StackRadar

CVE-2026-33487

High

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
127
of 17,781 indexed, latest versions
Container images
97
deployed by those charts
Fix available
1 of 1
affected package

validateSignature Loop Variable Capture Signature Bypass in goxmldsig

Carried by container images the latest versions of 127 of 17,781 indexed charts deploy, on 97 images.

Affected packageAffected versionsFixed inImages
github.com/russellhaering/goxmldsiggolangv0.0.0-20180430223755-7acd5e4a6ef7, v0.0.0-20200902171629-2e1fbc2c5593, v1.1.0, v1.1.1+4 more1.6.097
OSV records
GHSA-479m-364c-43vc
Also known as
GO-2026-4753

Charts affected

127 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.01 of 3See more

argo-cd argo 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0

Open the chart page →

3,218
argo-cdargo-cd-oci10.9.01 of 3See more

argo-cd argo-cd-oci 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0

Open the chart page →

3,218
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0

Open the chart page →

1,765
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

16,251
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
supabase/gotrue:v2.163.0ba4ddc594b0b
github.com/russellhaering/goxmldsig@v1.3.0
1.6.0

Open the chart page →

23,123
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

12,237
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

32,902
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

14,893
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.6.0

Open the chart page →

52,919
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

96,941
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

13,562
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:10.4.19a9043254ba16
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

24,700
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

3,675
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

17,693
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.6.0

Open the chart page →

12,125
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

15,477
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

10,315
uptraceuptrace2.0.21 of 2See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
uptrace/uptrace:2.0.234a02c3b2d12
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

1,619
argo-cdwenerme10.9.01 of 3See more

argo-cd wenerme 10.9.0

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0

Open the chart page →

3,218
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:9.4.376dcf36e7d2a
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

17,877
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

3,391
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

12,562
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:8.3.5cd7cb4345aa7
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

7,583
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0

Open the chart page →

10,037
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

52,635
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

2,238
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.6.0

Open the chart page →

10,454
dexgabibbo974.0.41 of 1See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

3,391
temporalglasskubeVerified publisher0.45.2-gk.11 of 14See more

temporal glasskube 0.45.2-gk.1

1 of the 14 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

16,346
carettagroundcover0.0.161 of 3See more

caretta groundcover 0.0.16

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

6,799
hawkhawk1.1.51 of 4See more

hawk hawk 1.1.5

1 of the 4 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:8.5.042d3e6bc1865
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

13,610
subspacemglants0.1.01 of 1See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
subspacecommunity/subspace:1.5.0e2042b63fb35
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

3,254
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-api:0.1.045f2620337af
github.com/russellhaering/goxmldsig@v1.3.0
1.6.0

Open the chart page →

2,278
grafanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

grafana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:8.3.4cf81d2c753c8
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

2,835
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

7,685
Grafanasurajwarbhe-grafana0.1.01 of 1See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
surajwarbhe/grafana:v185248611e9f1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

2,597
grafanaappscodeVerified publisher2026.9.111 of 1See more

grafana appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/appscode/grafana:v2025.2.367d18880448c
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

2,333
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

7,300
itera-lmaarzu1.34.601 of 6See more

itera-lma arzu 1.34.60

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:9.0.1a738d0744784
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

8,608
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

8,556
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

6,036
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

16,198
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

18,293
cortezacorteza1.0.121 of 3See more

corteza corteza 1.0.12

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

8,368
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

4,644
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

1,925
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

11,335
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

4,509

Container images carrying it

97 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:9.1.19746858c20e6
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:9.0.1a738d0744784
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:10.4.19a9043254ba16
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
grafana/grafana:11.1.3b23b588cf7cb
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
grafana/grafana:6.5.1befcd84da2c1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
1
grafana/grafana:8.3.5cd7cb4345aa7
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:8.3.4cf81d2c753c8
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:7.4.5d322192ed2fa
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
grafana/grafana:8.5.3ecc1b80b8ca2
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:10.4.0f9811e4e687f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
grafana/grafana:11.3.1fa801ab6e1ae
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
intel/multimodal-data-visualization:3.03426deb77337
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
ixsystems/truecommand:3.2.019c218455cd2
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
kubebb/oidc-server:v0.2.02b5894ef1e2f
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
orbitalreg/orbitalreg-api:0.1.045f2620337af
github.com/russellhaering/goxmldsig@v1.3.0
1.6.0
1
owncloud/ocis:7.1.388e7c854517d
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
owncloud/ocis:8.0.1b38fd8fdd58f
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0
1
owncloud/ocis:1.7.0d2efcae92c84
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
1
subspacecommunity/subspace:1.5.0e2042b63fb35
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
1
supabase/gotrue:v2.91.07174d551d720
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
supabase/gotrue:v2.163.0ba4ddc594b0b
github.com/russellhaering/goxmldsig@v1.3.0
1.6.0
1
surajwarbhe/grafana:v185248611e9f1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
uptrace/uptrace:2.0.234a02c3b2d12
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.