StackRadar

GO-2023-2048

Medium

Advisory

Published 7 Sept 2023In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
180
of 17,781 indexed, latest versions
Container images
175
deployed by those charts
Fix available
1 of 1
affected package

SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced

Carried by container images the latest versions of 180 of 17,781 indexed charts deploy, on 175 images.

Affected packageAffected versionsFixed inImages
github.com/cyphar/filepath-securejoingolangv0.2.2, v0.2.2-0.20170720062807-ae69057f2299, v0.2.30.2.4175
OSV records
GHSA-6xv5-86q9-7xr8GO-2023-2048

Charts affected

180 by stars
ChartLatestAffected imagesRadar Score
cluster-componentkubebb0.2.21 of 4See more

cluster-component kubebb 0.2.2

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

8,160
ingress-nginxkubebb4.7.01 of 2See more

ingress-nginx kubebb 4.7.0

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,099
kubebbkubebb0.0.11 of 1See more

kubebb kubebb 0.0.1

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kubebb/core:lateste366c34a9b8d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,749
kubebb-corekubebb0.1.271 of 1See more

kubebb-core kubebb 0.1.27

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kubebb/core:v0.1.62b9e7f451d6b
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

1,938
tdsfkubebb5.7.01 of 3See more

tdsf kubebb 5.7.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kubebb/mesh-operator:v5.7.0163ebbfc7a82
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

6,490
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,622
harborkubesphereVerified publisher1.9.33 of 11See more

harbor kubesphere 1.9.3

3 of the 11 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
goharbor/harbor-core:v2.5.386bf3031f4a7
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

17,798
chaos-meshkubesphere-stable2.5.11 of 3See more

chaos-mesh kubesphere-stable 2.5.1

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

8,555
cranekubesphere-stable0.5.22 of 3See more

crane kubesphere-stable 0.5.2

2 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
gocrane/craned:v0.5.1a1400909118c
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,883
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

4,096
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,439
kubestellar-uikubestellaruiVerified publisher0.1.11 of 4See more

kubestellar-ui kubestellarui 0.1.1

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,763
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

20,204
kuperatorkusionstackVerified publisher0.7.41 of 1See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

978
operatingkusionstackVerified publisher0.5.11 of 1See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kusionstack/operating:v0.5.0c28bd96b986b
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

1,879
kvkkvkservice0.1.01 of 4See more

kvk kvkservice 0.1.0

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
conduction/kvk-php:dev8f177f9f8a7b
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

8,534
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

26,356
trivy-serverlemontechVerified publisher0.1.01 of 1See more

trivy-server lemontech 0.1.0

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
aquasec/trivy:0.32.0973d0df16189
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

4,271
ocatiecataloguslocatiecatalogus1.0.01 of 3See more

ocatiecatalogus locatiecatalogus 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,225
devspace-cloudloftVerified publisher0.3.31 of 8See more

devspace-cloud loft 0.3.3

1 of the 8 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
devspacecloud/manager:0.3.349c397413f7b
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

9,880
kioskloftVerified publisher0.2.111 of 1See more

kiosk loft 0.2.11

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
kiosksh/kiosk:0.2.11501725ba2025
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

3,086
loft-agentloftVerified publisher3.2.41 of 1See more

loft-agent loft 3.2.4

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/agent:3.2.45c109914ff73
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,444
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,225
vcluster-proloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,085
vcluster-pro-eksloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-eks loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,936
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.102 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

2 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

5,768
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.101 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-pro:0.0.0-ci-run.10ab2e1fa19dd4
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

8,202
loggingcomponentloggingcomponent1.0.01 of 3See more

loggingcomponent loggingcomponent 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,492
logicservicelogicservice1.0.01 of 4See more

logicservice logicservice 1.0.0

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,499
medewerkercatalogusmedewerkercatalogus1.0.01 of 3See more

medewerkercatalogus medewerkercatalogus 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,327
ingressmedia-streaming-meshVerified publisher0.1.81 of 2See more

ingress media-streaming-mesh 0.1.8

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

3,301
memo-componentmemo-component1.0.01 of 3See more

memo-component memo-component 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,510
kubeaddons-catalogmesosphere0.1.161 of 2See more

kubeaddons-catalog mesosphere 0.1.16

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

12,010
cert-manager-setupmesosphere-stable0.2.101 of 5See more

cert-manager-setup mesosphere-stable 0.2.10

1 of the 5 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-ctl:v1.11.074611761f052
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

