StackRadar

CVE-2023-49568

High

Advisory

Published 27 Dec 2023In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
82
of 17,781 indexed, latest versions
Container images
74
deployed by those charts
Fix available
1 of 2
affected packages

Maliciously crafted Git server replies can cause DoS on go-git clients

Carried by container images the latest versions of 82 of 17,781 indexed charts deploy, on 74 images.

Affected packageAffected versionsFixed inImages
github.com/go-git/go-git/v5golangv5.0.0, v5.1.0, v5.2.0, v5.3.0+7 more5.11.061
gopkg.in/src-d/go-git.v4golangv4.10.0, v4.13.1no fix listed16
OSV records
GHSA-mw99-9chc-xw7r
Also known as
GO-2024-2466

Charts affected

82 by stars
ChartLatestAffected imagesRadar Score
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed

Open the chart page →

4,086
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed

Open the chart page →

5,173
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/go-git/go-git/v5@v5.2.0
gopkg.in/src-d/go-git.v4@v4.13.1
5.11.0
no fix listed

Open the chart page →

4,167
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.11.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

32,902
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

17,693
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

15,477
argocdtwomartensVerified publisher0.1.12 of 3See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-git/go-git/v5@v5.4.2
5.11.0
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/go-git/go-git/v5@v5.7.0
5.11.0

Open the chart page →

10,315
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
grafana/grafana:9.4.376dcf36e7d2a
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

17,877
soft-servealphani-helm-chartsVerified publisher0.4.01 of 1See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
charmcli/soft-serve:v0.4.039523c1a6ba8
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.11.0

Open the chart page →

3,119
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/go-git/go-git/v5@v5.2.0
5.11.0

Open the chart page →

5,222
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/go-git/go-git/v5@v5.2.0
5.11.0

Open the chart page →

3,391
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/go-git/go-git/v5@v5.7.0
5.11.0

Open the chart page →

2,898
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

5,598
dexgabibbo974.0.41 of 1See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/go-git/go-git/v5@v5.2.0
5.11.0

Open the chart page →

3,391
carettagroundcover0.0.161 of 3See more

caretta groundcover 0.0.16

1 of the 3 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

6,799
giteakeyporttech0.2.101 of 4See more

gitea keyporttech 0.2.10

1 of the 4 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
gitea/gitea:1.12.485416d6f65fe
github.com/go-git/go-git/v5@v5.1.0
5.11.0

Open the chart page →

5,408
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/go-git/go-git/v5@v5.3.0
5.11.0

Open the chart page →

3,274
mesherykubesphere-stable0.5.03 of 13See more

meshery kubesphere-stable 0.5.0

3 of the 13 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/go-git/go-git/v5@v5.9.0
5.11.0
layer5/meshery-osm:stable-latestec898e5786c6
github.com/go-git/go-git/v5@v5.4.2
5.11.0
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

24,690
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/go-git/go-git/v5@v5.7.0
5.11.0

Open the chart page →

14,491
harbor-scanner-trivyaqua-helm0.17.01 of 1See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/go-git/go-git/v5@v5.0.0
5.11.0

Open the chart page →

5,202
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

8,556
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed

Open the chart page →

5,521
helm-controllerazureorkestra0.1.11 of 2See more

helm-controller azureorkestra 0.1.1

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/go-git/go-git/v5@v5.2.0
5.11.0

Open the chart page →

7,705
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
chaosnative/cle-server:2.7.0e7bcff4a20c0
github.com/go-git/go-git/v5@v5.3.0
5.11.0

Open the chart page →

16,389
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-git/go-git/v5@v5.3.0
gopkg.in/src-d/go-git.v4@v4.13.1
5.11.0
no fix listed

Open the chart page →

25,151
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/go-git/go-git/v5@v5.3.0
5.11.0

Open the chart page →

6,921
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

18,293
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.11.0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-git/v5@v5.7.0
5.11.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

68,240
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-git/v5@v5.6.1
5.11.0

Open the chart page →

5,039
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed

Open the chart page →

10,466
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.11.0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-git/v5@v5.7.0
5.11.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

