StackRadar

GHSA-w5pp-99ch-qj29

Medium

Advisory

Published 29 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
164
of 17,781 indexed, latest versions
Container images
172
deployed by those charts
Fix available
2 of 2
affected packages

go-git: Malformed Git object data may cause panics or resource exhaustion

Carried by container images the latest versions of 164 of 17,781 indexed charts deploy, on 172 images.

Affected packageAffected versionsFixed inImages
github.com/go-git/go-git/v5golangv5.0.0, v5.1.0, v5.2.0, v5.3.0+22 more5.19.1171
github.com/go-git/go-git/v6golangv6.0.0-alpha.36.0.0-alpha.41
OSV records
GHSA-w5pp-99ch-qj29GO-2026-5693

Charts affected

164 by stars
ChartLatestAffected imagesRadar Score
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-git/go-git/v5@v5.13.2
5.19.1

Open the chart page →

7,300
argo-workflowsargo-helm-charts1.0.01 of 2See more

argo-workflows argo-helm-charts 1.0.0

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
github.com/go-git/go-git/v5@v5.16.0
5.19.1

Open the chart page →

1,826
performanceandusagediagnosisassist-iot-pud1.0.01 of 7See more

performanceandusagediagnosis assist-iot-pud 1.0.0

1 of the 7 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
grafana/grafana:9.1.19746858c20e6
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

8,556
helm-controllerazureorkestra0.1.11 of 2See more

helm-controller azureorkestra 0.1.1

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/go-git/go-git/v5@v5.2.0
5.19.1

Open the chart page →

7,705
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/go-git/go-git/v5@v5.11.0
5.19.1

Open the chart page →

3,244
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
github.com/go-git/go-git/v5@v5.11.0
5.19.1

Open the chart page →

2,770
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
github.com/go-git/go-git/v5@v5.16.2
5.19.1

Open the chart page →

14,130
capsule-argo-addoncapsule-argo-addonVerified publisher0.7.51 of 2See more

capsule-argo-addon capsule-argo-addon 0.7.5

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
github.com/go-git/go-git/v5@v5.16.2
5.19.1

Open the chart page →

2,038
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
chaosnative/cle-server:2.7.0e7bcff4a20c0
github.com/go-git/go-git/v5@v5.3.0
5.19.1

Open the chart page →

16,389
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
github.com/go-git/go-git/v5@v5.3.0
5.19.1

Open the chart page →

25,151
iteration-zerocloud-native-toolkit0.2.01 of 1See more

iteration-zero cloud-native-toolkit 0.2.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
github.com/go-git/go-git/v5@v5.3.0
5.19.1

Open the chart page →

6,921
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ghcr.io/formancehq/dex:v1.0.4b803fbe1cdb8
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

18,293
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
github.com/go-git/go-git/v5@v5.14.0
5.19.1

Open the chart page →

3,693
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
github.com/go-git/go-git/v5@v5.16.0
5.19.1

Open the chart page →

1,035
mla-external-secretscluster-deploy0.3.01 of 1See more

mla-external-secrets cluster-deploy 0.3.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ghcr.io/external-secrets/external-secrets:v2.1.0ec40c3d9c48f
github.com/go-git/go-git/v5@v5.16.3
5.19.1

Open the chart page →

716
clusterfactoryclusterfactory0.2.01 of 5See more

clusterfactory clusterfactory 0.2.0

1 of the 5 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
github.com/go-git/go-git/v5@v5.16.5
5.19.1

Open the chart page →

7,168
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/go-git/go-git/v5@v5.13.0
5.19.1

Open the chart page →

1,925
csghubcsghubVerified publisher2.4.34 of 34See more

csghub csghub 2.4.3

4 of the 34 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.0e08231f16c00
github.com/go-git/go-git/v5@v5.16.3
5.19.1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/go-git/go-git/v5@v5.11.0
5.19.1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
github.com/go-git/go-git/v5@v5.11.0
5.19.1
quay.io/argoproj/argocli:v3.7.11577fc18f86ad
github.com/go-git/go-git/v5@v5.16.5
5.19.1

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
github.com/go-git/go-git/v5@v5.16.3
5.19.1

Open the chart page →

11,335
gickupdamounVerified publisher1.11.01 of 1See more

gickup damoun 1.11.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/go-git/go-git/v5@v5.12.0
5.19.1

Open the chart page →

1,028
devtron-enterprisedevtron48.0.06 of 28See more

devtron-enterprise devtron 48.0.0

6 of the 28 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/go-git/go-git/v5@v5.13.2
5.19.1
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.19.1
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/go-git/go-git/v5@v5.16.0
5.19.1
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-git/v5@v5.7.0
5.19.1
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.19.1
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/go-git/go-git/v5@v5.16.5
5.19.1

