StackRadar

CVE-2025-58186

Medium

Advisory

Published 29 Oct 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,373
of 17,790 indexed, latest versions
Container images
3,825
deployed by those charts
Fix available
1 of 2
affected packages

Lack of limit when parsing cookies can cause memory exhaustion in net/http

Carried by container images the latest versions of 3,373 of 17,790 indexed charts deploy, on 3,825 images.

Affected packageAffected versionsFixed inImages
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+162 more1.24.83,825
OSV records
DEBIAN-CVE-2025-58186GO-2025-4012
Also known as
BIT-golang-2025-58186

Charts affected

3,373 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.11 of 3See more

argo-cd argo 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
stdlib@go1.24.0
1.24.8

Open the chart page →

3,003
giteagiteaOfficialVerified publisher12.7.02 of 4See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
stdlib@go1.25.0
1.24.8
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
stdlib@go1.24.6
1.24.8

Open the chart page →

8,874
nfs-subdir-external-provisionernfs-subdir-external-provisioner4.0.181 of 1See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
stdlib@go1.15
1.24.8

Open the chart page →

2,745
artifact-hubartifact-hubVerified publisher1.23.02 of 7See more

artifact-hub artifact-hub 1.23.0

2 of the 7 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
stdlib@go1.24.6
1.24.8
artifacthub/tracker:v1.23.05368d21a6e5c
stdlib@go1.24.4
1.24.8

Open the chart page →

10,840
argo-cdargo-cd-oci10.9.11 of 3See more

argo-cd argo-cd-oci 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
stdlib@go1.24.0
1.24.8

Open the chart page →

3,003
jupyterhubjupyterhubOfficialVerified publisher4.4.22 of 7See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-image-awaiter:4.4.2c4df1176d152
stdlib@go1.23.12
1.24.8
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
stdlib@go1.23.10
1.24.8

Open the chart page →

7,937
mimir-distributedgrafana6.2.02 of 6See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
stdlib@go1.23.4
1.24.8
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.24.8

Open the chart page →

4,548
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
stdlib@go1.25.0
1.24.8

Open the chart page →

1,773
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
stdlib@go1.20.5
1.24.8

Open the chart page →

30,217
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
stdlib@go1.21.8
1.24.8

Open the chart page →

11,394
nfs-server-provisionerkvaps1.8.01 of 1See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
stdlib@go1.16.2
1.24.8

Open the chart page →

2,315
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
stdlib@go1.24.1
1.24.8

Open the chart page →

1,369
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
stdlib@go1.22.10
1.24.8

Open the chart page →

1,454
aws-node-termination-handleraws0.21.01 of 1See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler:v1.19.0844478ebd5b8
stdlib@go1.19.5
1.24.8

Open the chart page →

1,445
openebsopenebsOfficialVerified publisher4.6.119 of 35See more

openebs openebs 4.6.1

19 of the 35 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
stdlib@go1.24.1
1.24.8
grafana/loki:3.4.258a6c186ce78
stdlib@go1.23.6
1.24.8
library/nats:2.9.17-alpine1a7b320b2942
stdlib@go1.19.9
1.24.8
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
stdlib@go1.19.4
1.24.8
natsio/prometheus-nats-exporter:0.11.031c02aac089a
stdlib@go1.20.3
1.24.8
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
stdlib@go1.24.5
1.24.8
openebs/lvm-driver:1.10.141f73aba7f31
stdlib@go1.24.7
1.24.8
openebs/provisioner-localpv:4.6.099f5116f5cb8
stdlib@go1.25.0
1.24.8
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
stdlib@go1.23.4
1.24.8
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.24.8
quay.io/prometheus-operator/prometheus-config-reloader:v0.81.0959d47672fbf
stdlib@go1.23.7
1.24.8
registry.k8s.io/sig-storage/csi-attacher:v4.8.169888dba5815
stdlib@go1.23.1
1.24.8
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.13.0d7138bcc3aa5
stdlib@go1.23.1
1.24.8
registry.k8s.io/sig-storage/csi-provisioner:v5.2.0d5e46da8aff7
stdlib@go1.23.1
1.24.8
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
stdlib@go1.24.6
1.24.8
registry.k8s.io/sig-storage/csi-resizer:v2.0.04a95d94e57ad
stdlib@go1.24.6
1.24.8
registry.k8s.io/sig-storage/csi-resizer:v1.13.28ddd178ba5d0
stdlib@go1.23.1
1.24.8
registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0dd788d79cf4c
stdlib@go1.23.1
1.24.8
registry.k8s.io/sig-storage/snapshot-controller:v8.2.09dade8f2f3ab
stdlib@go1.23.1
1.24.8

