StackRadar

CVE-2026-50163

High

Advisory

Published 1 Jul 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
132
of 17,781 indexed, latest versions
Container images
124
deployed by those charts
Fix available
1 of 1
affected package

`oras-go` tar extraction: Hardlink entry with relative Linkname escapes extract dir via process CWD resolution

Carried by container images the latest versions of 132 of 17,781 indexed charts deploy, on 124 images.

Affected packageAffected versionsFixed inImages
oras.land/oras-go/v2golangv2.0.0, v2.0.2, v2.2.0, v2.3.0+5 more2.6.2124
OSV records
GHSA-fxhp-mv3v-67qp
Also known as
GO-2026-5880

Charts affected

132 by stars
ChartLatestAffected imagesRadar Score
kube-arguskube-argusOfficialVerified publisher0.0.1-s2z1 of 1See more

kube-argus kube-argus 0.0.1-s2z

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

205
kubescoutkubescouteVerified publisher0.1.11 of 1See more

kubescout kubescoute 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

714
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

24,690
kubetailkubetailVerified publisher0.26.01 of 3See more

kubetail kubetail 0.26.0

1 of the 3 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/kubetail-org/kubetail-dashboard:0.17.08617f0a7f703
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

1,850
periscopeperiscopeVerified publisher1.1.61 of 1See more

periscope periscope 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

800
podtracepodtraceOfficialVerified publisher0.14.81 of 2See more

podtrace podtrace 0.14.8

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
alpine/k8s:1.37.0b421c2e9419e
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

589
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

8,158
akeyless-gatewayakeyless-services-helmVerified publisher3.5.31 of 2See more

akeyless-gateway akeyless-services-helm 3.5.3

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
akeyless/gateway:5.3.13d2e7dce5eb9
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

1,522
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,592
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,894
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,225
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,225
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,592
cluster-profile-managerappscodeVerified publisher2026.6.261 of 1See more

cluster-profile-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-profile:v0.12.17390a215d63c
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

310
fargocdappscodeVerified publisher2026.5.221 of 1See more

fargocd appscode 2026.5.22

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/fargocd:v0.0.31f5c791fc54d
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

446
fargocd-managerappscodeVerified publisher2026.5.221 of 1See more

fargocd-manager appscode 2026.5.22

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/fargocd:v0.0.31f5c791fc54d
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

446
kube-ui-serverappscodeVerified publisher2026.9.111 of 1See more

kube-ui-server appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-ui-server:v0.7.079e67164b4f0
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

236
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,592
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

37,268
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

7,300
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

14,352
capsule-argo-addoncapsule-argo-addonVerified publisher0.7.51 of 2See more

capsule-argo-addon capsule-argo-addon 0.7.5

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,038
ranchercarbide-charts2.15.11 of 2See more

rancher carbide-charts 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
rancher/shell:v0.8.1f293af9c635f
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

1,456
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

15,027
argo-cdcluster-deploy0.3.22 of 3See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
oras.land/oras-go/v2@v2.6.1
2.6.2
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,693
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

1,797
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

22,193
devtron-enterprisedevtron48.0.04 of 28See more

devtron-enterprise devtron 48.0.0

4 of the 28 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

68,240
devtron-enterprisedevtron-labs48.0.04 of 28See more

devtron-enterprise devtron-labs 48.0.0

4 of the 28 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

32,902
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

12,127
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

5,292
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,420
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,376
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

4,637
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

8,188
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

2,594
kubernetes-mcp-serverhelmforgeVerified publisher1.0.61 of 1See more

kubernetes-mcp-server helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/containers/kubernetes-mcp-server:v0.0.666d650f4bd6ac
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

252
harborhelm-harborVerified publisher2.3.51 of 8See more

harbor helm-harbor 2.3.5

1 of the 8 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

1,650
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,000
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

3,124
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
oras.land/oras-go/v2@v2.0.0
2.6.2

Open the chart page →

7,862
monitoring-stackict-platformVerified publisher0.4.01 of 13See more

monitoring-stack ict-platform 0.4.0

1 of the 13 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

9,573
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

8,811
kagentkagent0.10.11 of 6See more

kagent kagent 0.10.1

1 of the 6 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,900
kcmkcm1.11.02 of 12See more

kcm kcm 1.11.0

2 of the 12 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
oras.land/oras-go/v2@v2.6.1
2.6.2
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

2,818
installerkrateo2.7.11 of 2See more

installer krateo 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,236
kubecheckskubechecks3.0.01 of 1See more

kubechecks kubechecks 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/zapier/kubechecks:latest60cea46ce830
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

548
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

6,824
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-50163.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

