GO-2023-2048
MediumAdvisory
Published 7 Sept 2023In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 5.5
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 180
- of 17,781 indexed, latest versions
- Container images
- 175
- deployed by those charts
- Fix available
- 1 of 1
- affected package
SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced
Carried by container images the latest versions of 180 of 17,781 indexed charts deploy, on 175 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.2.2, v0.2.2-0.20170720062807-ae69057f2299, v0.2.3 | 0.2.4 | 175 |
- OSV records
- GHSA-6xv5-86q9-7xr8GO-2023-2048
Charts affected
180 by stars
Container images carrying it
175 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| goharbor/ | 8d5339ff2d74 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| goharbor/ | b9522c3f5056 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| goharbor/ | dc5b882a7db4 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| hashicorp/ | 97d521a27498 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| istio/ | 655eefa11c84 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| istio/ | 6cfce8a071b9 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| istio/ | 70f9d1fe5fff | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| istio/ | ac0284d75ec9 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| istio/ | ce9d87606701 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| istio/ | db08d6963975 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| jmferrer/ | 030f68ec6998 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| keptnsandbox/ | 6e6d323dd7ae | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kiosksh/ | 501725ba2025 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kubebb/ | 2b9e7f451d6b | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kubebb/ | e366c34a9b8d | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kubebb/ | 067673df26a6 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kubebb/ | 163ebbfc7a82 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kubeedge/ | 460c6061b608 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kubeoperator/ | be8f0d624640 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kubesphere/ | 49b445b1b732 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kusionstack/ | d2f72ae1d2f2 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| kusionstack/ | c28bd96b986b | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| layer5/ | 77d59943b3d6 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| layer5/ | b3864dfd47ad | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| layer5/ | ebd6a8faf21f | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| layer5/ | ec898e5786c6 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| layer5/ | 797fa7a03570 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| linuxserver/ | 45c5fe102ff3 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| mavrick1/ | 45ca0429a1d4 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| mesosphere/ | b036785a8862 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| mesosphere/ | f9b769c65e24 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| mesosphere/ | 94af41b6dd9a | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| moby/ | c2aeafaed434 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| murtazashah46/ | 4d11726cf803 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| opencord/ | 0d693ba85fd6 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| otel/ | 71fcef33ae71 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| otel/ | ba173aa85f3f | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| otel/ | c6671841470b | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| otel/ | dfb3a55ea8c9 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| pnnlmiscscripts/ | 155131891741 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| portainer/ | 3e61aaee1341 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| rancher/ | 8c2599ecfca8 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| rancher/ | eaa270df79cc | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| someblackmagic/ | 6eca64b6b440 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| sstarcher/ | 11769d01ba35 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| wallarm/ | a591b9c91570 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| gcr.io/ | 135327c978de | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| gcr.io/ | e6c562b5e983 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| ghcr.io/ | a608b798fda5 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |
| ghcr.io/ | 9ab9a675c405 | github.com/ github.com/ | 0.2.4 0.2.4 | 1 |