StackRadar

CVE-2026-44740

Medium

Advisory

Published 13 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
167
of 17,781 indexed, latest versions
Container images
176
deployed by those charts
Fix available
2 of 2
affected packages

go-billy: Lack of depth and cycle detection in symlink resolution may lead to infinite loops and resource exhaustion

Carried by container images the latest versions of 167 of 17,781 indexed charts deploy, on 176 images.

Affected packageAffected versionsFixed inImages
github.com/go-git/go-billy/v5golangv5.0.0, v5.1.0, v5.3.1, v5.4.0+7 more5.9.0175
github.com/go-git/go-billy/v6golangv6.0.0-20250711053805-c1f149aaab076.0.0-alpha.11
OSV records
GHSA-m3xc-h892-ggx6
Also known as
GO-2026-5490

Charts affected

167 by stars
ChartLatestAffected imagesRadar Score
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

1,893
k10restorekastenVerified publisher8.0.141 of 1See more

k10restore kasten 8.0.14

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

1,459
kiaekiae0.1.61 of 9See more

kiae kiae 0.1.6

1 of the 9 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

19,168
ksoc-pluginsksocOfficialVerified publisher1.9.101 of 5See more

ksoc-plugins ksoc 1.9.10

1 of the 5 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/go-git/go-billy/v5@v5.6.0
5.9.0

Open the chart page →

3,199
u4a-componentkubebb0.2.101 of 8See more

u4a-component kubebb 0.2.10

1 of the 8 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
kubebb/oidc-server:v0.2.02b5894ef1e2f
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

13,819
argo-workflowskubeblocksVerified publisher0.40.141 of 2See more

argo-workflows kubeblocks 0.40.14

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.5.591b9825f09a8
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

2,871
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

2,299
grafanakubeblocksVerified publisher6.59.41 of 1See more

grafana kubeblocks 6.59.4

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/grafana:10.1.11b9ca4bbc4a2
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

3,561
kubeclaritykubeclarity2.23.31 of 5See more

kubeclarity kubeclarity 2.23.3

1 of the 5 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

5,496
harborkubesphereVerified publisher1.9.31 of 11See more

harbor kubesphere 1.9.3

1 of the 11 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

17,798
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/grafana:9.5.239c849cebccc
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

18,316
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

20,204
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

6,824
everest-lakefs-csi-driverlakefsVerified publisher1.3.01 of 3See more

everest-lakefs-csi-driver lakefs 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
treeverse/everest-lakefs-csi-driver:1.3.0bda61b3fe5d8
github.com/go-git/go-billy/v6@v6.0.0-20250711053805-c1f149aaab07
6.0.0-alpha.1

Open the chart page →

841
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

4,271
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

9,774
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-git/go-billy/v5@v5.6.0
5.9.0

Open the chart page →

21,064
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/go-git/go-billy/v5@v5.0.0
5.9.0

Open the chart page →

12,010
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

19,214
kommandermesosphere-stable0.39.22 of 29See more

kommander mesosphere-stable 0.39.2

2 of the 29 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/go-git/go-billy/v5@v5.0.0
5.9.0
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/go-git/go-billy/v5@v5.0.0
5.9.0

Open the chart page →

68,284
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

10,180
argocd-extra-app-info-exportermikejohVerified publisher0.1.121 of 1See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

1,334
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

3,430
agent-control-cdnewrelic1.0.02 of 3See more

agent-control-cd newrelic 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

5,034
giteanovum-rgi-charts2.1.31 of 3See more

gitea novum-rgi-charts 2.1.3

1 of the 3 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
gitea/gitea:1.13.0d5ab14cd29af
github.com/go-git/go-billy/v5@v5.0.0
5.9.0

Open the chart page →

4,861
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
grafana/grafana:12.1.1a1701c218024
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

17,070
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
github.com/go-git/go-billy/v5@v5.6.0
5.9.0

Open the chart page →

2,346
argocd-agent-addonocm-helm-chartsVerified publisher0.29.01 of 2See more

argocd-agent-addon ocm-helm-charts 0.29.0

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-operator:v0.18.0a09814522a72
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

626
octantoctant0.1.861 of 1See more

octant octant 0.1.86

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
github.com/go-git/go-billy/v5@v5.8.0
5.9.0

