StackRadar

GHSA-6xv5-86q9-7xr8

Medium

Advisory

Published 7 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
180
of 17,781 indexed, latest versions
Container images
175
deployed by those charts
Fix available
1 of 1
affected package

SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced

Carried by container images the latest versions of 180 of 17,781 indexed charts deploy, on 175 images.

Affected packageAffected versionsFixed inImages
github.com/cyphar/filepath-securejoingolangv0.2.2, v0.2.2-0.20170720062807-ae69057f2299, v0.2.30.2.4175
OSV records
GHSA-6xv5-86q9-7xr8GO-2023-2048

Charts affected

180 by stars
ChartLatestAffected imagesRadar Score
balance-registrationbalance-registration0.1.01 of 4See more

balance-registration balance-registration 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/balance-registration-php:devc36094a41369
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,408
berichtserviceberichtservice1.0.01 of 3See more

berichtservice berichtservice 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/berichtservice-php:latestee6a21e66ff0
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,342
stackbitpokeVerified publisher0.12.41 of 6See more

stack bitpoke 0.12.4

1 of the 6 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.3.154f7fe2c6c5a
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

9,897
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,770
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

15,027
checkin-componentcheckin-component0.1.01 of 4See more

checkin-component checkin-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/checkin-component-php:dev3423845692c1
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,408
capsule-rancher-addonclastixVerified publisher0.1.11 of 5See more

capsule-rancher-addon clastix 0.1.1

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

7,104
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

25,151
ibm-toolkit-installcloud-native-toolkit0.3.01 of 1See more

ibm-toolkit-install cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

6,695
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

6,921
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

16,069
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

19,338
cgrccommongroundregistratiecomponent0.1.01 of 3See more

cgrc commongroundregistratiecomponent 0.1.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/cgrc-php:dev25415534d245
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,572
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/conduction-ui-php:dev2744565516e8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

12,907
betaalservicecontacten-catalog1.0.01 of 3See more

betaalservice contacten-catalog 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/betaalservice-php:latestece1ab544c57
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,209
contactmoment-componentcontactmoment-component0.1.01 of 4See more

contactmoment-component contactmoment-component 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,408
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

15,380
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/cyphar/filepath-securejoin@v0.2.2-0.20170720062807-ae69057f2299
0.2.4

Open the chart page →

2,977
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,926
ambassador-operatordatawire0.3.01 of 1See more

ambassador-operator datawire 0.3.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,486
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,466
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

12,949
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

68,240
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,466
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

12,949
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

68,240
devtron-operatordevtron-labs0.23.31 of 11See more

devtron-operator devtron-labs 0.23.3

1 of the 11 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

32,902
docparserdocparser0.1.01 of 4See more

docparser docparser 0.1.0

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
conduction/docparser-php:devb6f95c8ead7d
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,408
k8s-crondoubanVerified publisher0.2.01 of 1See more

k8s-cron douban 0.2.0

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.28.2fc059f056ad0
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,659
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,255
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,327
eherkenning-uieherkenning-ui1.0.01 of 3See more

eherkenning-ui eherkenning-ui 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
skopeo-syncfairwinds-incubator0.3.11 of 1See more

skopeo-sync fairwinds-incubator 0.3.1

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/skopeo/stable:v1.134853591bd1d2
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,736
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

13,450
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

14,673
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,684
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

11,961
grafregistratiecomponentgrafregistratiecomponent1.0.01 of 3See more

grafregistratiecomponent grafregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
siembolgresearch0.1.61 of 4See more

siembol gresearch 0.1.6

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.18.16a41efe02a041
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

14,312
dregsyhelm-charts-nr0.1.51 of 1See more

dregsy helm-charts-nr 0.1.5

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,969
cac-systemhuangchengwu-helm-chart0.1.01 of 9See more

cac-system huangchengwu-helm-chart 0.1.0

1 of the 9 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.12.08d54fe9d0c0d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

11,186
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

16,212
instemmingserviceinstemmingservice1.0.01 of 3See more

instemmingservice instemmingservice 1.0.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
koptimizejaconiVerified publisher0.5.41 of 2See more

koptimize jaconi 0.5.4

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.27.321b24e6bf801
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,713
ingress-nginxjfrog4.5.21 of 2See more

ingress-nginx jfrog 4.5.2

1 of the 2 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,798
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
alpine/k8s:1.22.600ac10bcb759
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

14,801
kiaekiae0.1.62 of 9See more

kiae kiae 0.1.6

2 of the 9 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
istio/pilot:1.15.2db08d6963975
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

19,168
cadvisorkrakazyabraVerified publisher1.0.11 of 1See more

cadvisor krakazyabra 1.0.1

1 of the 1 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

3,176
pipecdkrzwiatrzyk0.39.01 of 3See more

pipecd krzwiatrzyk 0.39.0

1 of the 3 container images this version deploys carry GHSA-6xv5-86q9-7xr8.

Container imageDigestPackageFixed in
ghcr.io/pipe-cd/pipecd:v0.39.00fae829caf29
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

3,812

Container images carrying it

175 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
6
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
3
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
2
xelalex/dregsy:0.4.3574054e1c417
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
2
alpine/k8s:1.22.600ac10bcb759
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
alpine/k8s:1.27.321b24e6bf801
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.31.106dbe6f391eda
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.31.137a319b15cfc9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.32.47e1e7d5b7a96
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.31.49c4976d47656
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.18.16a41efe02a041
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
alpine/k8s:1.30.0bd01dae02676
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.30.2cd560fce90f7
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.28.13e5c0b053fed7
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.32.3eec354133193
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.28.2fc059f056ad0
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/cyphar/filepath-securejoin@v0.2.2-0.20170720062807-ae69057f2299
github.com/cyphar/filepath-securejoin@v0.2.2-0.20170720062807-ae69057f2299
0.2.4
0.2.4
1
aquasec/trivy:0.43.1944a04445179
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
aquasec/trivy:0.32.0973d0df16189
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/balance-registration-php:devc36094a41369
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/betaalservice-php:latestece1ab544c57
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/cgrc-php:dev25415534d245
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/checkin-component-php:dev3423845692c1
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/conduction-ui-php:dev2744565516e8
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/docparser-php:devb6f95c8ead7d
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/kvk-php:dev8f177f9f8a7b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/pan-php:dev24f03c57568f
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
devspacecloud/manager:0.3.349c397413f7b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
gocrane/craned:v0.5.1a1400909118c
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.