Open the chart page →

24,128
prometheus-adapterprometheus-communityOfficialVerified publisher5.3.01 of 1See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
stdlib@go1.22.2
1.24.8

Open the chart page →

937
open-webuiopen-webui16.5.01 of 4See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
stdlib@go1.18.2
1.24.8

Open the chart page →

1,288
actions-runner-controlleractions-runner-controller0.23.72 of 2See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
summerwind/actions-runner-controller:v0.27.62128f81dbede
stdlib@go1.20.7
1.24.8
quay.io/brancz/kube-rbac-proxy:v0.13.1738c854322f5
stdlib@go1.19.1
1.24.8

Open the chart page →

2,890
vpafairwinds-stableVerified publisher5.0.11 of 4See more

vpa fairwinds-stable 5.0.1

1 of the 4 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20230312-helm-chart-4.5.2-28-g66a76079401d181618f27
stdlib@go1.20.1
1.24.8

Open the chart page →

1,233
terraformhashicorpVerified publisher1.1.21 of 1See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
hashicorp/terraform-k8s:1.1.2b19857bab620
stdlib@go1.18.8
1.24.8

Open the chart page →

2,059
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
stdlib@go1.23.10
1.24.8

Open the chart page →

3,118
dagsterdagsterVerified publisher1.13.221 of 5See more

dagster dagster 1.13.22

1 of the 5 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/postgres:14.6f565573d74ae
stdlib@go1.18.2
1.24.8

Open the chart page →

3,510
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
stdlib@go1.24.6
1.24.8

Open the chart page →

13,880
keycloakcloudpirates-keycloakVerified publisher0.21.372 of 3See more

keycloak cloudpirates-keycloak 0.21.37

2 of the 3 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
stdlib@go1.24.6
1.24.8
library/postgres:18.64ef4dbc939d6
stdlib@go1.24.6
1.24.8

Open the chart page →

4,428
graylogkong-zVerified publisher3.0.331 of 5See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.24.8

Open the chart page →

2,701
miniominio-official5.4.02 of 2See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
stdlib@go1.23.4
1.24.8
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.24.8

Open the chart page →

2,497
openfaasopenfaas15.0.132 of 6See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/nats-streaming:0.25.60ad6861379c9
stdlib@go1.20.11
1.24.8
ghcr.io/openfaas/queue-worker:0.14.2c18da04d70f6
stdlib@go1.23.4
1.24.8

Open the chart page →

3,558
jaeger-operatorjaegertracingOfficialVerified publisher2.57.01 of 1See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
jaegertracing/jaeger-operator:1.61.03f036ec60e61
stdlib@go1.22.3
1.24.8

Open the chart page →

566
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
stdlib@go1.18.2
1.24.8

Open the chart page →

5,560
postgrescloudpirates-postgresVerified publisher0.20.51 of 1See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/postgres:18.64ef4dbc939d6
stdlib@go1.24.6
1.24.8

Open the chart page →

1,649
vault-secrets-operatorhashicorpVerified publisher1.5.11 of 2See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
stdlib@go1.23.0
1.24.8

Open the chart page →

1,054
linkerd-vizlinkerd2Verified publisher30.12.111 of 5See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
prom/prometheus:v2.48.0b440bc0e8aa5
stdlib@go1.21.4
1.24.8

Open the chart page →

1,374
rocketchatrocketchat-server7.0.23 of 12See more

rocketchat rocketchat-server 7.0.2

3 of the 12 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.24.8
bitnamilegacy/mongodb-exporter:0.39.0-debian-11-r106de7256c7adcd
stdlib@go1.20.7
1.24.8
natsio/prometheus-nats-exporter:0.18.002469dc907bc
stdlib@go1.24.6
1.24.8

