StackRadar

CVE-2026-71557

Medium

Advisory

Published 7 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
205
of 17,781 indexed, latest versions
Container images
207
deployed by those charts
Fix available
2 of 2
affected packages

go-git: Malicious reference names may modify files outside the reference storage

Carried by container images the latest versions of 205 of 17,781 indexed charts deploy, on 207 images.

Affected packageAffected versionsFixed inImages
github.com/go-git/go-git/v5golangv5.0.0, v5.1.0, v5.2.0, v5.3.0+23 more5.19.2205
github.com/go-git/go-git/v6golangv6.0.0-alpha.3, v6.0.0-alpha.4.0.20260520124234-0860a7d8a1646.0.0-alpha.52
OSV records
GHSA-qgq7-7hm3-q39j
Also known as
GO-2026-6214

Charts affected

205 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.02 of 3See more

argo-cd argo 10.9.0

2 of the 3 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-git/go-git/v5@v5.16.4
5.19.2
quay.io/argoproj/argocd:v3.5.2e2aadfae709d
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

3,218
harborharborOfficialVerified publisher1.19.21 of 8See more

harbor harbor 1.19.2

1 of the 8 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

1,650
rancherrancher-stable2.15.11 of 2See more

rancher rancher-stable 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
rancher/shell:v0.8.1f293af9c635f
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

1,456
artifact-hubartifact-hubVerified publisher1.23.04 of 7See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
github.com/go-git/go-git/v5@v5.16.5
5.19.2
artifacthub/hub:v1.23.07d3a91c539dc
github.com/go-git/go-git/v5@v5.19.1
5.19.2
artifacthub/scanner:v1.23.02d8365601f0e
github.com/go-git/go-git/v5@v5.16.5
5.19.2
artifacthub/tracker:v1.23.05368d21a6e5c
github.com/go-git/go-git/v5@v5.16.2
5.19.2

Open the chart page →

10,755
argo-cdargo-cd-oci10.9.02 of 3See more

argo-cd argo-cd-oci 10.9.0

2 of the 3 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-git/go-git/v5@v5.16.4
5.19.2
quay.io/argoproj/argocd:v3.5.2e2aadfae709d
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

3,218
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/go-git/go-git/v5@v5.16.0
5.19.2

Open the chart page →

1,765
argo-eventsargoOfficialVerified publisher2.4.271 of 1See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/go-git/go-git/v5@v5.16.0
5.19.2

Open the chart page →

969
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-git/go-git/v5@v5.13.0
5.19.2

Open the chart page →

23,894
flux2fluxcd-community2.19.04 of 7See more

flux2 fluxcd-community 2.19.0

4 of the 7 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
github.com/go-git/go-git/v5@v5.19.1
5.19.2
ghcr.io/fluxcd/image-automation-controller:v1.2.26b0b16ab2115
github.com/go-git/go-git/v5@v5.19.1
5.19.2
ghcr.io/fluxcd/notification-controller:v1.9.29ce503e7bcb8
github.com/go-git/go-git/v5@v5.19.1
5.19.2
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

2,951
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
github.com/go-git/go-git/v5@v5.13.1
5.19.2

Open the chart page →

3,475
mesherymesheryOfficialVerified publisher1.0.691 of 1See more

meshery meshery 1.0.69

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest9b68e81d392e
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

1,407
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/go-git/go-git/v5@v5.18.0
5.19.2

Open the chart page →

2,221
rancherrancher-latest2.15.11 of 2See more

rancher rancher-latest 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
rancher/shell:v0.8.1f293af9c635f
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

1,456
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
github.com/go-git/go-git/v5@v5.16.2
5.19.2

Open the chart page →

19,391
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
langgenius/dify-api:1.16.1dcefa5f7c47c
github.com/go-git/go-git/v5@v5.19.1
5.19.2
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

22,002
pyroscopegrafana2.3.11 of 3See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-git/go-git/v5@v5.16.2
5.19.2

Open the chart page →

3,157
oktetooktetoOfficialVerified publisher0.0.0-2026-08-032 of 10See more

okteto okteto 0.0.0-2026-08-03

2 of the 10 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/okteto/backend:0.0.0-2026-08-03244f87e8c52d
github.com/go-git/go-git/v5@v5.19.1
5.19.2
ghcr.io/okteto/okteto:3.22.0-beta.1e787b6bce27d
github.com/go-git/go-git/v5@v5.16.5
5.19.2

Open the chart page →

5,750
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
github.com/go-git/go-git/v5@v5.16.2
5.19.2

Open the chart page →

5,240
ansible-semaphorecloudhippieVerified publisher15.2.101 of 1See more

ansible-semaphore cloudhippie 15.2.10

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

1,235
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/go-git/go-git/v5@v5.2.0
5.19.2

Open the chart page →

4,167
devtron-operatordevtron0.23.33 of 11See more

devtron-operator devtron 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.19.2
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/go-git/go-git/v5@v5.13.2
5.19.2
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.19.2