Open the chart page →

68,240
devtron-in-clustercddevtron0.10.21 of 2See more

devtron-in-clustercd devtron 0.10.2

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-git/v5@v5.6.1
5.19.1

Open the chart page →

5,039
devtron-enterprisedevtron-labs48.0.06 of 28See more

devtron-enterprise devtron-labs 48.0.0

6 of the 28 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/go-git/go-git/v5@v5.13.2
5.19.1
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.19.1
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/go-git/go-git/v5@v5.16.0
5.19.1
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-git/v5@v5.7.0
5.19.1
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.19.1
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/go-git/go-git/v5@v5.16.5
5.19.1

Open the chart page →

68,240
devtron-in-clustercddevtron-labs0.10.21 of 2See more

devtron-in-clustercd devtron-labs 0.10.2

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-git/v5@v5.6.1
5.19.1

Open the chart page →

5,039
devtron-operatordevtron-labs0.23.33 of 11See more

devtron-operator devtron-labs 0.23.3

3 of the 11 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
5.19.1
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/go-git/go-git/v5@v5.13.2
5.19.1
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

32,902
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

30,699
drogue-cloud-metricsdrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-metrics drogue-iot 0.7.11

1 of the 8 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
grafana/grafana:9.2.4057896e23443
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

13,558
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
grafana/grafana:10.1.50679e877ba20
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

7,329
reconcilerepmdedpVerified publisher2.12.01 of 1See more

reconciler epmdedp 2.12.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
epamedp/reconciler:2.12.0d33e938b6d59
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.19.1

Open the chart page →

2,180
codebase-operatorepmdedp-devVerified publisher2.12.0-MDTU-DDM-SNAPSHOT.101 of 1See more

codebase-operator epmdedp-dev 2.12.0-MDTU-DDM-SNAPSHOT.10

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
epamedp/codebase-operator:2.12.0-MDTU-DDM-SNAPSHOT.1096028c86f0dd
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.19.1

Open the chart page →

2,825
gerrit-operatorepmdedp-devVerified publisher2.11.0-MDTU-DDM-SNAPSHOT.21 of 1See more

gerrit-operator epmdedp-dev 2.11.0-MDTU-DDM-SNAPSHOT.2

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
epamedp/gerrit-operator:2.11.0-MDTU-DDM-SNAPSHOT.2b71fb39e0c9e
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

2,811
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.22 of 18See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/go-git/go-git/v5@v5.18.0
5.19.1
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-git/go-git/v5@v5.16.2
5.19.1

Open the chart page →

13,255
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

13,450
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/go-git/go-git/v5@v5.6.1
5.19.1

Open the chart page →

6,078
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/go-git/go-git/v5@v5.16.2
5.19.1

Open the chart page →

5,292
owncloud-ocisgeek-cookbookVerified publisher2.4.21 of 1See more

owncloud-ocis geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
owncloud/ocis:1.7.0d2efcae92c84
github.com/go-git/go-git/v5@v5.1.0
5.19.1

Open the chart page →

3,236
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

3,478
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
github.com/go-git/go-git/v5@v5.6.1
5.19.1

Open the chart page →

2,607
gnp-stackgnp-stack0.0.51 of 14See more

gnp-stack gnp-stack 0.0.5

1 of the 14 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
github.com/go-git/go-git/v5@v5.16.5
5.19.1

Open the chart page →

7,659
harborgpg-dev1.18.31 of 8See more

harbor gpg-dev 1.18.3

1 of the 8 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
goharbor/trivy-adapter-photon:v2.14.35c6f7162804c
github.com/go-git/go-git/v5@v5.16.5
5.19.1

Open the chart page →

3,376
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/go-git/go-git/v5@v5.16.2
5.19.1

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/go-git/go-git/v5@v5.14.0
5.19.1

Open the chart page →

8,188
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/go-git/go-git/v5@v5.12.0
5.19.1

Open the chart page →

2,590
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
github.com/go-git/go-git/v5@v5.17.1
5.19.1

Open the chart page →

3,124
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
github.com/go-git/go-git/v5@v5.14.0
5.19.1

Open the chart page →

6,015
gravity-initinvisiblVerified publisher1.0.91 of 1See more

gravity-init invisibl 1.0.9

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
invisibl/gravity-init:v1.0.91a970f84178b
github.com/go-git/go-git/v5@v5.4.2
5.19.1

Open the chart page →

2,006
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-git/go-git/v5@v5.13.2
5.19.1

Open the chart page →

45,239
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/go-git/go-git/v5@v5.13.0
5.19.1

Open the chart page →

3,999
deploydefenderk8s-custom-controllerVerified publisher0.1.31 of 1See more

deploydefender k8s-custom-controller 0.1.3

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/go-git/go-git/v5@v5.12.0
5.19.1

Open the chart page →

1,893
giteak8s-home-lab-repo2.6.01 of 1See more

gitea k8s-home-lab-repo 2.6.0

1 of the 1 container images this version deploys carry GHSA-w5pp-99ch-qj29.

