StackRadar

GO-2023-2048

Medium

Advisory

Published 7 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
180
of 17,781 indexed, latest versions
Container images
175
deployed by those charts
Fix available
1 of 1
affected package

SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced

Carried by container images the latest versions of 180 of 17,781 indexed charts deploy, on 175 images.

Affected packageAffected versionsFixed inImages
github.com/cyphar/filepath-securejoingolangv0.2.2, v0.2.2-0.20170720062807-ae69057f2299, v0.2.30.2.4175
OSV records
GHSA-6xv5-86q9-7xr8GO-2023-2048

Charts affected

180 by stars
ChartLatestAffected imagesRadar Score
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,453
prometheus-msteamsprometheus-msteams1.3.61 of 1See more

prometheus-msteams prometheus-msteams 1.3.6

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/prometheusmsteams/prometheus-msteams:v1.5.3a9f4d31ab811
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

941
oncallgrafana1.16.52 of 12See more

oncall grafana 1.16.5

2 of the 12 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.0595c548dee6f
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
registry.k8s.io/ingress-nginx/controller:v1.2.15516d103a9c2
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

16,251
waypointhashicorpVerified publisher0.1.211 of 2See more

waypoint hashicorp 0.1.21

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
hashicorp/waypoint:0.11.397d521a27498
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,167
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

32,902
helm-exportersstarcher0.5.01 of 1See more

helm-exporter sstarcher 0.5.0

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

4,154
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,630
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,531
cadvisorcadvisorVerified publisher0.1.151 of 1See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,698
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

9,052
cert-managerchoerodon1.8.21 of 4See more

cert-manager choerodon 1.8.2

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.8.281b2d775edad
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

7,775
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,154
loftloftVerified publisher0.0.0-ci.141 of 1See more

loft loft 0.0.0-ci.14

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/loft:0.0.0-ci.14b69bcdaa8492
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,675
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

10,315
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,039
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

14,917
helm-dashboardbeluga-cloudVerified publisher2.4.01 of 1See more

helm-dashboard beluga-cloud 2.4.0

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,898
brpservicebrpservice1.1.01 of 4See more

brpservice brpservice 1.1.0

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/brpservice-php:latestc17f1ba17d36
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,830
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-php:latesteeb625bd660c
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,303
dregsydeliveryheroVerified publisher0.1.51 of 1See more

dregsy deliveryhero 0.1.5

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
xelalex/dregsy:0.4.3574054e1c417
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,969
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,598
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,779
otel-collectorgeek-cookbookVerified publisher1.2.21 of 1See more

otel-collector geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,556
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

6,977
operatoristio1.10.31 of 1See more

operator istio 1.10.3

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
istio/operator:1.10.3655eefa11c84
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,701
ks-corekubeblocksVerified publisher1.1.31 of 5See more

ks-core kubeblocks 1.1.3

1 of the 5 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,721
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,274
mesherykubesphere-stable0.5.05 of 13See more

meshery kubesphere-stable 0.5.0

5 of the 13 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
layer5/meshery-osm:stable-latestec898e5786c6
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

24,690
landelijketabellencataloguslandelijketabellencatalogus1.0.01 of 3See more

landelijketabellencatalogus landelijketabellencatalogus 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
linkerd-jaegerlinkerd2-edgeVerified publisher30.14.11-edge1 of 4See more

linkerd-jaeger linkerd2-edge 30.14.11-edge

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,389
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,136
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
aquasec/trivy:0.43.1944a04445179
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

14,491
gloosolo-gloo-edge0.0.0-fork2 of 5See more

gloo solo-gloo-edge 0.0.0-fork

2 of the 5 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/solo-io/discovery:0.0.0-fork5b62aaade3c9
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
quay.io/solo-io/gloo:0.0.0-fork9a6c84560d44
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

