StackRadar

CVE-2026-32287

High

Advisory

Published 17 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
52
of 17,781 indexed, latest versions
Container images
48
deployed by those charts
Fix available
1 of 1
affected package

XPath: Boolean expression infinite loop leads to denial of service via CPU exhaustion

Carried by container images the latest versions of 52 of 17,781 indexed charts deploy, on 48 images.

Affected packageAffected versionsFixed inImages
github.com/antchfx/xpathgolangv1.1.6, v1.1.10, v1.1.11, v1.2.0+9 more1.3.648
OSV records
GHSA-65xw-vw82-r86x
Also known as
GO-2026-4526

Charts affected

52 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/antchfx/xpath@v1.3.3
1.3.6

Open the chart page →

23,894
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

9,864
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

3,157
aws-cloudwatch-metricsaws0.0.111 of 1See more

aws-cloudwatch-metrics aws 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

1,556
k8s-infrasignoz0.17.11 of 1See more

k8s-infra signoz 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

1,039
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/antchfx/xpath@v1.3.2
1.3.6

Open the chart page →

4,531
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
wait4x/wait4x:3.3.14dcd86307de1
github.com/antchfx/xpath@v1.3.3
1.3.6

Open the chart page →

9,106
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/antchfx/xpath@v1.2.1
1.3.6

Open the chart page →

3,793
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

14,917
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ddosify/selfhosted_hammer:2.0.0181965edb12e
github.com/antchfx/xpath@v1.2.1
1.3.6

Open the chart page →

22,202
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
github.com/antchfx/xpath@v1.1.6
1.3.6

Open the chart page →

15,856
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.322 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

2 of the 17 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
github.com/antchfx/xpath@v1.3.5
1.3.6
grafana/tempo:2.9.065a578975943
github.com/antchfx/xpath@v1.3.4
1.3.6

Open the chart page →

15,418
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/antchfx/xpath@v1.3.2
1.3.6

Open the chart page →

4,137
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
github.com/antchfx/xpath@v1.3.0
1.3.6

Open the chart page →

4,460
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ddosify/selfhosted_hammer:1.4.2a97a1b8a66af
github.com/antchfx/xpath@v1.2.1
1.3.6

Open the chart page →

25,669
capa-vpc-peering-operatorappscodeVerified publisher2023.12.111 of 1See more

capa-vpc-peering-operator appscode 2023.12.11

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

1,433
kubedb-provider-awsappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-aws appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

2,527
kubedb-provider-azureappscodeVerified publisher2026.7.101 of 1See more

kubedb-provider-azure appscode 2026.7.10

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

2,705
kubedb-provider-gcpappscodeVerified publisher2026.7.101 of 2See more

kubedb-provider-gcp appscode 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

3,033
kubeform-provider-awsappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-aws appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

2,796
kubeform-provider-azureappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-azure appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

2,716
kubeform-provider-gcpappscodeVerified publisher2023.11.11 of 1See more

kubeform-provider-gcp appscode 2023.11.1

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

2,743
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
github.com/antchfx/xpath@v1.3.3
1.3.6

Open the chart page →

15,027
dapr-agentsdapr-agents-devVerified publisher0.1.52 of 31See more

dapr-agents dapr-agents-dev 0.1.5

2 of the 31 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
github.com/antchfx/xpath@v1.3.4
1.3.6
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

22,193
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/antchfx/xpath@v1.3.3
1.3.6

Open the chart page →

3,470
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
library/telegraf:1.27507a3eecf809
github.com/antchfx/xpath@v1.2.5-0.20230505064641-588960cceeac
1.3.6

Open the chart page →

23,685
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.22 of 18See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
github.com/antchfx/xpath@v1.3.5
1.3.6
grafana/tempo:2.9.065a578975943
github.com/antchfx/xpath@v1.3.4
1.3.6

Open the chart page →

13,255
podgrabgabe565Verified publisher0.5.21 of 1See more

podgrab gabe565 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/akhilrex/podgrab:1.0.0bce133f3f511
github.com/antchfx/xpath@v1.1.10
1.3.6

Open the chart page →

2,401
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/antchfx/xpath@v1.3.1
1.3.6

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/antchfx/xpath@v1.3.1
1.3.6

Open the chart page →

11,961
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/antchfx/xpath@v1.3.2
1.3.6

Open the chart page →

49,025
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

8,188
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/antchfx/xpath@v1.3.2
1.3.6

Open the chart page →

1,384
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
github.com/antchfx/xpath@v1.3.3
1.3.6

Open the chart page →

4,439
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
github.com/antchfx/xpath@v1.3.2
1.3.6

Open the chart page →

20,204
telegraf-dslsst-sqre1.0.231 of 1See more

telegraf-ds lsst-sqre 1.0.23

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
library/telegraf:1.19-alpineaddb86c0c520
github.com/antchfx/xpath@v1.1.11
1.3.6

Open the chart page →

3,764
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/antchfx/xpath@v1.3.3
1.3.6

Open the chart page →

21,064
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/antchfx/xpath@v1.3.4
1.3.6

Open the chart page →

17,070
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
library/telegraf:1.20.428e98eece020
github.com/antchfx/xpath@v1.1.11
1.3.6

Open the chart page →

9,558
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

5,017
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/antchfx/xpath@v1.3.3
1.3.6

Open the chart page →

1,016
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/antchfx/xpath@v1.2.0
1.3.6

Open the chart page →

1,980
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/antchfx/xpath@v1.3.0
1.3.6

Open the chart page →

25,934
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/antchfx/xpath@v1.2.3
1.3.6

Open the chart page →

4,038
monitoringrocketchat-server0.0.171 of 9See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

6,859
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
github.com/antchfx/xpath@v1.3.4
1.3.6

Open the chart page →

1,597
rybbitrybbit-helm1.3.01 of 7See more

rybbit rybbit-helm 1.3.0

1 of the 7 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

5,819
temposb-helm-charts0.4.01 of 1See more

tempo sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
grafana/tempo:2.9.065a578975943
github.com/antchfx/xpath@v1.3.4
1.3.6

Open the chart page →

923
stashswuuper-githubVerified publisher0.1.161 of 1See more

stash swuuper-github 0.1.16

1 of the 1 container images this version deploys carry CVE-2026-32287.