7,179
kommandermesosphere-stable0.39.24 of 29See more

kommander mesosphere-stable 0.39.2

4 of the 29 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

68,284
istio-operatormetakube1.12.01 of 1See more

istio-operator metakube 1.12.0

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
istio/operator:1.12.06cfce8a071b9
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

8,902
ingress-helm-chartnotesprojectchart0.1.01 of 2See more

ingress-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,956
notification-componentnotification-component1.0.01 of 4See more

notification-component notification-component 1.0.0

1 of the 4 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,527
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

27,465
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

17,070
multicluster-meshocm-helm-chartsVerified publisher0.0.21 of 1See more

multicluster-mesh ocm-helm-charts 0.0.2

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/multicluster-mesh-addon:latest3e010e1188f1
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,124
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

41,044
probuilderopenfaas0.2.01 of 2See more

probuilder openfaas 0.2.0

1 of the 2 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
moby/buildkit:v0.10.0c2aeafaed434
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

4,751
fsmopenshift0.1.8-ubi.61 of 6See more

fsm openshift 0.1.8-ubi.6

1 of the 6 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

16,556
orderregistratiecomponentorderregistratiecomponent1.0.01 of 3See more

orderregistratiecomponent orderregistratiecomponent 1.0.0

1 of the 3 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

7,492
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

26,840
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

25,934
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4

Open the chart page →

11,151
tenant-namespacepnnl-miscscripts0.6.231 of 1See more

tenant-namespace pnnl-miscscripts 0.6.23

1 of the 1 container images this version deploys carry GO-2023-2048.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.3.0d1707ca76d3b
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4

Open the chart page →

2,578

Container images carrying it

175 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
goharbor/harbor-jobservice:v2.5.38d5339ff2d74
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
goharbor/trivy-adapter-photon:v2.5.3b9522c3f5056
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
goharbor/trivy-adapter-photon:v2.9.0dc5b882a7db4
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
hashicorp/waypoint:0.11.397d521a27498
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/operator:1.10.3655eefa11c84
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
istio/operator:1.12.06cfce8a071b9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/operator:1.18.270f9d1fe5fff
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.16.0ac0284d75ec9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.17.1ce9d87606701
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
istio/pilot:1.15.2db08d6963975
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
jmferrer/azure-devops-agent:latest030f68ec6998
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
keptnsandbox/job-executor-service:0.1.36e6d323dd7ae
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kiosksh/kiosk:0.2.11501725ba2025
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubebb/core:v0.1.62b9e7f451d6b
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/core:lateste366c34a9b8d
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/ingress-nginx-controller:v1.3.0067673df26a6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kubeedge/edgemesh-agent:latest460c6061b608
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kubesphere/kubectl:v1.27.1649b445b1b732
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
kusionstack/operating:v0.5.0c28bd96b986b
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
layer5/meshery-app-mesh:stable-latest77d59943b3d6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-nsm:stable-latestebd6a8faf21f
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
layer5/meshery-osm:stable-latestec898e5786c6
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
layer5/meshery-traefik-mesh:stable-latest797fa7a03570
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
linuxserver/cloud9:latest45c5fe102ff3
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
mesosphere/kommander-federation-utility-apiserver:v0.21.2f9b769c65e24
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
moby/buildkit:v0.10.0c2aeafaed434
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
murtazashah46/helmfile:latest4d11726cf803
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
opencord/onos-classic-helm-utils:0.1.00d693ba85fd6
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.46.0ba173aa85f3f
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
sstarcher/helm-exporter:0.5.011769d01ba35
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
wallarm/ingress-controller:4.8.0-1a591b9c91570
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/cyphar/filepath-securejoin@v0.2.2
github.com/cyphar/filepath-securejoin@v0.2.2
0.2.4
0.2.4
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
github.com/cyphar/filepath-securejoin@v0.2.3
github.com/cyphar/filepath-securejoin@v0.2.3
0.2.4
0.2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.