9,224
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,022
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,460
user-componentuser-component1.2.01 of 4See more

user-component user-component 1.2.0

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,303
waardepapierenwaardepapieren1.0.01 of 3See more

waardepapieren waardepapieren 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,079
waardepapieren-baliewaardepapieren-balie1.0.01 of 3See more

waardepapieren-balie waardepapieren-balie 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,871
waardepapieren-registerwaardepapieren-register1.1.01 of 4See more

waardepapieren-register waardepapieren-register 1.1.0

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,429
adresserviceadresservice1.1.01 of 5See more

adresservice adresservice 1.1.0

1 of the 5 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/adresservice-php:latestc5075f0320cd
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,447
agendaserviceagendaservice1.0.01 of 3See more

agendaservice agendaservice 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,209
antmediaantmediaVerified publisher3.1.01 of 4See more

antmedia antmedia 3.1.0

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,576
ingress-nginxantmediaVerified publisher4.4.01 of 2See more

ingress-nginx antmedia 4.4.0

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,322
cluster-proxyappscodeVerified publisher2024.2.251 of 1See more

cluster-proxy appscode 2024.2.25

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:latest27a5c64b7ea8
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,119
kubedb-oneappscodeVerified publisher2023.12.281 of 10See more

kubedb-one appscode 2023.12.28

1 of the 10 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/stashed/stash-enterprise:v0.32.0e9bde36e34b7
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

15,200
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,404
authorization-componentauthorization-component1.0.01 of 3See more

authorization-component authorization-component 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/authorization-component-php:latest94a749392fcf
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,561
istio-discoveryaveshaVerified publisher1.16.01 of 1See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
istio/pilot:1.16.0ac0284d75ec9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

6,908
helm-controllerazureorkestra0.1.12 of 2See more

helm-controller azureorkestra 0.1.1

2 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,705
keptn-addonsazureorkestra0.1.01 of 4See more

keptn-addons azureorkestra 0.1.0

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

10,621

Container images carrying it

175 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/kubectl:latest2ad610626658
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
6
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
3
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
2
xelalex/dregsy:0.4.3574054e1c417
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
2
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
2
alpine/k8s:1.22.600ac10bcb759
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
alpine/k8s:1.27.321b24e6bf801
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.31.106dbe6f391eda
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.31.137a319b15cfc9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.32.47e1e7d5b7a96
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.31.49c4976d47656
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.18.16a41efe02a041
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
alpine/k8s:1.30.0bd01dae02676
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.30.2cd560fce90f7
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.28.13e5c0b053fed7
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.32.3eec354133193
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
alpine/k8s:1.28.2fc059f056ad0
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/cyphar/filepath-securejoin@v0.2.2-0.20170720062807-ae69057f2299
github.com/cyphar/filepath-securejoin@v0.2.2-0.20170720062807-ae69057f2299
0.2.4
0.2.4
1
aquasec/trivy:0.43.1944a04445179
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
aquasec/trivy:0.32.0973d0df16189
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
beopenit/door-helm:v3.0.1b4d9f9bee224
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
bsgrigorov/helm-operator:latest45ab095f09c8
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/agendaservice-php:latest9cfeeb6c7c20
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/balance-registration-php:devc36094a41369
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/betaalservice-php:latestece1ab544c57
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/cgrc-php:dev25415534d245
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/checkin-component-php:dev3423845692c1
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/conduction-ui-php:dev2744565516e8
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/contactmoment-component-php:deve1d4ad1e22a8
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/docparser-php:devb6f95c8ead7d
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/kvk-php:dev8f177f9f8a7b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
conduction/pan-php:dev24f03c57568f
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
datawire/ambassador-operator:v1.3.0f95ae710d75c
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
devopstales/trivy-operator:2.575136aa7a26e
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
devspacecloud/manager:0.3.349c397413f7b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
fluxcd/helm-controller:v0.9.092b891e495d8
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
fluxcd/source-controller:v0.10.031a8c79a6803
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
galaxy/cloudman-server:lateste5c265fe9fcd
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
gocrane/craned:v0.5.1a1400909118c
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
gocrane/crane-scheduler:0.0.239ba6d11b2079
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.