CVE-2024-24790
golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD, Bitnami, CBL-Mariner, Photon OS. Rated lower by Amazon (high), Red Hat (medium), AlmaLinux (medium), Bottlerocket (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
The various Is methods (IsPrivate, IsLoopback, etc) did not work as expected for IPv4-mapped IPv6 addresses, returning false for addresses which would return true in their traditional IPv4 forms.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | golang | 1.21.11, 1.22.4 |
| CBL-Mariner 2.0 | golang, msft-golang | 0:1.18.8-4.cm2 and 1 more |
| Photon OS 3.0 | go | 1.20.14-1.ph3 |
| Photon OS 4.0 | go | 1.21.11-1.ph4 |
| Photon OS 5.0 | go | 1.21.11-1.ph5 |
| alma 8 | go-toolset:rhel8::delve, go-toolset:rhel8::go-toolset, go-toolset:rhel8::golang and 7 more | 1.21.2-3.module_el8.10.0+3760+4dd778f9 and 2 more |
| alma 9 | git-lfs, go-toolset, golang and 7 more | 3.6.1-1.el9 and 2 more |
| alpine 3.20 | go | 1.22.4-r0 |
| alpine 3.21 | go | 1.22.4-r0 |
| alpine 3.22 | go | 1.22.4-r0 |
| alpine 3.23 | go | 1.22.4-r0 |
| alpine 3.24 | go | 1.22.4-r0 |
Show all 1,122 entries from 54 sources
| Source | Package | Fixed in |
|---|---|---|
| bitnami::Bitnami Vulnerability Database | golang | 1.21.11, 1.22.4 |
| CBL-Mariner 2.0 | golang | 0:1.18.8-4.cm2 |
| CBL-Mariner 2.0 | msft-golang | 0:1.21.6-1.cm2 |
| Photon OS 3.0 | go | 1.20.14-1.ph3 |
| Photon OS 4.0 | go | 1.21.11-1.ph4 |
| Photon OS 5.0 | go | 1.21.11-1.ph5 |
| alma 8 | go-toolset:rhel8::delve | 1.21.2-3.module_el8.10.0+3760+4dd778f9 |
| alma 8 | go-toolset:rhel8::go-toolset | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
| alma 8 | go-toolset:rhel8::golang | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
| alma 8 | go-toolset:rhel8::golang-bin | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
| alma 8 | go-toolset:rhel8::golang-docs | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
| alma 8 | go-toolset:rhel8::golang-misc | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
| alma 8 | go-toolset:rhel8::golang-src | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
| alma 8 | go-toolset:rhel8::golang-tests | 1.21.11-1.module_el8.10.0+3863+bb82df69 |
| alma 8 | grafana | 9.2.10-17.el8_10 |
| alma 8 | grafana-selinux | 9.2.10-17.el8_10 |
| alma 9 | git-lfs | 3.6.1-1.el9 |
| alma 9 | go-toolset | 1.21.11-1.el9_4 |
| alma 9 | golang | 1.21.11-1.el9_4 |
| alma 9 | golang-bin | 1.21.11-1.el9_4 |
| alma 9 | golang-docs | 1.21.11-1.el9_4 |
| alma 9 | golang-misc | 1.21.11-1.el9_4 |
| alma 9 | golang-src | 1.21.11-1.el9_4 |
| alma 9 | golang-tests | 1.21.11-1.el9_4 |
| alma 9 | grafana | 10.2.6-4.el9 |
| alma 9 | grafana-selinux | 10.2.6-4.el9 |
| alpine 3.20 | go | 1.22.4-r0 |
| alpine 3.21 | go | 1.22.4-r0 |
| alpine 3.22 | go | 1.22.4-r0 |
| alpine 3.23 | go | 1.22.4-r0 |
| alpine 3.24 | go | 1.22.4-r0 |
| alpine edge | go | 1.22.4-r0 |
| amazon linux 1 | amazon-ssm-agent | 3.3.859.0-1.amzn1 |
| amazon linux 2 | amazon-ssm-agent | 3.3.859.0-1.amzn2 |
| amazon linux 2 | cri-tools | 1.32.0-1.amzn2.0.1 |
| amazon linux 2 | cri-tools-debuginfo | 1.32.0-1.amzn2.0.1 |
| amazon linux 2 | golang | 1.22.4-1.amzn2.0.1 |
| amazon linux 2 | golang-bin | 1.22.4-1.amzn2.0.1 |
| amazon linux 2 | golang-docs | 1.22.4-1.amzn2.0.1 |
| amazon linux 2 | golang-misc | 1.22.4-1.amzn2.0.1 |
| amazon linux 2 | golang-shared | 1.22.4-1.amzn2.0.1 |
| amazon linux 2 | golang-src | 1.22.4-1.amzn2.0.1 |
| amazon linux 2 | golang-tests | 1.22.4-1.amzn2.0.1 |
| amazon linux 2 | nerdctl | 1.7.6-1.amzn2.0.1 |
| amazon linux 2 | nerdctl-debuginfo | 1.7.6-1.amzn2.0.1 |
| amazon linux 2023 | amazon-ecr-credential-helper | 0.9.0-1.amzn2023 |
| amazon linux 2023 | amazon-ssm-agent | 3.3.859.0-1.amzn2023 |
| amazon linux 2023 | cni-plugins | 1.7.1-1.amzn2023.0.1 |
| amazon linux 2023 | cni-plugins-debuginfo | 1.7.1-1.amzn2023.0.1 |
| amazon linux 2023 | cni-plugins-debugsource | 1.7.1-1.amzn2023.0.1 |
| amazon linux 2023 | containerd | 1.7.20-1.amzn2023.0.1 |
| amazon linux 2023 | containerd-debuginfo | 1.7.20-1.amzn2023.0.1 |
| amazon linux 2023 | containerd-debugsource | 1.7.20-1.amzn2023.0.1 |
| amazon linux 2023 | containerd-stress | 1.7.20-1.amzn2023.0.1 |
| amazon linux 2023 | containerd-stress-debuginfo | 1.7.20-1.amzn2023.0.1 |
| amazon linux 2023 | docker | 25.0.3-1.amzn2023.0.2 |
| amazon linux 2023 | docker-debuginfo | 25.0.3-1.amzn2023.0.2 |
| amazon linux 2023 | docker-debugsource | 25.0.3-1.amzn2023.0.2 |
| amazon linux 2023 | golang | 1.22.4-1.amzn2023.0.1 |
| amazon linux 2023 | golang-bin | 1.22.4-1.amzn2023.0.1 |
| amazon linux 2023 | golang-docs | 1.22.4-1.amzn2023.0.1 |
| amazon linux 2023 | golang-misc | 1.22.4-1.amzn2023.0.1 |
| amazon linux 2023 | golang-shared | 1.22.4-1.amzn2023.0.1 |
| amazon linux 2023 | golang-src | 1.22.4-1.amzn2023.0.1 |
| amazon linux 2023 | golang-tests | 1.22.4-1.amzn2023.0.1 |
| amazon linux 2023 | runc | 1.1.13-1.amzn2023.0.1 |
| amazon linux 2023 | runc-debuginfo | 1.1.13-1.amzn2023.0.1 |
| amazon linux 2023 | runc-debugsource | 1.1.13-1.amzn2023.0.1 |
| bottlerocket | amazon-ssm-agent | 2.9.0-863d6d3b |
| chainguard | aactl | 0.4.12-r13 |
| chainguard | actions-runner-controller | 0.9.2-r1 |
| chainguard | actions-runner-controller-fips | 0.9.2-r2 |
| chainguard | addon-resizer | 1.8.21-r1 |
| chainguard | addon-resizer-fips | 1.8.21-r3 |
| chainguard | age | 1.1.1-r1 |
| chainguard | amass | 4.2.0-r11 |
| chainguard | argo-workflows | 3.6.5-r2 |
| chainguard | argo-workflows-fips | 3.5.7-r1 |
| chainguard | atlantis | 0.28.1-r1 |
| chainguard | atlantis-fips | 0.28.1-r1 |
| chainguard | aws-ebs-csi-driver | 1.31.0-r1 |
| chainguard | aws-efs-csi-driver-fips | 1.7.0-r11 |
| chainguard | aws-flb-cloudwatch | 1.9.4-r11 |
| chainguard | aws-flb-cloudwatch-fips | 1.9.4-r4 |
| chainguard | aws-flb-firehose | 1.7.2-r11 |
| chainguard | aws-flb-firehose-fips | 1.7.2-r4 |
| chainguard | aws-flb-kinesis | 1.10.2-r12 |
| chainguard | aws-flb-kinesis-fips | 1.10.2-r5 |
| chainguard | aws-load-balancer-controller | 2.8.1-r1 |
| chainguard | aws-load-balancer-controller-fips | 2.8.0-r1 |
| chainguard | azure-aad-pod-identity-mic | 1.8.17-r10 |
| chainguard | bank-vaults | 1.20.4-r14 |
| chainguard | bank-vaults-fips | 1.20.4-r11 |
| chainguard | bazelisk | 1.20.0-r1 |
| chainguard | bom | 0.6.0-r6 |
| chainguard | boring-registry | 0.14.0-r2 |
| chainguard | boring-registry-fips | 0.14.0-r4 |
| chainguard | buf | 1.32.2-r1 |
| chainguard | buildah | 1.36.0-r1 |
| chainguard | buildkitd | 0.13.2-r2 |
| chainguard | caddy | 2.8.4-r1 |
| chainguard | caddy-fips | 2.8.4-r1 |
| chainguard | cadvisor | 0.49.1-r8 |
| chainguard | cadvisor-fips | 0.49.1-r7 |
| chainguard | capslock | 0.2.2-r3 |
| chainguard | cass-operator | 1.21.0-r1 |
| chainguard | cass-operator-fips | 1.21.0-r1 |