Open the chart page →

12,286
zammadzammadOfficialVerified publisher18.2.11 of 5See more

zammad zammad 18.2.1

1 of the 5 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.24.8

Open the chart page →

6,346
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
stdlib@go1.21.3
1.24.8

Open the chart page →

2,109
solr-operatorapache-solrVerified publisher0.9.12 of 3See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
apache/solr-operator:v0.9.14db34508137f
stdlib@go1.22.12
1.24.8
pravega/zookeeper-operator:0.2.15b2bc4042fdd8
stdlib@go1.19.7
1.24.8

Open the chart page →

2,944
atlantisatlantis6.15.11 of 1See more

atlantis atlantis 6.15.1

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
ghcr.io/runatlantis/atlantis:v0.47.1511231955463
stdlib@go1.22.1
1.24.8

Open the chart page →

1,899
rabbitmqcloudpirates-rabbitmqVerified publisher0.21.271 of 2See more

rabbitmq cloudpirates-rabbitmq 0.21.27

1 of the 2 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.5-management57bddb6fbc34
stdlib@go1.22.2
1.24.8

Open the chart page →

854
grafana-agentgrafana0.44.22 of 2See more

grafana-agent grafana 0.44.2

2 of the 2 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
stdlib@go1.22.11
1.24.8
ghcr.io/jimmidyson/configmap-reload:v0.12.0a7c754986900
stdlib@go1.21.1
1.24.8

Open the chart page →

3,526
vclusterloftVerified publisher0.0.0-ci.31 of 2See more

vcluster loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
rancher/k3s:v1.26.0-k3s19380f5dbae9a
stdlib@go1.19.4
1.24.8

Open the chart page →

2,461
milvusmilvus4.0.314 of 5See more

milvus milvus 4.0.31

4 of the 5 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
milvusdb/etcd:3.5.5-r2102aac62827b
stdlib@go1.18.2
1.24.8
milvusdb/milvus:v2.2.13a3a55e1c1497
stdlib@go1.18.3
1.24.8
milvusdb/milvus-config-tool:v0.1.12212dfb61401
stdlib@go1.16.15
1.24.8
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
stdlib@go1.19.7
1.24.8

Open the chart page →

32,420
cockroachdbcockroachdbVerified publisher22.0.31 of 3See more

cockroachdb cockroachdb 22.0.3

1 of the 3 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
cockroachdb/cockroach-self-signer-cert:1.1007a49acec18d
stdlib@go1.23.12
1.24.8

Open the chart page →

763
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.24.8

Open the chart page →

10,695
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
stdlib@go1.23.3
1.24.8

Open the chart page →

2,228
signozsignoz0.141.14 of 5See more

signoz signoz 0.141.1

4 of the 5 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.21.2cd9252644ce0
stdlib@go1.19.10
1.24.8
altinity/metrics-exporter:0.21.2df3d57215356
stdlib@go1.19.10
1.24.8
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
stdlib@go1.25.0
1.24.8
signoz/zookeeper:3.7.1fcc4a3288154
stdlib@go1.21.2
1.24.8

Open the chart page →

7,607
weblateweblateOfficialVerified publisher0.5.361 of 3See more

weblate weblate 0.5.36

1 of the 3 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
bitnamilegacy/redis:latest5927ff3702df
stdlib@go1.24.5
1.24.8

Open the chart page →

6,787
postgresgroundhog2k1.6.81 of 1See more

postgres groundhog2k 1.6.8

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
library/postgres:18.64ef4dbc939d6
stdlib@go1.24.6
1.24.8

Open the chart page →

1,649
community-operatormongodb-helm-charts0.13.01 of 1See more

community-operator mongodb-helm-charts 0.13.0

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
stdlib@go1.24.2
1.24.8

Open the chart page →

1,126
prometheus-kafka-exporterprometheus-communityVerified publisher4.0.01 of 1See more

prometheus-kafka-exporter prometheus-community 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
danielqsj/kafka-exporter:v1.9.04150e46b2e96
stdlib@go1.24.0
1.24.8

Open the chart page →

716
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-58186.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
stdlib@go1.19.8
1.24.8

