store-csi-driver-provider-gcp	affected	chainguard	secrets-store-csi-driver-provider-gcp	—
shfmt	affected	chainguard	shfmt	—
shfmt	affected	wolfi	shfmt	—
sigstore-scaffolding	affected	chainguard	sigstore-scaffolding	—
sigstore-scaffolding	affected	wolfi	sigstore-scaffolding	—
sigstore-scaffolding-fips	affected	chainguard	sigstore-scaffolding-fips	—
skaffold	affected	chainguard	skaffold	—
skaffold	affected	wolfi	skaffold	—
skopeo	affected	wolfi	skopeo	—
skopeo	affected	chainguard	skopeo	—
slsa-verifier	affected	wolfi	slsa-verifier	—
slsa-verifier	affected	chainguard	slsa-verifier	—
smarter-device-manager	affected	wolfi	smarter-device-manager	—
smarter-device-manager	affected	chainguard	smarter-device-manager	—
smarter-device-manager-fips	affected	chainguard	smarter-device-manager-fips	—
snyk-cli	affected	chainguard	snyk-cli	—
snyk-cli	affected	wolfi	snyk-cli	—
sonobuoy	affected	chainguard	sonobuoy	—
sonobuoy	affected	wolfi	sonobuoy	—
sops	affected	chainguard	sops	—
sops	affected	wolfi	sops	—
speedtest-go	affected	wolfi	speedtest-go	—
speedtest-go	affected	chainguard	speedtest-go	—
spegel	affected	chainguard	spegel	—
spegel	affected	wolfi	spegel	—
spicedb	affected	wolfi	spicedb	—
spicedb	affected	chainguard	spicedb	—
spire-server	affected	wolfi	spire-server	—
spire-server	affected	chainguard	spire-server	—
spire-server-fips	affected	chainguard	spire-server-fips	—
spqr	affected	chainguard	spqr	—
spqr	affected	wolfi	spqr	—
src	affected	chainguard	src	—
src	affected	wolfi	src	—
src-fingerprint	affected	wolfi	src-fingerprint	—
src-fingerprint	affected	chainguard	src-fingerprint	—
src-fingerprint-fips	affected	chainguard	src-fingerprint-fips	—
stakater-reloader-0.0.119	affected	chainguard	stakater-reloader-0.0.119	—
stakater-reloader-0.0.128	affected	chainguard	stakater-reloader-0.0.128	—
stdlib	affected	Go	stdlib	—
step	affected	chainguard	step	—
step	affected	wolfi	step	—
step-ca	affected	wolfi	step-ca	—
step-ca	affected	chainguard	step-ca	—
step-ca-fips	affected	chainguard	step-ca-fips	—
step-fips	affected	chainguard	step-fips	—
step-issuer	affected	chainguard	step-issuer	—
step-issuer	affected	wolfi	step-issuer	—
step-issuer-fips	affected	chainguard	step-issuer-fips	—
stern	affected	wolfi	stern	—
stern	affected	chainguard	stern	—
supercronic	affected	chainguard	supercronic	—
supercronic	affected	wolfi	supercronic	—
swagger	affected	wolfi	swagger	—
swagger	affected	chainguard	swagger	—
syft	affected	wolfi	syft	—
syft	affected	chainguard	syft	—
tailscale	affected	chainguard	tailscale	—
tailscale	affected	wolfi	tailscale	—
task	affected	chainguard	task	—
task	affected	wolfi	task	—
tekton-chains	affected	wolfi	tekton-chains	—
tekton-chains	affected	chainguard	tekton-chains	—
tekton-chains-fips	affected	chainguard	tekton-chains-fips	—
tempo	affected	chainguard	tempo	—
tempo	affected	wolfi	tempo	—
temporal	affected	wolfi	temporal	—
temporal	affected	chainguard	temporal	—
temporal-fips	affected	chainguard	temporal-fips	—
temporal-ui-server	affected	wolfi	temporal-ui-server	—
temporal-ui-server	affected	chainguard	temporal-ui-server	—
temporal-ui-server-fips	affected	chainguard	temporal-ui-server-fips	—
terraform	affected	wolfi	terraform	—
terraform	affected	chainguard	terraform	—
terraform-docs	affected	chainguard	terraform-docs	—
terraform-docs	affected	wolfi	terraform-docs	—
terraform-provider-aws	affected	chainguard	terraform-provider-aws	—
terraform-provider-aws	affected	wolfi	terraform-provider-aws	—
terraform-provider-azurerm	affected	wolfi	terraform-provider-azurerm	—
terraform-provider-azurerm	affected	chainguard	terraform-provider-azurerm	—
terraform-provider-google	affected	wolfi	terraform-provider-google	—
terraform-provider-google	affected	chainguard	terraform-provider-google	—
terragrunt	affected	wolfi	terragrunt	—
terragrunt	affected	chainguard	terragrunt	—
tflint	affected	chainguard	tflint	—
tflint	affected	wolfi	tflint	—
tfsec	affected	wolfi	tfsec	—
tfsec	affected	chainguard	tfsec	—
thanos	affected	wolfi	thanos	—
thanos	affected	chainguard	thanos	—
thanos-fips	affected	chainguard	thanos-fips	—
thanos-operator	affected	chainguard	thanos-operator	—
thanos-operator	affected	wolfi	thanos-operator	—
thanos-operator-fips	affected	chainguard	thanos-operator-fips	—
tigera-operator-1.28	affected	chainguard	tigera-operator-1.28	—
tigera-operator-1.29	affected	chainguard	tigera-operator-1.29	—
tigera-operator-fips-1.29	affected	chainguard	tigera-operator-fips-1.29	—
timestamp-authority	affected	chainguard	timestamp-authority	—
timestamp-authority	affected	wolfi	timestamp-authority	—
timestamp-authority-fips	affected	chainguard	timestamp-authority-fips	—
timoni	affected	chainguard	timoni	—
timoni	affected	wolfi	timoni	—
tkn	affected	chainguard	tkn	—
tkn	affected	wolfi	tkn	—
tkn-fips	affected	chainguard	tkn-fips	—
trillian	affected	chainguard	trillian	—
trillian	affected	wolfi	trillian	—
trillian-fips	affected	chainguard	trillian-fips	—
trivy	affected	chainguard	trivy	—
trivy	affected	wolfi	trivy	—
trivy-fips	affected	chainguard	trivy-fips	—
trust-manager	affected	chainguard	trust-manager	—
trust-manager	affected	wolfi	trust-manager	—
trust-manager-fips	affected	chainguard	trust-manager-fips	—
up	affected	chainguard	up	—
up	affected	wolfi	up	—
vault-csi-provider	affected	chainguard	vault-csi-provider	—
vault-k8s	affected	wolfi	vault-k8s	—
vault-k8s	affected	chainguard	vault-k8s	—
vault-k8s-fips	affected	chainguard	vault-k8s-fips	—
vcluster	affected	wolfi	vcluster	—
vcluster	affected	chainguard	vcluster	—
velero	affected	chainguard	velero	—
velero	affected	wolfi	velero	—
velero-fips	affected	chainguard	velero-fips	—
velero-plugin-for-aws	affected	chainguard	velero-plugin-for-aws	—
velero-plugin-for-aws	affected	wolfi	velero-plugin-for-aws	—
velero-plugin-for-aws-fips	affected	chainguard	velero-plugin-for-aws-fips	—
velero-plugin-for-csi	affected	wolfi	velero-plugin-for-csi	—
velero-plugin-for-csi	affected	chainguard	velero-plugin-for-csi	—
velero-plugin-for-csi-fips	affected	chainguard	velero-plugin-for-csi-fips	—
vexctl	affected	wolfi	vexctl	—
vexctl	affected	chainguard	vexctl	—
volume-modifier-for-k8s	affected	wolfi	volume-modifier-for-k8s	—
volume-modifier-for-k8s	affected	chainguard	volume-modifier-for-k8s	—
vt-cli	affected	chainguard	vt-cli	—
vt-cli	affected	wolfi	vt-cli	—
wait-for-port	affected	wolfi	wait-for-port	—
wait-for-port	affected	chainguard	wait-for-port	—
wave	affected	chainguard	wave	—
wave	affected	wolfi	wave	—
wave-fips	affected	chainguard	wave-fips	—
wavefront-collector-for-kubernetes-1.12	affected	chainguard	wavefront-collector-for-kubernetes-1.12	—
wavefront-collector-for-kubernetes-1.13	affected	chainguard	wavefront-collector-for-kubernetes-1.13	—
wazero	affected	chainguard	wazero	—
wazero	affected	wolfi	wazero	—
weaviate	affected	chainguard	weaviate	—
weaviate	affected	wolfi	weaviate	—
wgcf	affected	chainguard	wgcf	—
wgcf	affected	wolfi	wgcf	—
wire-go	affected	chainguard	wire-go	—
wire-go	affected	wolfi	wire-go	—
wireguard-go	affected	wolfi	wireguard-go	—
wireguard-go	affected	chainguard	wireguard-go	—
wolfictl	affected	chainguard	wolfictl	—
wolfictl	affected	wolfi	wolfictl	—
xcaddy	affected	chainguard	xcaddy	—
xcaddy	affected	wolfi	xcaddy	—
yam	affected	chainguard	yam	—
yam	affected	wolfi	yam	—
yq	affected	chainguard	yq	—
yq	affected	wolfi	yq	—
yq-fips	affected	chainguard	yq-fips	—
ytt	affected	chainguard	ytt	—
ytt	affected	wolfi	ytt	—
zarf	affected	chainguard	zarf	—
zarf	affected	wolfi	zarf	—

Upstream advisory

CVE-2024-24789

GooglePoC exploitMEDIUM2024-06-04

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading t...

CVEs:CVE-2024-24789

Affected products

Product	Status	Vendor	Package	Ecosystem
go	affected	golang	—	—

Upstream advisory

CVE-2024-24789

GooglePoC exploit2024-06-04

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

CVEs:CVE-2024-24789

Upstream advisory

CVE-2024-24789

GooglePoC exploitMEDIUM2024-06-04

CVEs:CVE-2024-24789

Upstream advisory

ASB-A-320661088

GooglePoC exploitHIGH2024-06-01

ASB-A-320661088

Affected products

Product	Status	Vendor	Package	Ecosystem
:linux_kernel:	affected	Android	:linux_kernel:	—

Upstream advisory

CVE-2024-9355

Open SourcePoC exploitHIGH2024-10-01

Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability

CVEs:CVE-2024-9355

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-fips/openssl	affected	github.com	github.com/golang-fips/openssl	—

Upstream advisory

CVE-2024-9355

Open SourcePoC exploitCRITICAL2024-06-05

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match betw...