1,269

Container images carrying it

124 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2
7
rancher/shell:v0.8.1f293af9c635f
oras.land/oras-go/v2@v2.6.1
2.6.2
4
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
oras.land/oras-go/v2@v2.6.0
2.6.2
3
quay.io/argoproj/argocd:v3.5.2e2aadfae709d
oras.land/oras-go/v2@v2.6.1
2.6.2
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
oras.land/oras-go/v2@v2.6.0
2.6.2
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
oras.land/oras-go/v2@v2.6.0
2.6.2
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
oras.land/oras-go/v2@v2.6.0
2.6.2
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
oras.land/oras-go/v2@v2.6.0
2.6.2
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
oras.land/oras-go/v2@v2.6.0
2.6.2
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
oras.land/oras-go/v2@v2.6.0
2.6.2
3
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
oras.land/oras-go/v2@v2.6.0
2.6.2
3
alpine/k8s:1.32.12048f8d9c8cc7
oras.land/oras-go/v2@v2.6.0
2.6.2
2
meshery/meshery:stable-latest9b68e81d392e
oras.land/oras-go/v2@v2.6.0
2.6.2
2
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
oras.land/oras-go/v2@v2.6.0
2.6.2
2
ghcr.io/appscode/fargocd:v0.0.31f5c791fc54d
oras.land/oras-go/v2@v2.6.0
2.6.2
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
oras.land/oras-go/v2@v2.5.0
2.6.2
2
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
oras.land/oras-go/v2@v2.6.1
2.6.2
2
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
oras.land/oras-go/v2@v2.6.1
2.6.2
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
oras.land/oras-go/v2@v2.5.0
2.6.2
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
oras.land/oras-go/v2@v2.6.0
2.6.2
2
registry.k8s.io/nfd/node-feature-discovery:v0.19.02fa1c99ad09b
oras.land/oras-go/v2@v2.6.1
2.6.2
2
akeyless/gateway:5.3.13d2e7dce5eb9
oras.land/oras-go/v2@v2.6.1
2.6.2
1
alpine/helm:4.1.0905a068da431
oras.land/oras-go/v2@v2.6.0
2.6.2
1
alpine/k8s:1.36.244ef4942e171
oras.land/oras-go/v2@v2.6.0
2.6.2
1
alpine/k8s:1.31.106dbe6f391eda
oras.land/oras-go/v2@v2.5.0
2.6.2
1
alpine/k8s:1.31.137a319b15cfc9
oras.land/oras-go/v2@v2.6.0
2.6.2
1
alpine/k8s:1.37.0b421c2e9419e
oras.land/oras-go/v2@v2.6.1
2.6.2
1
alpine/k8s:1.35.6b7a12c5ddf26
oras.land/oras-go/v2@v2.6.0
2.6.2
1
alpine/k8s:1.35.5d870622d0040
oras.land/oras-go/v2@v2.6.0
2.6.2
1
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
oras.land/oras-go/v2@v2.6.0
2.6.2
1
aquasec/trivy:0.69.3bcc376de8d77
oras.land/oras-go/v2@v2.6.0
2.6.2
1
artifacthub/hub:v1.23.07d3a91c539dc
oras.land/oras-go/v2@v2.6.1
2.6.2
1
artifacthub/scanner:v1.23.02d8365601f0e
oras.land/oras-go/v2@v2.6.1
2.6.2
1
artifacthub/tracker:v1.23.05368d21a6e5c
oras.land/oras-go/v2@v2.6.0
2.6.2
1
falcosecurity/falcoctl:0.13.00eeb79adc580
oras.land/oras-go/v2@v2.6.0
2.6.2
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
oras.land/oras-go/v2@v2.6.0
2.6.2
1
falcosecurity/falco-operator:0.4.18a99fcc57a57
oras.land/oras-go/v2@v2.6.1
2.6.2
1
flanksource/batch-runner:v1.0.44689687a7cf95
oras.land/oras-go/v2@v2.6.0
2.6.2
1
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
oras.land/oras-go/v2@v2.6.0
2.6.2
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
oras.land/oras-go/v2@v2.6.0
2.6.2
1
kong/gateway-operator:1.603510967482b
oras.land/oras-go/v2@v2.5.1-0.20250331092043-d0ac8e455584
2.6.2
1
kusionstack/kusion:v0.14.0126c8f0b0976
oras.land/oras-go/v2@v2.5.0
2.6.2
1
layer5/meshery:stable-latest78a8be21bef3
oras.land/oras-go/v2@v2.5.0
2.6.2
1
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
oras.land/oras-go/v2@v2.5.0
2.6.2
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
oras.land/oras-go/v2@v2.6.0
2.6.2
1
newrelic/newrelic-agent-control-cli:1.24.047520b65d6b2
oras.land/oras-go/v2@v2.6.1
2.6.2
1
openpolicyagent/opa:0.53.16a58dea59933
oras.land/oras-go/v2@v2.2.0
2.6.2
1
platzio/backend:v0.6.5d5e5972f344b
oras.land/oras-go/v2@v2.6.0
2.6.2
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
oras.land/oras-go/v2@v2.6.0
2.6.2
1
prowlercloud/prowler-api:5.31.14f252d579be2
oras.land/oras-go/v2@v2.6.0
2.6.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.