| chainguard | cass-operator-fips-no-pvc-delete | 1.21.0-r1 |
| chainguard | cert-exporter | 2.12.0-r6 |
| chainguard | cert-exporter-fips | 2.12.0-r7 |
| chainguard | cert-manager-webhook-pdns | 2.5.1-r4 |
| chainguard | cert-manager-webhook-pdns-fips | 2.5.1-r5 |
| chainguard | certificate-transparency | 1.2.1-r1 |
| chainguard | certificate-transparency-fips | 1.2.1-r1 |
| chainguard | cfssl | 1.6.5-r5 |
| chainguard | chainctl | 0.2.59-r0 |
| chainguard | chartmuseum | 0.16.2-r1 |
| chainguard | chezmoi | 2.48.2-r1 |
| chainguard | cilium-cli | 0.16.9-r1 |
| chainguard | cloud-sql-proxy-fips | 2.11.3-r1 |
| chainguard | cloudflared | 2024.1.0-r11 |
| chainguard | cluster-proportional-autoscaler | 1.8.11-r7 |
| chainguard | cni-plugins | 1.5.0-r1 |
| chainguard | cni-plugins-fips | 1.5.0-r1 |
| chainguard | configmap-reload | 0.13.0-r2 |
| chainguard | configmap-reload-fips | 0.12.0-r8 |
| chainguard | configmap-reload-fips-0.11 | 0.11.1-r9 |
| chainguard | confluent-common-docker | 7.6.0-r6 |
| chainguard | conftest | 0.52.0-r3 |
| chainguard | conftest-fips | 0.52.0-r3 |
| chainguard | controller-gen | 0.15.0-r5 |
| chainguard | cortex | 1.17.1-r1 |
| chainguard | cortex-fips | 1.17.1-r3 |
| chainguard | cosign | 2.2.4-r5 |
| chainguard | cosign-fips | 2.2.4-r3 |
| chainguard | crane | 0.19.1-r6 |
| chainguard | cri-tools | 1.30.0-r3 |
| chainguard | croc | 10.0.7-r1 |
| chainguard | crossplane-provider-aws | 1.4.0-r3 |
| chainguard | crossplane-provider-azure | 1.1.0-r3 |
| chainguard | crossplane-provider-gcp | 1.1.0-r3 |
| chainguard | ctop | 0.7.7-r15 |
| chainguard | cue-fips | 0.8.2-r2 |
| chainguard | dagdotdev | 0.0.3-r1 |
| chainguard | dagger | 0.11.6-r1 |
| chainguard | dask-gateway | 2024.1.0-r5 |
| chainguard | dataplaneapi | 2.9.3-r1 |
| chainguard | dataplaneapi-fips | 2.9.3-r1 |
| chainguard | delve | 1.22.1-r5 |
| chainguard | dex | 2.40.0-r1 |
| chainguard | dex-fips | 2.40.0-r1 |
| chainguard | dex-k8s-authenticator | 1.4.0-r10 |
| chainguard | dgraph | 23.1.1-r2 |
| chainguard | direnv | 2.34.0-r4 |
| chainguard | dive | 0.12.0-r7 |
| chainguard | docker-compose | 2.27.1-r1 |
| chainguard | docker-credential-acr-env | 0.7.0-r13 |
| chainguard | docker-credential-ecr-login | 0.8.0-r1 |
| chainguard | docker-credential-gcr | 2.1.22-r6 |
| chainguard | dockerize | 0.7.0-r9 |
| chainguard | dockerize-fips | 0.7.0-r9 |
| chainguard | doppler-kubernetes-operator | 1.5.1-r2 |
| chainguard | dynamic-localpv-provisioner | 4.0.0-r4 |
| chainguard | dynamic-localpv-provisioner-fips | 4.0.0-r5 |
| chainguard | envoy-ratelimit | 0.0_git20240220-r11 |
| chainguard | envoy-ratelimit-fips | 0.0_git20231206-r8 |
| chainguard | etcd-3.4 | 3.4.32-r2 |
| chainguard | etcd-3.5 | 3.5.14-r1 |
| chainguard | etcd-fips-3.4 | 3.4.32-r2 |
| chainguard | etcd-fips-3.5 | 3.5.13-r5 |
| chainguard | external-secrets-fips | 0.9.19-r1 |
| chainguard | extism | 1.5.0-r1 |
| chainguard | falcoctl | 0.8.0-r1 |
| chainguard | falcoctl-fips | 0.8.0-r1 |
| chainguard | falcoctl-fips-0.4 | 0.4.0-r10 |
| chainguard | falcosidekick | 2.28.0-r7 |
| chainguard | falcosidekick-fips | 2.28.0-r9 |
| chainguard | ferretdb | 1.21.0-r4 |
| chainguard | flannel | 0.25.3-r1 |
| chainguard | flannel-cni-plugin | 1.4.1-r4 |
| chainguard | fluent-bit-plugin-loki | 3.0.0-r2 |
| chainguard | fluent-operator | 2.8.0-r1 |
| chainguard | fluent-operator-fips | 2.8.0-r1 |
| chainguard | flux | 2.3.0-r1 |
| chainguard | flux-helm-controller | 1.0.1-r2 |
| chainguard | flux-image-automation-controller | 0.38.0-r3 |
| chainguard | flux-image-reflector-controller | 0.32.0-r2 |
| chainguard | flux-kustomize-controller | 1.3.0-r3 |
| chainguard | flux-notification-controller | 1.3.0-r3 |
| chainguard | flux-source-controller | 1.3.0-r2 |
| chainguard | flyte | 1.12.0-r2 |
| chainguard | fq | 0.11.0-r5 |
| chainguard | frp | 0.58.1-r1 |
| chainguard | fulcio | 1.4.5-r3 |
| chainguard | fulcio-fips | 1.4.5-r4 |
| chainguard | fuse-overlayfs-snapshotter | 1.0.8-r10 |
| chainguard | gcsfuse | 1.4.2-r8 |
| chainguard | gh | 2.50.0-r1 |
| chainguard | ghaudit | 0.4.0-r4 |
| chainguard | git-lfs | 3.5.1-r6 |
| chainguard | git-lfs-fips | 3.5.1-r1 |
| chainguard | gitleaks | 8.18.3-r1 |
| chainguard | gitness | 3.0.0_beta6-r4 |
| chainguard | gitsign | 0.10.2-r2 |
| chainguard | gke-gcloud-auth-plugin | 0.0.2-r11 |
| chainguard | glab | 1.41.0-r1 |
| chainguard | go-1.21 | 1.21.11-r0 |
| chainguard | go-1.22 | 1.22.4-r0 |
| chainguard | go-bindata | 3.1.3-r21 |
| chainguard | go-licenses | 1.6.0-r14 |
| chainguard | go-md2man | 2.0.4-r4 |
| chainguard | gobump | 0.7.7-r3 |
| chainguard | gobuster | 3.6.0-r12 |
| chainguard | golangci-lint | 1.59.0-r1 |
| chainguard | gomplate | 3.11.8-r1 |
| chainguard | gomplate-fips | 3.11.7-r1 |
| chainguard | gops | 0.3.28-r11 |
| chainguard | gostatsd | 28.3.0-r4 |
| chainguard | gosu | 1.17-r6 |
| chainguard | gosu-1.11 | 1.11-r1 |
| chainguard | govulncheck | 1.0.2-r5 |
| chainguard | grafana-agent-operator | 0.41.0-r1 |
| chainguard | grafana-mimir | 2.12.0-r1 |
| chainguard | grafana-operator | 5.9.2-r1 |
| chainguard | grafana-operator-fips | 5.9.2-r1 |
| chainguard | grpc-health-probe | 0.4.26-r3 |
| chainguard | grpc-health-probe-fips | 0.4.26-r1 |
| chainguard | grpcurl | 1.9.1-r4 |
| chainguard | grype | 0.78.0-r1 |
| chainguard | harbor-2.9 | 2.9.4-r4 |
| chainguard | harbor-cli | 0.0.1-r3 |
| chainguard | harbor-registry | 3.0.0_alpha1-r4 |
| chainguard | harbor-registry-fips | 3.0.0_alpha1-r5 |
| chainguard | harbor-scanner-trivy | 0.31.2-r2 |
| chainguard | harbor-scanner-trivy-fips | 0.31.2-r2 |
| chainguard | hcloud | 1.43.1-r2 |
| chainguard | hello-world-golang | 1.3-r4 |
| chainguard | helm | 3.15.1-r1 |
| chainguard | helm-3 | 3.19.2-r1 |
| chainguard | helm-4 | 4.0.1-r1 |
| chainguard | helm-docs | 1.13.1-r1 |
| chainguard | helm-fips | 3.15.1-r2 |
| chainguard | helm-fips-3 | 3.19.2-r0 |
| chainguard | helm-fips-4 | 4.0.1-r1 |
| chainguard | helm-operator | 1.34.2-r1 |
| chainguard | helm-operator-fips | 1.34.2-r2 |
| chainguard | helm-push | 0.10.4-r11 |
| chainguard | hey | 0.1.4-r14 |
| chainguard | hivemind | 1.1.0-r1 |
| chainguard | http-echo | 1.0.0-r7 |
| chainguard | hubble-ui | 0.13.1-r1 |
| chainguard | hubble-ui-backend-fips | 0.13.1-r1 |
| chainguard | influx | 2.7.5-r2 |
| chainguard | ip-masq-agent | 2.9.3-r12 |
| chainguard | istio-pilot-agent-1.22 | 1.22.0-r2 |
| chainguard | istio-pilot-discovery-1.22 | 1.22.0-r2 |
| chainguard | jitsucom-bulker | 2.7.0-r1 |
| chainguard | jsonnet-bundler | 0.5.1-r5 |
| chainguard | k3d | 5.6.3-r3 |
| chainguard | k3s | 1.30.1-r1 |
| chainguard | k8s-device-plugin | 0.8.2-r2 |
| chainguard | k8sgpt | 0.3.32-r2 |
| chainguard | k8ssandra-operator | 1.16.0-r3 |
| chainguard | k8ssandra-operator-fips | 1.16.0-r3 |
| chainguard | k9s | 0.32.4-r5 |