Open the chart page →

32,902
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
gitea/gitea:1.22.376f516a1a8c2
github.com/go-git/go-git/v5@v5.11.0
5.19.2

Open the chart page →

23,228
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
github.com/go-git/go-git/v5@v5.19.0
5.19.2

Open the chart page →

3,997
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.12 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
github.com/go-git/go-git/v5@v5.16.5
5.19.2
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
github.com/go-git/go-git/v5@v5.17.1
5.19.2

Open the chart page →

5,468
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
grafana/agent:v0.40.3f6cbec9409be
github.com/go-git/go-git/v5@v5.11.0
5.19.2

Open the chart page →

24,700
giteagroundhog2k0.16.31 of 1See more

gitea groundhog2k 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
gitea/gitea:1.27.387a67ee09d3a
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

535
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
grafana/grafana:9.4.71a359d92f40e
github.com/go-git/go-git/v5@v5.4.2
5.19.2

Open the chart page →

17,693
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
github.com/go-git/go-git/v5@v5.11.0
5.19.2

Open the chart page →

3,793
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-git/go-git/v5@v5.4.2
5.19.2

Open the chart page →

15,477
argocdtwomartensVerified publisher0.1.12 of 3See more

argocd twomartens 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-git/go-git/v5@v5.4.2
5.19.2
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/go-git/go-git/v5@v5.7.0
5.19.2

Open the chart page →

10,315
argo-cdwenerme10.9.02 of 3See more

argo-cd wenerme 10.9.0

2 of the 3 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-git/go-git/v5@v5.16.4
5.19.2
quay.io/argoproj/argocd:v3.5.2e2aadfae709d
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

3,218
clearml-servingallegroaiVerified publisher1.6.21 of 9See more

clearml-serving allegroai 1.6.2

1 of the 9 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
grafana/grafana:9.4.376dcf36e7d2a
github.com/go-git/go-git/v5@v5.4.2
5.19.2

Open the chart page →

17,877
soft-servealphani-helm-chartsVerified publisher0.4.01 of 1See more

soft-serve alphani-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
charmcli/soft-serve:v0.4.039523c1a6ba8
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.19.2

Open the chart page →

3,119
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
github.com/go-git/go-git/v5@v5.2.0
5.19.2

Open the chart page →

5,222
argocd-rbac-operatorargocd-rbac-operator0.4.51 of 1See more

argocd-rbac-operator argocd-rbac-operator 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-rbac-operator:v0.2.451dded00137a
github.com/go-git/go-git/v5@v5.14.0
5.19.2

Open the chart page →

954
dex-k8sav1o-chartsVerified publisher0.2.11 of 1See more

dex-k8s av1o-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/go-git/go-git/v5@v5.2.0
5.19.2

Open the chart page →

3,391
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/go-git/go-git/v5@v5.7.0
5.19.2

Open the chart page →

2,898
argocd-source-trackercableship0.0.91 of 1See more

argocd-source-tracker cableship 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
github.com/go-git/go-git/v5@v5.13.2
5.19.2

Open the chart page →

1,483
chart-sentinelcableship0.0.121 of 1See more

chart-sentinel cableship 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
github.com/go-git/go-git/v5@v5.13.2
5.19.2

Open the chart page →

1,483
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/go-git/go-git/v5@v5.11.0
5.19.2

Open the chart page →

12,562
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
github.com/go-git/go-git/v5@v5.14.0
5.19.2

Open the chart page →

10,037
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/go-git/go-git/v5@v5.4.2
5.19.2

Open the chart page →

5,598
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
dexidp/dex:v2.39.1-distroless43655afd1a8f
github.com/go-git/go-git/v5@v5.11.0
5.19.2

Open the chart page →

2,238
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/go-git/go-git/v5@v5.12.0
5.19.2

Open the chart page →

1,542
dexgabibbo974.0.41 of 1See more

dex gabibbo97 4.0.4

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/go-git/go-git/v5@v5.2.0
5.19.2

Open the chart page →

3,391
openbaogitlabVerified publisher0.18.11 of 1See more

openbao gitlab 0.18.1

1 of the 1 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.5.5-gitlab25b7636dfba3f
github.com/go-git/go-git/v5@v5.19.1
5.19.2

Open the chart page →

1,769
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
github.com/go-git/go-git/v5@v5.11.0
5.19.2

Open the chart page →

3,518
carettagroundcover0.0.161 of 3See more

caretta groundcover 0.0.16

1 of the 3 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/go-git/go-git/v5@v5.4.2
5.19.2

Open the chart page →

6,799
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.321 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

1 of the 17 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
grafana/alloy:v1.14.0f50931848bd8
github.com/go-git/go-git/v5@v5.16.5
5.19.2

Open the chart page →

15,418
kdiffkdiff-snapshotsVerified publisher0.0.2031 of 2See more

kdiff kdiff-snapshots 0.0.203

1 of the 2 container images this version deploys carry CVE-2026-71557.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
github.com/go-git/go-git/v5@v5.16.2
5.19.2

