StackRadar

CVE-2025-15558

High

Advisory

Published 5 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
360
of 17,781 indexed, latest versions
Container images
356
deployed by those charts
Fix available
1 of 2
affected packages

Docker CLI Plugins: Uncontrolled Search Path Element Leads to Local Privilege Escalation on Windows

Carried by container images the latest versions of 360 of 17,781 indexed charts deploy, on 356 images.

Affected packageAffected versionsFixed inImages
github.com/docker/cligolangv0.0.0-20181219132003-336b2a5cac7f, v0.0.0-20190506213505-d88565df0c2d, v0.0.0-20191017083524-a8ff7f821017, v0.0.0-20200130152716-5d0cf8839492+64 more29.2.0, 29.2.0+incompatible356
github.com/docker/compose/v2golangv2.40.3no fix listed1
OSV records
GHSA-p436-gjf2-799pGO-2026-4610
Also known as
BIT-docker-cli-2025-15558

Charts affected

360 by stars
ChartLatestAffected imagesRadar Score
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/docker/cli@v25.0.1+incompatible
29.2.0

Open the chart page →

1,394
door-agentcnoVerified publisher3.0.154 of 15See more

door-agent cno 3.0.15

4 of the 15 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
github.com/docker/cli@v25.0.1+incompatible
29.2.0
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/docker/cli@v20.10.21+incompatible
29.2.0
library/docker:27-cli851f91d24121
github.com/docker/cli@v27.5.0+incompatible
29.2.0
library/docker:27-dindaa3df78ecf32
github.com/docker/cli@v27.5.0+incompatible
29.2.0

Open the chart page →

19,338
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

8,408
cosmo-traefikcosmoVerified publisher0.9.11 of 2See more

cosmo-traefik cosmo 0.9.1

1 of the 2 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
library/traefik:v2.10.11489caffaedb
github.com/docker/cli@v20.10.11+incompatible
29.2.0

Open the chart page →

3,672
katibcowboysysopVerified publisher2.4.21 of 4See more

katib cowboysysop 2.4.2

1 of the 4 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
kubeflowkatib/katib-controller:v0.12.012a28c8a0b41
github.com/docker/cli@v0.0.0-20191017083524-a8ff7f821017
29.2.0+incompatible

Open the chart page →

6,542
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.7.11c46aa0ded8ed
github.com/docker/cli@v28.2.2+incompatible
29.2.0

Open the chart page →

58,897
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/docker/cli@v20.10.21+incompatible
29.2.0

Open the chart page →

15,380
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/docker/cli@v28.3.3+incompatible
29.2.0

Open the chart page →

22,193
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
github.com/docker/cli@v27.1.1+incompatible
29.2.0

Open the chart page →

1,994
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/docker/cli@v0.0.0-20190506213505-d88565df0c2d
29.2.0+incompatible

Open the chart page →

7,486
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/docker/cli@v20.10.9+incompatible
29.2.0
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/docker/cli@v20.10.9+incompatible
29.2.0

Open the chart page →

4,722
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/cli@v27.0.3+incompatible
29.2.0

Open the chart page →

9,607
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

10,466
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/cli@v20.10.17+incompatible
29.2.0

Open the chart page →

12,949
argo-workflowdevtron0.1.61 of 1See more

argo-workflow devtron 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/cli@v20.10.17+incompatible
29.2.0

Open the chart page →

1,580
devtron-enterprisedevtron48.0.03 of 28See more

devtron-enterprise devtron 48.0.0

3 of the 28 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/cli@v24.0.5+incompatible
29.2.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/cli@v20.10.17+incompatible
29.2.0
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
github.com/docker/cli@v24.0.6+incompatible
29.2.0

Open the chart page →

68,240
securitydevtron0.2.21 of 1See more

security devtron 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/cli@v20.10.7+incompatible
29.2.0

Open the chart page →

2,435
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
github.com/docker/cli@v27.0.3+incompatible
29.2.0

Open the chart page →

9,607
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

10,466
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/docker/cli@v20.10.17+incompatible
29.2.0

Open the chart page →

12,949
argo-workflowdevtron-labs0.1.61 of 1See more

argo-workflow devtron-labs 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/argoproj/workflow-controller:v3.4.7f0c6fba81a24
github.com/docker/cli@v20.10.17+incompatible
29.2.0

Open the chart page →

1,580
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
github.com/docker/cli@v20.10.7+incompatible
29.2.0

