StackRadar

GHSA-6xv5-86q9-7xr8

Medium

Advisory

Published 7 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
180
of 17,781 indexed, latest versions
Container images
175
deployed by those charts
Fix available
1 of 1
affected package

SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced

Carried by container images the latest versions of 180 of 17,781 indexed charts deploy, on 175 images.

Affected packageAffected versionsFixed inImages
github.com/cyphar/filepath-securejoingolangv0.2.2, v0.2.2-0.20170720062807-ae69057f2299, v0.2.30.2.4175
OSV records
GHSA-6xv5-86q9-7xr8GO-2023-2048

Charts affected

180 by stars
ChartLatestAffected imagesRadar Score
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,342
stackbitpokeVerified publisher0.12.41 of 6See more

stack bitpoke 0.12.4

1 of the 6 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

9,897
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,770
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

15,027
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,408
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

7,104
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

6,921
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

16,069
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

19,338
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,408
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

15,380
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/cyphar/filepath-securejoin@v0.2.2-0.20170720062807-ae69057f2299
0.2.4

Open the chart page →

2,977
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,926
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,486
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,466
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

12,949
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

68,240
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,466
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

12,949
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

32,902
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,408
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,659
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,255
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,736
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

13,450
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

14,673
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,684
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

11,961
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

14,312
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,969
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

11,186
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

16,212
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,713
ingress-nginxjfrog4.5.21 of 2See more

ingress-nginx jfrog 4.5.2

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,798
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

14,801
kiaekiae0.1.62 of 9See more

kiae kiae 0.1.6

2 of the 9 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

19,168
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

3,176
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

3,812

Container images carrying it

175 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
hashicorp/waypoint:0.11.397d521a27498
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/operator:1.10.3655eefa11c84
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
istio/operator:1.12.06cfce8a071b9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/operator:1.18.270f9d1fe5fff
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.16.0ac0284d75ec9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.17.1ce9d87606701
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.15.2db08d6963975
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kiosksh/kiosk:0.2.11501725ba2025
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubebb/core:v0.1.62b9e7f451d6b
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/core:lateste366c34a9b8d
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kusionstack/operating:v0.5.0c28bd96b986b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
layer5/meshery-osm:stable-latestec898e5786c6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
murtazashah46/helmfile:latest4d11726cf803
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.