StackRadar

CVE-2026-85731

High

Advisory

Published 17 Sept 2026In the index since 18 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
128
of 17,803 indexed, latest versions
Container images
120
deployed by those charts
Fix available
1 of 1
affected package

oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)

Carried by container images the latest versions of 128 of 17,803 indexed charts deploy, on 120 images.

Affected packageAffected versionsFixed inImages
oras.land/oras-go/v2golangv2.0.0, v2.0.2, v2.2.0, v2.3.0+5 more2.6.2120
OSV records
GHSA-m37j-52j7-pjw7

Charts affected

128 by stars
ChartLatestAffected imagesRadar Score
kubetailkubetailVerified publisher0.26.01 of 3See more

kubetail kubetail 0.26.0

1 of the 3 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/kubetail-org/kubetail-dashboard:0.17.08617f0a7f703
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

1,896
periscopeperiscopeVerified publisher1.1.61 of 1See more

periscope periscope 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

862
podtracepodtraceOfficialVerified publisher0.14.81 of 2See more

podtrace podtrace 0.14.8

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
alpine/k8s:1.37.0b421c2e9419e
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

624
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

8,437
akeyless-gatewayakeyless-services-helmVerified publisher3.5.61 of 2See more

akeyless-gateway akeyless-services-helm 3.5.6

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
akeyless/gateway:5.4.0d4768a9b089c
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

1,377
accounts-uiappscodeVerified publisher2026.9.111 of 1See more

accounts-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,710
aceappscodeVerified publisher2026.9.111 of 2See more

ace appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,012
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,368
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,368
billingappscodeVerified publisher2026.9.111 of 1See more

billing appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,710
cluster-profile-managerappscodeVerified publisher2026.9.181 of 1See more

cluster-profile-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-profile:v0.13.0048e041157d0
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

117
fargocdappscodeVerified publisher2026.9.181 of 1See more

fargocd appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/fargocd:v0.1.0c59d775d9a7c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

426
fargocd-managerappscodeVerified publisher2026.9.181 of 1See more

fargocd-manager appscode 2026.9.18

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/fargocd:v0.1.0c59d775d9a7c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

426
kube-ui-serverappscodeVerified publisher2026.9.111 of 1See more

kube-ui-server appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/kube-ui-server:v0.7.079e67164b4f0
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

308
marketplace-apiappscodeVerified publisher2026.9.111 of 1See more

marketplace-api appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,710
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

37,889
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

7,697
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

68,447
capsule-argo-addoncapsule-argo-addonVerified publisher0.7.51 of 2See more

capsule-argo-addon capsule-argo-addon 0.7.5

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,071
ranchercarbide-charts2.15.11 of 2See more

rancher carbide-charts 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
rancher/shell:v0.8.1f293af9c635f
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

1,528
catalyst-agentscatalyst-agents0.1.331 of 18See more

catalyst-agents catalyst-agents 0.1.33

1 of the 18 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

17,669
argo-cdcluster-deploy0.3.22 of 3See more

argo-cd cluster-deploy 0.3.2

2 of the 3 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
oras.land/oras-go/v2@v2.6.1
2.6.2
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,826
kubernetes-mcpcowboysysopVerified publisher2.0.01 of 1See more

kubernetes-mcp cowboysysop 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

1,871
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

22,698
devtron-enterprisedevtron48.0.04 of 28See more

devtron-enterprise devtron 48.0.0

4 of the 28 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

69,552
devtron-enterprisedevtron-labs48.0.04 of 28See more

devtron-enterprise devtron-labs 48.0.0

4 of the 28 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

69,552
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
oras.land/oras-go/v2@v2.6.0
2.6.2
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

33,352
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

12,464
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

5,534
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,448
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,460
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

4,736
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

8,488
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.961 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

1 of the 3 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

2,639
kubernetes-mcp-serverhelmforgeVerified publisher1.0.61 of 1See more

kubernetes-mcp-server helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/containers/kubernetes-mcp-server:v0.0.666d650f4bd6ac
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

335
harborhelm-harborVerified publisher2.3.51 of 8See more

harbor helm-harbor 2.3.5

1 of the 8 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.15.2215c07b71c37
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

1,738
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

2,020
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

3,209
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
oras.land/oras-go/v2@v2.0.0
2.6.2