| chainguard | kaf | 0.2.8-r4 |
| chainguard | kafka-proxy | 0.3.10-r1 |
| chainguard | kafka_exporter | 1.7.0-r4 |
| chainguard | kaniko | 1.23.0-r1 |
| chainguard | kargo | 0.6.0-r3 |
| chainguard | karpenter-0.35 | 0.35.5-r1 |
| chainguard | karpenter-fips-0.35 | 0.35.5-r1 |
| chainguard | karpenter-fips-0.36 | 0.36.2-r1 |
| chainguard | kiam | 4.2-r14 |
| chainguard | kind | 0.23.0-r1 |
| chainguard | ko | 0.15.4-r1 |
| chainguard | ko-fips | 0.15.4-r1 |
| chainguard | kots | 1.109.9-r1 |
| chainguard | kpt | 1.0.0_beta49-r7 |
| chainguard | ksops | 4.3.1-r3 |
| chainguard | kube-bench | 0.7.3-r3 |
| chainguard | kube-bench-fips | 0.7.3-r5 |
| chainguard | kube-fluentd-operator | 1.18.2-r11 |
| chainguard | kube-logging-logging-operator-3.17 | 3.17.11-r12 |
| chainguard | kube-logging-logging-operator-4.1 | 4.1.0-r10 |
| chainguard | kube-logging-operator | 4.7.0-r1 |
| chainguard | kube-oidc-proxy | 1.0.6-r9 |
| chainguard | kube-rbac-proxy-fips | 0.17.1-r3 |
| chainguard | kube-state-metrics | 2.12.0-r4 |
| chainguard | kube-state-metrics-2.6 | 2.6.0-r14 |
| chainguard | kube-state-metrics-fips | 2.12.0-r6 |
| chainguard | kube-vip | 0.8.0-r3 |
| chainguard | kube-vip-fips | 0.8.0-r3 |
| chainguard | kubebuilder | 4.0.0-r1 |
| chainguard | kubecolor | 0.3.3-r1 |
| chainguard | kubeflow-katib | 0.16.0-r12 |
| chainguard | kuberay-operator | 1.0.0-r8 |
| chainguard | kubernetes-1.30 | 1.30.1-r1 |
| chainguard | kubernetes-csi-driver-hostpath | 1.13.0-r5 |
| chainguard | kubernetes-csi-external-provisioner | 5.0.1-r1 |
| chainguard | kubernetes-csi-livenessprobe | 2.13.0-r1 |
| chainguard | kubernetes-csi-livenessprobe-2.10 | 2.10.0-r11 |
| chainguard | kubernetes-csi-livenessprobe-fips | 2.13.0-r1 |
| chainguard | kubernetes-csi-livenessprobe-fips-2.10 | 2.10.0-r12 |
| chainguard | kubernetes-dashboard | 2.7.0-r19 |
| chainguard | kubernetes-dashboard-fips | 2.7.0-r8 |
| chainguard | kubernetes-dashboard-metrics-scraper | 1.0.9-r17 |
| chainguard | kubernetes-dashboard-metrics-scraper-fips | 1.0.9-r7 |
| chainguard | kubernetes-dns-node-cache | 1.23.1-r1 |
| chainguard | kubernetes-event-exporter | 1.7-r8 |
| chainguard | kubernetes-ingress-defaultbackend | 1.29.1-r1 |
| chainguard | kubescape | 3.0.11-r1 |
| chainguard | kubevela | 1.9.11-r4 |
| chainguard | kubewatch | 2.6.0-r2 |
| chainguard | kustomize | 5.4.2-r2 |
| chainguard | kustomize-fips | 5.4.2-r1 |
| chainguard | kwok | 0.5.2-r2 |
| chainguard | kyverno-policy-reporter | 2.19.0-r1 |
| chainguard | kyverno-policy-reporter-kyverno-plugin | 1.6.3-r6 |
| chainguard | kyverno-policy-reporter-ui | 1.9.2-r7 |
| chainguard | lazygit | 0.42.0-r1 |
| chainguard | libnvidia-container | 1.15.0-r2 |
| chainguard | litefs | 0.5.11-r5 |
| chainguard | litestream | 0.3.13-r3 |
| chainguard | local-path-provisioner | 0.0.27-r1 |
| chainguard | local-static-provisioner | 2.7.0-r3 |
| chainguard | logstash-exporter | 1.6.4-r2 |
| chainguard | logstash-exporter-fips | 1.6.4-r3 |
| chainguard | loki-2.9 | 2.9.8-r2 |
| chainguard | mage | 1.15.0-r8 |
| chainguard | mc | 0.20231220.071422-r9 |
| chainguard | mc-fips | 0.20240131.085940-r8 |
| chainguard | memcached-exporter | 0.14.3-r6 |
| chainguard | metacontroller | 4.11.14-r1 |
| chainguard | metallb | 0.14.5-r3 |
| chainguard | metallb-fips | 0.14.5-r5 |
| chainguard | metrics-server | 0.7.1-r4 |
| chainguard | metrics-server-fips | 0.7.1-r7 |
| chainguard | minify | 2.20.32-r2 |
| chainguard | minify-fips | 2.20.32-r1 |
| chainguard | mkcert | 1.4.4-r3 |
| chainguard | mockery | 2.43.2-r1 |
| chainguard | mods | 1.4.0-r1 |
| chainguard | mongo-tools | 100.9.4-r5 |
| chainguard | multus-cni-fips | 4.0.2-r6 |
| chainguard | nats | 0.1.4-r5 |
| chainguard | nats-server | 2.10.16-r1 |
| chainguard | nerdctl | 1.7.6-r5 |
| chainguard | neuvector-dbgen | 0_git20240423-r1 |
| chainguard | neuvector-dbgen-fips | 0_git20240423-r1 |
| chainguard | neuvector-scanner | 0_git20240528-r4 |
| chainguard | neuvector-scanner-fips | 0_git20240528-r1 |
| chainguard | neuvector-sigstore-interface | 0_git20240520-r2 |
| chainguard | neuvector-sigstore-interface-fips | 0_git20240520-r1 |
| chainguard | newrelic-fluent-bit-output | 2.4.0-r5 |
| chainguard | newrelic-infra-operator | 0.18.1-r1 |
| chainguard | newrelic-infrastructure-agent | 1.52.3-r1 |
| chainguard | newrelic-nri-kube-events | 2.9.8-r1 |
| chainguard | newrelic-nri-statsd | 2.9.1-r4 |
| chainguard | newrelic-prometheus-configurator | 1.16.2-r1 |
| chainguard | nfs-subdir-external-provisioner | 4.0.18-r8 |
| chainguard | nfs-subdir-external-provisioner-fips | 4.0.18-r11 |
| chainguard | node-problem-detector-0.8 | 0.8.19-r1 |
| chainguard | nodetaint | 0.0.4-r19 |
| chainguard | nri-apache | 1.12.5-r1 |
| chainguard | nri-cassandra | 2.13.6-r1 |
| chainguard | nri-consul | 2.7.11-r1 |
| chainguard | nri-couchbase | 2.6.5-r1 |
| chainguard | nri-discovery-kubernetes | 1.9.1-r1 |
| chainguard | nri-elasticsearch | 5.2.5-r1 |
| chainguard | nri-f5 | 2.7.5-r1 |
| chainguard | nri-haproxy | 3.0.1-r3 |
| chainguard | nri-jmx | 3.7.0-r1 |
| chainguard | nri-kafka | 3.7.3-r2 |
| chainguard | nri-kubernetes | 3.28.8-r1 |
| chainguard | nri-memcached | 2.5.6-r1 |
| chainguard | nri-mongodb | 2.8.5-r1 |
| chainguard | nri-mssql | 2.12.4-r1 |
| chainguard | nri-mysql | 1.10.8-r1 |
| chainguard | nri-nagios | 2.9.5-r1 |
| chainguard | nri-nginx | 3.4.6-r1 |
| chainguard | nri-postgresql | 2.13.5-r1 |
| chainguard | nri-prometheus | 2.21.2-r1 |
| chainguard | nri-rabbitmq | 2.13.6-r1 |
| chainguard | nri-redis | 1.11.6-r1 |
| chainguard | nsc | 2.8.6-r7 |
| chainguard | nvidia-container-toolkit | 1.15.0-r2 |
| chainguard | nvidia-nsight-compute-12.8 | 2025.1.1.2-r8 |
| chainguard | oauth2-proxy | 7.6.0-r8 |
| chainguard | octo-sts | 0.2.0-r1 |
| chainguard | ollama | 0.1.41-r1 |
| chainguard | opa | 0.65.0-r1 |
| chainguard | opa-fips | 0.65.0-r1 |
| chainguard | opentelemetry-collector-fips | 0.102.1-r0 |
| chainguard | oras | 1.2.0-r1 |
| chainguard | osv-scanner | 1.7.4-r1 |
| chainguard | overmind | 2.5.1-r2 |
| chainguard | paranoia | 0.2.1-r15 |
| chainguard | petname | 2.11-r8 |
| chainguard | php-fpm_exporter | 2.2.0-r5 |
| chainguard | pluto | 5.19.4-r1 |
| chainguard | policy-controller | 0.9.0-r3 |
| chainguard | policy-controller-fips | 0.9.0-r5 |
| chainguard | pombump | 0.0.12-r3 |
| chainguard | postgres-operator | 1.12.0-r1 |
| chainguard | postgres-operator-fips | 1.12.0-r1 |
| chainguard | prometheus-2.51 | 2.51.2-r48 |
| chainguard | prometheus-adapter | 0.12.0-r1 |
| chainguard | prometheus-adapter-0.10 | 0.10.1-r10 |
| chainguard | prometheus-alertmanager | 0.27.0-r6 |
| chainguard | prometheus-alertmanager-fips | 0.27.0-r8 |
| chainguard | prometheus-beat-exporter | 0.4.0-r5 |
| chainguard | prometheus-beat-exporter-fips | 0.4.0-r8 |
| chainguard | prometheus-bind-exporter | 0.7.0-r12 |