CVEs:CVE-2024-9355

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-fips/openssl	affected	github.com	—	—

Upstream advisory

CVE-2024-9355

Open SourcePoC exploitHIGH2024-06-05

Golang FIPS OpenSSL has a Use of Uninitialized Variable vulnerability

CVEs:CVE-2024-9355

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-fips/openssl	affected	github.com	github.com/golang-fips/openssl	—

Upstream advisory

GO-2024-2512

Open SourcePoC exploit2024-06-28

Classic builder cache poisoning in github.com/docker/docker

Affected products

Product	Status	Vendor	Package	Ecosystem
aactl	affected	chainguard	aactl	—
aactl	affected	wolfi	aactl	—
argo-workflows	affected	chainguard	argo-workflows	—
argo-workflows	affected	wolfi	argo-workflows	—
argo-workflows-fips	affected	chainguard	argo-workflows-fips	—
bom	affected	chainguard	bom	—
bom	affected	wolfi	bom	—
buildkitd	affected	chainguard	buildkitd	—
buildkitd	affected	wolfi	buildkitd	—
cadvisor	affected	wolfi	cadvisor	—
cadvisor	affected	chainguard	cadvisor	—
cadvisor-fips	affected	chainguard	cadvisor-fips	—
chartmuseum	affected	chainguard	chartmuseum	—
chartmuseum	affected	wolfi	chartmuseum	—
cosign	affected	chainguard	cosign	—
cosign	affected	wolfi	cosign	—
cosign-fips	affected	chainguard	cosign-fips	—
crane	affected	chainguard	crane	—
crane	affected	wolfi	crane	—
cri-tools	affected	wolfi	cri-tools	—
cri-tools	affected	chainguard	cri-tools	—
ctop	affected	wolfi	ctop	—
ctop	affected	chainguard	ctop	—
dagger	affected	chainguard	dagger	—
dagger	affected	wolfi	dagger	—
docker	affected	wolfi	docker	—
docker	affected	chainguard	docker	—
docker-credential-gcr	affected	chainguard	docker-credential-gcr	—
docker-credential-gcr	affected	wolfi	docker-credential-gcr	—
docker/docker	affected	github.com	github.com/docker/docker	—
docker-machine-driver-harvester	affected	chainguard	docker-machine-driver-harvester	—
docker-machine-driver-harvester	affected	wolfi	docker-machine-driver-harvester	—
eksctl	affected	wolfi	eksctl	—
eksctl	affected	chainguard	eksctl	—
falcoctl	affected	chainguard	falcoctl	—
falcoctl	affected	wolfi	falcoctl	—
falcoctl-fips	affected	chainguard	falcoctl-fips	—
falcoctl-fips-0.4	affected	chainguard	falcoctl-fips-0.4	—
flux	affected	chainguard	flux	—
flux	affected	wolfi	flux	—
flux-helm-controller	affected	wolfi	flux-helm-controller	—
flux-helm-controller	affected	chainguard	flux-helm-controller	—
flux-image-reflector-controller	affected	wolfi	flux-image-reflector-controller	—
flux-image-reflector-controller	affected	chainguard	flux-image-reflector-controller	—
gitsign	affected	chainguard	gitsign	—
gitsign	affected	wolfi	gitsign	—
goreleaser	affected	chainguard	goreleaser	—
goreleaser	affected	wolfi	goreleaser	—
guac	affected	wolfi	guac	—
guac	affected	chainguard	guac	—
helm	affected	chainguard	helm	—
helm	affected	wolfi	helm	—
helm-3	affected	chainguard	helm-3	—
helm-3	affected	wolfi	helm-3	—
helm-4	affected	chainguard	helm-4	—
helm-4	affected	wolfi	helm-4	—
helm-fips	affected	chainguard	helm-fips	—
helm-fips-3	affected	chainguard	helm-fips-3	—
helm-fips-4	affected	chainguard	helm-fips-4	—
helm-operator	affected	wolfi	helm-operator	—
helm-operator	affected	chainguard	helm-operator	—
helm-operator-fips	affected	chainguard	helm-operator-fips	—
k3d	affected	wolfi	k3d	—
k3d	affected	chainguard	k3d	—
k3s	affected	chainguard	k3s	—
k3s	affected	wolfi	k3s	—
k8sgpt	affected	chainguard	k8sgpt	—
k8sgpt	affected	wolfi	k8sgpt	—
k9s	affected	chainguard	k9s	—
k9s	affected	wolfi	k9s	—
kargo	affected	chainguard	kargo	—
kargo	affected	wolfi	kargo	—
ko-fips	affected	chainguard	ko-fips	—
kots	affected	wolfi	kots	—
kots	affected	chainguard	kots	—
kpt	affected	chainguard	kpt	—
kpt	affected	wolfi	kpt	—
kubeflow-katib	affected	wolfi	kubeflow-katib	—
kubeflow-katib	affected	chainguard	kubeflow-katib	—
kubescape	affected	chainguard	kubescape	—
kubescape	affected	wolfi	kubescape	—
kubevela	affected	wolfi	kubevela	—
kubevela	affected	chainguard	kubevela	—
loki-2.9	affected	chainguard	loki-2.9	—
moby/moby	affected	github.com	github.com/moby/moby	—
nerdctl	affected	wolfi	nerdctl	—
nerdctl	affected	chainguard	nerdctl	—
newrelic-infrastructure-agent	affected	wolfi	newrelic-infrastructure-agent	—
newrelic-infrastructure-agent	affected	chainguard	newrelic-infrastructure-agent	—
policy-controller	affected	wolfi	policy-controller	—
policy-controller	affected	chainguard	policy-controller	—
policy-controller-fips	affected	chainguard	policy-controller-fips	—
pulumi	affected	chainguard	pulumi	—
pulumi	affected	wolfi	pulumi	—
rancher-2.10	affected	chainguard	rancher-2.10	—
rancher-2.11	affected	chainguard	rancher-2.11	—
rancher-agent-2.10	affected	chainguard	rancher-agent-2.10	—
rancher-agent-2.11	affected	chainguard	rancher-agent-2.11	—
rancher-agent-2.9	affected	chainguard	rancher-agent-2.9	—
rancher-machine	affected	wolfi	rancher-machine	—
rancher-machine	affected	chainguard	rancher-machine	—
scorecard	affected	wolfi	scorecard	—
scorecard	affected	chainguard	scorecard	—
skaffold	affected	chainguard	skaffold	—
skaffold	affected	wolfi	skaffold	—
skopeo	affected	chainguard	skopeo	—
skopeo	affected	wolfi	skopeo	—
slsa-verifier	affected	chainguard	slsa-verifier	—
slsa-verifier	affected	wolfi	slsa-verifier	—
tekton-chains	affected	wolfi	tekton-chains	—
tekton-chains	affected	chainguard	tekton-chains	—
timoni	affected	wolfi	timoni	—
timoni	affected	chainguard	timoni	—
trivy	affected	chainguard	trivy	—
trivy	affected	wolfi	trivy	—
up	affected	chainguard	up	—
up	affected	wolfi	up	—
vexctl	affected	wolfi	vexctl	—
vexctl	affected	chainguard	vexctl	—
zarf	affected	wolfi	zarf	—
zarf	affected	chainguard	zarf	—
zot	affected	chainguard	zot	—
zot	affected	wolfi	zot	—

Upstream advisory

openSUSE-SU-2024:13013-1

Open SourcePoC exploit2024-06-15

kubernetes1.23-apiserver-1.23.17-5.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.23	affected	openSUSE:Tumbleweed	kubernetes1.23	—

Upstream advisory

ASB-A-329096276

GooglePoC exploit2024-06-01

ASB-A-329096276

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-31319

Open SourcePoC exploitHIGH2024-06-03

In updateNotificationChannelFromPrivilegedListener of NotificationManagerService.java, there is a possible cross-user data leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. U...

CVEs:CVE-2024-31319

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-31319

GooglePoC exploitHIGH2024-06-03

Product	Status	Vendor	Package	Ecosystem
chromium	affected	wolfi	chromium	—
chromium	affected	chainguard	chromium	—

Upstream advisory

CVE-2024-5841

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5841

Upstream advisory

CVE-2024-5841

GoogleCoalition ESS < 30%CRITICAL2024-06-11

Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2024-5841

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

DEBIAN-CVE-2024-5841

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

DEBIAN-CVE-2024-5841

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

openSUSE-SU-2024:10902-1

Open SourceCoalition ESS < 30%2024-06-15

kubernetes1.18-apiserver-1.18.20-1.2 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.18	affected	openSUSE:Tumbleweed	kubernetes1.18	—

Upstream advisory

openSUSE-SU-2024:10903-1

Open SourceCoalition ESS < 30%2024-06-15

kubernetes1.19-apiserver-1.19.15-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.19	affected	openSUSE:Tumbleweed	kubernetes1.19	—

Upstream advisory

openSUSE-SU-2024:10904-1

Open SourceCoalition ESS < 30%2024-06-15

kubernetes1.20-apiserver-1.20.11-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.20	affected	openSUSE:Tumbleweed	kubernetes1.20	—

Upstream advisory

openSUSE-SU-2024:10905-1

Open SourceCoalition ESS < 30%2024-06-15

kubernetes1.21-apiserver-1.21.5-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
kubernetes1.21	affected	openSUSE:Tumbleweed	kubernetes1.21	—

Upstream advisory

openSUSE-SU-2024:11890-1

Open SourceCoalition ESS < 30%2024-06-15

chromedriver-99.0.4844.51-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

GO-2024-2750

Open SourceCoalition ESS < 30%CRITICAL2024-06-05

Kubernetes Secrets Store CSI Driver plugins arbitrary file write in github.com/Azure/secrets-store-csi-driver-provider-azure

Affected products

Product	Status	Vendor	Package	Ecosystem
Azure/secrets-store-csi-driver-provider-azure	affected	github.com	github.com/Azure/secrets-store-csi-driver-provider-azure	—
GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp	affected	github.com	github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp	—
hashicorp/vault-csi-provider	affected	github.com	github.com/hashicorp/vault-csi-provider	—
secrets-store-csi-driver-provider-azure	affected	wolfi	secrets-store-csi-driver-provider-azure	—
secrets-store-csi-driver-provider-azure	affected	chainguard	secrets-store-csi-driver-provider-azure	—
secrets-store-csi-driver-provider-azure-fips	affected	chainguard	secrets-store-csi-driver-provider-azure-fips	—
vault-csi-provider	affected	chainguard	vault-csi-provider	—
vault-csi-provider-fips	affected	chainguard	vault-csi-provider-fips	—

Upstream advisory

openSUSE-SU-2024:11932-1

Open SourceCoalition ESS < 30%2024-06-15

chromedriver-99.0.4844.74-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:12141-1

Open SourceCoalition ESS < 30%2024-06-15

chromedriver-102.0.5005.115-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:13368-1

Open SourceCoalition ESS < 30%2024-06-15

chromedriver-118.0.5993.117-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

openSUSE-SU-2024:13383-1

Open SourceCoalition ESS < 30%2024-06-15

ungoogled-chromium-118.0.5993.117-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

CVE-2024-5154

GoogleCoalition ESS < 30%HIGH2024-06-04

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

CVEs:CVE-2024-5154

Affected products

Product	Status	Vendor	Package	Ecosystem
cri-o	affected	kubernetes	—	—
openshift_container_platform	affected	redhat	—	—

Upstream advisory

CVE-2024-5154

GoogleCoalition ESS < 30%HIGH2024-06-04

malicious container creates symlink "mtab" on the host External

CVEs:CVE-2024-5154

Affected products

Product	Status	Vendor	Package	Ecosystem
cri-o/cri-o	affected	github.com	github.com/cri-o/cri-o	—

Upstream advisory

CVE-2024-5154

GoogleCoalition ESS < 30%2024-06-04

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-6101

GoogleCoalition ESS < 30%HIGH2024-06-18

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6101

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—

Upstream advisory

CVE-2024-6101

GoogleCoalition ESS < 30%HIGH2024-06-18

CVEs:CVE-2024-6101

Upstream advisory

CVE-2024-6101

GoogleCoalition ESS < 30%2024-06-18

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-6102

GoogleCoalition ESS < 30%HIGH2024-06-18

CVEs:CVE-2024-6102

Upstream advisory

CVE-2024-6102

GoogleCoalition ESS < 30%2024-06-18

Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6102

Upstream advisory

CVE-2024-6102

GoogleCoalition ESS < 30%HIGH2024-06-18

Out of bounds memory access in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6102

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—

Upstream advisory

CVE-2024-37168

GoogleCoalition ESS < 30%HIGH2024-06-10

@grpc/grps-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon. Prior to versions 1.10.9, 1.9.15, and 1.8.22, there are two separate code paths in which memory can be allocated per message in excess of the `grpc.max_r...

