StackRadar

CVE-2026-34165

Medium

Advisory

Published 30 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.0
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
154
of 17,781 indexed, latest versions
Container images
160
deployed by those charts
Fix available
1 of 1
affected package

go-git: Maliciously crafted idx file can cause asymmetric memory consumption

Carried by container images the latest versions of 154 of 17,781 indexed charts deploy, on 160 images.

Affected packageAffected versionsFixed inImages
github.com/go-git/go-git/v5golangv5.0.0, v5.1.0, v5.2.0, v5.3.0+18 more5.17.1160
OSV records
GHSA-jhf3-xxhw-2wpp
Also known as
GO-2026-4910

Charts affected

154 by stars
ChartLatestAffected imagesRadar Score
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
github.com/go-git/go-git/v5@v5.11.0
5.17.1

Open the chart page →

2,299
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

3,561
kubeclaritykubeclarity2.23.31 of 5See more

kubeclarity kubeclarity 2.23.3

1 of the 5 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/go-git/go-git/v5@v5.8.1
5.17.1

Open the chart page →

5,496
harborkubesphereVerified publisher1.9.31 of 11See more

harbor kubesphere 1.9.3

1 of the 11 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

17,798
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
grafana/grafana:9.5.239c849cebccc
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

18,316
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
github.com/go-git/go-git/v5@v5.11.0
5.17.1

Open the chart page →

20,204
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/go-git/go-git/v5@v5.12.0
5.17.1

Open the chart page →

6,824
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

4,271
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/go-git/go-git/v5@v5.11.0
5.17.1

Open the chart page →

9,774
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-git/go-git/v5@v5.13.0
5.17.1

Open the chart page →

21,064
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/go-git/go-git/v5@v5.1.0
5.17.1

Open the chart page →

12,010
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

19,214
kommandermesosphere-stable0.39.22 of 29See more

kommander mesosphere-stable 0.39.2

2 of the 29 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/go-git/go-git/v5@v5.2.0
5.17.1
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/go-git/go-git/v5@v5.1.0
5.17.1

Open the chart page →

68,284
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
github.com/go-git/go-git/v5@v5.14.0
5.17.1

Open the chart page →

10,180
argocd-extra-app-info-exportermikejohVerified publisher0.1.121 of 1See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
github.com/go-git/go-git/v5@v5.12.0
5.17.1

Open the chart page →

1,334
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
github.com/go-git/go-git/v5@v5.11.0
5.17.1

Open the chart page →

3,430
agent-control-cdnewrelic1.0.02 of 3See more

agent-control-cd newrelic 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/go-git/go-git/v5@v5.13.2
5.17.1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/go-git/go-git/v5@v5.13.2
5.17.1

Open the chart page →

5,034
giteanovum-rgi-charts2.1.31 of 3See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
gitea/gitea:1.13.0d5ab14cd29af
github.com/go-git/go-git/v5@v5.1.0
5.17.1

Open the chart page →

4,861
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
grafana/grafana:12.1.1a1701c218024
github.com/go-git/go-git/v5@v5.14.0
5.17.1

Open the chart page →

17,070
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
github.com/go-git/go-git/v5@v5.13.0
5.17.1

Open the chart page →

2,346
argocd-agent-addonocm-helm-chartsVerified publisher0.29.01 of 2See more

argocd-agent-addon ocm-helm-charts 0.29.0

1 of the 2 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-operator:v0.18.0a09814522a72
github.com/go-git/go-git/v5@v5.16.5
5.17.1

Open the chart page →

626
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/go-git/go-git/v5@v5.13.0
5.17.1

Open the chart page →

4,127
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/go-git/go-git/v5@v5.3.0
5.17.1

Open the chart page →

8,599
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/go-git/go-git/v5@v5.16.5
5.17.1
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/go-git/go-git/v5@v5.16.5
5.17.1

Open the chart page →

1,821
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/go-git/go-git/v5@v5.16.0
5.17.1

Open the chart page →

71,208
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

26,840
planectlplanectlVerified publisher0.7.03 of 10See more

planectl planectl 0.7.0

3 of the 10 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11c57233403eff
github.com/go-git/go-git/v5@v5.12.0
5.17.1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
github.com/go-git/go-git/v5@v5.16.5
5.17.1
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-git/go-git/v5@v5.13.2
5.17.1