| chainguard | prometheus-blackbox-exporter | 0.25.0-r3 |
| chainguard | prometheus-elasticsearch-exporter | 1.7.0-r8 |
| chainguard | prometheus-elasticsearch-exporter-fips | 1.7.0-r9 |
| chainguard | prometheus-mongodb-exporter | 0.40.0-r10 |
| chainguard | prometheus-mongodb-exporter-0.37 | 0.37.0-r8 |
| chainguard | prometheus-mongodb-exporter-fips | 0.40.0-r10 |
| chainguard | prometheus-mysqld-exporter | 0.15.1-r8 |
| chainguard | prometheus-nats-exporter | 0.15.0-r2 |
| chainguard | prometheus-node-exporter | 1.8.1-r1 |
| chainguard | prometheus-node-exporter-1.4 | 1.4.1-r9 |
| chainguard | prometheus-node-exporter-1.5 | 1.5.0-r12 |
| chainguard | prometheus-node-exporter-fips | 1.8.1-r2 |
| chainguard | prometheus-operator | 0.74.0-r1 |
| chainguard | prometheus-operator-fips | 0.74.0-r2 |
| chainguard | prometheus-postgres-exporter | 0.15.0-r10 |
| chainguard | prometheus-postgres-exporter-0.10 | 0.10.1-r14 |
| chainguard | prometheus-postgres-exporter-fips | 0.15.0-r10 |
| chainguard | prometheus-pushgateway | 1.8.0-r4 |
| chainguard | prometheus-pushgateway-1.4 | 1.4.3-r11 |
| chainguard | prometheus-pushgateway-fips | 1.8.0-r5 |
| chainguard | prometheus-pushgateway-fips-1.4 | 1.4.3-r11 |
| chainguard | prometheus-redis-exporter | 1.60.0-r1 |
| chainguard | prometheus-redis-exporter-fips | 1.59.0-r2 |
| chainguard | prometheus-stackdriver-exporter | 0.15.1-r1 |
| chainguard | prometheus-statsd-exporter | 0.26.1-r4 |
| chainguard | prometheus-statsd-exporter-fips | 0.26.1-r6 |
| chainguard | prometheus-statsd-exporter-fips-0.22 | 0.22.8-r8 |
| chainguard | protoc-gen-go | 1.34.1-r3 |
| chainguard | protoc-gen-go-grpc | 1.4.0-r1 |
| chainguard | pulumi-kubernetes-operator | 1.15.0-r5 |
| chainguard | pulumi-language-dotnet | 3.63.1-r2 |
| chainguard | pulumi-language-java | 0.12.0-r1 |
| chainguard | q | 0.19.2-r6 |
| chainguard | rabbitmq-cluster-operator | 2.9.0-r1 |
| chainguard | rabbitmq-default-user-credential-updater | 1.0.4-r2 |
| chainguard | rabbitmq-messaging-topology-operator | 1.14.1-r2 |
| chainguard | rclone | 1.66.0-r4 |
| chainguard | redka | 0.5.0-r1 |
| chainguard | regclient | 0.6.1-r1 |
| chainguard | rekor | 1.3.6-r4 |
| chainguard | rekor-fips | 1.3.6-r5 |
| chainguard | render-template | 1.0.6-r5 |
| chainguard | request-1279 | 1.16.0-r1 |
| chainguard | restic | 0.16.4-r10 |
| chainguard | restic-fips | 0.16.4-r9 |
| chainguard | rook | 1.14.5-r1 |
| chainguard | rootlesskit | 2.1.0-r2 |
| chainguard | runc | 1.1.12-r7 |
| chainguard | s5cmd | 2.2.2-r4 |
| chainguard | sbom-scorecard | 0.0.7-r13 |
| chainguard | sbomqs | 0.1.4-r1 |
| chainguard | scorecard | 4.13.1-r9 |
| chainguard | secrets-store-csi-driver | 1.4.3-r2 |
| chainguard | secrets-store-csi-driver-provider-aws | 0.3.9-r1 |
| chainguard | secrets-store-csi-driver-provider-azure | 1.5.2-r2 |
| chainguard | secrets-store-csi-driver-provider-gcp | 1.5.0-r6 |
| chainguard | shfmt | 3.8.0-r4 |
| chainguard | sigstore-scaffolding | 0.7.1-r1 |
| chainguard | sigstore-scaffolding-fips | 0.7.1-r1 |
| chainguard | skaffold | 2.12.0-r1 |
| chainguard | skopeo | 1.15.1-r1 |
| chainguard | slsa-verifier | 2.5.1-r7 |
| chainguard | smarter-device-manager | 1.20.11-r8 |
| chainguard | smarter-device-manager-fips | 1.20.11-r9 |
| chainguard | snyk-cli | 1.1291.1-r1 |
| chainguard | sonobuoy | 0.57.1-r7 |
| chainguard | sops | 3.8.1-r8 |
| chainguard | speedtest-go | 1.7.7-r1 |
| chainguard | spegel | 0.0.22-r2 |
| chainguard | spicedb | 1.33.0-r1 |
| chainguard | spire-server | 1.9.6-r1 |
| chainguard | spire-server-fips | 1.9.6-r2 |
| chainguard | spqr | 1.3.0-r4 |
| chainguard | src | 5.4.0-r1 |
| chainguard | src-fingerprint | 0.19.0-r15 |
| chainguard | src-fingerprint-fips | 0.19.0-r1 |
| chainguard | stakater-reloader-0.0.119 | 0.0.119-r11 |
| chainguard | stakater-reloader-0.0.128 | 0.0.128-r10 |
| chainguard | step | 0.26.1-r2 |
| chainguard | step-ca | 0.26.1-r2 |
| chainguard | step-ca-fips | 0.26.1-r2 |
| chainguard | step-fips | 0.26.1-r2 |
| chainguard | step-issuer | 0.9.1-r5 |
| chainguard | step-issuer-fips | 0.9.1-r6 |
| chainguard | stern | 1.30.0-r1 |
| chainguard | supercronic | 0.2.29-r8 |
| chainguard | swagger | 0.31.0-r1 |
| chainguard | syft | 1.5.0-r1 |
| chainguard | tailscale | 1.66.4-r1 |
| chainguard | task | 3.37.2-r2 |
| chainguard | tekton-chains | 0.21.0-r1 |
| chainguard | tekton-chains-fips | 0.21.0-r1 |
| chainguard | temporal | 0.12.0-r3 |
| chainguard | temporal-fips | 0.12.0-r3 |
| chainguard | temporal-ui-server | 2.27.2-r1 |
| chainguard | temporal-ui-server-fips | 2.27.2-r1 |
| chainguard | terraform | 1.5.7-r12 |
| chainguard | terraform-docs | 0.18.0-r1 |
| chainguard | terraform-provider-aws | 5.52.0-r1 |
| chainguard | terraform-provider-azurerm | 3.106.1-r1 |
| chainguard | terraform-provider-google | 5.32.0-r1 |
| chainguard | terragrunt | 0.58.14-r1 |
| chainguard | tflint | 0.51.1-r1 |
| chainguard | tfsec | 1.28.6-r2 |
| chainguard | thanos | 0.35.1-r1 |
| chainguard | thanos-fips | 0.35.1-r2 |
| chainguard | thanos-operator | 0.3.7-r18 |
| chainguard | thanos-operator-fips | 0.3.7-r18 |
| chainguard | tigera-operator-1.28 | 1.28.15-r9 |
| chainguard | tigera-operator-1.29 | 1.29.8-r9 |
| chainguard | tigera-operator-fips-1.29 | 1.29.8-r9 |
| chainguard | timestamp-authority | 1.2.2-r8 |
| chainguard | timestamp-authority-fips | 1.2.2-r8 |
| chainguard | timoni | 0.21.0-r2 |
| chainguard | tkn | 0.37.0-r1 |
| chainguard | tkn-fips | 0.37.0-r1 |
| chainguard | trillian | 1.6.0-r7 |
| chainguard | trillian-fips | 1.6.0-r7 |
| chainguard | trivy | 0.52.0-r2 |
| chainguard | trivy-fips | 0.52.0-r2 |
| chainguard | trust-manager | 0.11.0-r1 |
| chainguard | trust-manager-fips | 0.11.0-r1 |
| chainguard | up | 0.30.0-r1 |
| chainguard | vault-csi-provider | 1.4.0-r14 |
| chainguard | vault-k8s | 1.4.1-r2 |
| chainguard | vault-k8s-fips | 1.4.1-r3 |
| chainguard | vcluster | 0.19.5-r2 |
| chainguard | velero | 1.13.2-r5 |
| chainguard | velero-fips | 1.13.2-r5 |
| chainguard | velero-plugin-for-aws | 1.9.2-r5 |
| chainguard | velero-plugin-for-aws-fips | 1.9.2-r5 |
| chainguard | velero-plugin-for-csi | 0.7.1-r5 |
| chainguard | velero-plugin-for-csi-fips | 0.7.1-r5 |
| chainguard | vexctl | 0.2.6-r8 |
| chainguard | volume-modifier-for-k8s | 0.2.1-r6 |
| chainguard | vt-cli | 1.0.0-r7 |
| chainguard | wait-for-port | 1.0.7-r5 |
| chainguard | wave | 0.8.0-r3 |
| chainguard | wave-fips | 0.8.0-r2 |
| chainguard | wavefront-collector-for-kubernetes-1.12 | 1.12.1-r14 |
| chainguard | wavefront-collector-for-kubernetes-1.13 | 1.13.0-r14 |
| chainguard | wazero | 1.7.2-r1 |
| chainguard | weaviate | 1.25.2-r1 |
| chainguard | wgcf | 2.2.22-r2 |
| chainguard | wire-go | 0.6.0-r4 |
| chainguard | wireguard-go | 0.0.20230223-r12 |
| chainguard | wolfictl | 0.16.15-r1 |
