StackRadar

GHSA-cm62-gvxx-vmxx

High

Advisory

Published 2 Oct 2026In the index since 3 Oct 2026
Severity
High
worst across findings
CVSS
8.6
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 18,087 indexed, latest versions
Container images
32
deployed by those charts
Fix available
1 of 1
affected package

Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symlinks

Carried by container images the latest versions of 19 of 18,087 indexed charts deploy, on 32 images.

Affected packageAffected versionsFixed inImages
dulwichpypi0.22.7, 0.22.8, 0.24.10, 0.25.2+2 more1.2.832
OSV records
GHSA-cm62-gvxx-vmxx

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
py-kube-downscalerpy-kube-downscalerVerified publisher0.3.121 of 1See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
dulwich@1.1.0
1.2.8

Open the chart page →

910
netscaler-ingress-controllernetscalerOfficialVerified publisher4.2.261 of 1See more

netscaler-ingress-controller netscaler 4.2.26

1 of the 1 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
quay.io/netscaler/netscaler-k8s-ingress-controller:4.2.26a68453858339
dulwich@0.22.8
1.2.8

Open the chart page →

206
netscaler-cpx-with-ingress-controllernetscalerOfficialVerified publisher4.2.261 of 2See more

netscaler-cpx-with-ingress-controller netscaler 4.2.26

1 of the 2 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
quay.io/netscaler/netscaler-k8s-ingress-controller:4.2.26a68453858339
dulwich@0.22.8
1.2.8

Open the chart page →

392
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
dulwich@0.22.7
1.2.8

Open the chart page →

3,058
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
dulwich@0.22.7
1.2.8

Open the chart page →

9,286
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
dulwich@1.2.5
1.2.8

Open the chart page →

10,168
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
dulwich@0.22.7
1.2.8

Open the chart page →

5,717
airbyteairbyte-v2Verified publisher2.4.01 of 10See more

airbyte airbyte-v2 2.4.0

1 of the 10 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
dulwich@0.22.8
1.2.8

Open the chart page →

15,315
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
dulwich@0.22.8
1.2.8

Open the chart page →

5,864
deployhubdeployhubVerified publisher10.0.4157 of 11See more

deployhub deployhub 10.0.415

7 of the 11 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
dulwich@0.24.10
1.2.8
quay.io/ortelius/ms-dep-pkg-cud:main-v10.0.1670-g9abe110c0c881b509a
dulwich@0.24.10
1.2.8
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
dulwich@0.24.10
1.2.8
quay.io/ortelius/ms-sbom-export:main-v10.0.933-g2e222ef43bdaa51598
dulwich@0.24.10
1.2.8
quay.io/ortelius/ms-scorecard:main-v10.0.1276-g966a8a43337e52fdd4
dulwich@0.24.10
1.2.8
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
dulwich@0.24.10
1.2.8
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
dulwich@0.24.10
1.2.8

Open the chart page →

12,684
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
dulwich@0.22.7
1.2.8

Open the chart page →

55,694
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
dulwich@0.22.8
1.2.8

Open the chart page →

17,981
prowlerprowler0.1.11 of 1See more

prowler prowler 0.1.1

1 of the 1 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
toniblyx/prowler:stablecf1ee9fc5b67
dulwich@1.2.5
1.2.8

Open the chart page →

1,983
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
dulwich@0.22.7
1.2.8

Open the chart page →

11,374
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
dulwich@0.22.7
1.2.8

Open the chart page →

5,717
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
dulwich@0.22.8
1.2.8

Open the chart page →

3,983
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
dulwich@0.22.8
1.2.8

Open the chart page →

5,984
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
dulwich@0.22.8
1.2.8

Open the chart page →

9,850
servicexssl-hep1.8.611 of 16See more

servicex ssl-hep 1.8.6

11 of the 16 container images this version deploys carry GHSA-cm62-gvxx-vmxx.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.6c935e123030d
dulwich@0.22.8
1.2.8
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
dulwich@0.22.8
1.2.8
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
dulwich@0.22.8
1.2.8
sslhep/servicex_code_gen_python:v1.8.696805be717ff
dulwich@0.22.8
1.2.8
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
dulwich@0.22.8
1.2.8
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
dulwich@0.22.8
1.2.8
sslhep/servicex-did-finder:v1.8.6e15e68307d33
dulwich@0.22.8
1.2.8
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
dulwich@0.25.2
1.2.8
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
dulwich@0.22.8
1.2.8
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
dulwich@0.22.8
1.2.8
sslhep/x509-secrets:v1.8.634e1c87cea8a
dulwich@0.22.8
1.2.8

Open the chart page →

64,705

Container images carrying it

32 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/redmine:6.1.3-trixief474a901faec
dulwich@0.22.7
1.2.8
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
dulwich@0.22.8
1.2.8
2
quay.io/netscaler/netscaler-k8s-ingress-controller:4.2.26a68453858339
dulwich@0.22.8
1.2.8
2
airbyte/manifest-server:7.28.2deec511b51c3
dulwich@0.22.8
1.2.8
1
knspar/phronetis:0.1.4609499d2dc91a
dulwich@0.22.8
1.2.8
1
langgenius/dify-api:1.0.0066035f93856
dulwich@0.22.7
1.2.8
1
library/redmine:6.1.204ac44a2595b
dulwich@0.22.7
1.2.8
1
prowlercloud/prowler-api:5.31.14f252d579be2
dulwich@1.2.5
1.2.8
1
redash/redash:26.3.0c5c9148f5c38
dulwich@0.22.8
1.2.8
1
sslhep/servicex_app:v1.8.6c935e123030d
dulwich@0.22.8
1.2.8
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
dulwich@0.22.8
1.2.8
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
dulwich@0.22.8
1.2.8
1
sslhep/servicex_code_gen_python:v1.8.696805be717ff
dulwich@0.22.8
1.2.8
1
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
dulwich@0.22.8
1.2.8
1
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
dulwich@0.22.8
1.2.8
1
sslhep/servicex-did-finder:v1.8.6e15e68307d33
dulwich@0.22.8
1.2.8
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
dulwich@0.25.2
1.2.8
1
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
dulwich@0.22.8
1.2.8
1
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
dulwich@0.22.8
1.2.8
1
sslhep/x509-secrets:v1.8.634e1c87cea8a
dulwich@0.22.8
1.2.8
1
toniblyx/prowler:stablecf1ee9fc5b67
dulwich@1.2.5
1.2.8
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
dulwich@0.22.8
1.2.8
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
dulwich@0.22.7
1.2.8
1
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
dulwich@1.1.0
1.2.8
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
dulwich@0.22.7
1.2.8
1
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
dulwich@0.24.10
1.2.8
1
quay.io/ortelius/ms-dep-pkg-cud:main-v10.0.1670-g9abe110c0c881b509a
dulwich@0.24.10
1.2.8
1
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
dulwich@0.24.10
1.2.8
1
quay.io/ortelius/ms-sbom-export:main-v10.0.933-g2e222ef43bdaa51598
dulwich@0.24.10
1.2.8
1
quay.io/ortelius/ms-scorecard:main-v10.0.1276-g966a8a43337e52fdd4
dulwich@0.24.10
1.2.8
1
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
dulwich@0.24.10
1.2.8
1
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
dulwich@0.24.10
1.2.8
1

syft 1.42.1 · advisories as of 10 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.