CVEs:CVE-2024-37168

Upstream advisory

CVE-2024-37168

Open SourceCoalition ESS < 30%MEDIUM2024-06-10

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

CVEs:CVE-2024-37168

Affected products

Product	Status	Vendor	Package	Ecosystem
grpc-js	affected	grpc	@grpc/grpc-js	—

Upstream advisory

CVE-2024-37168

Open SourceCoalition ESS < 30%MEDIUM2024-06-10

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

CVEs:CVE-2024-37168

Affected products

Product	Status	Vendor	Package	Ecosystem
grpc-js	affected	grpc	@grpc/grpc-js	—

Upstream advisory

GHSA-7v5v-9h63-cj86

Open SourceCoalition ESS < 30%MEDIUM2024-06-10

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

Affected products

Product	Status	Vendor	Package	Ecosystem
grpc-js	affected	grpc	@grpc/grpc-js	—

Upstream advisory

GHSA-7v5v-9h63-cj86

Open SourceCoalition ESS < 30%MEDIUM2024-06-10

@grpc/grpc-js can allocate memory for incoming messages well above configured limits

Affected products

Product	Status	Vendor	Package	Ecosystem
grpc-js	affected	grpc	@grpc/grpc-js	—
jitsucom-jitsu	affected	chainguard	jitsucom-jitsu	—
jitsucom-jitsu	affected	wolfi	jitsucom-jitsu	—
kubeflow-centraldashboard	affected	chainguard	kubeflow-centraldashboard	—
kubeflow-centraldashboard	affected	wolfi	kubeflow-centraldashboard	—

Upstream advisory

ASB-A-332001819

GoogleCoalition ESS < 30%2024-06-01

ASB-A-332001819

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

openSUSE-SU-2024:12724-1

Open SourceCoalition ESS < 30%2024-06-15

chromedriver-110.0.5481.177-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

GHSA-rpvg-h6p6-42qj

Open SourceCoalition ESS < 30%CRITICAL2024-06-25

GHSA-rpvg-h6p6-42qj

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

DEBIAN-CVE-2024-6291

Open SourceCoalition ESS < 30%CRITICAL2024-06-24

DEBIAN-CVE-2024-6291

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-6291

GoogleCoalition ESS < 30%CRITICAL2024-06-24

Use after free in Swiftshader in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6291

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-6291

GoogleCoalition ESS < 30%HIGH2024-06-24

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-6103

GoogleCoalition ESS < 30%HIGH2024-06-18

CVEs:CVE-2024-6103

Upstream advisory

CVE-2024-6103

GoogleCoalition ESS < 30%2024-06-18

Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6103

Upstream advisory

CVE-2024-6103

GoogleCoalition ESS < 30%CRITICAL2024-06-18

Use after free in Dawn in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6103

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—

Upstream advisory

GHSA-9f8f-453p-rg87

Open SourceCoalition ESS < 30%CRITICAL2024-06-25

GHSA-9f8f-453p-rg87

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

GHSA-m848-8f5r-6j4g

Open SourceCoalition ESS < 30%CRITICAL2024-06-25

GHSA-m848-8f5r-6j4g

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

DEBIAN-CVE-2024-6292

Open SourceCoalition ESS < 30%CRITICAL2024-06-24

DEBIAN-CVE-2024-6292

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

DEBIAN-CVE-2024-6293

Open SourceCoalition ESS < 30%CRITICAL2024-06-24

DEBIAN-CVE-2024-6293

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-6293

GoogleCoalition ESS < 30%HIGH2024-06-24

CVEs:CVE-2024-6293

Upstream advisory

CVE-2024-6293

GoogleCoalition ESS < 30%2024-06-24

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6293

Upstream advisory

CVE-2024-6293

GoogleCoalition ESS < 30%CRITICAL2024-06-24

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6293

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-6292

GoogleCoalition ESS < 30%HIGH2024-06-24

CVEs:CVE-2024-6292

Upstream advisory

CVE-2024-6292

GoogleCoalition ESS < 30%CRITICAL2024-06-24

Use after free in Dawn in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-6292

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

GHSA-664v-jfq4-4mfq

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

GHSA-664v-jfq4-4mfq

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	wolfi	chromium	—
chromium	affected	chainguard	chromium	—

Upstream advisory

CVE-2024-5834

GoogleCoalition ESS < 30%CRITICAL2024-06-11

Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5834

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5834

GoogleCoalition ESS < 30%2024-06-11

Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5834

Upstream advisory

CVE-2024-5834

GoogleCoalition ESS < 30%HIGH2024-06-11

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

CVE-2024-5844

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5844

Upstream advisory

CVE-2024-5844

GoogleCoalition ESS < 30%2024-06-11

Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2024-5844

Upstream advisory

CVE-2024-5844

GoogleCoalition ESS < 30%CRITICAL2024-06-11

Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2024-5844

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

DEBIAN-CVE-2024-5844

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

DEBIAN-CVE-2024-5844

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

GHSA-49q5-4wm8-j4qp

Open SourceCoalition ESS < 30%HIGH2024-06-11

GHSA-49q5-4wm8-j4qp

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	wolfi	chromium	—
chromium	affected	chainguard	chromium	—

Upstream advisory

CVE-2024-5837

GoogleCoalition ESS < 30%HIGH2024-06-11

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5837

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5837

GoogleCoalition ESS < 30%2024-06-11

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5837

Upstream advisory

CVE-2024-5837

GoogleCoalition ESS < 30%HIGH2024-06-11

Product	Status	Vendor	Package	Ecosystem
chromium	affected	wolfi	chromium	—
chromium	affected	chainguard	chromium	—

Upstream advisory

CVE-2024-5838

GoogleCoalition ESS < 30%HIGH2024-06-11

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5838

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5838

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5838

Upstream advisory

CVE-2024-5838

GoogleCoalition ESS < 30%2024-06-11

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5838

Upstream advisory

DEBIAN-CVE-2024-5833

Open SourceCoalition ESS < 30%HIGH2024-06-11

DEBIAN-CVE-2024-5833

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

DEBIAN-CVE-2024-5838

Open SourceCoalition ESS < 30%HIGH2024-06-11

DEBIAN-CVE-2024-5838

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-5833

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5833

Upstream advisory

CVE-2024-5833

GoogleCoalition ESS < 30%HIGH2024-06-11

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5833

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5833

GoogleCoalition ESS < 30%2024-06-11

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5833

Upstream advisory

GHSA-93vj-795w-gh3c

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

GHSA-93vj-795w-gh3c

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

CVE-2024-5835

GoogleCoalition ESS < 30%CRITICAL2024-06-11

Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5835

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5835

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5835

Upstream advisory

CVE-2024-5835

GoogleCoalition ESS < 30%2024-06-11

Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-5839

GoogleCoalition ESS < 30%2024-06-11

Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2024-5839

Upstream advisory

CVE-2024-5839

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-5839

Upstream advisory

CVE-2024-5839

GoogleCoalition ESS < 30%HIGH2024-06-11

Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2024-5839

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

GHSA-9w6w-f2x5-m36p

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

GHSA-9w6w-f2x5-m36p

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

CVE-2024-5842

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5842

Upstream advisory

CVE-2024-5842

GoogleCoalition ESS < 30%CRITICAL2024-06-11

Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2024-5842

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5842

GoogleCoalition ESS < 30%2024-06-11

Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

CVE-2024-5832

GoogleCoalition ESS < 30%CRITICAL2024-06-11

Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5832

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5832

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5832

Upstream advisory

CVE-2024-5832

GoogleCoalition ESS < 30%2024-06-11

Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5832

Upstream advisory

DEBIAN-CVE-2024-5831

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

DEBIAN-CVE-2024-5831

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

DEBIAN-CVE-2024-5832

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

DEBIAN-CVE-2024-5832

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-5831

GoogleCoalition ESS < 30%CRITICAL2024-06-11

Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5831

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5831

GoogleCoalition ESS < 30%2024-06-11

Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVEs:CVE-2024-5831

Upstream advisory

CVE-2024-5831

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5831

Upstream advisory

GHSA-3g94-3h93-rrf8

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

GHSA-3g94-3h93-rrf8

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

CVE-2024-5843

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-5843

Upstream advisory

CVE-2024-5843

GoogleCoalition ESS < 30%2024-06-11

Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium)

CVEs:CVE-2024-5843

Upstream advisory

CVE-2024-5843

GoogleCoalition ESS < 30%HIGH2024-06-11

Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severity: Medium)

CVEs:CVE-2024-5843

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

DEBIAN-CVE-2024-5843

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

DEBIAN-CVE-2024-5843

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

GHSA-h5pw-pphc-8fmq

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

GHSA-h5pw-pphc-8fmq

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

CVE-2024-5845

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-5845

Upstream advisory

CVE-2024-5845

GoogleCoalition ESS < 30%CRITICAL2024-06-11

Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

CVEs:CVE-2024-5845

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5845

GoogleCoalition ESS < 30%2024-06-11

Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)

Product	Status	Vendor	Package	Ecosystem
chromium	affected	chainguard	chromium	—
chromium	affected	wolfi	chromium	—

Upstream advisory

CVE-2024-5840

GoogleCoalition ESS < 30%2024-06-11

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2024-5840

Upstream advisory

CVE-2024-5840

GoogleCoalition ESS < 30%MEDIUM2024-06-11

Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity: Medium)

CVEs:CVE-2024-5840

Affected products

Product	Status	Vendor	Package	Ecosystem
chrome	affected	google	—	—
fedora	affected	fedoraproject	—	—

Upstream advisory

CVE-2024-5840

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-5840

Upstream advisory

DEBIAN-CVE-2024-5840

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

DEBIAN-CVE-2024-5840

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	Debian:11	chromium	—
chromium	affected	Debian:12	chromium	—
chromium	affected	Debian:13	chromium	—
chromium	affected	Debian:14	chromium	—

Upstream advisory

CVE-2024-35670

GoogleCoalition ESS < 30%CRITICAL2024-06-04

Broken Authentication vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.93.