| chainguard | xcaddy | 0.4.2-r1 |
| chainguard | yam | 0.0.7-r2 |
| chainguard | yq | 4.44.1-r2 |
| chainguard | yq-fips | 4.44.1-r1 |
| chainguard | ytt | 0.49.0-r5 |
| chainguard | zarf | 0.34.0-r1 |
| debian 10 | golang-1.11 | no fix listed |
| debian 11 | golang-1.15 | no fix listed |
| debian 12 | golang-1.19 | no fix listed |
| echo | golang-1.19 | no fix listed |
| go::The Go Vulnerability Database | stdlib | 1.21.11, 1.22.4 |
| minimos | solr-operator-0.8 | 0.8.1-r1 |
| Oracle Linux 8 | delve | 1.22.1-1.0.1.module+el8.10.0+90426+810ab996 |
| Oracle Linux 8 | go-toolset | 1.22.7-1.module+el8.10.0+90426+810ab996 |
| Oracle Linux 8 | golang | 1.22.7-1.module+el8.10.0+90426+810ab996 |
| Oracle Linux 8 | golang-bin | 1.22.7-1.module+el8.10.0+90426+810ab996 |
| Oracle Linux 8 | golang-docs | 1.22.7-1.module+el8.10.0+90426+810ab996 |
| Oracle Linux 8 | golang-misc | 1.22.7-1.module+el8.10.0+90426+810ab996 |
| Oracle Linux 8 | golang-src | 1.22.7-1.module+el8.10.0+90426+810ab996 |
| Oracle Linux 8 | golang-tests | 1.22.7-1.module+el8.10.0+90426+810ab996 |
| Oracle Linux 8 | grafana | 9.2.10-17.el8_10 |
| Oracle Linux 8 | grafana-selinux | 9.2.10-17.el8_10 |
| Oracle Linux 8 | terraform-provider-oci-fips | 6.25.0-2.el8 |
| Oracle Linux 9 | git-lfs | 3.6.1-1.el9 |
| Oracle Linux 9 | go-toolset | 1.21.11-1.el9_4 |
| Oracle Linux 9 | golang | 1.21.11-1.el9_4 |
| Oracle Linux 9 | golang-bin | 1.21.11-1.el9_4 |
| Oracle Linux 9 | golang-docs | 1.21.11-1.el9_4 |
| Oracle Linux 9 | golang-misc | 1.21.11-1.el9_4 |
| Oracle Linux 9 | golang-src | 1.21.11-1.el9_4 |
| Oracle Linux 9 | golang-tests | 1.21.11-1.el9_4 |
| Oracle Linux 9 | grafana | 10.2.6-4.el9 |
| Oracle Linux 9 | grafana-selinux | 10.2.6-4.el9 |
| Oracle Linux 9 | terraform-provider-oci-fips | 6.25.0-2.el9 |
| rapidfort alma 10 | butane | no fix listed |
| rapidfort alma 10 | delve | no fix listed |
| rapidfort alma 10 | git-lfs | no fix listed |
| rapidfort alma 10 | go-toolset | no fix listed |
| rapidfort alma 10 | golang | no fix listed |
| rapidfort alma 10 | golang-bin | no fix listed |
| rapidfort alma 10 | golang-docs | no fix listed |
| rapidfort alma 10 | golang-misc | no fix listed |
| rapidfort alma 10 | golang-race | no fix listed |
| rapidfort alma 10 | golang-src | no fix listed |
| rapidfort alma 10 | golang-tests | no fix listed |
| rapidfort alma 10 | grafana | no fix listed |
| rapidfort alma 10 | grafana-selinux | no fix listed |
| rapidfort alma 10 | ignition | no fix listed |
| rapidfort alma 10 | ignition-edge | no fix listed |
| rapidfort alma 10 | ignition-grub | no fix listed |
| rapidfort alma 10 | ignition-validate | no fix listed |
| rapidfort alma 10 | ipp-usb | no fix listed |
| rapidfort alma 10 | osbuild-composer | no fix listed |
| rapidfort alma 10 | osbuild-composer-core | no fix listed |
| rapidfort alma 10 | osbuild-composer-worker | no fix listed |
| rapidfort alma 10 | weldr-client | no fix listed |
| rapidfort alma 8 | git-lfs | no fix listed |
| rapidfort alma 8 | golang-race | no fix listed |
| rapidfort alma 8 | osbuild-composer | no fix listed |
| rapidfort alma 8 | osbuild-composer-core | no fix listed |
| rapidfort alma 8 | osbuild-composer-worker | no fix listed |
| rapidfort alma 8 | weldr-client | no fix listed |
| rapidfort alma 9 | butane | no fix listed |
| rapidfort alma 9 | ignition | no fix listed |
| rapidfort alma 9 | osbuild-composer | no fix listed |
| rapidfort alma 9 | osbuild-composer-core | no fix listed |
| rapidfort alma 9 | osbuild-composer-worker | no fix listed |
| rapidfort alma 9 | weldr-client | no fix listed |
| rapidfort amazon linux 2023 | amazon-ecr-credential-helper | 0.9.0-1.amzn2023 |
| rapidfort amazon linux 2023 | amazon-ssm-agent | 3.3.859.0-1.amzn2023 |
| rapidfort amazon linux 2023 | cni-plugins | 1.7.1-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | containerd | 1.7.20-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | containerd-stress | 1.7.20-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | docker | 25.0.3-1.amzn2023.0.2 |
| rapidfort amazon linux 2023 | golang | 1.22.4-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-bin | 1.22.4-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-docs | 1.22.4-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-misc | 1.22.4-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-shared | 1.22.4-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-src | 1.22.4-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | golang-tests | 1.22.4-1.amzn2023.0.1 |
| rapidfort amazon linux 2023 | runc | 1.1.13-1.amzn2023.0.1 |
| rapidfort debian 12 | golang-1.19 | no fix listed |
| rapidfort debian 13 | golang-1.19 | no fix listed |
| rapidfort fedora 43 | butane | 2.28.0-2.fc43 |
| rapidfort fedora 43 | ignition | 2.28.0-2.fc43 |
| rapidfort fedora 43 | osbuild-composer | 176-2.fc43 |
| rapidfort fedora 43 | osbuild-composer-core | 176-2.fc43 |
| rapidfort fedora 43 | osbuild-composer-worker | 176-2.fc43 |
| rapidfort fedora 43 | weldr-client | 36.1-2.fc43 |
| rapidfort Oracle Linux 10 | delve | no fix listed |
| rapidfort Oracle Linux 10 | git-lfs | no fix listed |
| rapidfort Oracle Linux 10 | go-toolset | no fix listed |
| rapidfort Oracle Linux 10 | golang | no fix listed |
| rapidfort Oracle Linux 10 | golang-bin | no fix listed |
| rapidfort Oracle Linux 10 | golang-docs | no fix listed |
| rapidfort Oracle Linux 10 | golang-misc | no fix listed |
| rapidfort Oracle Linux 10 | golang-race | no fix listed |
| rapidfort Oracle Linux 10 | golang-src | no fix listed |
| rapidfort Oracle Linux 10 | golang-tests | no fix listed |
| rapidfort Oracle Linux 10 | grafana | no fix listed |
| rapidfort Oracle Linux 10 | grafana-selinux | no fix listed |
| rapidfort Oracle Linux 10 | ignition | no fix listed |
| rapidfort Oracle Linux 10 | ipp-usb | no fix listed |
| rapidfort Oracle Linux 10 | osbuild-composer | no fix listed |
| rapidfort Oracle Linux 10 | osbuild-composer-core | no fix listed |
| rapidfort Oracle Linux 10 | osbuild-composer-worker | no fix listed |
| rapidfort Oracle Linux 10 | weldr-client | no fix listed |
| rapidfort Oracle Linux 9 | git-lfs | 0:3.6.1-1.el9 |
| rapidfort Oracle Linux 9 | go-toolset | 0:1.21.11-1.el9_4 |
| rapidfort Oracle Linux 9 | golang | 0:1.21.11-1.el9_4 |
| rapidfort Oracle Linux 9 | golang-bin | 0:1.21.11-1.el9_4 |
| rapidfort Oracle Linux 9 | golang-docs | 0:1.21.11-1.el9_4 |
| rapidfort Oracle Linux 9 | golang-misc | 0:1.21.11-1.el9_4 |
| rapidfort Oracle Linux 9 | golang-src | 0:1.21.11-1.el9_4 |
| rapidfort Oracle Linux 9 | golang-tests | 0:1.21.11-1.el9_4 |
| rapidfort Oracle Linux 9 | grafana | 0:10.2.6-4.el9 |
| rapidfort Oracle Linux 9 | grafana-selinux | 0:10.2.6-4.el9 |
| rapidfort Oracle Linux 9 | ignition | no fix listed |
| rapidfort Oracle Linux 9 | osbuild-composer | no fix listed |