Container imageDigestPackageFixed in
stashapp/stash:v0.31.1df744af5a0c9
github.com/antchfx/xpath@v1.3.5
1.3.6

Open the chart page →

2,396

Container images carrying it

48 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/tempo:2.9.065a578975943
github.com/antchfx/xpath@v1.3.4
1.3.6
4
alpine/k8s:1.32.12048f8d9c8cc7
github.com/antchfx/xpath@v1.3.5
1.3.6
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/antchfx/xpath@v1.3.3
1.3.6
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/antchfx/xpath@v1.3.5
1.3.6
2
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
github.com/antchfx/xpath@v1.3.1
1.3.6
2
alpine/k8s:1.31.106dbe6f391eda
github.com/antchfx/xpath@v1.3.4
1.3.6
1
alpine/k8s:1.31.137a319b15cfc9
github.com/antchfx/xpath@v1.3.5
1.3.6
1
alpine/k8s:1.32.47e1e7d5b7a96
github.com/antchfx/xpath@v1.3.3
1.3.6
1
alpine/k8s:1.31.49c4976d47656
github.com/antchfx/xpath@v1.3.2
1.3.6
1
alpine/k8s:1.30.0bd01dae02676
github.com/antchfx/xpath@v1.2.3
1.3.6
1
alpine/k8s:1.30.2cd560fce90f7
github.com/antchfx/xpath@v1.3.0
1.3.6
1
alpine/k8s:1.28.13e5c0b053fed7
github.com/antchfx/xpath@v1.3.0
1.3.6
1
alpine/k8s:1.32.3eec354133193
github.com/antchfx/xpath@v1.3.3
1.3.6
1
amazon/cloudwatch-agent:1.300032.2b36173b79b02f03a
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ddosify/selfhosted_hammer:2.0.0181965edb12e
github.com/antchfx/xpath@v1.2.1
1.3.6
1
ddosify/selfhosted_hammer:1.4.2a97a1b8a66af
github.com/antchfx/xpath@v1.2.1
1.3.6
1
grafana/alloy:v1.5.101a63f4e032c
github.com/antchfx/xpath@v1.3.2
1.3.6
1
grafana/alloy:v1.11.38c7256f412fe
github.com/antchfx/xpath@v1.3.5
1.3.6
1
grafana/alloy:v1.14.0f50931848bd8
github.com/antchfx/xpath@v1.3.5
1.3.6
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/antchfx/xpath@v1.3.5
1.3.6
1
jaegertracing/jaeger:2.9.0e128b9adbb29
github.com/antchfx/xpath@v1.3.4
1.3.6
1
library/telegraf:1.20.428e98eece020
github.com/antchfx/xpath@v1.1.11
1.3.6
1
library/telegraf:1.27507a3eecf809
github.com/antchfx/xpath@v1.2.5-0.20230505064641-588960cceeac
1.3.6
1
library/telegraf:1.19.0-alpine794079a7f241
github.com/antchfx/xpath@v1.1.11
1.3.6
1
library/telegraf:1.19-alpineaddb86c0c520
github.com/antchfx/xpath@v1.1.11
1.3.6
1
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/antchfx/xpath@v1.3.2
1.3.6
1
otel/opentelemetry-collector-contrib:0.143.03bc07732530c
github.com/antchfx/xpath@v1.3.5
1.3.6
1
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/antchfx/xpath@v1.3.2
1.3.6
1
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/antchfx/xpath@v1.3.5
1.3.6
1
otel/opentelemetry-collector-contrib:0.139.0faf125d656fa
github.com/antchfx/xpath@v1.3.5
1.3.6
1
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
github.com/antchfx/xpath@v1.3.3
1.3.6
1
stashapp/stash:latest24dbd7607174
github.com/antchfx/xpath@v1.1.6
1.3.6
1
stashapp/stash:v0.31.1df744af5a0c9
github.com/antchfx/xpath@v1.3.5
1.3.6
1
wait4x/wait4x:3.3.14dcd86307de1
github.com/antchfx/xpath@v1.3.3
1.3.6
1
ghcr.io/akhilrex/podgrab:1.0.0bce133f3f511
github.com/antchfx/xpath@v1.1.10
1.3.6
1
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
github.com/antchfx/xpath@v1.3.5
1.3.6
1
ghcr.io/kubedb/provider-aws:v0.27.049b1c312e342
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ghcr.io/kubedb/provider-azure:v0.27.0aa0c8526ae5e
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ghcr.io/kubedb/provider-gcp:v0.27.0a1d4cf8b8fe1
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ghcr.io/kubeform/provider-aws:v0.0.1e3d1f1302e49
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ghcr.io/kubeform/provider-azure:v0.0.1ac8459f70f85
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ghcr.io/kubeform/provider-gcp:v0.0.1af77073c184f
github.com/antchfx/xpath@v1.2.0
1.3.6
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
github.com/antchfx/xpath@v1.3.2
1.3.6
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/antchfx/xpath@v1.3.5
1.3.6
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/antchfx/xpath@v1.3.3
1.3.6
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/antchfx/xpath@v1.2.1
1.3.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.