StackRadar

CVE-2026-48978

Low

Advisory

Published 1 Jul 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.1
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
213
of 17,781 indexed, latest versions
Container images
216
deployed by those charts
Fix available
1 of 2
affected packages

oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens

Carried by container images the latest versions of 213 of 17,781 indexed charts deploy, on 216 images.

Affected packageAffected versionsFixed inImages
oras.land/oras-gogolangv0.4.0, v1.1.0, v1.1.1, v1.2.0+6 moreno fix listed125
oras.land/oras-go/v2golangv2.0.0, v2.0.2, v2.2.0, v2.3.0+4 more2.6.1105
OSV records
GHSA-xf85-363p-868w
Also known as
GO-2026-5885

Charts affected

213 by stars
ChartLatestAffected imagesRadar Score
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
oras.land/oras-go@v1.1.1
no fix listed

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
oras.land/oras-go@v1.1.1
no fix listed

Open the chart page →

6,921
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
oras.land/oras-go@v1.2.0
no fix listed

Open the chart page →

16,069
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

3,693
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
oras.land/oras-go@v1.2.5
no fix listed

Open the chart page →

1,394
door-agentcnoVerified publisher3.0.152 of 15See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
beopenit/door-agent:v3.0.5d24c323fe7c3
oras.land/oras-go@v1.2.5
no fix listed
beopenit/door-helm:v3.0.1b4d9f9bee224
oras.land/oras-go@v1.2.2
no fix listed

Open the chart page →

19,338
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

1,797
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
oras.land/oras-go@v1.2.2
no fix listed

Open the chart page →

15,380
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

22,193
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
oras.land/oras-go@v1.2.5
no fix listed

Open the chart page →

9,607
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
oras.land/oras-go@v1.2.0
no fix listed

Open the chart page →

12,949
devtron-enterprisedevtron48.0.06 of 28See more

devtron-enterprise devtron 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
oras.land/oras-go/v2@v2.6.0
2.6.1
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
oras.land/oras-go/v2@v2.6.0
2.6.1
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
oras.land/oras-go@v1.2.4-0.20230801060855-932dd06d38af
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
oras.land/oras-go@v1.2.0
no fix listed
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
oras.land/oras-go/v2@v2.6.0
2.6.1
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

68,240
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
oras.land/oras-go@v1.2.5
no fix listed

Open the chart page →

9,607
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
oras.land/oras-go@v1.2.0
no fix listed

Open the chart page →

12,949
devtron-enterprisedevtron-labs48.0.06 of 28See more

devtron-enterprise devtron-labs 48.0.0

6 of the 28 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
oras.land/oras-go/v2@v2.6.0
2.6.1
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
oras.land/oras-go/v2@v2.6.0
2.6.1
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
oras.land/oras-go@v1.2.4-0.20230801060855-932dd06d38af
no fix listed
quay.io/devtron/kubectl:latest2ad610626658
oras.land/oras-go@v1.2.0
no fix listed
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
oras.land/oras-go/v2@v2.6.0
2.6.1
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.34 of 11See more

devtron-operator devtron-labs 0.23.3

4 of the 11 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
oras.land/oras-go/v2@v2.6.0
2.6.1
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
oras.land/oras-go/v2@v2.6.0
2.6.1
quay.io/devtron/kubectl:latest2ad610626658
oras.land/oras-go@v1.2.0
no fix listed
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

32,902
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
oras.land/oras-go@v1.2.3
no fix listed

Open the chart page →

3,659
edp-headlampepmdedpVerified publisher0.25.01 of 1See more

edp-headlamp epmdedp 0.25.0

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
epamedp/edp-headlamp:0.25.093417e18bb1a
oras.land/oras-go@v1.2.4
no fix listed

Open the chart page →

1,259
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

12,127
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
oras.land/oras-go@v1.1.0
no fix listed

Open the chart page →

13,450
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

5,292
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster:0.16.484f70425f4dd
oras.land/oras-go@v1.2.4
no fix listed

Open the chart page →

5,684
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

2,420
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

3,376
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

4,637
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

8,188
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
oras.land/oras-go/v2@v2.5.0
2.6.1

