StackRadar

GHSA-6xv5-86q9-7xr8

Medium

Advisory

Published 7 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
180
of 17,781 indexed, latest versions
Container images
175
deployed by those charts
Fix available
1 of 1
affected package

SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced

Carried by container images the latest versions of 180 of 17,781 indexed charts deploy, on 175 images.

Affected packageAffected versionsFixed inImages
github.com/cyphar/filepath-securejoingolangv0.2.2, v0.2.2-0.20170720062807-ae69057f2299, v0.2.30.2.4175
OSV records
GHSA-6xv5-86q9-7xr8GO-2023-2048

Charts affected

180 by stars
ChartLatestAffected imagesRadar Score
procestypecatalogusprocestypecatalogus1.1.01 of 4See more

procestypecatalogus procestypecatalogus 1.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,429
productenendienstencatalogusproductenendienstencatalogus1.0.01 of 3See more

productenendienstencatalogus productenendienstencatalogus 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
panproto-application-nldesign0.1.01 of 5See more

pan proto-application-nldesign 0.1.0

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/pan-php:dev24f03c57568f
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,725
proto-component-commongroundproto-component-commonground1.0.01 of 3See more

proto-component-commonground proto-component-commonground 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
quarksquarks7.0.1+0.g5396b111 of 5See more

quarks quarks 7.0.1+0.g5396b11

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/cloudfoundry-incubator/quarks-secret:v1.0.754f059af4de8ed
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

18,197
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

29,227
review-componentreview-component1.0.01 of 3See more

review-component review-component 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,491
backup-maker-controllerriotkit-org0.1.21 of 1See more

backup-maker-controller riotkit-org 0.1.2

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/riotkit-org/backup-maker-controller:v0.1.262370545ba3d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,575
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,038
gitlab-operatorrock8sVerified publisher0.7.01 of 2See more

gitlab-operator rock8s 0.7.0

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,422
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,466
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

12,949
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

68,240
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

32,902
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,462
harborsoftonic1.13.01 of 8See more

harbor softonic 1.13.0

1 of the 8 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

7,672
trivy-operatorsoftonic0.18.01 of 1See more

trivy-operator softonic 0.18.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,505
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

30,687
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

28,165
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,480
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,429
wallarm-ingress-rcwallarmVerified publisher4.8.41 of 2See more

wallarm-ingress-rc wallarm 4.8.4

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
wallarm/ingress-controller:4.8.0-1a591b9c91570
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,635
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

6,232
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,552
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,022
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

13,677

Container images carrying it

175 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.