CVEs:CVE-2024-35670

Affected products

Product	Status	Vendor	Package	Ecosystem
integrate_google_drive	affected	softlabbd	—	—

Upstream advisory

CVE-2024-35670

GoogleCoalition ESS < 30%MEDIUM2024-06-04

CVEs:CVE-2024-35670

Upstream advisory

CVE-2024-30058

GoogleCoalition ESS < 30%MEDIUM2024-06-13

CVEs:CVE-2024-30058

Upstream advisory

CVE-2024-30058

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVEs:CVE-2024-30058

Affected products

Product	Status	Vendor	Package	Ecosystem
edge_chromium	affected	microsoft	—	—

Upstream advisory

PUB-A-308436769

GoogleCoalition ESS < 30%2024-06-01

PUB-A-308436769

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

GO-2024-2947

Open SourceCoalition ESS < 30%HIGH2024-06-25

Leak of sensitive information to log files in github.com/hashicorp/go-retryablehttp

Affected products

Product	Status	Vendor	Package	Ecosystem
aactl	affected	wolfi	aactl	—
aactl	affected	chainguard	aactl	—
actions-runner-controller	affected	chainguard	actions-runner-controller	—
actions-runner-controller	affected	wolfi	actions-runner-controller	—
actions-runner-controller-fips	affected	chainguard	actions-runner-controller-fips	—
argo-cd-2.11	affected	chainguard	argo-cd-2.11	—
argo-events	affected	chainguard	argo-events	—
argo-events	affected	wolfi	argo-events	—
argo-events-fips	affected	chainguard	argo-events-fips	—
atlantis-fips	affected	chainguard	atlantis-fips	—
bank-vaults	affected	wolfi	bank-vaults	—
bank-vaults	affected	chainguard	bank-vaults	—
bank-vaults-fips	affected	chainguard	bank-vaults-fips	—
buildkitd	affected	chainguard	buildkitd	—
buildkitd	affected	wolfi	buildkitd	—
chainctl	affected	chainguard	chainctl	—
consul-1.18	affected	chainguard	consul-1.18	—
cosign	affected	chainguard	cosign	—
cosign	affected	wolfi	cosign	—
cosign-fips	affected	chainguard	cosign-fips	—
crossplane-provider-azure	affected	chainguard	crossplane-provider-azure	—
crossplane-provider-azure	affected	wolfi	crossplane-provider-azure	—
crossplane-provider-azure-authorization	affected	wolfi	crossplane-provider-azure-authorization	—
crossplane-provider-azure-authorization	affected	chainguard	crossplane-provider-azure-authorization	—
crossplane-provider-azure-managedidentity	affected	wolfi	crossplane-provider-azure-managedidentity	—
crossplane-provider-azure-managedidentity	affected	chainguard	crossplane-provider-azure-managedidentity	—
crossplane-provider-azure-sql	affected	wolfi	crossplane-provider-azure-sql	—
crossplane-provider-azure-sql	affected	chainguard	crossplane-provider-azure-sql	—
crossplane-provider-azure-storage	affected	wolfi	crossplane-provider-azure-storage	—
crossplane-provider-azure-storage	affected	chainguard	crossplane-provider-azure-storage	—
crossplane-provider-family-azure	affected	chainguard	crossplane-provider-family-azure	—
crossplane-provider-family-azure	affected	wolfi	crossplane-provider-family-azure	—
falcoctl	affected	chainguard	falcoctl	—
falcoctl	affected	wolfi	falcoctl	—
falcoctl-fips	affected	chainguard	falcoctl-fips	—
flux	affected	chainguard	flux	—
flux	affected	wolfi	flux	—
flux-helm-controller	affected	chainguard	flux-helm-controller	—
flux-helm-controller	affected	wolfi	flux-helm-controller	—
flux-image-automation-controller	affected	wolfi	flux-image-automation-controller	—
flux-image-automation-controller	affected	chainguard	flux-image-automation-controller	—
flux-image-reflector-controller	affected	wolfi	flux-image-reflector-controller	—
flux-image-reflector-controller	affected	chainguard	flux-image-reflector-controller	—
flux-kustomize-controller	affected	chainguard	flux-kustomize-controller	—
flux-kustomize-controller	affected	wolfi	flux-kustomize-controller	—
flux-notification-controller	affected	chainguard	flux-notification-controller	—
flux-notification-controller	affected	wolfi	flux-notification-controller	—
flux-source-controller	affected	chainguard	flux-source-controller	—
flux-source-controller	affected	wolfi	flux-source-controller	—
fulcio	affected	chainguard	fulcio	—
fulcio	affected	wolfi	fulcio	—
fulcio-fips	affected	chainguard	fulcio-fips	—
gh	affected	chainguard	gh	—
gh	affected	wolfi	gh	—
gitsign	affected	wolfi	gitsign	—
gitsign	affected	chainguard	gitsign	—
glab	affected	wolfi	glab	—
glab	affected	chainguard	glab	—
gomplate	affected	wolfi	gomplate	—
gomplate	affected	chainguard	gomplate	—
gomplate-fips	affected	chainguard	gomplate-fips	—
goreleaser	affected	wolfi	goreleaser	—
goreleaser	affected	chainguard	goreleaser	—
grafana-mimir	affected	wolfi	grafana-mimir	—
grafana-mimir	affected	chainguard	grafana-mimir	—
guac	affected	chainguard	guac	—
guac	affected	wolfi	guac	—
hashicorp/go-retryablehttp	affected	github.com	github.com/hashicorp/go-retryablehttp	—
k3d	affected	chainguard	k3d	—
k3d	affected	wolfi	k3d	—
k3s	affected	wolfi	k3s	—
k3s	affected	chainguard	k3s	—
kargo	affected	wolfi	kargo	—
kargo	affected	chainguard	kargo	—
ksops	affected	chainguard	ksops	—
ksops	affected	wolfi	ksops	—
kubernetes-event-exporter	affected	wolfi	kubernetes-event-exporter	—
kubernetes-event-exporter	affected	chainguard	kubernetes-event-exporter	—
kubescape	affected	wolfi	kubescape	—
kubescape	affected	chainguard	kubescape	—
kubevela	affected	wolfi	kubevela	—
kubevela	affected	chainguard	kubevela	—
loki-2.9	affected	chainguard	loki-2.9	—
neuvector-sigstore-interface	affected	chainguard	neuvector-sigstore-interface	—
neuvector-sigstore-interface	affected	wolfi	neuvector-sigstore-interface	—
neuvector-sigstore-interface-fips	affected	chainguard	neuvector-sigstore-interface-fips	—
nuclei	affected	wolfi	nuclei	—
nuclei	affected	chainguard	nuclei	—
opentelemetry-collector	affected	chainguard	opentelemetry-collector	—
opentelemetry-collector	affected	wolfi	opentelemetry-collector	—
opentelemetry-collector-contrib	affected	wolfi	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib	affected	chainguard	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib-fips	affected	chainguard	opentelemetry-collector-contrib-fips	—
opentelemetry-collector-fips	affected	chainguard	opentelemetry-collector-fips	—
policy-controller	affected	wolfi	policy-controller	—
policy-controller	affected	chainguard	policy-controller	—
policy-controller-fips	affected	chainguard	policy-controller-fips	—
prometheus-2.51	affected	chainguard	prometheus-2.51	—
prometheus-2.53	affected	chainguard	prometheus-2.53	—
pulumi	affected	wolfi	pulumi	—
pulumi	affected	chainguard	pulumi	—
pulumi-kubernetes-operator	affected	wolfi	pulumi-kubernetes-operator	—
pulumi-kubernetes-operator	affected	chainguard	pulumi-kubernetes-operator	—
rabbitmq-messaging-topology-operator	affected	wolfi	rabbitmq-messaging-topology-operator	—
rabbitmq-messaging-topology-operator	affected	chainguard	rabbitmq-messaging-topology-operator	—
rekor	affected	chainguard	rekor	—
rekor	affected	wolfi	rekor	—
rekor-fips	affected	chainguard	rekor-fips	—
rook	affected	wolfi	rook	—
rook	affected	chainguard	rook	—
scorecard	affected	wolfi	scorecard	—
scorecard	affected	chainguard	scorecard	—
sigstore-scaffolding	affected	chainguard	sigstore-scaffolding	—
sigstore-scaffolding	affected	wolfi	sigstore-scaffolding	—
sigstore-scaffolding-fips	affected	chainguard	sigstore-scaffolding-fips	—
skopeo	affected	wolfi	skopeo	—
skopeo	affected	chainguard	skopeo	—
slsa-verifier	affected	chainguard	slsa-verifier	—
slsa-verifier	affected	wolfi	slsa-verifier	—
snyk-cli	affected	wolfi	snyk-cli	—
snyk-cli	affected	chainguard	snyk-cli	—
sops	affected	wolfi	sops	—
sops	affected	chainguard	sops	—
spire-server	affected	chainguard	spire-server	—
spire-server	affected	wolfi	spire-server	—
spire-server-fips	affected	chainguard	spire-server-fips	—
src-fingerprint	affected	chainguard	src-fingerprint	—
src-fingerprint	affected	wolfi	src-fingerprint	—
src-fingerprint-fips	affected	chainguard	src-fingerprint-fips	—
step-ca	affected	wolfi	step-ca	—
step-ca	affected	chainguard	step-ca	—
step-ca-fips	affected	chainguard	step-ca-fips	—
tekton-chains	affected	chainguard	tekton-chains	—
tekton-chains	affected	wolfi	tekton-chains	—
tekton-chains-fips	affected	chainguard	tekton-chains-fips	—
terraform	affected	chainguard	terraform	—
terraform	affected	wolfi	terraform	—
terraform-provider-azurerm	affected	chainguard	terraform-provider-azurerm	—
terraform-provider-azurerm	affected	wolfi	terraform-provider-azurerm	—
terragrunt	affected	wolfi	terragrunt	—
terragrunt	affected	chainguard	terragrunt	—
timestamp-authority	affected	wolfi	timestamp-authority	—
timestamp-authority	affected	chainguard	timestamp-authority	—
timestamp-authority-fips	affected	chainguard	timestamp-authority-fips	—
tkn	affected	chainguard	tkn	—
tkn	affected	wolfi	tkn	—
tkn-fips	affected	chainguard	tkn-fips	—
vault-1.16	affected	chainguard	vault-1.16	—
vault-csi-provider	affected	chainguard	vault-csi-provider	—
vexctl	affected	chainguard	vexctl	—
vexctl	affected	wolfi	vexctl	—
zarf	affected	wolfi	zarf	—
zarf	affected	chainguard	zarf	—
zot	affected	chainguard	zot	—
zot	affected	wolfi	zot	—