Open the chart page →

2,594
harborhelm-harborVerified publisher2.3.51 of 8See more

harbor helm-harbor 2.3.5

1 of the 8 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

1,650
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

2,000
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
oras.land/oras-go/v2@v2.5.0
2.6.1

Open the chart page →

3,124
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
oras.land/oras-go@v1.2.2
no fix listed

Open the chart page →

11,186
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
oras.land/oras-go/v2@v2.0.0
2.6.1

Open the chart page →

7,862
monitoring-stackict-platformVerified publisher0.4.01 of 13See more

monitoring-stack ict-platform 0.4.0

1 of the 13 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

9,573
ilum-apiilumVerified publisher6.7.31 of 1See more

ilum-api ilum 6.7.3

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
oras.land/oras-go@v1.2.5
no fix listed

Open the chart page →

2,165
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
oras.land/oras-go@v1.2.0
no fix listed

Open the chart page →

16,212
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
oras.land/oras-go@v1.2.4
no fix listed

Open the chart page →

10,494
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
oras.land/oras-go@v1.2.2
no fix listed

Open the chart page →

5,713
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
oras.land/oras-go@v1.2.5
no fix listed

Open the chart page →

1,893
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
oras.land/oras-go/v2@v2.5.0
2.6.1

Open the chart page →

8,811
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
oras.land/oras-go@v0.4.0
no fix listed

Open the chart page →

14,801
kagentkagent0.10.11 of 6See more

kagent kagent 0.10.1

1 of the 6 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

2,900
installerkrateo2.7.12 of 2See more

installer krateo 2.7.1

2 of the 2 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
oras.land/oras-go@v1.2.4
no fix listed
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
oras.land/oras-go/v2@v2.6.0
2.6.1

Open the chart page →

3,236
installer-pre-upgradekrateo2.7.11 of 1See more

installer-pre-upgrade krateo 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.14.455429449408e
oras.land/oras-go@v1.2.4
no fix listed

Open the chart page →

2,534
chartmuseumkubebb3.10.21 of 1See more

chartmuseum kubebb 3.10.2

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
oras.land/oras-go@v1.2.2
no fix listed

Open the chart page →

2,267
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
oras.land/oras-go@v1.2.0
no fix listed

Open the chart page →

1,749
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
oras.land/oras-go@v1.2.0
no fix listed

Open the chart page →

1,938
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
oras.land/oras-go@v1.2.0
no fix listed

Open the chart page →

6,490
chaos-meshkubeblocksVerified publisher2.7.21 of 4See more

chaos-mesh kubeblocks 2.7.2

1 of the 4 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
oras.land/oras-go@v1.2.4
no fix listed

Open the chart page →

13,497
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
oras.land/oras-go@v1.2.2
no fix listed

Open the chart page →

3,622
harbor-operatorkubernetes-replicator1.6.31 of 1See more

harbor-operator kubernetes-replicator 1.6.3

1 of the 1 container images this version deploys carry CVE-2026-48978.

Container imageDigestPackageFixed in
quay.io/mittwald/harbor-operator:v1.6.365a38180e27a
oras.land/oras-go@v1.2.4
no fix listed

