StackRadar

GHSA-6xv5-86q9-7xr8

Medium

Advisory

Published 7 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
180
of 17,781 indexed, latest versions
Container images
175
deployed by those charts
Fix available
1 of 1
affected package

SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced

Carried by container images the latest versions of 180 of 17,781 indexed charts deploy, on 175 images.

Affected packageAffected versionsFixed inImages
github.com/cyphar/filepath-securejoingolangv0.2.2, v0.2.2-0.20170720062807-ae69057f2299, v0.2.30.2.4175
OSV records
GHSA-6xv5-86q9-7xr8GO-2023-2048

Charts affected

180 by stars
ChartLatestAffected imagesRadar Score
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,453
prometheus-msteamsprometheus-msteams1.3.61 of 1See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

941
oncallgrafana1.16.52 of 12See more

oncall grafana 1.16.5

2 of the 12 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

16,251
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,167
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

32,902
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

4,154
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,630
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,531
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,698
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

9,052
cert-managerchoerodon1.8.21 of 4See more

cert-manager choerodon 1.8.2

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

7,775
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,154
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,675
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

10,315
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,039
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

14,917
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,898
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,830
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,303
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,969
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,598
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,779
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,556
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

6,977
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,701
ks-corekubeblocksVerified publisher1.1.31 of 5See more

ks-core kubeblocks 1.1.3

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,721
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,274
mesherykubesphere-stable0.5.05 of 13See more

meshery kubesphere-stable 0.5.0

5 of the 13 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
layer5/meshery-osm:stable-latestec898e5786c6
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

24,690
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,389
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,136
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

14,491
gloosolo-gloo-edge0.0.0-fork2 of 5See more

gloo solo-gloo-edge 0.0.0-fork

2 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

9,224
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,022
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,460
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,303
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,079
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,871
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,429
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,447
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,209
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,576
ingress-nginxantmediaVerified publisher4.4.01 of 2See more

ingress-nginx antmedia 4.4.0

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,322
cluster-proxyappscodeVerified publisher2024.2.251 of 1See more

cluster-proxy appscode 2024.2.25

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:latest27a5c64b7ea8
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,119
kubedb-oneappscodeVerified publisher2023.12.281 of 10See more

kubedb-one appscode 2023.12.28

1 of the 10 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

15,200
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,404
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,561
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

6,908
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,705
keptn-addonsazureorkestra0.1.01 of 4See more

keptn-addons azureorkestra 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,621

Container images carrying it

175 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
hashicorp/waypoint:0.11.397d521a27498
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/operator:1.10.3655eefa11c84
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
istio/operator:1.12.06cfce8a071b9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/operator:1.18.270f9d1fe5fff
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.16.0ac0284d75ec9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.17.1ce9d87606701
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.15.2db08d6963975
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kiosksh/kiosk:0.2.11501725ba2025
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubebb/core:v0.1.62b9e7f451d6b
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/core:lateste366c34a9b8d
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kusionstack/operating:v0.5.0c28bd96b986b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
layer5/meshery-osm:stable-latestec898e5786c6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
murtazashah46/helmfile:latest4d11726cf803
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.