Open the chart page →

25,934
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/go-git/go-git/v5@v5.16.2
5.17.1

Open the chart page →

1,837
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/go-git/go-git/v5@v5.11.0
5.17.1

Open the chart page →

16,047
devtron-enterpriseromholdings48.0.06 of 28See more

devtron-enterprise romholdings 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/go-git/go-git/v5@v5.13.2
5.17.1
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.17.1
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/go-git/go-git/v5@v5.16.0
5.17.1
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-git/v5@v5.7.0
5.17.1
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.17.1
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/go-git/go-git/v5@v5.16.5
5.17.1

Open the chart page →

68,240
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-git/v5@v5.6.1
5.17.1

Open the chart page →

5,039
devtron-operatorromholdings0.23.33 of 11See more

devtron-operator romholdings 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.17.1
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/go-git/go-git/v5@v5.13.2
5.17.1
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

32,902
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
github.com/go-git/go-git/v5@v5.13.2
5.17.1

Open the chart page →

2,620
gickupschichtelVerified publisher0.0.41 of 1See more

gickup schichtel 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.386b656f19b0c1
github.com/go-git/go-git/v5@v5.14.0
5.17.1

Open the chart page →

1,547
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/go-git/go-git/v5@v5.11.0
5.17.1

Open the chart page →

3,337
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/go-git/go-git/v5@v5.8.1
5.17.1

Open the chart page →

2,314
metrics-generatorsikalabs0.2.01 of 1See more

metrics-generator sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
sikalabs/slu:v0.34.0fdc0c6711add
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

2,381
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/go-git/go-git/v5@v5.7.0
5.17.1

Open the chart page →

7,672
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/go-git/go-git/v5@v5.7.0
5.17.1

Open the chart page →

2,505
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
github.com/go-git/go-git/v5@v5.12.0
5.17.1

Open the chart page →

2,416
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

10,134
grafanasvtech-public-helm-charts1.0.01 of 2See more

grafana svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/go-git/go-git/v5@v5.4.2
5.17.1

Open the chart page →

10,902
switchbladeswitchblade0.0.191 of 1See more

switchblade switchblade 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/go-git/go-git/v5@v5.11.0
5.17.1

Open the chart page →

1,360
agentssynapse0.1.303 of 9See more

agents synapse 0.1.30

3 of the 9 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
github.com/go-git/go-git/v5@v5.5.2
5.17.1
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/go-git/go-git/v5@v5.12.0
5.17.1
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
github.com/go-git/go-git/v5@v5.5.2
5.17.1

Open the chart page →

7,244
cctpsynapse0.3.01 of 4See more

cctp synapse 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
github.com/go-git/go-git/v5@v5.5.2
5.17.1

Open the chart page →

1,815
explorersynapse0.2.162 of 6See more

explorer synapse 0.2.16

2 of the 6 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/go-git/go-git/v5@v5.12.0
5.17.1
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/go-git/go-git/v5@v5.12.0
5.17.1

Open the chart page →

8,518
omnirpcsynapse0.2.921 of 2See more

omnirpc synapse 0.2.92

1 of the 2 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/go-git/go-git/v5@v5.12.0
5.17.1

Open the chart page →

1,121
promexportersynapse0.1.11 of 1See more

promexporter synapse 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
github.com/go-git/go-git/v5@v5.5.2
5.17.1

Open the chart page →

1,704
screenersynapse0.2.51 of 4See more

screener synapse 0.2.5

1 of the 4 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
github.com/go-git/go-git/v5@v5.12.0
5.17.1

Open the chart page →

1,091
scribesynapse0.2.162 of 7See more

scribe synapse 0.2.16

2 of the 7 container images this version deploys carry CVE-2026-34165.

