StackRadar

CVE-2026-33487

High

Advisory

Published 18 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
127
of 17,781 indexed, latest versions
Container images
97
deployed by those charts
Fix available
1 of 1
affected package

validateSignature Loop Variable Capture Signature Bypass in goxmldsig

Carried by container images the latest versions of 127 of 17,781 indexed charts deploy, on 97 images.

Affected packageAffected versionsFixed inImages
github.com/russellhaering/goxmldsiggolangv0.0.0-20180430223755-7acd5e4a6ef7, v0.0.0-20200902171629-2e1fbc2c5593, v1.1.0, v1.1.1+4 more1.6.097
OSV records
GHSA-479m-364c-43vc
Also known as
GO-2026-4753

Charts affected

127 by stars
ChartLatestAffected imagesRadar Score
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

10,466
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

68,240
kube-prometheus-stackdevtron19.3.01 of 6See more

kube-prometheus-stack devtron 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

8,645
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

10,466
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

32,902
kube-prometheus-stackdevtron-labs19.3.01 of 6See more

kube-prometheus-stack devtron-labs 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:8.2.500568d89c4f8
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

8,645
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

5,174
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

13,558
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

20,205
grafana-dashboardsdysnixVerified publisher0.2.21 of 2See more

grafana-dashboards dysnix 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:7.4.5d322192ed2fa
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

5,161
grafanaedu5.3.01 of 1See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

3,191
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
emqx/ecp-main:2.5.1fa876f71e5d6
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

23,685
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

8,648
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

7,329
grafanaflagger1.7.01 of 1See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:7.3.46d42886b3ebe
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.6.0

Open the chart page →

3,365
monitoringgaloymoney0.12.211 of 6See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

5,295
monitoringgaloymoney20.12.211 of 6See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

5,295
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

3,236
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

22,512
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
governify/dashboard:lateste83a17ba5038
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

24,319
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

49,025
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
supabase/gotrue:v2.91.07174d551d720
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

24,995
logging-stackhelm-charts-alexis-carbillet0.1.01 of 9See more

logging-stack helm-charts-alexis-carbillet 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

12,650
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

9,460
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization:3.03426deb77337
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

11,069
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

45,239
jx-app-flaggerjenkins-x0.0.51 of 2See more

jx-app-flagger jenkins-x 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:6.5.1befcd84da2c1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

6,028
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

19,168
casdoorkrzwiatrzyk1.0.01 of 1See more

casdoor krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
casbin/casdoor:v1.224.066f836ef778b
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

3,649
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
kubebb/oidc-server:v0.2.02b5894ef1e2f
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

13,819
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

2,299
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

3,561
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:9.5.239c849cebccc
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0

Open the chart page →

18,316
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

14,320
grafanaleechistest5.3.01 of 1See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

3,191
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

7,510
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

3,225
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

2,444
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

3,225
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0

Open the chart page →

4,089
dexmesosphere-stable2.14.12 of 5See more

dex mesosphere-stable 2.14.1

2 of the 5 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

19,214
kommandermesosphere-stable0.39.22 of 29See more

kommander mesosphere-stable 0.39.2

2 of the 29 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0

Open the chart page →

68,284
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0

Open the chart page →

15,855
cognativemyaVerified publisher0.2403.31 of 3See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

7,309
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0

Open the chart page →

2,966
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0

Open the chart page →

2,346
one-green-coreone-green-coreVerified publisher0.0.71 of 8See more

one-green-core one-green-core 0.0.7

1 of the 8 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
grafana/grafana:8.5.3ecc1b80b8ca2
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0

Open the chart page →

9,558
mattermost-team-editionopenshift6.6.831 of 4See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-33487.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0

Open the chart page →

4,089

Container images carrying it

97 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
grafana/grafana:9.1.19746858c20e6
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:9.0.1a738d0744784
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:10.4.19a9043254ba16
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
grafana/grafana:11.1.3b23b588cf7cb
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
grafana/grafana:6.5.1befcd84da2c1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
1
grafana/grafana:8.3.5cd7cb4345aa7
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:8.3.4cf81d2c753c8
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:7.4.5d322192ed2fa
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
grafana/grafana:8.5.3ecc1b80b8ca2
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
grafana/grafana:10.4.0f9811e4e687f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
grafana/grafana:11.3.1fa801ab6e1ae
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
intel/multimodal-data-visualization:3.03426deb77337
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
ixsystems/truecommand:3.2.019c218455cd2
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
kubebb/oidc-server:v0.2.02b5894ef1e2f
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
mesosphere/dex-controller:v0.16.11b2dd9c0b0fc
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
orbitalreg/orbitalreg-api:0.1.045f2620337af
github.com/russellhaering/goxmldsig@v1.3.0
1.6.0
1
owncloud/ocis:7.1.388e7c854517d
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
owncloud/ocis:8.0.1b38fd8fdd58f
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0
1
owncloud/ocis:1.7.0d2efcae92c84
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
1
subspacecommunity/subspace:1.5.0e2042b63fb35
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
1
supabase/gotrue:v2.91.07174d551d720
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
supabase/gotrue:v2.163.0ba4ddc594b0b
github.com/russellhaering/goxmldsig@v1.3.0
1.6.0
1
surajwarbhe/grafana:v185248611e9f1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.6.0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
uptrace/uptrace:2.0.234a02c3b2d12
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-1.81.067f4f162da8d
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-1.82.2989a60847416
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
github.com/russellhaering/goxmldsig@v1.1.0
1.6.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/russellhaering/goxmldsig@v1.5.0
1.6.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/doodlescheduling/saml-exporter:v0.5.03d5a99841bc2
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/russellhaering/goxmldsig@v1.2.0
1.6.0
1
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/russellhaering/goxmldsig@v1.1.1
1.6.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
github.com/russellhaering/goxmldsig@v1.4.0
1.6.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.