Open the chart page →

1,196

Container images carrying it

216 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.1
7
quay.io/devtron/kubectl:latest2ad610626658
oras.land/oras-go@v1.2.0
no fix listed
6
keelhq/keel:latest73714afb4443
oras.land/oras-go@v1.2.5
no fix listed
5
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
oras.land/oras-go@v1.2.2
no fix listed
4
quay.io/jetstack/cert-manager-ctl:v1.13.1c10bde7ff9ad
oras.land/oras-go@v1.2.3
no fix listed
4
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
oras.land/oras-go/v2@v2.6.0
2.6.1
3
quay.io/devtron/ai-agent:0.0.16545dac92173
oras.land/oras-go@v1.2.5
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
oras.land/oras-go@v1.2.0
no fix listed
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
oras.land/oras-go/v2@v2.6.0
2.6.1
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
oras.land/oras-go/v2@v2.6.0
2.6.1
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
oras.land/oras-go/v2@v2.6.0
2.6.1
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
oras.land/oras-go/v2@v2.6.0
2.6.1
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
oras.land/oras-go@v1.2.4-0.20230801060855-932dd06d38af
no fix listed
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
oras.land/oras-go/v2@v2.6.0
2.6.1
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
oras.land/oras-go/v2@v2.6.0
2.6.1
3
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
oras.land/oras-go/v2@v2.6.0
2.6.1
3
alpine/k8s:1.32.12048f8d9c8cc7
oras.land/oras-go/v2@v2.6.0
2.6.1
2
dtzar/helm-kubectl:3.14.455429449408e
oras.land/oras-go@v1.2.4
no fix listed
2
ilum/api:6.7.3624fd09528c8
oras.land/oras-go@v1.2.5
no fix listed
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
oras.land/oras-go@v1.2.0
no fix listed
2
meshery/meshery:stable-latest9b68e81d392e
oras.land/oras-go/v2@v2.6.0
2.6.1
2
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
oras.land/oras-go/v2@v2.6.0
2.6.1
2
ghcr.io/appscode/fargocd:v0.0.31f5c791fc54d
oras.land/oras-go/v2@v2.6.0
2.6.1
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
oras.land/oras-go/v2@v2.5.0
2.6.1
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
oras.land/oras-go@v1.2.5
oras.land/oras-go/v2@v2.5.0
no fix listed
2.6.1
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
oras.land/oras-go@v1.2.0
no fix listed
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
oras.land/oras-go/v2@v2.6.0
2.6.1
2
alpine/helm105741fa6621
oras.land/oras-go@v1.2.5
no fix listed
1
alpine/helm:4.1.0905a068da431
oras.land/oras-go/v2@v2.6.0
2.6.1
1
alpine/k8s:1.22.600ac10bcb759
oras.land/oras-go@v0.4.0
no fix listed
1
alpine/k8s:1.27.321b24e6bf801
oras.land/oras-go@v1.2.2
no fix listed
1
alpine/k8s:1.36.244ef4942e171
oras.land/oras-go/v2@v2.6.0
2.6.1
1
alpine/k8s:1.31.106dbe6f391eda
oras.land/oras-go@v1.2.6
oras.land/oras-go/v2@v2.5.0
no fix listed
2.6.1
1
alpine/k8s:1.31.137a319b15cfc9
oras.land/oras-go@v1.2.6
oras.land/oras-go/v2@v2.6.0
no fix listed
2.6.1
1
alpine/k8s:1.32.47e1e7d5b7a96
oras.land/oras-go@v1.2.6
no fix listed
1
alpine/k8s:1.31.49c4976d47656
oras.land/oras-go@v1.2.5
no fix listed
1
alpine/k8s:1.35.6b7a12c5ddf26
oras.land/oras-go/v2@v2.6.0
2.6.1
1
alpine/k8s:1.30.0bd01dae02676
oras.land/oras-go@v1.2.4
no fix listed
1
alpine/k8s:1.30.2cd560fce90f7
oras.land/oras-go@v1.2.4
no fix listed
1
alpine/k8s:1.35.5d870622d0040
oras.land/oras-go/v2@v2.6.0
2.6.1
1
alpine/k8s:1.28.13e5c0b053fed7
oras.land/oras-go@v1.2.2
no fix listed
1
alpine/k8s:1.32.3eec354133193
oras.land/oras-go@v1.2.5
no fix listed
1
alpine/k8s:1.28.2fc059f056ad0
oras.land/oras-go@v1.2.3
no fix listed
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
oras.land/oras-go@v1.2.5
oras.land/oras-go/v2@v2.6.0
no fix listed
2.6.1
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
oras.land/oras-go@v1.2.5
no fix listed
1
aquasec/trivy:0.43.1944a04445179
oras.land/oras-go@v1.2.3
no fix listed
1
aquasec/trivy:0.32.0973d0df16189
oras.land/oras-go@v1.1.1
no fix listed
1
aquasec/trivy:0.69.3bcc376de8d77
oras.land/oras-go/v2@v2.6.0
2.6.1
1
artifacthub/hub:v1.19.0111918d8c399
oras.land/oras-go@v1.2.5
no fix listed
1
artifacthub/scanner:v1.23.02d8365601f0e
oras.land/oras-go/v2@v2.6.0
2.6.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.