StackRadar

GHSA-m9hp-7r99-94h5

Critical

Advisory

Published 14 Apr 2021In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.017
76th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
31
of 17,781 indexed, latest versions
Container images
17
deployed by those charts
Fix available
2 of 2
affected packages

Authentication Bypass in dex

Carried by container images the latest versions of 31 of 17,781 indexed charts deploy, on 17 images.

Affected packageAffected versionsFixed inImages
github.com/dexidp/dexgolangv0.0.0-20250414234518-4c3e83b90135, v0.0.0-20250522090151-6e602d3315ea, v0.0.0-20250829100637-2dce75009acf, v0.0.0-20260303133905-11d2eeb52b422.27.04
github.com/russellhaering/goxmldsiggolangv0.0.0-20180430223755-7acd5e4a6ef7, v0.0.0-20200902171629-2e1fbc2c55931.1.013
OSV records
GHSA-2x32-jm95-2cpxGHSA-m9hp-7r99-94h5GHSA-q547-gmf8-8jr7
Also known as
CVE-2020-15216, CVE-2020-26290, CVE-2020-27847, GO-2020-0050

Charts affected

31 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.01 of 3See more

argo-cd argo 10.9.0

1 of the 3 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/dexidp/dex@v0.0.0-20260303133905-11d2eeb52b42
2.27.0

Open the chart page →

3,218
argo-cdargo-cd-oci10.9.01 of 3See more

argo-cd argo-cd-oci 10.9.0

1 of the 3 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/dexidp/dex@v0.0.0-20260303133905-11d2eeb52b42
2.27.0

Open the chart page →

3,218
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/dexidp/dex@v0.0.0-20250829100637-2dce75009acf
2.27.0

Open the chart page →

1,765
kube-prometheuschoerodon9.3.11 of 7See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

12,237
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

14,893
fadicetic0.3.11 of 25See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0

Open the chart page →

52,919
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

96,941
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

13,562
kube-prometheus-stackprometheus-worawutchan12.8.01 of 6See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.2.1733842cca5bd
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0

Open the chart page →

12,125
argo-cdwenerme10.9.01 of 3See more

argo-cd wenerme 10.9.0

1 of the 3 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/dexidp/dex@v0.0.0-20260303133905-11d2eeb52b42
2.27.0

Open the chart page →

3,218
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/dexidp/dex@v0.0.0-20250522090151-6e602d3315ea
2.27.0

Open the chart page →

10,037
dnation-pingdnationcloud0.1.91 of 5See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.3.5511bc20bfcd1
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0

Open the chart page →

10,454
subspacemglants0.1.01 of 1See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
subspacecommunity/subspace:1.5.0e2042b63fb35
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

3,254
Grafanasurajwarbhe-grafana0.1.01 of 1See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
surajwarbhe/grafana:v185248611e9f1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

2,597
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/dexidp/dex@v0.0.0-20250414234518-4c3e83b90135
2.27.0

Open the chart page →

7,300
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

10,466
temporaldtrdnk-helm-chartsVerified publisher0.35.01 of 13See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

20,205
grafanaedu5.3.01 of 1See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

3,191
grafanaflagger1.7.01 of 1See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.3.46d42886b3ebe
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0

Open the chart page →

3,365
jx-app-flaggerjenkins-x0.0.51 of 2See more

jx-app-flagger jenkins-x 0.0.5

1 of the 2 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:6.5.1befcd84da2c1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

6,028
grafanaleechistest5.3.01 of 1See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

3,191
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:6.6.0052147d7e0ec
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

68,284
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

15,855
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
quay.io/dexidp/dex:v2.25.07bcf286807b8
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

10,466
centralbrainsciencemeshVerified publisher0.0.31 of 5See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.3.315b977f5207d
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0

Open the chart page →

9,754
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

10,733
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

12,237
temporaltemporal0.28.91 of 13See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

21,005
grafanatnh5.3.01 of 1See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

3,191
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry GHSA-m9hp-7r99-94h5.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0

Open the chart page →

22,665

Container images carrying it

17 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/grafana:7.0.3d72946c8e5d5
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
6
grafana/grafana:6.7.11ff3999e0fc0
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
4
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/dexidp/dex@v0.0.0-20260303133905-11d2eeb52b42
github.com/dexidp/dex@v0.0.0-20260303133905-11d2eeb52b42
2.27.0
2.27.0
3
quay.io/dexidp/dex:v2.25.07bcf286807b8
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
3
grafana/grafana:7.3.5511bc20bfcd1
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0
2
quay.io/dexidp/dex:v2.24.0c9b7f6d0d953
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
2
grafana/grafana:6.6.0052147d7e0ec
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
1
grafana/grafana:7.3.315b977f5207d
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0
1
grafana/grafana:7.3.46d42886b3ebe
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0
1
grafana/grafana:7.2.1733842cca5bd
github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593
1.1.0
1
grafana/grafana:6.5.1befcd84da2c1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
1
subspacecommunity/subspace:1.5.0e2042b63fb35
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
1
surajwarbhe/grafana:v185248611e9f1
github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7
1.1.0
1
ghcr.io/dexidp/dex:v2.43.10881d3c9359b
github.com/dexidp/dex@v0.0.0-20250522090151-6e602d3315ea
github.com/dexidp/dex@v0.0.0-20250522090151-6e602d3315ea
2.27.0
2.27.0
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
github.com/dexidp/dex@v0.0.0-20250829100637-2dce75009acf
github.com/dexidp/dex@v0.0.0-20250829100637-2dce75009acf
2.27.0
2.27.0
1
ghcr.io/dexidp/dex:v2.42.18186d6dd81f4
github.com/dexidp/dex@v0.0.0-20250414234518-4c3e83b90135
github.com/dexidp/dex@v0.0.0-20250414234518-4c3e83b90135
2.27.0
2.27.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.