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.03 of 28See more

devtron-enterprise devtron-labs 48.0.0

3 of the 28 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/docker/cli@v24.0.5+incompatible
29.2.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/cli@v20.10.17+incompatible
29.2.0
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
github.com/docker/cli@v24.0.6+incompatible
29.2.0

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/docker/cli@v20.10.17+incompatible
29.2.0

Open the chart page →

32,902
securitydevtron-labs0.2.21 of 1See more

security devtron-labs 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/devtron/image-scanner:b278f42b-334-1111988c64b1b6ec8
github.com/docker/cli@v20.10.7+incompatible
29.2.0

Open the chart page →

2,435
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
github.com/docker/cli@v28.3.1+incompatible
29.2.0

Open the chart page →

1,411
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

8,408
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/docker/cli@v23.0.3+incompatible
29.2.0

Open the chart page →

3,659
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

7,255
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
github.com/docker/cli@v27.3.1+incompatible
29.2.0

Open the chart page →

6,678
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/docker/cli@v0.0.0-20200130152716-5d0cf8839492
29.2.0+incompatible

Open the chart page →

7,510
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
github.com/docker/cli@v24.0.6+incompatible
29.2.0

Open the chart page →

1,259
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/docker/cli@v20.10.11+incompatible
29.2.0

Open the chart page →

13,450
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/docker/cli@v0.0.0-20190506213505-d88565df0c2d
29.2.0+incompatible

Open the chart page →

14,673
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/docker/cli@v27.5.0+incompatible
29.2.0

Open the chart page →

5,292
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
github.com/docker/cli@v28.3.3+incompatible
29.2.0

Open the chart page →

8,902
mission-control-tenantflanksourceVerified publisher1.0.922 of 3See more

mission-control-tenant flanksource 1.0.92

2 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/docker/cli@v24.0.5+incompatible
29.2.0
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
github.com/docker/cli@v23.0.0-rc.1+incompatible
29.2.0

Open the chart page →

5,684
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
github.com/docker/cli@v28.5.1+incompatible
29.2.0

Open the chart page →

2,420
flyte-devboxflyte0.1.01 of 13See more

flyte-devbox flyte 0.1.0

1 of the 13 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
gcr.io/knative-releases/knative.dev/serving/cmd/controllerdigest-pinned5b93308a392c
github.com/docker/cli@v27.5.1+incompatible
29.2.0

Open the chart page →

4,628
transsmutegabe565Verified publisher1.1.01 of 1See more

transsmute gabe565 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/docker/cli@v27.5.0+incompatible
29.2.0

Open the chart page →

794
galoygaloymoney0.34.71 of 24See more

galoy galoymoney 0.34.7

1 of the 24 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
oryd/kratos:v1.0.0d06fc5845f63
github.com/docker/cli@v20.10.21+incompatible
29.2.0

Open the chart page →

8,677
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/docker/cli@v20.10.17+incompatible
29.2.0

Open the chart page →

2,155
galoygaloymoney20.34.71 of 24See more

galoy galoymoney2 0.34.7

1 of the 24 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
oryd/kratos:v1.0.0d06fc5845f63
github.com/docker/cli@v20.10.21+incompatible
29.2.0

Open the chart page →

8,677
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/docker/cli@v20.10.17+incompatible
29.2.0

Open the chart page →

2,155
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/docker/cli@v20.10.3-0.20220226190722-8667ccd1124c+incompatible
29.2.0

Open the chart page →

4,547
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2025-15558.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/docker/cli@v29.1.1+incompatible
29.2.0