Upstream advisory

GHSA-v6v8-xj6m-xwqh

Open SourceCoalition ESS < 30%MEDIUM2024-06-24

go-retryablehttp can leak basic auth credentials to log files

Affected products

Product	Status	Vendor	Package	Ecosystem
aactl	affected	wolfi	aactl	—
aactl	affected	chainguard	aactl	—
actions-runner-controller	affected	chainguard	actions-runner-controller	—
actions-runner-controller	affected	wolfi	actions-runner-controller	—
actions-runner-controller-fips	affected	chainguard	actions-runner-controller-fips	—
argo-cd-2.10	affected	wolfi	argo-cd-2.10	—
argo-cd-2.10	affected	chainguard	argo-cd-2.10	—
argo-cd-2.11	affected	wolfi	argo-cd-2.11	—
argo-cd-2.11	affected	chainguard	argo-cd-2.11	—
argo-cd-2.9	affected	wolfi	argo-cd-2.9	—
argo-cd-2.9	affected	chainguard	argo-cd-2.9	—
argo-cd-fips-2.10	affected	chainguard	argo-cd-fips-2.10	—
argo-cd-fips-2.11	affected	chainguard	argo-cd-fips-2.11	—
argo-cd-fips-2.8	affected	chainguard	argo-cd-fips-2.8	—
argo-cd-fips-2.9	affected	chainguard	argo-cd-fips-2.9	—
argo-events	affected	chainguard	argo-events	—
argo-events	affected	wolfi	argo-events	—
argo-events-fips	affected	chainguard	argo-events-fips	—
atlantis-fips	affected	chainguard	atlantis-fips	—
bank-vaults	affected	chainguard	bank-vaults	—
bank-vaults	affected	wolfi	bank-vaults	—
bank-vaults-fips	affected	chainguard	bank-vaults-fips	—
buildkitd	affected	chainguard	buildkitd	—
buildkitd	affected	wolfi	buildkitd	—
cert-manager-1.12	affected	wolfi	cert-manager-1.12	—
cert-manager-1.12	affected	chainguard	cert-manager-1.12	—
cert-manager-1.13	affected	chainguard	cert-manager-1.13	—
cert-manager-1.13	affected	wolfi	cert-manager-1.13	—
cert-manager-1.14	affected	wolfi	cert-manager-1.14	—
cert-manager-1.14	affected	chainguard	cert-manager-1.14	—
cert-manager-1.15	affected	chainguard	cert-manager-1.15	—
cert-manager-1.15	affected	wolfi	cert-manager-1.15	—
cert-manager-fips-1.12	affected	chainguard	cert-manager-fips-1.12	—
cert-manager-fips-1.13	affected	chainguard	cert-manager-fips-1.13	—
cert-manager-fips-1.14	affected	chainguard	cert-manager-fips-1.14	—
cert-manager-fips-1.15	affected	chainguard	cert-manager-fips-1.15	—
chainctl	affected	chainguard	chainctl	—
consul-1.15	affected	chainguard	consul-1.15	—
consul-1.15	affected	wolfi	consul-1.15	—
consul-1.16	affected	chainguard	consul-1.16	—
consul-1.16	affected	wolfi	consul-1.16	—
consul-1.17	affected	chainguard	consul-1.17	—
consul-1.17-fips	affected	chainguard	consul-1.17-fips	—
consul-1.18	affected	chainguard	consul-1.18	—
cosign	affected	chainguard	cosign	—
cosign	affected	wolfi	cosign	—
cosign-fips	affected	wolfi	cosign-fips	—
cosign-fips	affected	chainguard	cosign-fips	—
crossplane-provider-azure	affected	chainguard	crossplane-provider-azure	—
crossplane-provider-azure	affected	wolfi	crossplane-provider-azure	—
crossplane-provider-azure-authorization	affected	chainguard	crossplane-provider-azure-authorization	—
crossplane-provider-azure-authorization	affected	wolfi	crossplane-provider-azure-authorization	—
crossplane-provider-azure-managedidentity	affected	wolfi	crossplane-provider-azure-managedidentity	—
crossplane-provider-azure-managedidentity	affected	chainguard	crossplane-provider-azure-managedidentity	—
crossplane-provider-azure-sql	affected	wolfi	crossplane-provider-azure-sql	—
crossplane-provider-azure-sql	affected	chainguard	crossplane-provider-azure-sql	—
crossplane-provider-azure-storage	affected	chainguard	crossplane-provider-azure-storage	—
crossplane-provider-azure-storage	affected	wolfi	crossplane-provider-azure-storage	—
crossplane-provider-family-azure	affected	wolfi	crossplane-provider-family-azure	—
crossplane-provider-family-azure	affected	chainguard	crossplane-provider-family-azure	—
external-dns	affected	wolfi	external-dns	—
external-dns	affected	chainguard	external-dns	—
external-dns-fips	affected	chainguard	external-dns-fips	—
external-secrets-0.7	affected	chainguard	external-secrets-0.7	—
falcoctl	affected	wolfi	falcoctl	—
falcoctl	affected	chainguard	falcoctl	—
falcoctl-fips	affected	chainguard	falcoctl-fips	—
flux	affected	wolfi	flux	—
flux	affected	chainguard	flux	—
flux-helm-controller	affected	wolfi	flux-helm-controller	—
flux-helm-controller	affected	chainguard	flux-helm-controller	—
flux-image-automation-controller	affected	chainguard	flux-image-automation-controller	—
flux-image-automation-controller	affected	wolfi	flux-image-automation-controller	—
flux-image-reflector-controller	affected	chainguard	flux-image-reflector-controller	—
flux-image-reflector-controller	affected	wolfi	flux-image-reflector-controller	—
flux-kustomize-controller	affected	wolfi	flux-kustomize-controller	—
flux-kustomize-controller	affected	chainguard	flux-kustomize-controller	—
flux-notification-controller	affected	chainguard	flux-notification-controller	—
flux-notification-controller	affected	wolfi	flux-notification-controller	—
flux-source-controller	affected	wolfi	flux-source-controller	—
flux-source-controller	affected	chainguard	flux-source-controller	—
fulcio	affected	wolfi	fulcio	—
fulcio	affected	chainguard	fulcio	—
fulcio-fips	affected	chainguard	fulcio-fips	—
gh	affected	chainguard	gh	—
gh	affected	wolfi	gh	—
gitlab-kas	affected	wolfi	gitlab-kas	—
gitlab-kas	affected	chainguard	gitlab-kas	—
gitlab-runner	affected	wolfi	gitlab-runner	—
gitlab-runner	affected	chainguard	gitlab-runner	—
gitlab-runner-fips	affected	chainguard	gitlab-runner-fips	—
gitsign	affected	chainguard	gitsign	—
gitsign	affected	wolfi	gitsign	—
glab	affected	chainguard	glab	—
glab	affected	wolfi	glab	—
gomplate	affected	chainguard	gomplate	—
gomplate	affected	wolfi	gomplate	—
gomplate-fips	affected	chainguard	gomplate-fips	—
goreleaser	affected	chainguard	goreleaser	—
goreleaser	affected	wolfi	goreleaser	—
grafana-10.4	affected	chainguard	grafana-10.4	—
grafana-10.4	affected	wolfi	grafana-10.4	—
grafana-11.0	affected	chainguard	grafana-11.0	—
grafana-11.1	affected	chainguard	grafana-11.1	—
grafana-11.1	affected	wolfi	grafana-11.1	—
grafana-11.2	affected	chainguard	grafana-11.2	—
grafana-11.2	affected	wolfi	grafana-11.2	—
grafana-fips-10.3	affected	chainguard	grafana-fips-10.3	—
grafana-fips-10.4	affected	chainguard	grafana-fips-10.4	—
grafana-mimir	affected	chainguard	grafana-mimir	—
grafana-mimir	affected	wolfi	grafana-mimir	—
guac	affected	wolfi	guac	—
guac	affected	chainguard	guac	—
hashicorp/go-retryablehttp	affected	github.com	github.com/hashicorp/go-retryablehttp	—
influxd	affected	chainguard	influxd	—
influxd	affected	wolfi	influxd	—
k3d	affected	chainguard	k3d	—
k3d	affected	wolfi	k3d	—
k3s	affected	wolfi	k3s	—
k3s	affected	chainguard	k3s	—
kargo	affected	wolfi	kargo	—
kargo	affected	chainguard	kargo	—
keda-2.13	affected	chainguard	keda-2.13	—
keda-2.13	affected	wolfi	keda-2.13	—
keda-2.14	affected	wolfi	keda-2.14	—
keda-2.14	affected	chainguard	keda-2.14	—
keda-fips	affected	chainguard	keda-fips	—
ksops	affected	chainguard	ksops	—
ksops	affected	wolfi	ksops	—
kubernetes-event-exporter	affected	chainguard	kubernetes-event-exporter	—
kubernetes-event-exporter	affected	wolfi	kubernetes-event-exporter	—
kubescape	affected	chainguard	kubescape	—
kubescape	affected	wolfi	kubescape	—
kubevela	affected	wolfi	kubevela	—
kubevela	affected	chainguard	kubevela	—
kyverno	affected	chainguard	kyverno	—
kyverno	affected	wolfi	kyverno	—
kyverno-fips	affected	chainguard	kyverno-fips	—
kyverno-fips-1.11	affected	chainguard	kyverno-fips-1.11	—
loki-2.9	affected	chainguard	loki-2.9	—
loki-3.0	affected	wolfi	loki-3.0	—
loki-3.0	affected	chainguard	loki-3.0	—
neuvector-sigstore-interface	affected	wolfi	neuvector-sigstore-interface	—
neuvector-sigstore-interface	affected	chainguard	neuvector-sigstore-interface	—
neuvector-sigstore-interface-fips	affected	chainguard	neuvector-sigstore-interface-fips	—
nuclei	affected	wolfi	nuclei	—
nuclei	affected	chainguard	nuclei	—
opentelemetry-collector	affected	wolfi	opentelemetry-collector	—
opentelemetry-collector	affected	chainguard	opentelemetry-collector	—
opentelemetry-collector-contrib	affected	wolfi	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib	affected	chainguard	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib-fips	affected	chainguard	opentelemetry-collector-contrib-fips	—
opentelemetry-collector-fips	affected	chainguard	opentelemetry-collector-fips	—
opentofu	affected	chainguard	opentofu	—
opentofu	affected	wolfi	opentofu	—
opentofu-1.7	affected	wolfi	opentofu-1.7	—
opentofu-1.7	affected	chainguard	opentofu-1.7	—
policy-controller	affected	chainguard	policy-controller	—
policy-controller	affected	wolfi	policy-controller	—
policy-controller-fips	affected	chainguard	policy-controller-fips	—
prometheus-2.45	affected	chainguard	prometheus-2.45	—
prometheus-2.45	affected	wolfi	prometheus-2.45	—
prometheus-2.51	affected	wolfi	prometheus-2.51	—
prometheus-2.51	affected	chainguard	prometheus-2.51	—
prometheus-2.52	affected	wolfi	prometheus-2.52	—
prometheus-2.52	affected	chainguard	prometheus-2.52	—
prometheus-2.53	affected	chainguard	prometheus-2.53	—
prometheus-2.53	affected	wolfi	prometheus-2.53	—
prometheus-fips	affected	chainguard	prometheus-fips	—
prometheus-fips-2.45	affected	chainguard	prometheus-fips-2.45	—
prometheus-fips-2.53	affected	chainguard	prometheus-fips-2.53	—
pulumi	affected	chainguard	pulumi	—
pulumi	affected	wolfi	pulumi	—
pulumi-kubernetes-operator	affected	chainguard	pulumi-kubernetes-operator	—
pulumi-kubernetes-operator	affected	wolfi	pulumi-kubernetes-operator	—
rabbitmq-messaging-topology-operator	affected	wolfi	rabbitmq-messaging-topology-operator	—
rabbitmq-messaging-topology-operator	affected	chainguard	rabbitmq-messaging-topology-operator	—
rekor	affected	chainguard	rekor	—
rekor	affected	wolfi	rekor	—
rekor-fips	affected	chainguard	rekor-fips	—
rook	affected	chainguard	rook	—
rook	affected	wolfi	rook	—
scorecard	affected	chainguard	scorecard	—
scorecard	affected	wolfi	scorecard	—
sigstore-scaffolding	affected	chainguard	sigstore-scaffolding	—
sigstore-scaffolding	affected	wolfi	sigstore-scaffolding	—
sigstore-scaffolding-fips	affected	chainguard	sigstore-scaffolding-fips	—
skopeo	affected	chainguard	skopeo	—
skopeo	affected	wolfi	skopeo	—
slsa-verifier	affected	chainguard	slsa-verifier	—
slsa-verifier	affected	wolfi	slsa-verifier	—
snyk-cli	affected	wolfi	snyk-cli	—
snyk-cli	affected	chainguard	snyk-cli	—
sops	affected	chainguard	sops	—
sops	affected	wolfi	sops	—
spire-server	affected	chainguard	spire-server	—
spire-server	affected	wolfi	spire-server	—
spire-server-fips	affected	chainguard	spire-server-fips	—
src-fingerprint	affected	wolfi	src-fingerprint	—
src-fingerprint	affected	chainguard	src-fingerprint	—
src-fingerprint-fips	affected	chainguard	src-fingerprint-fips	—
step-ca	affected	wolfi	step-ca	—
step-ca	affected	chainguard	step-ca	—
step-ca-fips	affected	chainguard	step-ca-fips	—
tekton-chains	affected	wolfi	tekton-chains	—
tekton-chains	affected	chainguard	tekton-chains	—
tekton-chains-fips	affected	chainguard	tekton-chains-fips	—
tekton-pipelines	affected	wolfi	tekton-pipelines	—
tekton-pipelines	affected	chainguard	tekton-pipelines	—
tekton-pipelines-fips	affected	chainguard	tekton-pipelines-fips	—
terraform	affected	chainguard	terraform	—
terraform	affected	wolfi	terraform	—
terraform-fips-1.5	affected	chainguard	terraform-fips-1.5	—
terraform-provider-azurerm	affected	wolfi	terraform-provider-azurerm	—
terraform-provider-azurerm	affected	chainguard	terraform-provider-azurerm	—
terragrunt	affected	wolfi	terragrunt	—
terragrunt	affected	chainguard	terragrunt	—
timestamp-authority	affected	chainguard	timestamp-authority	—
timestamp-authority	affected	wolfi	timestamp-authority	—
timestamp-authority-fips	affected	chainguard	timestamp-authority-fips	—
tkn	affected	chainguard	tkn	—
tkn	affected	wolfi	tkn	—
tkn-fips	affected	chainguard	tkn-fips	—
vault-1.14	affected	wolfi	vault-1.14	—
vault-1.14	affected	chainguard	vault-1.14	—
vault-1.15	affected	chainguard	vault-1.15	—
vault-1.16	affected	chainguard	vault-1.16	—
vault-csi-provider	affected	wolfi	vault-csi-provider	—
vault-csi-provider	affected	chainguard	vault-csi-provider	—
vault-fips-1.14	affected	chainguard	vault-fips-1.14	—
vault-fips-1.15	affected	chainguard	vault-fips-1.15	—
vault-fips-1.16	affected	chainguard	vault-fips-1.16	—
vexctl	affected	chainguard	vexctl	—
vexctl	affected	wolfi	vexctl	—
zarf	affected	chainguard	zarf	—
zarf	affected	wolfi	zarf	—
zot	affected	chainguard	zot	—
zot	affected	wolfi	zot	—