Container imageDigestPackageFixed in
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/go-git/go-git/v5@v5.12.0
5.17.1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
github.com/go-git/go-git/v5@v5.12.0
5.17.1

Open the chart page →

2,680

Container images carrying it

160 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.17.1
6
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.17.1
6
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/go-git/go-git/v5@v5.12.0
5.17.1
4
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-git/go-git/v5@v5.16.4
5.17.1
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/go-git/go-git/v5@v5.13.2
5.17.1
3
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/go-git/go-git/v5@v5.16.0
5.17.1
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/go-git/go-git/v5@v5.13.2
5.17.1
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-git/v5@v5.7.0
5.17.1
3
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/go-git/go-git/v5@v5.16.5
5.17.1
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-git/v5@v5.6.1
5.17.1
3
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-git/go-git/v5@v5.13.0
5.17.1
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-git/go-git/v5@v5.16.2
5.17.1
2
grafana/grafana:9.2.4057896e23443
github.com/go-git/go-git/v5@v5.4.2
5.17.1
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/go-git/go-git/v5@v5.1.0
5.17.1
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-git/go-git/v5@v5.13.2
5.17.1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-git/go-git/v5@v5.4.2
5.17.1
2
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/go-git/go-git/v5@v5.2.0
5.17.1
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-git/go-git/v5@v5.13.2
5.17.1
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/go-git/go-git/v5@v5.16.0
5.17.1
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/go-git/go-git/v5@v5.4.2
5.17.1
2
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/go-git/go-git/v5@v5.13.0
5.17.1
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/go-git/go-git/v5@v5.11.0
5.17.1
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/go-git/go-git/v5@v5.0.0
5.17.1
1
aquasec/trivy:0.43.1944a04445179
github.com/go-git/go-git/v5@v5.7.0
5.17.1
1
aquasec/trivy:0.32.0973d0df16189
github.com/go-git/go-git/v5@v5.4.2
5.17.1
1
aquasec/trivy:0.69.3bcc376de8d77
github.com/go-git/go-git/v5@v5.16.5
5.17.1
1
artifacthub/hub:v1.19.0111918d8c399
github.com/go-git/go-git/v5@v5.12.0
5.17.1
1
artifacthub/scanner:v1.23.02d8365601f0e
github.com/go-git/go-git/v5@v5.16.5
5.17.1
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/go-git/go-git/v5@v5.12.0
5.17.1
1
artifacthub/tracker:v1.23.05368d21a6e5c
github.com/go-git/go-git/v5@v5.16.2
5.17.1
1
artifacthub/tracker:v1.19.06596c8c4d955
github.com/go-git/go-git/v5@v5.11.0
5.17.1
1
buddyspencer/gickup:0.10.386b656f19b0c1
github.com/go-git/go-git/v5@v5.14.0
5.17.1
1
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/go-git/go-git/v5@v5.12.0
5.17.1
1
casbin/casdoor:v1.753.0770ad9ec3190
github.com/go-git/go-git/v5@v5.11.0
5.17.1
1
casbin/casdoor:3.62.17729da148c61
github.com/go-git/go-git/v5@v5.16.3
5.17.1
1
casbin/casdoor:3.62.0e08231f16c00
github.com/go-git/go-git/v5@v5.16.3
5.17.1
1
chaosnative/cle-server:2.7.0e7bcff4a20c0
github.com/go-git/go-git/v5@v5.3.0
5.17.1
1
charmcli/soft-serve:v0.4.039523c1a6ba8
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.17.1
1
datadog/agent:6aad9994de6a7
github.com/go-git/go-git/v5@v5.13.0
5.17.1
1
datawire/aes:3.11.195ec30b3c732
github.com/go-git/go-git/v5@v5.12.0
5.17.1
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/go-git/go-git/v5@v5.4.2
5.17.1
1
dexidp/dex:v2.39.1-distroless43655afd1a8f
github.com/go-git/go-git/v5@v5.11.0
5.17.1
1
epamedp/codebase-operator:2.12.0-MDTU-DDM-SNAPSHOT.1096028c86f0dd
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.17.1
1
epamedp/gerrit-operator:2.11.0-MDTU-DDM-SNAPSHOT.2b71fb39e0c9e
github.com/go-git/go-git/v5@v5.4.2
5.17.1
1
epamedp/reconciler:2.12.0d33e938b6d59
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.17.1
1
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/go-git/go-git/v5@v5.6.1
5.17.1
1
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/go-git/go-git/v5@v5.16.2
5.17.1
1
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/go-git/go-git/v5@v5.2.0
5.17.1
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/go-git/go-git/v5@v5.12.0
5.17.1
1
gitea/act_runner:0.3.1c2a169c5e998
github.com/go-git/go-git/v5@v5.16.5
5.17.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.