Open the chart page →

3,376

Container images carrying it

356 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
layer5/meshery-osm:stable-latestec898e5786c6
github.com/docker/cli@v20.10.21+incompatible
29.2.0
1
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/docker/cli@v20.10.21+incompatible
29.2.0
1
library/docker:24.0.2-dind1d148deae16a
github.com/docker/cli@v24.0.2+incompatible
29.2.0
1
library/docker:28.5.2-dind2a232a42256f
github.com/docker/cli@v28.4.0+incompatible
29.2.0
1
library/docker:20.10.21-dind3153fa63f546
github.com/docker/cli@v20.10.3-0.20220803220330-418ca3b4d46f+incompatible
29.2.0
1
library/docker:27-cli851f91d24121
github.com/docker/cli@v27.5.0+incompatible
29.2.0
1
library/docker:27-dindaa3df78ecf32
github.com/docker/cli@v27.5.0+incompatible
29.2.0
1
library/docker:23.0.6-dindafa5d5134900
github.com/docker/cli@v24.0.6+incompatible
29.2.0
1
library/docker:23.0.1-dindd9a0fd8bdd15
github.com/docker/cli@v23.0.1+incompatible
29.2.0
1
library/docker:26.1-dinddd43b430341a
github.com/docker/cli@v27.1.0+incompatible
29.2.0
1
library/traefik:v2.11.00a5157f742d2
github.com/docker/cli@v24.0.7+incompatible
29.2.0
1
library/traefik:3.3.5104204dadedf
github.com/docker/cli@v27.1.1+incompatible
29.2.0
1
library/traefik:v2.10.11489caffaedb
github.com/docker/cli@v20.10.11+incompatible
29.2.0
1
library/traefik:2.10.61957e3314f43
github.com/docker/cli@v20.10.11+incompatible
29.2.0
1
library/traefik:2.5.62f603f8d3abe
github.com/docker/cli@v20.10.11+incompatible
29.2.0
1
library/traefik:2.5.47d0228d19042
github.com/docker/cli@v0.0.0-20200221155518-740919cc7fc0
29.2.0+incompatible
1
library/traefik:2.4.8eda951fd29a8
github.com/docker/cli@v0.0.0-20200221155518-740919cc7fc0
29.2.0+incompatible
1
library/traefik:2.2.8f5af5a5ce17f
github.com/docker/cli@v0.0.0-20200221155518-740919cc7fc0
29.2.0+incompatible
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/docker/cli@v20.10.3-0.20220226190722-8667ccd1124c+incompatible
29.2.0
1
logiqai/flash:v3.10.265b996bc7bdc
github.com/docker/cli@v24.0.7+incompatible
29.2.0
1
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/docker/cli@v20.10.21+incompatible
29.2.0
1
minio/operator:v5.0.9170b154d2c61
github.com/docker/cli@v20.10.22+incompatible
29.2.0
1
minio/operator:v4.1.02adc5be088f5
github.com/docker/cli@v0.0.0-20191017083524-a8ff7f821017
29.2.0+incompatible
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/docker/cli@v20.10.12+incompatible
29.2.0
1
murtazashah46/helmfile:latest4d11726cf803
github.com/docker/cli@v20.10.21+incompatible
29.2.0
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/docker/cli@v20.10.5+incompatible
29.2.0
1
oryd/kratos:v1.1.08f15006a080d
github.com/docker/cli@v20.10.21+incompatible
29.2.0
1
phntom/chartmuseum:v0.16.053883b65d9b7
github.com/docker/cli@v20.10.21+incompatible
29.2.0
1
phntom/chartmuseum:v0.15.29242b4df9e65
github.com/docker/cli@v20.10.17+incompatible
29.2.0
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/docker/cli@v25.0.1+incompatible
29.2.0
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/docker/cli@v20.10.9+incompatible
29.2.0
1
portainer/portainer-ce:2.45.0511f3f06c96f
github.com/docker/cli@v28.5.1+incompatible
github.com/docker/compose/v2@v2.40.3
29.2.0
no fix listed
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/docker/cli@v24.0.5+incompatible
29.2.0
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/docker/cli@v20.10.14+incompatible
29.2.0
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
github.com/docker/cli@v25.0.1+incompatible
29.2.0
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
github.com/docker/cli@v25.0.1+incompatible
29.2.0
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/docker/cli@v20.10.11+incompatible
29.2.0
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/docker/cli@v0.0.0-20190506213505-d88565df0c2d
29.2.0+incompatible
1
thmmniii/fbs-runner:v1.27.186105349c1a3
github.com/docker/cli@v23.0.0-rc.1+incompatible
29.2.0
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/docker/cli@v25.0.1+incompatible
29.2.0
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/docker/cli@v26.1.4+incompatible
29.2.0
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/docker/cli@v28.1.1+incompatible
29.2.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
github.com/docker/cli@v0.0.0-20200210162036-a4bedce16568
29.2.0+incompatible
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/docker/cli@v20.10.20+incompatible
29.2.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/docker/cli@v20.10.12+incompatible
29.2.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/docker/cli@v20.10.20+incompatible
29.2.0
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerb2cd45b8a8a4
github.com/docker/cli@v0.0.0-20200210162036-a4bedce16568
29.2.0+incompatible
1
gcr.io/projectsigstore/cosigned784518ff3ee7
github.com/docker/cli@v20.10.12+incompatible
29.2.0
1
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
github.com/docker/cli@v20.10.12+incompatible
29.2.0
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
github.com/docker/cli@v29.0.3+incompatible
29.2.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.