Open the chart page →

5,508

Container images carrying it

207 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
langgenius/dify-api:1.16.1dcefa5f7c47c
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
langgenius/dify-ee-plugin-connector:3.9.8-ubi91848d8f1f144
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
langgenius/dify-ee-plugin-daemon-serverless:3.9.8-ubi9d2b8df196d08
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
langgenius/dify-ee-plugin-manager:3.9.8-ubi9207b343013a0
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
github.com/go-git/go-git/v5@v5.16.2
5.19.2
1
layer5/meshery:stable-latest78a8be21bef3
github.com/go-git/go-git/v5@v5.13.2
5.19.2
1
layer5/meshery-consul:stable-latest25a4cc38abcd
github.com/go-git/go-git/v5@v5.9.0
5.19.2
1
layer5/meshery-linkerd:stable-latestb99c73bac1f5
github.com/go-git/go-git/v5@v5.11.0
5.19.2
1
layer5/meshery-osm:stable-latestec898e5786c6
github.com/go-git/go-git/v5@v5.4.2
5.19.2
1
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/go-git/go-git/v5@v5.4.2
5.19.2
1
machines/filestash:latest0b8fc005e52e
github.com/go-git/go-git/v6@v6.0.0-alpha.3
6.0.0-alpha.5
1
mesosphere/dex:v2.37.0-d2iq.1b093d78a21ed
github.com/go-git/go-git/v5@v5.4.2
5.19.2
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/go-git/go-git/v5@v5.2.0
5.19.2
1
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
github.com/go-git/go-git/v5@v5.12.0
5.19.2
1
ntakashi/gitana:1.4.04171ec641120
github.com/go-git/go-git/v5@v5.4.2
5.19.2
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/go-git/go-git/v5@v5.11.0
5.19.2
1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
github.com/go-git/go-git/v5@v5.11.0
5.19.2
1
owncloud/ocis:7.1.388e7c854517d
github.com/go-git/go-git/v5@v5.13.0
5.19.2
1
owncloud/ocis:8.0.1b38fd8fdd58f
github.com/go-git/go-git/v5@v5.13.0
5.19.2
1
owncloud/ocis:1.7.0d2efcae92c84
github.com/go-git/go-git/v5@v5.1.0
5.19.2
1
owncloud/server:10.16.274c53d341076
github.com/go-git/go-git/v5@v5.18.0
5.19.2
1
owncloud/server:10.16.3b3f9efdcd7f7
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/go-git/go-git/v5@v5.3.0
5.19.2
1
prowlercloud/prowler-api:5.31.14f252d579be2
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
pulumi/pulumi-kubernetes-operator:v2.5.17dace4491358
github.com/go-git/go-git/v5@v5.16.5
5.19.2
1
qualys/qscanner:5.1.0-59ff255352422
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
ryuunosukeds3/orbital:latest0879f7261b10
github.com/go-git/go-git/v5@v5.13.2
5.19.2
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
semaphoreui/semaphore:v2.9.645b50bc11833f
github.com/go-git/go-git/v5@v5.11.0
5.19.2
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
github.com/go-git/go-git/v5@v5.18.0
5.19.2
1
sikalabs/slu:v0.72.07bd267f30247
github.com/go-git/go-git/v5@v5.8.1
5.19.2
1
sikalabs/slu:v0.34.0fdc0c6711add
github.com/go-git/go-git/v5@v5.4.2
5.19.2
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
github.com/go-git/go-git/v5@v5.4.2
5.19.2
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
github.com/go-git/go-git/v5@v5.16.0
5.19.2
1
gcr.io/kasten-images/restorectl:8.0.145a0884f9a90c
github.com/go-git/go-git/v5@v5.16.2
5.19.2
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/go-git/go-git/v5@v5.7.0
5.19.2
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/go-git/go-git/v5@v5.7.0
5.19.2
1
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
github.com/go-git/go-git/v5@v5.13.2
5.19.2
1
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
github.com/go-git/go-git/v5@v5.13.2
5.19.2
1
ghcr.io/caninehq/canine:latesta058034ca006
github.com/go-git/go-git/v5@v5.16.2
5.19.2
1
ghcr.io/cerbos/cerbos:0.51.08d35a64e4a99
github.com/go-git/go-git/v5@v5.16.4
5.19.2
1
ghcr.io/ckotzbauer/vulnerability-operator:0.28.167008df32715c
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
github.com/go-git/go-git/v5@v5.17.1
5.19.2
1
ghcr.io/dexidp/dex:v2.35.313964b29d63e
github.com/go-git/go-git/v5@v5.4.2
5.19.2
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/go-git/go-git/v5@v5.16.0
5.19.2
1
ghcr.io/dexidp/dex:v2.37.0f579d00721b0
github.com/go-git/go-git/v5@v5.4.2
5.19.2
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
github.com/go-git/go-git/v5@v5.19.1
5.19.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.