Container imageDigestPackageFixed in
gitea/gitea:1.26.27d13848af126
github.com/go-git/go-git/v5@v5.19.0
5.19.1

Open the chart page →

2,139

Container images carrying it

172 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/dex:v2.30.22e4c14d1b444
github.com/go-git/go-git/v5@v5.2.0
github.com/go-git/go-git/v5@v5.2.0
5.19.1
5.19.1
6
quay.io/devtron/kubectl:latest2ad610626658
github.com/go-git/go-git/v5@v5.4.2
github.com/go-git/go-git/v5@v5.4.2
5.19.1
5.19.1
6
ghcr.io/synapsecns/sanguine/omnirpc:latest5217e3d1fc70
github.com/go-git/go-git/v5@v5.12.0
github.com/go-git/go-git/v5@v5.12.0
5.19.1
5.19.1
4
ghcr.io/dexidp/dex:v2.45.18499afd690c4
github.com/go-git/go-git/v5@v5.16.4
github.com/go-git/go-git/v5@v5.16.4
5.19.1
5.19.1
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
github.com/go-git/go-git/v5@v5.13.2
github.com/go-git/go-git/v5@v5.13.2
5.19.1
5.19.1
3
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
github.com/go-git/go-git/v5@v5.16.0
github.com/go-git/go-git/v5@v5.16.0
5.19.1
5.19.1
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
github.com/go-git/go-git/v5@v5.13.2
github.com/go-git/go-git/v5@v5.13.2
5.19.1
5.19.1
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/go-git/go-git/v5@v5.7.0
github.com/go-git/go-git/v5@v5.7.0
5.19.1
5.19.1
3
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
github.com/go-git/go-git/v5@v5.16.5
github.com/go-git/go-git/v5@v5.16.5
5.19.1
5.19.1
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
github.com/go-git/go-git/v5@v5.6.1
github.com/go-git/go-git/v5@v5.6.1
5.19.1
5.19.1
3
grafana/alloy:v1.8.17790f6f7fbd8
github.com/go-git/go-git/v5@v5.13.0
github.com/go-git/go-git/v5@v5.13.0
5.19.1
5.19.1
2
grafana/alloy:v1.12.2f94b1c82957a
github.com/go-git/go-git/v5@v5.16.2
github.com/go-git/go-git/v5@v5.16.2
5.19.1
5.19.1
2
grafana/grafana:9.2.4057896e23443
github.com/go-git/go-git/v5@v5.4.2
github.com/go-git/go-git/v5@v5.4.2
5.19.1
5.19.1
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/go-git/go-git/v5@v5.1.0
github.com/go-git/go-git/v5@v5.1.0
5.19.1
5.19.1
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-git/go-git/v5@v5.13.2
github.com/go-git/go-git/v5@v5.13.2
5.19.1
5.19.1
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
github.com/go-git/go-git/v5@v5.4.2
github.com/go-git/go-git/v5@v5.4.2
5.19.1
5.19.1
2
ghcr.io/dexidp/dex:v2.28.15e88f2205de1
github.com/go-git/go-git/v5@v5.2.0
github.com/go-git/go-git/v5@v5.2.0
5.19.1
5.19.1
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
github.com/go-git/go-git/v5@v5.13.2
github.com/go-git/go-git/v5@v5.13.2
5.19.1
5.19.1
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
github.com/go-git/go-git/v5@v5.16.0
github.com/go-git/go-git/v5@v5.16.0
5.19.1
5.19.1
2
quay.io/groundcover/grafana:9.3.18c65b333a3d3
github.com/go-git/go-git/v5@v5.4.2
github.com/go-git/go-git/v5@v5.4.2
5.19.1
5.19.1
2
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
github.com/go-git/go-git/v5@v5.13.0
github.com/go-git/go-git/v5@v5.13.0
5.19.1
5.19.1
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/go-git/go-git/v5@v5.11.0
github.com/go-git/go-git/v5@v5.11.0
5.19.1
5.19.1
1
aquasec/harbor-scanner-trivy:0.20.07ea4aa3d2eb6
github.com/go-git/go-git/v5@v5.0.0
github.com/go-git/go-git/v5@v5.0.0
5.19.1
5.19.1
1
aquasec/trivy:0.43.1944a04445179
github.com/go-git/go-git/v5@v5.7.0
github.com/go-git/go-git/v5@v5.7.0
5.19.1
5.19.1