| rapidfort Oracle Linux 9 | osbuild-composer-core | no fix listed |
| rapidfort Oracle Linux 9 | osbuild-composer-dnf-json | no fix listed |
| rapidfort Oracle Linux 9 | osbuild-composer-worker | no fix listed |
| rapidfort Oracle Linux 9 | weldr-client | no fix listed |
| rapidfort Red Hat 10 | butane | no fix listed |
| rapidfort Red Hat 10 | delve | no fix listed |
| rapidfort Red Hat 10 | go-toolset | no fix listed |
| rapidfort Red Hat 10 | golang | no fix listed |
| rapidfort Red Hat 10 | golang-bin | no fix listed |
| rapidfort Red Hat 10 | golang-docs | no fix listed |
| rapidfort Red Hat 10 | golang-misc | no fix listed |
| rapidfort Red Hat 10 | golang-race | no fix listed |
| rapidfort Red Hat 10 | golang-src | no fix listed |
| rapidfort Red Hat 10 | golang-tests | no fix listed |
| rapidfort Red Hat 10 | ignition | no fix listed |
| rapidfort Red Hat 10 | osbuild-composer | no fix listed |
| rapidfort Red Hat 10 | osbuild-composer-core | no fix listed |
| rapidfort Red Hat 10 | osbuild-composer-worker | no fix listed |
| rapidfort Red Hat 10 | rf-git-lfs | no fix listed |
| rapidfort Red Hat 10 | weldr-client | no fix listed |
| rapidfort Red Hat 9 | butane | no fix listed |
| rapidfort Red Hat 9 | ignition | no fix listed |
| rapidfort Red Hat 9 | osbuild-composer | no fix listed |
| rapidfort Red Hat 9 | osbuild-composer-core | no fix listed |
| rapidfort Red Hat 9 | osbuild-composer-worker | no fix listed |
| rapidfort Red Hat 9 | rf-git-lfs | no fix listed |
| rapidfort Red Hat 9 | weldr-client | no fix listed |
| rapidfort rocky 10 | ignition | no fix listed |
| rapidfort rocky 10 | osbuild-composer | no fix listed |
| rapidfort rocky 10 | osbuild-composer-core | no fix listed |
| rapidfort rocky 10 | osbuild-composer-worker | no fix listed |
| rapidfort rocky 10 | weldr-client | no fix listed |
| rapidfort rocky 8 | osbuild-composer | no fix listed |
| rapidfort rocky 8 | osbuild-composer-core | no fix listed |
| rapidfort rocky 8 | osbuild-composer-worker | no fix listed |
| rapidfort rocky 8 | weldr-client | no fix listed |
| rapidfort rocky 9 | ignition | no fix listed |
| rapidfort rocky 9 | osbuild-composer | no fix listed |
| rapidfort rocky 9 | osbuild-composer-core | no fix listed |
| rapidfort rocky 9 | osbuild-composer-worker | no fix listed |
| rapidfort rocky 9 | weldr-client | no fix listed |
| rapidfort rocky 9 | yggdrasil | no fix listed |
| rapidfort ubuntu 20.04 | golang-1.21 | 0:1.21.9-1ubuntu0.1 |
| rapidfort ubuntu 22.04 | golang-1.21 | 0:1.21.9-1ubuntu0.1 |
| rapidfort ubuntu 24.04 | golang-1.21 | 0:1.21.9-1ubuntu0.1 |
| Red Hat | butane | no fix listed |
| Red Hat | cri-o | no fix listed |
| Red Hat | etcd | no fix listed |
| Red Hat | git-lfs | no fix listed |
| Red Hat | go-toolset | no fix listed |
| Red Hat | golang | no fix listed |
| Red Hat | golang-bin | no fix listed |
| Red Hat | golang-docs | no fix listed |
| Red Hat | golang-github-infrawatch-apputils | no fix listed |
| Red Hat | golang-misc | no fix listed |
| Red Hat | golang-qpid-apache | no fix listed |
| Red Hat | golang-race | no fix listed |
| Red Hat | golang-src | no fix listed |
| Red Hat | golang-tests | no fix listed |
| Red Hat | heketi | no fix listed |
| Red Hat | heketi-client | no fix listed |
| Red Hat | heketi-devel | no fix listed |
| Red Hat | heketi-unit-test-devel | no fix listed |
| Red Hat | ignition | no fix listed |
| Red Hat | osbuild-composer | no fix listed |
| Red Hat | osbuild-composer-core | no fix listed |
| Red Hat | osbuild-composer-dnf-json | no fix listed |
| Red Hat | osbuild-composer-worker | no fix listed |
| Red Hat | ose-aws-ecr-image-credential-provider | no fix listed |
| Red Hat | python-heketi | no fix listed |
| Red Hat | python3-qpid-proton | no fix listed |
| Red Hat | qpid-proton-c | no fix listed |
| Red Hat | qpid-proton-c-devel | no fix listed |
| Red Hat | snmp-notifier | no fix listed |
| Red Hat | weldr-client | no fix listed |
| Red Hat | yggdrasil-worker-forwarder | no fix listed |
| rocky 8 | go-toolset:rhel8::delve | 1.22.1-1.module+el8.10.0+1879+0cb86608 |
| rocky 8 | go-toolset:rhel8::go-toolset | 1.22.7-1.module+el8.10.0+1879+0cb86608 |
| rocky 8 | go-toolset:rhel8::golang | 1.22.7-1.module+el8.10.0+1879+0cb86608 |
| rocky 8 | go-toolset:rhel8::golang-bin | 1.22.7-1.module+el8.10.0+1879+0cb86608 |
| rocky 8 | go-toolset:rhel8::golang-docs | 1.22.7-1.module+el8.10.0+1879+0cb86608 |
| rocky 8 | go-toolset:rhel8::golang-misc | 1.22.7-1.module+el8.10.0+1879+0cb86608 |
| rocky 8 | go-toolset:rhel8::golang-src | 1.22.7-1.module+el8.10.0+1879+0cb86608 |
| rocky 8 | go-toolset:rhel8::golang-tests | 1.22.7-1.module+el8.10.0+1879+0cb86608 |
| rocky 8 | grafana | 9.2.10-17.el8_10 |
| rocky 8 | grafana-selinux | 9.2.10-17.el8_10 |
| rocky 9 | git-lfs | 3.6.1-1.el9 |
| rocky 9 | go-toolset | 1.21.11-1.el9_4 |
| rocky 9 | golang | 1.21.11-1.el9_4 |
| rocky 9 | golang-bin | 1.21.11-1.el9_4 |
| rocky 9 | golang-docs | 1.21.11-1.el9_4 |
| rocky 9 | golang-misc | 1.21.11-1.el9_4 |
| rocky 9 | golang-src | 1.21.11-1.el9_4 |
| rocky 9 | golang-tests | 1.21.11-1.el9_4 |
| root.io debian 12 | rootio-golang-1.19 | no fix listed |
| ubuntu 16.04-ESM | golang-1.18 | 1.18.1-1ubuntu1~16.04.6+esm1 |
| ubuntu 18.04-ESM | golang-1.18 | 1.18.1-1ubuntu1~18.04.4+esm1 |
| ubuntu 20.04 | golang-1.18 | 1.18.1-1ubuntu1~20.04.3 |
| ubuntu 20.04 | golang-1.21 | 1.21.1-1~ubuntu20.04.3 |
| ubuntu 20.04 | golang-1.22 | 1.22.2-2~20.04.1 |
| ubuntu 20.04-ESM | golang-1.18 | 1.18.1-1ubuntu1~20.04.3 |
| ubuntu 20.04-ESM | golang-1.21 | 1.21.1-1~ubuntu20.04.3 |
| ubuntu 20.04-ESM | golang-1.22 | 1.22.2-2~20.04.1 |
| ubuntu 22.04 | golang-1.18 | 1.18.1-1ubuntu1.2 |
| ubuntu 22.04 | golang-1.21 | 1.21.1-1~ubuntu22.04.3 |
| ubuntu 22.04 | golang-1.22 | 1.22.2-2~22.04.1 |
| ubuntu 24.04 | golang-1.21 | 1.21.9-1ubuntu0.1 |
| ubuntu 24.04 | golang-1.22 | 1.22.2-2ubuntu0.1 |
| wolfi | aactl | 0.4.12-r13 |
| wolfi | actions-runner-controller | 0.9.2-r1 |
| wolfi | addon-resizer | 1.8.21-r1 |
| wolfi | age | 1.1.1-r1 |
| wolfi | amass | 4.2.0-r11 |
| wolfi | argo-workflows | 3.6.5-r2 |
| wolfi | atlantis | 0.28.1-r1 |
| wolfi | aws-flb-cloudwatch | 1.9.4-r11 |
| wolfi | aws-flb-firehose | 1.7.2-r11 |
| wolfi | aws-flb-kinesis | 1.10.2-r12 |
| wolfi | aws-load-balancer-controller | 2.8.1-r1 |
| wolfi | bank-vaults | 1.20.4-r14 |
| wolfi | bazelisk | 1.20.0-r1 |
| wolfi | bom | 0.6.0-r6 |
| wolfi | boring-registry | 0.14.0-r2 |
| wolfi | buf | 1.32.2-r1 |
| wolfi | buildah | 1.36.0-r1 |
| wolfi | buildkitd | 0.13.2-r2 |
| wolfi | caddy | 2.8.4-r1 |
| wolfi | cadvisor | 0.49.1-r8 |
| wolfi | capslock | 0.2.2-r3 |
| wolfi | cass-operator | 1.21.0-r1 |
| wolfi | cert-exporter | 2.12.0-r6 |
| wolfi | cert-manager-webhook-pdns | 2.5.1-r4 |
| wolfi | certificate-transparency | 1.2.1-r1 |