Open the chart page →

535
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/go-git/go-billy/v5@v5.6.0
5.9.0

Open the chart page →

4,127
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/go-git/go-billy/v5@v5.1.0
5.9.0

Open the chart page →

8,599
operator-lifecycle-manageroperator-lifecycle-manager1.2.22 of 2See more

operator-lifecycle-manager operator-lifecycle-manager 1.2.2

2 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/go-git/go-billy/v5@v5.7.0
5.9.0
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/go-git/go-billy/v5@v5.7.0
5.9.0

Open the chart page →

1,821
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

71,208
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

26,840
planectlplanectlVerified publisher0.7.03 of 10See more

planectl planectl 0.7.0

3 of the 10 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11c57233403eff
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

25,934
rancher-auto-registerrancher-auto-registerVerified publisher0.1.01 of 1See more

rancher-auto-register rancher-auto-register 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

1,837
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

16,047
devtron-enterpriseromholdings48.0.06 of 28See more

devtron-enterprise romholdings 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-billy/v5@v5.0.0
5.9.0
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

68,240
devtron-in-clustercdromholdings0.10.21 of 2See more

devtron-in-clustercd romholdings 0.10.2

1 of the 2 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

5,039
devtron-operatorromholdings0.23.33 of 11See more

devtron-operator romholdings 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-billy/v5@v5.0.0
5.9.0
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

32,902
orbitalryuunosukeds30.2.01 of 1See more

orbital ryuunosukeds3 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ryuunosukeds3/orbital:latest0879f7261b10
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

2,620
gickupschichtelVerified publisher0.0.41 of 1See more

gickup schichtel 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.386b656f19b0c1
github.com/go-git/go-billy/v5@v5.6.2
5.9.0

Open the chart page →

1,547
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

3,337
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

2,314
metrics-generatorsikalabs0.2.01 of 1See more

metrics-generator sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
sikalabs/slu:v0.34.0fdc0c6711add
github.com/go-git/go-billy/v5@v5.3.1
5.9.0

Open the chart page →

2,381
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

7,672
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

1,672
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/go-git/go-billy/v5@v5.4.1
5.9.0

Open the chart page →

2,505
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
github.com/go-git/go-billy/v5@v5.5.0
5.9.0

Open the chart page →

2,416
mediamtxstartechnicaVerified publisher0.1.11 of 1See more

mediamtx startechnica 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44740.

Container imageDigestPackageFixed in
bluenviron/mediamtx:1.17.19e39256d1ba3
github.com/go-git/go-billy/v5@v5.8.0
5.9.0

Open the chart page →

576

Container images carrying it

176 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/synapsecns/sanguine/scribe:6e3887fc2a05aff0d159453cedbfbe5024b910bf5e0a3dfa9f96
github.com/go-git/go-billy/v5@v5.4.0
5.9.0
1
ghcr.io/synapsecns/sanguine/scribe:latest81edba952403
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
ghcr.io/synapsecns/sanguine/sinner:latest3e98a98f6074
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
public.ecr.aws/boundless-software/switchblade:release-v0.0.19-lcm01d8413d5075
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/go-git/go-billy/v5@v5.6.0
5.9.0
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/go-git/go-billy/v5@v5.3.1
5.9.0
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
quay.io/argoproj/argocli:v3.5.591b9825f09a8
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
quay.io/argoprojlabs/argocd-operator:v0.18.0a09814522a72
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
quay.io/argoprojlabs/argocd-rbac-operator:v0.2.451dded00137a
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/go-git/go-billy/v5@v5.1.0
5.9.0
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-git/go-billy/v5@v5.1.0
5.9.0
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/go-git/go-billy/v5@v5.4.1
5.9.0
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
github.com/go-git/go-billy/v5@v5.5.0
5.9.0
1
quay.io/operator-framework/catalogd:v1.8.06ff40fa6257f
github.com/go-git/go-billy/v5@v5.7.0
5.9.0
1
quay.io/operator-framework/operator-controller:v1.8.0bca5dfcc67ca
github.com/go-git/go-billy/v5@v5.7.0
5.9.0
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/go-git/go-billy/v5@v5.1.0
5.9.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
github.com/go-git/go-billy/v5@v5.6.2
5.9.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.