Upstream advisory

GHSA-v6v8-xj6m-xwqh

GoogleCoalition ESS < 30%MEDIUM2024-06-24

go-retryablehttp can leak basic auth credentials to log files

Affected products

Product	Status	Vendor	Package	Ecosystem
hashicorp/go-retryablehttp	affected	github.com	github.com/hashicorp/go-retryablehttp	—

Upstream advisory

DEBIAN-CVE-2024-6104

Open SourceCoalition ESS < 30%MEDIUM2024-06-24

DEBIAN-CVE-2024-6104

Affected products

Product	Status	Vendor	Package	Ecosystem
golang-github-hashicorp-go-retryablehttp	affected	Debian:11	golang-github-hashicorp-go-retryablehttp	—
golang-github-hashicorp-go-retryablehttp	affected	Debian:12	golang-github-hashicorp-go-retryablehttp	—
golang-github-hashicorp-go-retryablehttp	affected	Debian:13	golang-github-hashicorp-go-retryablehttp	—
golang-github-hashicorp-go-retryablehttp	affected	Debian:14	golang-github-hashicorp-go-retryablehttp	—

Upstream advisory

CVE-2024-5654

GoogleCoalition ESS < 30%MEDIUM2024-06-08

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-289398990

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-308437315

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-308437315

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32905

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

In circ_read of link_device_memory_legacy.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitat...

CVEs:CVE-2024-32905

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32905

GoogleCoalition ESS < 30%CRITICAL2024-06-11

CVEs:CVE-2024-32905

Upstream advisory

PUB-A-321714444

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-321714444

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32913

GoogleCoalition ESS < 30%CRITICAL2024-06-11

CVEs:CVE-2024-32913

Upstream advisory

CVE-2024-32913

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

In wl_notify_rx_mgmt_frame of wl_cfg80211.c, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32913

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-322820125

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-322820125

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2023-52177

GoogleCoalition ESS < 30%MEDIUM2024-06-12

CVEs:CVE-2023-52177

Upstream advisory

CVE-2023-52177

GoogleCoalition ESS < 30%MEDIUM2024-06-12

Missing Authorization vulnerability in SoftLab Integrate Google Drive.This issue affects Integrate Google Drive: from n/a through 1.3.3.

CVEs:CVE-2023-52177

Affected products

Product	Status	Vendor	Package	Ecosystem
integrate_google_drive	affected	softlabbd	—	—

Upstream advisory

CVE-2024-32925

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32925

Upstream advisory

CVE-2024-32925

Open SourceCoalition ESS < 30%HIGH2024-06-11

In dhd_prot_txstatus_process of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32925

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-322820391

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-322820391

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-29786

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-29786

Upstream advisory

CVE-2024-29786

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

In pktproc_fill_data_addr_without_bm of link_rx_pktproc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed fo...

CVEs:CVE-2024-29786

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-321941700

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-321941700

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-20880

Open SourceCoalition ESS < 30%CRITICAL2024-06-03

Stack-based buffer overflow vulnerability in bootloader prior to SMR Jun-2024 Release 1 allows physical attackers to overwrite memory.

CVEs:CVE-2024-20880

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	samsung	—	—

Upstream advisory

CVE-2024-20880

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-20880

Upstream advisory

CVE-2024-32902

Open SourceCoalition ESS < 30%HIGH2024-06-11

Remote prevention of access to cellular service with no user interaction (for example, crashing the cellular radio service with a malformed packet)

CVEs:CVE-2024-32902

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32902

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32902

Upstream advisory

PUB-A-299758712

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-299758712

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-20074

Open SourceCoalition ESS < 30%HIGH2024-06-03

In dmc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08668110; Issue ID: ...

CVEs:CVE-2024-20074

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-20074

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-20074

Upstream advisory

CVE-2024-20882

Open SourceCoalition ESS < 30%MEDIUM2024-06-03

Out-of-bounds read vulnerability in bootloader prior to SMR June-2024 Release 1 allows physical attackers to arbitrary data access.

CVEs:CVE-2024-20882

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	samsung	—	—

Upstream advisory

CVE-2024-20882

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-20882

Upstream advisory

PUB-A-314786192

GoogleCoalition ESS < 30%2024-06-01

PUB-A-314786192

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32895

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32895

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32895

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32895

Upstream advisory

PUB-A-329229928

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-329229928

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-20877

GoogleCoalition ESS < 30%HIGH2024-06-03

GoogleCoalition ESS < 30%MEDIUM2024-06-08

GoogleCoalition ESS < 30%NONE2024-06-01

PUB-A-315969497

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32893

Open SourceCoalition ESS < 30%HIGH2024-06-11

In _s5e9865_mif_set_rate of exynos_dvfs.c, there is a possible out of bounds read due to improper casting. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32893

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32893

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32893

Upstream advisory

PUB-A-322223643

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-322223643

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32900

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32900

Upstream advisory

CVE-2024-32900

Open SourceCoalition ESS < 30%CRITICAL2024-06-11

In lwis_fence_signal of lwis_debug.c, there is a possible Use after Free due to improper locking. This could lead to local escalation of privilege from hal_camera_default SELinux label with no additional execution privileges needed. User interaction is...

CVEs:CVE-2024-32900

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-322327063

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-322327063

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32909

Open SourceCoalition ESS < 30%HIGH2024-06-11

In handle_msg of main.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32909

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32909

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32909

Upstream advisory

PUB-A-326279145

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-326279145

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-20874

GoogleCoalition ESS < 30%HIGH2024-06-03

GoogleCoalition ESS < 30%MEDIUM2024-06-03

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-20883

Upstream advisory

CVE-2024-20883

Open SourceCoalition ESS < 30%HIGH2024-06-03

Incorrect use of privileged API vulnerability in registerBatteryStatsCallback in BatteryStatsService prior to SMR Jun-2024 Release 1 allows local attackers to use privileged API.

CVEs:CVE-2024-20883

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	samsung	—	—

Upstream advisory

CVE-2024-20884

GoogleCoalition ESS < 30%MEDIUM2024-06-03

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-32915

Upstream advisory

CVE-2024-32915

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is no...

CVEs:CVE-2024-32915

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-319145450

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-319145450

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-20885

GoogleCoalition ESS < 30%MEDIUM2024-06-03

GoogleCoalition ESS < 30%HIGH2024-06-03

CVEs:CVE-2024-31326

Upstream advisory

CVE-2024-31326

Open SourceCoalition ESS < 30%HIGH2024-06-03

In multiple locations, there is a possible way in which policy migration code will never be executed due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is ...

CVEs:CVE-2024-31326

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

GO-2024-2808

Open SourceCoalition ESS < 30%MEDIUM2024-06-05

CSRF in firebase-tools emulator suite in github.com/firebase/firebase-tools

Affected products

Product	Status	Vendor	Package	Ecosystem
firebase/firebase-tools	affected	github.com	github.com/firebase/firebase-tools	—

Upstream advisory

CVE-2023-21113

GoogleCoalition ESS < 30%HIGH2024-06-03

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-31315

Upstream advisory

CVE-2024-31315

Open SourceCoalition ESS < 30%HIGH2024-06-03

In multiple functions of ManagedServices.java, there is a possible way to hide an app with notification access in the Device & app notifications settings due to improper input validation. This could lead to local escalation of privilege with no additio...