| wolfi | cfssl | 1.6.5-r5 |
| wolfi | chartmuseum | 0.16.2-r1 |
| wolfi | chezmoi | 2.48.2-r1 |
| wolfi | cilium-cli | 0.16.9-r1 |
| wolfi | cloudflared | 2024.1.0-r11 |
| wolfi | cluster-proportional-autoscaler | 1.8.11-r7 |
| wolfi | cni-plugins | 1.5.0-r1 |
| wolfi | configmap-reload | 0.13.0-r2 |
| wolfi | confluent-common-docker | 7.6.0-r6 |
| wolfi | conftest | 0.52.0-r3 |
| wolfi | controller-gen | 0.15.0-r5 |
| wolfi | cortex | 1.17.1-r1 |
| wolfi | cosign | 2.2.4-r5 |
| wolfi | crane | 0.19.1-r6 |
| wolfi | cri-tools | 1.30.0-r3 |
| wolfi | croc | 10.0.7-r1 |
| wolfi | crossplane-provider-aws | 1.4.0-r3 |
| wolfi | crossplane-provider-azure | 1.1.0-r3 |
| wolfi | ctop | 0.7.7-r15 |
| wolfi | dagdotdev | 0.0.3-r1 |
| wolfi | dagger | 0.11.6-r1 |
| wolfi | dask-gateway | 2024.1.0-r5 |
| wolfi | dataplaneapi | 2.9.3-r1 |
| wolfi | delve | 1.22.1-r5 |
| wolfi | dex | 2.40.0-r1 |
| wolfi | dgraph | 23.1.1-r2 |
| wolfi | direnv | 2.34.0-r4 |
| wolfi | dive | 0.12.0-r7 |
| wolfi | docker-compose | 2.27.1-r1 |
| wolfi | docker-credential-acr-env | 0.7.0-r13 |
| wolfi | docker-credential-ecr-login | 0.8.0-r1 |
| wolfi | docker-credential-gcr | 2.1.22-r6 |
| wolfi | dockerize | 0.7.0-r9 |
| wolfi | doppler-kubernetes-operator | 1.5.1-r2 |
| wolfi | dynamic-localpv-provisioner | 4.0.0-r4 |
| wolfi | envoy-ratelimit | 0.0_git20240220-r11 |
| wolfi | extism | 1.5.0-r1 |
| wolfi | falcoctl | 0.8.0-r1 |
| wolfi | falcosidekick | 2.28.0-r7 |
| wolfi | ferretdb | 1.21.0-r4 |
| wolfi | flannel | 0.25.3-r1 |
| wolfi | flannel-cni-plugin | 1.4.1-r4 |
| wolfi | fluent-bit-plugin-loki | 3.0.0-r2 |
| wolfi | fluent-operator | 2.8.0-r1 |
| wolfi | flux | 2.3.0-r1 |
| wolfi | flux-helm-controller | 1.0.1-r2 |
| wolfi | flux-image-automation-controller | 0.38.0-r3 |
| wolfi | flux-image-reflector-controller | 0.32.0-r2 |
| wolfi | flux-kustomize-controller | 1.3.0-r3 |
| wolfi | flux-notification-controller | 1.3.0-r3 |
| wolfi | flux-source-controller | 1.3.0-r2 |
| wolfi | flyte | 1.12.0-r2 |
| wolfi | fq | 0.11.0-r5 |
| wolfi | frp | 0.58.1-r1 |
| wolfi | fulcio | 1.4.5-r3 |
| wolfi | fuse-overlayfs-snapshotter | 1.0.8-r10 |
| wolfi | gcsfuse | 1.4.2-r8 |
| wolfi | gh | 2.50.0-r1 |
| wolfi | ghaudit | 0.4.0-r4 |
| wolfi | git-lfs | 3.5.1-r6 |
| wolfi | gitleaks | 8.18.3-r1 |
| wolfi | gitness | 3.0.0_beta6-r4 |
| wolfi | gitsign | 0.10.2-r2 |
| wolfi | gke-gcloud-auth-plugin | 0.0.2-r11 |
| wolfi | glab | 1.41.0-r1 |
| wolfi | go-1.21 | 1.21.11-r0 |
| wolfi | go-1.22 | 1.22.4-r0 |
| wolfi | go-bindata | 3.1.3-r21 |
| wolfi | go-licenses | 1.6.0-r14 |
| wolfi | go-md2man | 2.0.4-r4 |
| wolfi | gobump | 0.7.7-r3 |
| wolfi | gobuster | 3.6.0-r12 |
| wolfi | golangci-lint | 1.59.0-r1 |
| wolfi | gomplate | 3.11.8-r1 |
| wolfi | gops | 0.3.28-r11 |
| wolfi | gostatsd | 28.3.0-r4 |
| wolfi | gosu | 1.17-r6 |
| wolfi | govulncheck | 1.0.2-r5 |
| wolfi | grafana-agent-operator | 0.41.0-r1 |
| wolfi | grafana-mimir | 2.12.0-r1 |
| wolfi | grafana-operator | 5.9.2-r1 |
| wolfi | grpc-health-probe | 0.4.26-r3 |
| wolfi | grpcurl | 1.9.1-r4 |
| wolfi | grype | 0.78.0-r1 |
| wolfi | harbor-cli | 0.0.1-r3 |
| wolfi | harbor-registry | 3.0.0_alpha1-r4 |
| wolfi | harbor-scanner-trivy | 0.31.2-r2 |
| wolfi | hcloud | 1.43.1-r2 |
| wolfi | hello-world-golang | 1.3-r4 |
| wolfi | helm | 3.15.1-r1 |
| wolfi | helm-3 | 3.19.2-r1 |
| wolfi | helm-4 | 4.0.1-r1 |
| wolfi | helm-docs | 1.13.1-r1 |
| wolfi | helm-operator | 1.34.2-r1 |
| wolfi | helm-push | 0.10.4-r11 |
| wolfi | hey | 0.1.4-r14 |
| wolfi | hivemind | 1.1.0-r1 |
| wolfi | http-echo | 1.0.0-r7 |
| wolfi | hubble-ui | 0.13.1-r1 |
| wolfi | influx | 2.7.5-r2 |
| wolfi | ip-masq-agent | 2.9.3-r12 |
| wolfi | jitsucom-bulker | 2.7.0-r1 |
| wolfi | k3d | 5.6.3-r3 |
| wolfi | k3s | 1.30.1-r1 |
| wolfi | k8s-device-plugin | 0.8.2-r2 |
| wolfi | k8sgpt | 0.3.32-r2 |
| wolfi | k8ssandra-operator | 1.16.0-r3 |
| wolfi | k9s | 0.32.4-r5 |
| wolfi | kaf | 0.2.8-r4 |
| wolfi | kafka-proxy | 0.3.10-r1 |
| wolfi | kafka_exporter | 1.7.0-r4 |
| wolfi | kaniko | 1.23.0-r1 |
| wolfi | kargo | 0.6.0-r3 |
| wolfi | kind | 0.23.0-r1 |
| wolfi | ko | 0.15.4-r1 |
| wolfi | kots | 1.109.9-r1 |
| wolfi | kpt | 1.0.0_beta49-r7 |
| wolfi | ksops | 4.3.1-r3 |
| wolfi | kube-bench | 0.7.3-r3 |
| wolfi | kube-fluentd-operator | 1.18.2-r11 |
| wolfi | kube-logging-operator | 4.7.0-r1 |
| wolfi | kube-state-metrics | 2.12.0-r4 |
| wolfi | kube-vip | 0.8.0-r3 |
| wolfi | kubebuilder | 4.0.0-r1 |
| wolfi | kubecolor | 0.3.3-r1 |
| wolfi | kubeflow-katib | 0.16.0-r12 |
| wolfi | kuberay-operator | 1.0.0-r8 |
| wolfi | kubernetes-csi-driver-hostpath | 1.13.0-r5 |
| wolfi | kubernetes-csi-external-provisioner | 5.0.1-r1 |
| wolfi | kubernetes-csi-livenessprobe | 2.13.0-r1 |
| wolfi | kubernetes-dashboard | 2.7.0-r19 |
| wolfi | kubernetes-dashboard-metrics-scraper | 1.0.9-r17 |
| wolfi | kubernetes-dns-node-cache | 1.23.1-r1 |
| wolfi | kubernetes-event-exporter | 1.7-r8 |
| wolfi | kubernetes-ingress-defaultbackend | 1.29.1-r1 |
| wolfi | kubescape | 3.0.11-r1 |
| wolfi | kubevela | 1.9.11-r4 |
| wolfi | kubewatch | 2.6.0-r2 |
| wolfi | kustomize | 5.4.2-r2 |
| wolfi | kwok | 0.5.2-r2 |
| wolfi | kyverno-policy-reporter | 2.19.0-r1 |
| wolfi | kyverno-policy-reporter-kyverno-plugin | 1.6.3-r6 |
| wolfi | kyverno-policy-reporter-ui | 1.9.2-r7 |
| wolfi | lazygit | 0.42.0-r1 |
| wolfi | libnvidia-container | 1.15.0-r2 |
| wolfi | litefs | 0.5.11-r5 |
| wolfi | litestream | 0.3.13-r3 |
| wolfi | local-path-provisioner | 0.0.27-r1 |
| wolfi | local-static-provisioner | 2.7.0-r3 |
| wolfi | logstash-exporter | 1.6.4-r2 |
| wolfi | mage | 1.15.0-r8 |
| wolfi | mc | 0.20231220.071422-r9 |
| wolfi | memcached-exporter | 0.14.3-r6 |
| wolfi | metacontroller | 4.11.14-r1 |
| wolfi | metallb | 0.14.5-r3 |
| wolfi | metrics-server | 0.7.1-r4 |
| wolfi | minify | 2.20.32-r2 |
| wolfi | mkcert | 1.4.4-r3 |
| wolfi | mockery | 2.43.2-r1 |
| wolfi | mods | 1.4.0-r1 |
| wolfi | mongo-tools | 100.9.4-r5 |
| wolfi | nats | 0.1.4-r5 |
| wolfi | nats-server | 2.10.16-r1 |
| wolfi | nerdctl | 1.7.6-r5 |
| wolfi | neuvector-dbgen | 0_git20240423-r1 |
| wolfi | neuvector-scanner | 0_git20240528-r4 |
| wolfi | neuvector-sigstore-interface | 0_git20240520-r2 |
| wolfi | newrelic-fluent-bit-output | 2.4.0-r5 |
| wolfi | newrelic-infra-operator | 0.18.1-r1 |
| wolfi | newrelic-infrastructure-agent | 1.52.3-r1 |
| wolfi | newrelic-nri-kube-events | 2.9.8-r1 |
| wolfi | newrelic-nri-statsd | 2.9.1-r4 |
| wolfi | newrelic-prometheus-configurator | 1.16.2-r1 |
| wolfi | nfs-subdir-external-provisioner | 4.0.18-r8 |
| wolfi | nodetaint | 0.0.4-r19 |
| wolfi | nri-apache | 1.12.5-r1 |
| wolfi | nri-cassandra | 2.13.6-r1 |
| wolfi | nri-consul | 2.7.11-r1 |
| wolfi | nri-couchbase | 2.6.5-r1 |
| wolfi | nri-discovery-kubernetes | 1.9.1-r1 |