68,240
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-git/v5@v5.6.1
5.11.0

Open the chart page →

5,039
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.11.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

32,902
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

13,558
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

7,329
admin-console-operatorepmdedpVerified publisher2.14.01 of 2See more

admin-console-operator epmdedp 2.14.0

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
epamedp/edp-admin-console:2.14.0616c678ba3e7
gopkg.in/src-d/go-git.v4@v4.10.0
no fix listed

Open the chart page →

4,308
reconcilerepmdedpVerified publisher2.12.01 of 1See more

reconciler epmdedp 2.12.0

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
epamedp/reconciler:2.12.0d33e938b6d59
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.11.0

Open the chart page →

2,180
codebase-operatorepmdedp-devVerified publisher2.12.0-MDTU-DDM-SNAPSHOT.101 of 1See more

codebase-operator epmdedp-dev 2.12.0-MDTU-DDM-SNAPSHOT.10

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
epamedp/codebase-operator:2.12.0-MDTU-DDM-SNAPSHOT.1096028c86f0dd
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.11.0

Open the chart page →

2,825
gerrit-operatorepmdedp-devVerified publisher2.11.0-MDTU-DDM-SNAPSHOT.21 of 1See more

gerrit-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.2

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
epamedp/gerrit-operator:2.11.0-MDTU-DDM-SNAPSHOT.2b71fb39e0c9e
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

2,811
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

13,450
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/go-git/go-git/v5@v5.6.1
5.11.0

Open the chart page →

6,078
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
github.com/go-git/go-git/v5@v5.1.0
5.11.0

Open the chart page →

3,236
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

3,478
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/go-git/go-git/v5@v5.6.1
5.11.0

Open the chart page →

2,607
goshimmerhiveroad0.2.141 of 1See more

goshimmer hiveroad 0.2.14

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
iotaledger/goshimmer:v0.8.6b02a8f77474f
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed

Open the chart page →

2,544
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed

Open the chart page →

10,494
gravity-initinvisiblVerified publisher1.0.91 of 1See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
invisibl/gravity-init:v1.0.91a970f84178b
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

2,006
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2023-49568.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/go-git/go-git/v5@v5.4.2
5.11.0

Open the chart page →

19,168

Container images carrying it

74 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
sikalabs/slu:v0.72.07bd267f30247
github.com/go-git/go-git/v5@v5.8.1
5.11.0
1
sikalabs/slu:v0.34.0fdc0c6711add
github.com/go-git/go-git/v5@v5.4.2
5.11.0
1
stakater/whitelister:v0.0.1639107924063e
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed
1
stakater/workshop-operator:v0.0.3897bf456cc97c
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/go-git/go-git/v5@v5.4.2
5.11.0
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/go-git/go-git/v5@v5.7.0
5.11.0
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/go-git/go-git/v5@v5.7.0
5.11.0
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/go-git/go-git/v5@v5.4.2
5.11.0
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-git/go-git/v5@v5.4.2
5.11.0
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/go-git/go-git/v5@v5.4.2
5.11.0
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/go-git/go-git/v5@v5.2.0
5.11.0
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/go-git/go-git/v5@v5.8.1
5.11.0
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
github.com/go-git/go-git/v5@v5.5.2
5.11.0
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
github.com/go-git/go-git/v5@v5.5.2
5.11.0
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
github.com/go-git/go-git/v5@v5.5.2
5.11.0
1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
github.com/go-git/go-git/v5@v5.5.2
5.11.0
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/go-git/go-git/v5@v5.4.2
5.11.0
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/go-git/go-git/v5@v5.7.0
5.11.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/go-git/go-git/v5@v5.3.0
5.11.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-git/go-git/v5@v5.3.0
gopkg.in/src-d/go-git.v4@v4.13.1
5.11.0
no fix listed
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/go-git/go-git/v5@v5.6.1
5.11.0
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/go-git/go-git/v5@v5.3.0
5.11.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
gopkg.in/src-d/go-git.v4@v4.13.1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.