CVEs:CVE-2024-31315

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-31310

GoogleCoalition ESS < 30%HIGH2024-06-03

Open SourceCoalition ESS < 30%2024-06-28

Improper trust check in Bazel Build intellij plugin in github.com/bazelbuild/intellij

Affected products

Product	Status	Vendor	Package	Ecosystem
bazelbuild/intellij	affected	github.com	github.com/bazelbuild/intellij	—

Upstream advisory

CVE-2024-5899

GoogleCoalition ESS < 30%LOW2024-06-18

CVEs:CVE-2024-5899

Upstream advisory

CVE-2024-5899

GoogleCoalition ESS < 30%2024-06-18

When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls ProjectManager.getInstance().createProject. This method, as its name suggests is intended to create a new project, not to import an existing one. We recommend upgrading to version 2024.06.04.0.2 or beyond for the IntelliJ, CLion and Android Studio Bazel plugins.

CVEs:CVE-2024-5899

Upstream advisory

CVE-2024-5899

Open SourceCoalition ESS < 30%LOW2024-06-18

When Bazel Plugin in intellij imports a project (either using "import project" or "Auto import") the dialog for trusting the project is not displayed. This comes from the fact that both call the method ProjectBuilder.createProject which then calls Pr...

CVEs:CVE-2024-5899

Affected products

Product	Status	Vendor	Package	Ecosystem
bazel_for_android_studio	affected	google	—	—
bazel_for_clion	affected	google	—	—
bazel_for_intellij	affected	google	—	—

Upstream advisory

CVE-2024-32923

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-32923

Upstream advisory

CVE-2024-32923

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

there is a possible cellular denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32923

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-23698

GoogleCoalition ESS < 30%HIGH2024-06-03

CVEs:CVE-2024-23698

Upstream advisory

CVE-2024-23698

Open SourceCoalition ESS < 30%HIGH2024-06-03

In RGXFWChangeOSidPriority of rgxfwutils.c, there is a possible arbitrary code execution due to a missing bounds check. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is n...

CVEs:CVE-2024-23698

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-31318

GoogleCoalition ESS < 30%HIGH2024-06-03

CVEs:CVE-2024-31318

Upstream advisory

CVE-2024-31318

Open SourceCoalition ESS < 30%HIGH2024-06-03

In CompanionDeviceManagerService.java, there is a possible way to pair a companion device without user acceptance due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User i...

CVEs:CVE-2024-31318

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

ASB-A-331239675

GoogleCoalition ESS < 30%HIGH2024-06-01

ASB-A-331239675

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-306382097

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-306382097

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-23695

Open SourceCoalition ESS < 30%HIGH2024-06-03

In CacheOpPMRExec of cache_km.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for explo...

CVEs:CVE-2024-23695

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-23695

GoogleCoalition ESS < 30%HIGH2024-06-03

CVEs:CVE-2024-23695

Upstream advisory

CVE-2024-23696

Open SourceCoalition ESS < 30%HIGH2024-06-03

In RGXCreateZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for...

CVEs:CVE-2024-23696

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-23696

GoogleCoalition ESS < 30%HIGH2024-06-03

CVEs:CVE-2024-23696

Upstream advisory

CVE-2024-23697

GoogleCoalition ESS < 30%MEDIUM2024-06-03

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-23711

Open SourceCoalition ESS < 30%HIGH2024-06-03

In DevmemXIntUnreserveRange of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User intera...

CVEs:CVE-2024-23711

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-23711

GoogleCoalition ESS < 30%HIGH2024-06-03

CVEs:CVE-2024-23711

Upstream advisory

CVE-2024-31322

Open SourceCoalition ESS < 30%HIGH2024-06-03

In updateServicesLocked of AccessibilityManagerService.java, there is a possible way for an app to be hidden from the Setting while retaining Accessibility Service due to improper input validation. This could lead to local escalation of privilege with...

CVEs:CVE-2024-31322

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-31322

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-31322

Upstream advisory

ASB-A-332571891

GoogleCoalition ESS < 30%HIGH2024-06-01

ASB-A-332571891

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-31313

Open SourceCoalition ESS < 30%HIGH2024-06-03

In availableToWriteBytes of MessageQueueBase.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed fo...

CVEs:CVE-2024-31313

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-31313

GoogleCoalition ESS < 30%HIGH2024-06-03

CVEs:CVE-2024-31313

Upstream advisory

PUB-A-314786500

GoogleCoalition ESS < 30%2024-06-01

PUB-A-314786500

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-314786525

GoogleCoalition ESS < 30%2024-06-01

PUB-A-314786525

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-31312

Open SourceCoalition ESS < 30%MEDIUM2024-06-03

In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played media with no additional execution privileges needed. User interaction is not needed for expl...

CVEs:CVE-2024-31312

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-31312

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-31312

Upstream advisory

CVE-2024-31311

Open SourceCoalition ESS < 30%HIGH2024-06-03

In increment_annotation_count of stats_event.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for e...

CVEs:CVE-2024-31311

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-31311

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-31311

Upstream advisory

CVE-2024-20065

Open SourceCoalition ESS < 30%MEDIUM2024-06-03

In telephony, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS0...

CVEs:CVE-2024-20065

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-20065

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-20065

Upstream advisory

ASB-A-332178746

GoogleCoalition ESS < 30%2024-06-01

ASB-A-332178746

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32906

Open SourceCoalition ESS < 30%HIGH2024-06-11

In AcvpOnMessage of avcp.cpp, there is a possible EOP due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32906

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32906

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32906

Upstream advisory

CVE-2024-32908

Open SourceCoalition ESS < 30%HIGH2024-06-11

In sec_media_protect of media.c, there is a possible permission bypass due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32908

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32908

GoogleCoalition ESS < 30%HIGH2024-06-11

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32903

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32903

Upstream advisory

CVE-2024-32903

Open SourceCoalition ESS < 30%HIGH2024-06-11

In prepare_response_locked of lwis_transaction.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed ...

CVEs:CVE-2024-32903

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-322327963

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-322327963

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32891

Open SourceCoalition ESS < 30%HIGH2024-06-11

In sec_media_unprotect of media.c, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32891

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32891

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32891

Upstream advisory

PUB-A-313509045

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-313509045

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32918

Open SourceCoalition ESS < 30%HIGH2024-06-11

Permission Bypass allowing attackers to disable HDCP 2.2 encryption by not completing the HDCP Key Exchange initialization steps

CVEs:CVE-2024-32918

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32918

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-32918

Upstream advisory

CVE-2024-20075

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-20075

Upstream advisory

CVE-2024-20075

Open SourceCoalition ESS < 30%HIGH2024-06-03

In eemgpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08713302; Issue I...

CVEs:CVE-2024-20075

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-327233647

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-327233647

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-29780

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

In hwbcc_ns_deprivilege of trusty/user/base/lib/hwbcc/client/hwbcc.c, there is a possible uninitialized stack data disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. Use...

CVEs:CVE-2024-29780

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-29780

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-29780

Upstream advisory

CVE-2024-29785

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

In aur_get_state of aurora.c, there is a possible information disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-29785

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-29785

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-29785

Upstream advisory

CVE-2024-32907

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32907

Upstream advisory

CVE-2024-32907

Open SourceCoalition ESS < 30%HIGH2024-06-11

In memcall_add of memlog.c, there is a possible buffer overflow due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32907

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-31327

GoogleCoalition ESS < 30%MEDIUM2024-06-03

CVEs:CVE-2024-31327

Upstream advisory

CVE-2024-31327

Open SourceCoalition ESS < 30%HIGH2024-06-03

In multiple functions of MessageQueueBase.h, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-31327

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-319706866

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-319706866

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-322223561

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-322223561

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-324894466

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-324894466

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-29784

Open SourceCoalition ESS < 30%HIGH2024-06-11

In prepare_response of lwis_periodic_io.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat...

CVEs:CVE-2024-29784

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-29784

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-29784

Upstream advisory

CVE-2024-32901

Open SourceCoalition ESS < 30%HIGH2024-06-11

In v4l2_smfc_qbuf of smfc-v4l2-ioctls.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploita...

CVEs:CVE-2024-32901

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32901

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32901

Upstream advisory

PUB-A-322065862

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-322065862

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-322483069

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-322483069

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32919

GoogleCoalition ESS < 30%HIGH2024-06-11

GoogleCoalition ESS < 30%NONE2024-06-01

PUB-A-301657544

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-322327261

GoogleCoalition ESS < 30%NONE2024-06-01

PUB-A-322327261

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-29787

Open SourceCoalition ESS < 30%HIGH2024-06-11

In lwis_process_transactions_in_queue of lwis_transaction.c, there is a possible use after free due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVEs:CVE-2024-29787

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-29787

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-29787

Upstream advisory

CVE-2024-32899

Open SourceCoalition ESS < 30%HIGH2024-06-11

In gpu_pm_power_off_top_nolock of pixel_gpu_power.c, there is a possible compromise of protected memory due to a race condition. This could lead to local escalation of privilege to TEE with no additional execution privileges needed. User interaction is...

CVEs:CVE-2024-32899

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32899

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32899

Upstream advisory

CVE-2024-32916

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-32916

Upstream advisory

CVE-2024-32916

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

In fvp_freq_histogram_init of fvp.c, there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

CVEs:CVE-2024-32916

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32917

GoogleCoalition ESS < 30%HIGH2024-06-11

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-32898

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

In ProtocolCellIdentityParserV4::Parse() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is no...

CVEs:CVE-2024-32898

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32898

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-32898

Upstream advisory

CVE-2024-32904

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

In ProtocolVsimOperationAdapter() of protocolvsimadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User Interaction is not need...

CVEs:CVE-2024-32904

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32904

GoogleCoalition ESS < 30%MEDIUM2024-06-11

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-315167037

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-315167037

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-319142480

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-319142480

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-319146278

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-319146278

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-322223921

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-322223921

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-322224117

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-322224117

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-324894484

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-324894484

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

CVE-2024-29778

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

In ProtocolPsDedicatedBearInfoAdapter::processQosSession of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User in...

CVEs:CVE-2024-29778

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-29778

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-29778

Upstream advisory

CVE-2024-32912

GoogleCoalition ESS < 30%MEDIUM2024-06-11

CVEs:CVE-2024-32912

Upstream advisory

CVE-2024-32912

Open SourceCoalition ESS < 30%MEDIUM2024-06-11

there is a possible persistent Denial of Service due to test/debugging code left in a production build. This could lead to local denial of service of impaired use of the device with no additional execution privileges needed. User interaction is not nee...

CVEs:CVE-2024-32912

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

CVE-2024-32921

GoogleCoalition ESS < 30%HIGH2024-06-11

CVEs:CVE-2024-32921

Upstream advisory

CVE-2024-32921

Open SourceCoalition ESS < 30%HIGH2024-06-11

In lwis_initialize_transaction_fences of lwis_fence.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...

