StackRadar

CVE-2026-44740

Medium

Advisory

Published 13 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
167
of 17,781 indexed, latest versions
Container images
176
deployed by those charts
Fix available
2 of 2
affected packages

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

Carried by container images the latest versions of 167 of 17,781 indexed charts deploy, on 176 images.

Affected packageAffected versionsFixed inImages
github.com/go-git/go-billy/v5golangv5.0.0, v5.1.0, v5.3.1, v5.4.0+7 more5.9.0175
github.com/go-git/go-billy/v6golangv6.0.0-20250711053805-c1f149aaab076.0.0-alpha.11
OSV records
GHSA-m3xc-h892-ggx6
Also known as
GO-2026-5490

Charts affected

167 by stars
ChartLatestAffected imagesRadar Score
harbor-scanner-trivyaqua-helm0.17.01 of 1See more

harbor-scanner-trivy aqua-helm 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/go-git/go-billy/v5@v5.0.0
5.9.0

Open the chart page →

5,202
argocdargo-helm-charts1.0.02 of 3See more

argocd argo-helm-charts 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/go-git/go-billy/v5@v5.6.0
5.9.0
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

7,300
argo-workflowsargo-helm-charts1.0.01 of 2See more

argo-workflows argo-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

1,826
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

8,556
helm-controllerazureorkestra0.1.11 of 2See more

helm-controller azureorkestra 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/go-git/go-billy/v5@v5.0.0
5.9.0

Open the chart page →

7,705
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

3,244
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

2,770
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

14,130
capsule-argo-addoncapsule-argo-addonVerified publisher0.7.51 of 2See more

capsule-argo-addon capsule-argo-addon 0.7.5

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

2,038
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
chaosnative/cle-server:2.7.0e7bcff4a20c0
github.com/go-git/go-billy/v5@v5.1.0
5.9.0

Open the chart page →

16,389
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-git/go-billy/v5@v5.1.0
5.9.0

Open the chart page →

25,151
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/go-git/go-billy/v5@v5.1.0
5.9.0

Open the chart page →

6,921
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

18,293
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

3,693
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

1,035
mla-external-secretscluster-deploy0.3.01 of 1See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

716
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
github.com/go-git/go-billy/v5@v5.7.0
5.9.0

Open the chart page →

7,168
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/go-git/go-billy/v5@v5.6.0
5.9.0

Open the chart page →

1,925
csghubcsghubVerified publisher2.4.34 of 34See more

csghub csghub 2.4.3

4 of the 34 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

11,335
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

1,028
kyvernodevopstalesVerified publisher2.5.11 of 2See more

kyverno devopstales 2.5.1

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/go-git/go-billy/v5@v5.0.0
5.9.0

Open the chart page →

4,722
devtron-enterprisedevtron48.0.06 of 28See more

devtron-enterprise devtron 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-billy/v5@v5.0.0
5.9.0
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

68,240
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

5,039
devtron-enterprisedevtron-labs48.0.06 of 28See more

devtron-enterprise devtron-labs 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-billy/v5@v5.0.0
5.9.0
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

68,240
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

5,039
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-billy/v5@v5.0.0
5.9.0
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

32,902
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

13,558
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

7,329
reconcilerepmdedpVerified publisher2.12.01 of 1See more

reconciler epmdedp 2.12.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
epamedp/reconciler:2.12.0d33e938b6d59
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

2,180
codebase-operatorepmdedp-devVerified publisher2.12.0-MDTU-DDM-SNAPSHOT.101 of 1See more

codebase-operator epmdedp-dev 2.12.0-MDTU-DDM-SNAPSHOT.10

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
epamedp/codebase-operator:2.12.0-MDTU-DDM-SNAPSHOT.1096028c86f0dd
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

2,825
gerrit-operatorepmdedp-devVerified publisher2.11.0-MDTU-DDM-SNAPSHOT.21 of 1See more

gerrit-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.2

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
epamedp/gerrit-operator:2.11.0-MDTU-DDM-SNAPSHOT.2b71fb39e0c9e
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

2,811
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.22 of 18See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/go-git/go-billy/v5@v5.8.0
5.9.0
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

13,255
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

13,450
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

6,078
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

5,292
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
github.com/go-git/go-billy/v5@v5.0.0
5.9.0

Open the chart page →

3,236
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

3,478
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

2,607
gnp-stackgnp-stack0.0.51 of 14See more

gnp-stack gnp-stack 0.0.5

1 of the 14 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

7,659
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

3,376
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

8,188
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

2,590
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
github.com/go-git/go-billy/v5@v5.8.0
5.9.0

Open the chart page →

3,124
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

6,015
gravity-initinvisiblVerified publisher1.0.91 of 1See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
invisibl/gravity-init:v1.0.91a970f84178b
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

2,006
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

45,239
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/go-git/go-billy/v5@v5.6.0
5.9.0

Open the chart page →

3,999

Container images carrying it

176 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
owncloud/server:10.16.274c53d341076
github.com/go-git/go-billy/v5@v5.8.0
5.9.0
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/go-git/go-billy/v5@v5.1.0
5.9.0
1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ryuunosukeds3/orbital:latest0879f7261b10
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/go-git/go-billy/v5@v5.8.0
5.9.0
1
sikalabs/slu:v0.72.07bd267f30247
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
1
sikalabs/slu:v0.34.0fdc0c6711add
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
1
treeverse/everest-lakefs-csi-driver:1.3.0bda61b3fe5d8
github.com/go-git/go-billy/v6@v6.0.0-20250711053805-c1f149aaab07
6.0.0-alpha.1
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
1
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/caninehq/canine:latesta058034ca006
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
github.com/go-git/go-billy/v5@v5.7.0
5.9.0
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
github.com/go-git/go-billy/v5@v5.8.0
5.9.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/go-git/go-billy/v5@v5.6.0
5.9.0
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
1
ghcr.io/external-secrets/external-secrets:v2.4.19440a40b3947
github.com/go-git/go-billy/v5@v5.8.0
5.9.0
1
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
1
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/go-git/go-billy/v5@v5.0.0
5.9.0
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
github.com/go-git/go-billy/v5@v5.7.0
5.9.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
github.com/go-git/go-billy/v5@v5.8.0
5.9.0
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/go-git/go-billy/v5@v5.0.0
5.9.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
github.com/go-git/go-billy/v5@v5.8.0
5.9.0
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/go-git/go-billy/v5@v5.8.0
5.9.0
1
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
ghcr.io/synapsecns/sanguine/agents:6e3887fc2a05aff0d159453cedbfbe5024b910bf81a9ebc899a4
github.com/go-git/go-billy/v5@v5.4.0
5.9.0
1
ghcr.io/synapsecns/sanguine/cctp-relayer:b5a1dd5288f1a18eb05994e130d626fed45a56fc2f1408c94168
github.com/go-git/go-billy/v5@v5.4.0
5.9.0
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
ghcr.io/synapsecns/sanguine/promexporter:4a9aad096c2bd1160e56e5472ddac77fa0cde2e9416c1c5aeb86
github.com/go-git/go-billy/v5@v5.4.0
5.9.0
1
ghcr.io/synapsecns/sanguine/screener-api:latestb3de2050460a
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.