1
aquasec/trivy:0.32.0973d0df16189
github.com/go-git/go-git/v5@v5.4.2
github.com/go-git/go-git/v5@v5.4.2
5.19.1
5.19.1
1
aquasec/trivy:0.69.3bcc376de8d77
github.com/go-git/go-git/v5@v5.16.5
github.com/go-git/go-git/v5@v5.16.5
5.19.1
5.19.1
1
artifacthub/hub:v1.19.0111918d8c399
github.com/go-git/go-git/v5@v5.12.0
github.com/go-git/go-git/v5@v5.12.0
5.19.1
5.19.1
1
artifacthub/scanner:v1.23.02d8365601f0e
github.com/go-git/go-git/v5@v5.16.5
github.com/go-git/go-git/v5@v5.16.5
5.19.1
5.19.1
1
artifacthub/scanner:v1.19.0323d026e78c3
github.com/go-git/go-git/v5@v5.12.0
github.com/go-git/go-git/v5@v5.12.0
5.19.1
5.19.1
1
artifacthub/tracker:v1.23.05368d21a6e5c
github.com/go-git/go-git/v5@v5.16.2
github.com/go-git/go-git/v5@v5.16.2
5.19.1
5.19.1
1
artifacthub/tracker:v1.19.06596c8c4d955
github.com/go-git/go-git/v5@v5.11.0
github.com/go-git/go-git/v5@v5.11.0
5.19.1
5.19.1
1
bluenviron/mediamtx:1.17.19e39256d1ba3
github.com/go-git/go-git/v5@v5.17.2
github.com/go-git/go-git/v5@v5.17.2
5.19.1
5.19.1
1
buddyspencer/gickup:0.10.386b656f19b0c1
github.com/go-git/go-git/v5@v5.14.0
github.com/go-git/go-git/v5@v5.14.0
5.19.1
5.19.1
1
buddyspencer/gickup:0.10.309e7dbf923c12
github.com/go-git/go-git/v5@v5.12.0
github.com/go-git/go-git/v5@v5.12.0
5.19.1
5.19.1
1
casbin/casdoor:v1.753.0770ad9ec3190
github.com/go-git/go-git/v5@v5.11.0
github.com/go-git/go-git/v5@v5.11.0
5.19.1
5.19.1
1
casbin/casdoor:3.62.17729da148c61
github.com/go-git/go-git/v5@v5.16.3
github.com/go-git/go-git/v5@v5.16.3
5.19.1
5.19.1
1
casbin/casdoor:3.62.0e08231f16c00
github.com/go-git/go-git/v5@v5.16.3
github.com/go-git/go-git/v5@v5.16.3
5.19.1
5.19.1
1
chaosnative/cle-server:2.7.0e7bcff4a20c0
github.com/go-git/go-git/v5@v5.3.0
github.com/go-git/go-git/v5@v5.3.0
5.19.1
5.19.1
1
charmcli/soft-serve:v0.4.039523c1a6ba8
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.19.1
5.19.1
1
datadog/agent:6aad9994de6a7
github.com/go-git/go-git/v5@v5.13.0
github.com/go-git/go-git/v5@v5.13.0
5.19.1
5.19.1
1
datawire/aes:3.11.195ec30b3c732
github.com/go-git/go-git/v5@v5.12.0
github.com/go-git/go-git/v5@v5.12.0
5.19.1
5.19.1
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/go-git/go-git/v5@v5.4.2
github.com/go-git/go-git/v5@v5.4.2
5.19.1
5.19.1
1
dexidp/dex:v2.39.1-distroless43655afd1a8f
github.com/go-git/go-git/v5@v5.11.0
github.com/go-git/go-git/v5@v5.11.0
5.19.1
5.19.1
1
epamedp/codebase-operator:2.12.0-MDTU-DDM-SNAPSHOT.1096028c86f0dd
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.19.1
5.19.1
1
epamedp/gerrit-operator:2.11.0-MDTU-DDM-SNAPSHOT.2b71fb39e0c9e
github.com/go-git/go-git/v5@v5.4.2
github.com/go-git/go-git/v5@v5.4.2
5.19.1
5.19.1
1
epamedp/reconciler:2.12.0d33e938b6d59
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
github.com/go-git/go-git/v5@v5.4.3-0.20210630082519-b4368b2a2ca4
5.19.1
5.19.1
1
flanksource/apm-hub:v0.0.471dacc3195bf9
github.com/go-git/go-git/v5@v5.6.1
github.com/go-git/go-git/v5@v5.6.1
5.19.1
5.19.1
1
flanksource/batch-runner:v1.0.44689687a7cf95
github.com/go-git/go-git/v5@v5.16.2
github.com/go-git/go-git/v5@v5.16.2
5.19.1
5.19.1
1
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/go-git/go-git/v5@v5.2.0
github.com/go-git/go-git/v5@v5.2.0
5.19.1
5.19.1
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/go-git/go-git/v5@v5.12.0
github.com/go-git/go-git/v5@v5.12.0
5.19.1
5.19.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.