CVEs:CVE-2024-32921

Affected products

Product	Status	Vendor	Package	Ecosystem
android	affected	google	—	—

Upstream advisory

PUB-A-319099367

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-319099367

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-319142496

GoogleCoalition ESS < 30%MEDIUM2024-06-01

PUB-A-319142496

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

PUB-A-322326009

GoogleCoalition ESS < 30%HIGH2024-06-01

PUB-A-322326009

Affected products

Product	Status	Vendor	Package	Ecosystem
:unknown:	affected	Android	:unknown:	—

Upstream advisory

openSUSE-SU-2024:10324-1

Open SourceEPSS <= 49%2024-06-15

android-tools-5.1.1_r8-3.5 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
android-tools	affected	openSUSE:Tumbleweed	android-tools	—

Upstream advisory

SUSE-RU-2024:1637-2

Open SourceEPSS <= 49%HIGH2024-06-20

Recommended update for google-cloud SDK

Affected products

Product	Status	Vendor	Package	Ecosystem
libcrc32c	affected	openSUSE:Leap 15.6	libcrc32c	—
libcrc32c	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	libcrc32c	—
python-apipkg	affected	openSUSE:Leap 15.6	python-apipkg	—
python-apipkg	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-apipkg	—
python-cachetools	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-cachetools	—
python-cachetools	affected	openSUSE:Leap 15.6	python-cachetools	—
python-certifi	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-certifi	—
python-certifi	affected	openSUSE:Leap 15.6	python-certifi	—
python-cffi	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-cffi	—
python-cffi	affected	openSUSE:Leap 15.6	python-cffi	—
python-charset-normalizer	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-charset-normalizer	—
python-charset-normalizer	affected	openSUSE:Leap 15.6	python-charset-normalizer	—
python-google-api-core	affected	openSUSE:Leap 15.6	python-google-api-core	—
python-google-api-core	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-api-core	—
python-googleapis-common-protos	affected	openSUSE:Leap 15.6	python-googleapis-common-protos	—
python-googleapis-common-protos	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-googleapis-common-protos	—
python-google-auth	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-auth	—
python-google-auth	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-google-auth	—
python-google-auth	affected	openSUSE:Leap 15.6	python-google-auth	—
python-google-cloud-appengine-logging	affected	openSUSE:Leap 15.6	python-google-cloud-appengine-logging	—
python-google-cloud-appengine-logging	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-appengine-logging	—
python-google-cloud-artifact-registry	affected	openSUSE:Leap 15.6	python-google-cloud-artifact-registry	—
python-google-cloud-artifact-registry	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-artifact-registry	—
python-google-cloud-audit-log	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-audit-log	—
python-google-cloud-audit-log	affected	openSUSE:Leap 15.6	python-google-cloud-audit-log	—
python-google-cloud-build	affected	openSUSE:Leap 15.6	python-google-cloud-build	—
python-google-cloud-build	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-build	—
python-google-cloud-compute	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-compute	—
python-google-cloud-compute	affected	openSUSE:Leap 15.6	python-google-cloud-compute	—
python-google-cloud-core	affected	openSUSE:Leap 15.6	python-google-cloud-core	—
python-google-cloud-core	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-core	—
python-google-cloud-dns	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-dns	—
python-google-cloud-dns	affected	openSUSE:Leap 15.6	python-google-cloud-dns	—
python-google-cloud-domains	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-domains	—
python-google-cloud-domains	affected	openSUSE:Leap 15.6	python-google-cloud-domains	—
python-google-cloud-iam	affected	openSUSE:Leap 15.6	python-google-cloud-iam	—
python-google-cloud-iam	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-iam	—
python-google-cloud-kms	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-kms	—
python-google-cloud-kms	affected	openSUSE:Leap 15.6	python-google-cloud-kms	—
python-google-cloud-kms-inventory	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-kms-inventory	—
python-google-cloud-kms-inventory	affected	openSUSE:Leap 15.6	python-google-cloud-kms-inventory	—
python-google-cloud-logging	affected	openSUSE:Leap 15.6	python-google-cloud-logging	—
python-google-cloud-logging	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-logging	—
python-google-cloud-run	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-run	—
python-google-cloud-run	affected	openSUSE:Leap 15.6	python-google-cloud-run	—
python-google-cloud-secret-manager	affected	openSUSE:Leap 15.6	python-google-cloud-secret-manager	—
python-google-cloud-secret-manager	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-secret-manager	—
python-google-cloud-service-directory	affected	openSUSE:Leap 15.6	python-google-cloud-service-directory	—
python-google-cloud-service-directory	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-service-directory	—
python-google-cloud-spanner	affected	openSUSE:Leap 15.6	python-google-cloud-spanner	—
python-google-cloud-spanner	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-spanner	—
python-google-cloud-storage	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-storage	—
python-google-cloud-storage	affected	openSUSE:Leap 15.6	python-google-cloud-storage	—
python-google-cloud-vpc-access	affected	openSUSE:Leap 15.6	python-google-cloud-vpc-access	—
python-google-cloud-vpc-access	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-cloud-vpc-access	—
python-google-crc32c	affected	openSUSE:Leap 15.6	python-google-crc32c	—
python-google-crc32c	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-crc32c	—
python-google-resumable-media	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-google-resumable-media	—
python-google-resumable-media	affected	openSUSE:Leap 15.6	python-google-resumable-media	—
python-grpc-google-iam-v1	affected	openSUSE:Leap 15.6	python-grpc-google-iam-v1	—
python-grpc-google-iam-v1	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-grpc-google-iam-v1	—
python-grpcio-status	affected	openSUSE:Leap 15.6	python-grpcio-status	—
python-grpcio-status	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-grpcio-status	—
python-idna	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-idna	—
python-idna	affected	openSUSE:Leap 15.6	python-idna	—
python-iniconfig	affected	openSUSE:Leap 15.6	python-iniconfig	—
python-iniconfig	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-iniconfig	—
python-proto-plus	affected	openSUSE:Leap 15.6	python-proto-plus	—
python-proto-plus	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-proto-plus	—
python-py	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-py	—
python-py	affected	openSUSE:Leap 15.6	python-py	—
python-pyasn1	affected	openSUSE:Leap 15.6	python-pyasn1	—
python-pyasn1	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-pyasn1	—
python-pyasn1-modules	affected	openSUSE:Leap 15.6	python-pyasn1-modules	—
python-pyasn1-modules	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-pyasn1-modules	—
python-pycparser	affected	openSUSE:Leap 15.6	python-pycparser	—
python-pycparser	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-pycparser	—
python-pyOpenSSL	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-pyOpenSSL	—
python-pyOpenSSL	affected	openSUSE:Leap 15.6	python-pyOpenSSL	—
python-pytz	affected	openSUSE:Leap 15.6	python-pytz	—
python-pytz	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-pytz	—
python-requests	affected	openSUSE:Leap 15.6	python-requests	—
python-requests	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-requests	—
python-rsa	affected	openSUSE:Leap 15.6	python-rsa	—
python-rsa	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-rsa	—
python-setuptools	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-setuptools	—
python-setuptools	affected	openSUSE:Leap 15.6	python-setuptools	—
python-setuptools-wheel	affected	openSUSE:Leap 15.6	python-setuptools-wheel	—
python-sqlparse	affected	SUSE:Linux Enterprise Module for Public Cloud 15 SP6	python-sqlparse	—
python-sqlparse	affected	openSUSE:Leap 15.6	python-sqlparse	—
python-urllib3	affected	SUSE:Linux Enterprise Module for Python 3 15 SP6	python-urllib3	—
python-urllib3	affected	openSUSE:Leap 15.6	python-urllib3	—

Upstream advisory

GO-2024-2923

Open SourceAll remaining2024-06-20

Vulnerabilities with the k8sGPT in github.com/k8sgpt-ai/k8sgpt

Affected products

Product	Status	Vendor	Package	Ecosystem
k8sgpt-ai/k8sgpt	affected	github.com	github.com/k8sgpt-ai/k8sgpt	—

Upstream advisory

openSUSE-SU-2024:12948-1

Open SourceAll remaining2024-06-15

ungoogled-chromium-113.0.5672.92-1.1 on GA media

Affected products

Product	Status	Vendor	Package	Ecosystem
chromium	affected	openSUSE:Tumbleweed	chromium	—

Upstream advisory

GO-2024-2911

Open SourceAll remaining2024-06-14

go-grpc-compression has a zstd decompression bombing vulnerability in github.com/mostynb/go-grpc-compression

Affected products

Product	Status	Vendor	Package	Ecosystem
mostynb/go-grpc-compression	affected	github.com	github.com/mostynb/go-grpc-compression	—
opentelemetry-collector	affected	wolfi	opentelemetry-collector	—
opentelemetry-collector	affected	chainguard	opentelemetry-collector	—
opentelemetry-collector-contrib	affected	chainguard	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib	affected	wolfi	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib-fips	affected	chainguard	opentelemetry-collector-contrib-fips	—
opentelemetry-collector-fips	affected	chainguard	opentelemetry-collector-fips	—
spicedb	affected	wolfi	spicedb	—
spicedb	affected	chainguard	spicedb	—
tempo	affected	wolfi	tempo	—
tempo	affected	chainguard	tempo	—

Upstream advisory

GHSA-85rg-8m6h-825p

Open SourceAll remainingHIGH2024-06-13

Vulnerabilities with the k8sGPT

Affected products

Product	Status	Vendor	Package	Ecosystem
github.com/k8sgpt-ai/k8sgpt	affected	Go	github.com/k8sgpt-ai/k8sgpt	—
k8sgpt-ai/k8sgpt	affected	github.com	github.com/k8sgpt-ai/k8sgpt	—
k8sgpt-ai/k8sgpt	affected	github.com	github.com/k8sgpt-ai/k8sgpt	—

Upstream advisory

GHSA-85rg-8m6h-825p

Open SourceAll remaining2024-06-13

Vulnerabilities with the k8sGPT

Affected products

Product	Status	Vendor	Package	Ecosystem
k8sgpt-ai/k8sgpt	affected	github.com	github.com/k8sgpt-ai/k8sgpt	—

Upstream advisory

GHSA-87m9-rv8p-rgmg

Open SourceAll remainingHIGH2024-06-10

go-grpc-compression has a zstd decompression bombing vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
mostynb/go-grpc-compression	affected	github.com	github.com/mostynb/go-grpc-compression	—

Upstream advisory

GHSA-87m9-rv8p-rgmg

Open SourceAll remainingHIGH2024-06-10

go-grpc-compression has a zstd decompression bombing vulnerability

Affected products

Product	Status	Vendor	Package	Ecosystem
datadog-agent	affected	chainguard	datadog-agent	—
datadog-agent	affected	wolfi	datadog-agent	—
datadog-agent-fips	affected	chainguard	datadog-agent-fips	—
github.com/mostynb/go-grpc-compression	affected	Go	github.com/mostynb/go-grpc-compression	—
mostynb/go-grpc-compression	affected	github.com	github.com/mostynb/go-grpc-compression	—
mostynb/go-grpc-compression	affected	github.com	github.com/mostynb/go-grpc-compression	—
opentelemetry-collector	affected	wolfi	opentelemetry-collector	—
opentelemetry-collector	affected	chainguard	opentelemetry-collector	—
opentelemetry-collector-contrib	affected	chainguard	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib	affected	wolfi	opentelemetry-collector-contrib	—
opentelemetry-collector-contrib-fips	affected	chainguard	opentelemetry-collector-contrib-fips	—
opentelemetry-collector-fips	affected	chainguard	opentelemetry-collector-fips	—
spicedb	affected	chainguard	spicedb	—
spicedb	affected	wolfi	spicedb	—
tempo	affected	chainguard	tempo	—
tempo	affected	wolfi	tempo	—
tempo-2.3	affected	chainguard	tempo-2.3	—
tempo-fips	affected	chainguard	tempo-fips	—

Upstream advisory

What would you fix first?

Advisories

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products

Affected products