StackRadarChart IndexLive demo

GHSA-rrfw-hg9m-j47h

Critical

Advisory

Published 24 May 2021In the index since 6 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.5; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 25; of 17,781 indexed, latest versions
Container images: 13; deployed by those charts
Fix available: 1 of 1; affected package

Signature Validation Bypass

Carried by container images the latest versions of 25 of 17,781 indexed charts deploy, on 13 images.

Affected package	Affected versions	Fixed in	Images
github.com/russellhaering/goxmldsiggolang	v0.0.0-20180430223755-7acd5e4a6ef7, v0.0.0-20200902171629-2e1fbc2c5593	0.4.2	13

OSV records: GHSA-rrfw-hg9m-j47h

Charts affected

25 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheuschoerodon

1 of 7 See more

kube-prometheus choerodon 9.3.1

1 of the 7 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

12,237

temporallemontech

1 of 13 See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

14,893

fadicetic

1 of 25 See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2

Open the chart page →

52,919

kubeflowkubeflow

1 of 45 See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

96,941

dexwiremind

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

13,562

kube-prometheus-stackprometheus-worawutchan

1 of 6 See more

kube-prometheus-stack prometheus-worawutchan 12.8.0

1 of the 6 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.2.1	733842cca5bd	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2

Open the chart page →

12,125

dnation-pingdnationcloud

1 of 5 See more

dnation-ping dnationcloud 0.1.9

1 of the 5 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.5	511bc20bfcd1	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2

Open the chart page →

10,454

subspacemglants

1 of 1 See more

subspace mglants 0.1.0

1 of the 1 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
subspacecommunity/subspace :1.5.0	e2042b63fb35	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

3,254

Grafanasurajwarbhe-grafana

1 of 1 See more

Grafana surajwarbhe-grafana 0.1.0

1 of the 1 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
surajwarbhe/grafana :v1	85248611e9f1	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

2,597

argocddevtron

1 of 3 See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

10,466

argocddevtron-labs

1 of 3 See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

10,466

temporaldtrdnk-helm-charts

1 of 13 See more

temporal dtrdnk-helm-charts 0.35.0

1 of the 13 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

20,205

1 of 1 See more

grafana edu 5.3.0

1 of the 1 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

3,191

grafanaflagger

1 of 1 See more

grafana flagger 1.7.0

1 of the 1 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.4	6d42886b3ebe	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2

Open the chart page →

3,365

jx-app-flaggerjenkins-x

1 of 2 See more

jx-app-flagger jenkins-x 0.0.5

1 of the 2 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :6.5.1	befcd84da2c1	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

6,028

grafanaleechistest

1 of 1 See more

grafana leechistest 5.3.0

1 of the 1 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

3,191

kommandermesosphere-stable

1 of 29 See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :6.6.0	052147d7e0ec	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

68,284

pulsarv2milvus-helm

1 of 4 See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

15,855

argocdromholdings

1 of 3 See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

10,466

centralbrainsciencemesh

1 of 5 See more

centralbrain sciencemesh 0.0.3

1 of the 5 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.3.3	15b977f5207d	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2

Open the chart page →

9,754

seldon-core-analyticsseldon

1 of 8 See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

10,733

prometheus-operatorstatcan

1 of 7 See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

12,237

temporaltemporal

1 of 13 See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

21,005

1 of 1 See more

grafana tnh 5.3.0

1 of the 1 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :7.0.3	d72946c8e5d5	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

3,191

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry GHSA-rrfw-hg9m-j47h.

Container image	Digest	Package	Fixed in
grafana/grafana :6.7.1	1ff3999e0fc0	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2

Open the chart page →

22,665

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
grafana/grafana :7.0.3	d72946c8e5d5	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	6
grafana/grafana :6.7.1	1ff3999e0fc0	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	4
quay.io/dexidp/dex :v2.25.0	7bcf286807b8	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	3
grafana/grafana :7.3.5	511bc20bfcd1	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2	2
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	2
grafana/grafana :6.6.0	052147d7e0ec	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	1
grafana/grafana :7.3.3	15b977f5207d	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2	1
grafana/grafana :7.3.4	6d42886b3ebe	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2	1
grafana/grafana :7.2.1	733842cca5bd	github.com/russellhaering/goxmldsig@v0.0.0-20200902171629-2e1fbc2c5593	0.4.2	1
grafana/grafana :6.5.1	befcd84da2c1	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.10	ebcf7f033b54	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	1
subspacecommunity/subspace :1.5.0	e2042b63fb35	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	1
surajwarbhe/grafana :v1	85248611e9f1	github.com/russellhaering/goxmldsig@v0.0.0-20180430223755-7acd5e4a6ef7	0.4.2	1