Open the chart page →

8,021
monitoring-stackict-platformVerified publisher0.4.01 of 13See more

monitoring-stack ict-platform 0.4.0

1 of the 13 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

9,704
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

62,809
kagentkagent0.10.11 of 6See more

kagent kagent 0.10.1

1 of the 6 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,064
kcmkcm1.12.02 of 12See more

kcm kcm 1.12.0

2 of the 12 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
oras.land/oras-go/v2@v2.6.1
2.6.2
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

3,318
installerkrateo2.7.11 of 2See more

installer krateo 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,276
kubecheckskubechecks3.0.01 of 1See more

kubechecks kubechecks 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/zapier/kubechecks:latest60cea46ce830
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

607
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

59,153
vcluster-headloftVerified publisher0.0.0-035ec6e1 of 2See more

vcluster-head loft 0.0.0-035ec6e

1 of the 2 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

1,309
argocd-extra-app-info-exportermikejohVerified publisher0.1.121 of 1See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
oras.land/oras-go/v2@v2.5.0
2.6.2

Open the chart page →

1,365
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
oras.land/oras-go/v2@v2.6.0
2.6.2

Open the chart page →

3,917
agent-control-bootstrapnewrelic1.8.161 of 1See more

agent-control-bootstrap newrelic 1.8.16

1 of the 1 container images this version deploys carry CVE-2026-85731.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:1.24.047520b65d6b2
oras.land/oras-go/v2@v2.6.1
2.6.2

Open the chart page →

992

Container images carrying it

120 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ryuunosukeds3/orbital:latest0879f7261b10
oras.land/oras-go/v2@v2.5.0
2.6.2
1
semaphoreui/semaphore:latest:v2.19.123996804607eb
oras.land/oras-go/v2@v2.6.0
2.6.2
1
semaphoreui/semaphore:v2.19.1498ad9bc7a2a0
oras.land/oras-go/v2@v2.6.0
2.6.2
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
oras.land/oras-go/v2@v2.6.0
2.6.2
1
sikalabs/slu:v0.72.07bd267f30247
oras.land/oras-go/v2@v2.3.0
2.6.2
1
ghcr.io/appscode/kube-ui-server:v0.7.079e67164b4f0
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
oras.land/oras-go/v2@v2.0.2
2.6.2
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.49e48285bb44c
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.3bdb31f3121a2
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/cloudtty/cloudshell:v0.8.1023e8d178e02c
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/containers/kubernetes-mcp-server:v0.0.666d650f4bd6ac
oras.land/oras-go/v2@v2.6.1
2.6.2
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/digitalis-io/vals-operator:v0.8.17c776499b8c9
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
oras.land/oras-go/v2@v2.6.1
2.6.2
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/grafana/alloy-operator:1.7.02ce23f948e02
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/grafana/alloy-operator:1.12.14ee4b71cf16a
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/haedalwang/kubescout:0.1.107d51f838f0d
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/kluster-manager/cluster-profile:v0.13.0048e041157d0
oras.land/oras-go/v2@v2.6.1
2.6.2
1
ghcr.io/krateoplatformops/installer/installer:0.6.3a7e922ddac55
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/kubenetworks/kubevpn:v2.11.93feb9da85270
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/kubetail-org/kubetail-dashboard:0.17.08617f0a7f703
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
oras.land/oras-go/v2@v2.3.1
2.6.2
1
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
oras.land/oras-go/v2@v2.3.1
2.6.2
1
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
oras.land/oras-go/v2@v2.3.1
2.6.2
1
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
oras.land/oras-go/v2@v2.3.1
2.6.2
1
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
oras.land/oras-go/v2@v2.3.1
2.6.2
1
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
oras.land/oras-go/v2@v2.3.1
2.6.2
1
ghcr.io/loft-sh/kubernetes:v1.35.090097a08b87c
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/loft-sh/vcluster-platform:4.12.0ef92da4621e6
oras.land/oras-go/v2@v2.6.1
2.6.2
1
ghcr.io/manishchaudhary101/kube-argus:latest8e3869d31c70
oras.land/oras-go/v2@v2.6.1
2.6.2
1
ghcr.io/mydecisive/octant:0.1.86ebbd44abae6c
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
oras.land/oras-go/v2@v2.5.0
2.6.2
1
ghcr.io/okteto/okteto:3.22.04585017f52f6
oras.land/oras-go/v2@v2.6.1
2.6.2
1
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
oras.land/oras-go/v2@v2.6.0
2.6.2
1
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
oras.land/oras-go/v2@v2.6.0
2.6.2
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.