| wolfi | nri-elasticsearch | 5.2.5-r1 |
| wolfi | nri-f5 | 2.7.5-r1 |
| wolfi | nri-haproxy | 3.0.1-r3 |
| wolfi | nri-jmx | 3.7.0-r1 |
| wolfi | nri-kafka | 3.7.3-r2 |
| wolfi | nri-kubernetes | 3.28.8-r1 |
| wolfi | nri-memcached | 2.5.6-r1 |
| wolfi | nri-mongodb | 2.8.5-r1 |
| wolfi | nri-mssql | 2.12.4-r1 |
| wolfi | nri-mysql | 1.10.8-r1 |
| wolfi | nri-nagios | 2.9.5-r1 |
| wolfi | nri-nginx | 3.4.6-r1 |
| wolfi | nri-postgresql | 2.13.5-r1 |
| wolfi | nri-prometheus | 2.21.2-r1 |
| wolfi | nri-rabbitmq | 2.13.6-r1 |
| wolfi | nri-redis | 1.11.6-r1 |
| wolfi | nsc | 2.8.6-r7 |
| wolfi | nvidia-container-toolkit | 1.15.0-r2 |
| wolfi | oauth2-proxy | 7.6.0-r8 |
| wolfi | octo-sts | 0.2.0-r1 |
| wolfi | ollama | 0.1.41-r1 |
| wolfi | opa | 0.65.0-r1 |
| wolfi | oras | 1.2.0-r1 |
| wolfi | osv-scanner | 1.7.4-r1 |
| wolfi | overmind | 2.5.1-r2 |
| wolfi | paranoia | 0.2.1-r15 |
| wolfi | petname | 2.11-r8 |
| wolfi | php-fpm_exporter | 2.2.0-r5 |
| wolfi | pluto | 5.19.4-r1 |
| wolfi | policy-controller | 0.9.0-r3 |
| wolfi | pombump | 0.0.12-r3 |
| wolfi | postgres-operator | 1.12.0-r1 |
| wolfi | prometheus-adapter | 0.12.0-r1 |
| wolfi | prometheus-alertmanager | 0.27.0-r6 |
| wolfi | prometheus-operator | 0.74.0-r1 |
| wolfi | prometheus-pushgateway | 1.8.0-r4 |
| wolfi | protoc-gen-go | 1.34.1-r3 |
| wolfi | protoc-gen-go-grpc | 1.4.0-r1 |
| wolfi | pulumi-kubernetes-operator | 1.15.0-r5 |
| wolfi | pulumi-language-dotnet | 3.63.1-r2 |
| wolfi | pulumi-language-java | 0.12.0-r1 |
| wolfi | q | 0.19.2-r6 |
| wolfi | rabbitmq-cluster-operator | 2.9.0-r1 |
| wolfi | rabbitmq-default-user-credential-updater | 1.0.4-r2 |
| wolfi | rabbitmq-messaging-topology-operator | 1.14.1-r2 |
| wolfi | rclone | 1.66.0-r4 |
| wolfi | redka | 0.5.0-r1 |
| wolfi | regclient | 0.6.1-r1 |
| wolfi | rekor | 1.3.6-r4 |
| wolfi | render-template | 1.0.6-r5 |
| wolfi | restic | 0.16.4-r10 |
| wolfi | rook | 1.14.5-r1 |
| wolfi | rootlesskit | 2.1.0-r2 |
| wolfi | runc | 1.1.12-r7 |
| wolfi | s5cmd | 2.2.2-r4 |
| wolfi | sbom-scorecard | 0.0.7-r13 |
| wolfi | sbomqs | 0.1.4-r1 |
| wolfi | scorecard | 4.13.1-r9 |
| wolfi | secrets-store-csi-driver | 1.4.3-r2 |
| wolfi | secrets-store-csi-driver-provider-aws | 0.3.9-r1 |
| wolfi | secrets-store-csi-driver-provider-azure | 1.5.2-r2 |
| wolfi | secrets-store-csi-driver-provider-gcp | 1.5.0-r6 |
| wolfi | shfmt | 3.8.0-r4 |
| wolfi | sigstore-scaffolding | 0.7.1-r1 |
| wolfi | skaffold | 2.12.0-r1 |
| wolfi | skopeo | 1.15.1-r1 |
| wolfi | slsa-verifier | 2.5.1-r7 |
| wolfi | smarter-device-manager | 1.20.11-r8 |
| wolfi | snyk-cli | 1.1291.1-r1 |
| wolfi | sonobuoy | 0.57.1-r7 |
| wolfi | sops | 3.8.1-r8 |
| wolfi | speedtest-go | 1.7.7-r1 |
| wolfi | spegel | 0.0.22-r2 |
| wolfi | spicedb | 1.33.0-r1 |
| wolfi | spire-server | 1.9.6-r1 |
| wolfi | spqr | 1.3.0-r4 |
| wolfi | src | 5.4.0-r1 |
| wolfi | src-fingerprint | 0.19.0-r15 |
| wolfi | step | 0.26.1-r2 |
| wolfi | step-ca | 0.26.1-r2 |
| wolfi | step-issuer | 0.9.1-r5 |
| wolfi | stern | 1.30.0-r1 |
| wolfi | supercronic | 0.2.29-r8 |
| wolfi | swagger | 0.31.0-r1 |
| wolfi | syft | 1.5.0-r1 |
| wolfi | tailscale | 1.66.4-r1 |
| wolfi | task | 3.37.2-r2 |
| wolfi | tekton-chains | 0.21.0-r1 |
| wolfi | temporal | 0.12.0-r3 |
| wolfi | temporal-ui-server | 2.27.2-r1 |
| wolfi | terraform | 1.5.7-r12 |
| wolfi | terraform-docs | 0.18.0-r1 |
| wolfi | terraform-provider-aws | 5.52.0-r1 |
| wolfi | terraform-provider-azurerm | 3.106.1-r1 |
| wolfi | terraform-provider-google | 5.32.0-r1 |
| wolfi | terragrunt | 0.58.14-r1 |
| wolfi | tflint | 0.51.1-r1 |
| wolfi | tfsec | 1.28.6-r2 |
| wolfi | thanos | 0.35.1-r1 |
| wolfi | thanos-operator | 0.3.7-r18 |
| wolfi | timestamp-authority | 1.2.2-r8 |
| wolfi | timoni | 0.21.0-r2 |
| wolfi | tkn | 0.37.0-r1 |
| wolfi | trillian | 1.6.0-r7 |
| wolfi | trivy | 0.52.0-r2 |
| wolfi | trust-manager | 0.11.0-r1 |
| wolfi | up | 0.30.0-r1 |
| wolfi | vault-k8s | 1.4.1-r2 |
| wolfi | vcluster | 0.19.5-r2 |
| wolfi | velero | 1.13.2-r5 |
| wolfi | velero-plugin-for-aws | 1.9.2-r5 |
| wolfi | velero-plugin-for-csi | 0.7.1-r5 |
| wolfi | vexctl | 0.2.6-r8 |
| wolfi | volume-modifier-for-k8s | 0.2.1-r6 |
| wolfi | vt-cli | 1.0.0-r7 |
| wolfi | wait-for-port | 1.0.7-r5 |
| wolfi | wave | 0.8.0-r3 |
| wolfi | wazero | 1.7.2-r1 |
| wolfi | weaviate | 1.25.2-r1 |
| wolfi | wgcf | 2.2.22-r2 |
| wolfi | wire-go | 0.6.0-r4 |
| wolfi | wireguard-go | 0.0.20230223-r12 |
| wolfi | wolfictl | 0.16.15-r1 |
| wolfi | xcaddy | 0.4.2-r1 |
| wolfi | yam | 0.0.7-r2 |
| wolfi | yq | 4.44.1-r2 |
| wolfi | ytt | 0.49.0-r5 |
| wolfi | zarf | 0.34.0-r1 |
References
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790
- http://www.openwall.com/lists/oss-security/2024/06/04/1
- https://access.redhat.com/errata/RHSA-2025:7256
- https://access.redhat.com/security/cve/CVE-2024-24790
- https://bugzilla.redhat.com/2237777
- https://bugzilla.redhat.com/2237778
- https://bugzilla.redhat.com/2279814
- https://bugzilla.redhat.com/2292787
All 41 references
- https://bugzilla.redhat.com/2295310
- https://bugzilla.redhat.com/2315719
- https://bugzilla.redhat.com/show_bug.cgi?id=2237777
- https://bugzilla.redhat.com/show_bug.cgi?id=2237778
- https://bugzilla.redhat.com/show_bug.cgi?id=2279814
- https://bugzilla.redhat.com/show_bug.cgi?id=2292787
- https://bugzilla.redhat.com/show_bug.cgi?id=2295310
- https://bugzilla.redhat.com/show_bug.cgi?id=2315719
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39321
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39322
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24788
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24790
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-24791
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9355
- https://errata.almalinux.org/9/ALSA-2025-7256.html
- https://errata.rockylinux.org/RLSA-2025:7256
- https://github.com/bottlerocket-os/bottlerocket-core-kit/blob/develop/advisories/2.9.0/BRSA-glvb5gspjgq6.toml
- https://github.com/golang/go/commit/051bdf3fd12a40307606ff9381138039c5f452f0%20%281.21%29
- https://github.com/golang/go/commit/12d5810cdb1f73cf23d7a86462143e9463317fca%20%281.22%29
- https://github.com/golang/go/issues/67680
- https://go.dev/cl/590316
- https://go.dev/issue/67680
- https://groups.google.com/g/golang-announce/c/XbxouI9gY7k
- https://groups.google.com/g/golang-announce/c/XbxouI9gY7k/m/TuoGEhxIEwAJ
- https://linux.oracle.com/cve/CVE-2024-24790.html
- https://linux.oracle.com/errata/ELSA-2025-7256.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-24790
- https://pkg.go.dev/vuln/GO-2024-2887
- https://security.netapp.com/advisory/ntap-20240905-0002/
- https://ubuntu.com/security/notices/USN-6886-1
- https://ubuntu.com/security/notices/USN-7109-1
- https://www.cve.org/CVERecord?id=CVE-2024-24790