Open the chart page →

4,819

Container images carrying it

3,825 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/cadvisor/cadvisor:v0.52.1f40e65878e25
stdlib@go1.24.1
1.24.8
1
gcr.io/cloudsql-docker/gce-proxy:1.17a85176b8e7cc
stdlib@go1.13.5
1.24.8
1
gcr.io/cockroachlabs-helm-charts/cockroach-self-signer-cert:1.3e225fe7eaa55
stdlib@go1.13.14
1.24.8
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
stdlib@go1.22.8
1.24.8
1
gcr.io/gke-release/custom-metrics-stackdriver-adapter:v0.13.1-gke.06937c0a9b203
stdlib@go1.19.3
1.24.8
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
stdlib@go1.16.3
1.24.8
1
gcr.io/google-samples/microservices-demo/cartservice:v0.2.3566733b4d2d5
stdlib@go1.15.6
1.24.8
1
gcr.io/google-samples/microservices-demo/checkoutservice:v0.2.30fad1066de77
stdlib@go1.15.10
1.24.8
1
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
stdlib@go1.15.6
1.24.8
1
gcr.io/google-samples/microservices-demo/frontend:v0.2.3ca5c0f0771c8
stdlib@go1.15.10
1.24.8
1
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
stdlib@go1.15.6
1.24.8
1
gcr.io/google-samples/microservices-demo/productcatalogservice:v0.2.35a4a0e54c6d0
stdlib@go1.15.10
1.24.8
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
stdlib@go1.15.6
1.24.8
1
gcr.io/google-samples/microservices-demo/shippingservice:v0.2.30cb1707fc503
stdlib@go1.15.6
1.24.8
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
stdlib@go1.16.7
1.24.8
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
stdlib@go1.16.7
1.24.8
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
stdlib@go1.22.5
1.24.8
1
gcr.io/k8s-staging-multitenancy/hnc-manager:v1.1.08ab8229f6a89
stdlib@go1.20.5
1.24.8
1
gcr.io/k8s-staging-sig-storage/objectstorage-controller:v20221027-v0.1.1-8-g300019fa84b574e8027
stdlib@go1.18.3
1.24.8
1
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
stdlib@go1.24.3
1.24.8
1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/filterd675f211a40f
stdlib@go1.22.8
1.24.8
1
gcr.io/knative-releases/knative.dev/eventing/cmd/broker/ingressec4b544499ba
stdlib@go1.22.8
1.24.8
1
gcr.io/knative-releases/knative.dev/eventing/cmd/mtchannel_broker395f4ff1bd34
stdlib@go1.22.8
1.24.8
1
gcr.io/knative-releases/knative.dev/net-certmanager/cmd/webhook873b968f02b5
stdlib@go1.14.2
1.24.8
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.13.1a5b041ba3c9e
stdlib@go1.21.5
1.24.8
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controllere70bc675f977
stdlib@go1.22.8
1.24.8
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/controller:v1.2.0f253b82941c2
stdlib@go1.17.6
1.24.8
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook7d76a6d42d13
stdlib@go1.22.8
1.24.8
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.2.0a705c1ea8e9e
stdlib@go1.17.6
1.24.8
1
gcr.io/knative-releases/knative.dev/net-istio/cmd/webhook:v1.13.1f066376eee17
stdlib@go1.21.5
1.24.8
1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier15a601147ef4
stdlib@go1.24.2
1.24.8
1
gcr.io/knative-releases/knative.dev/net-kourier/cmd/kourier197fbb71d1f1
stdlib@go1.18.3
1.24.8
1
gcr.io/knative-releases/knative.dev/operator/cmd/webhook6c5c90cdf707
stdlib@go1.19.5
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator08315309da4b
stdlib@go1.18.3
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator1e3db4f2eeed
stdlib@go1.14.10
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.13.121f8e11a44bf
stdlib@go1.21.5
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
stdlib@go1.17.8
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/activatora5de0fb75046
stdlib@go1.14.2
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
stdlib@go1.20.4
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
stdlib@go1.17.8
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler105bdd14ecaa
stdlib@go1.18.3
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler2ef460356b17
stdlib@go1.14.2
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.13.134796e9f760b
stdlib@go1.21.5
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
stdlib@go1.20.4
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdb6ceff2aab4
stdlib@go1.14.10
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler-hpa:v1.10.2eb612b929eaa
stdlib@go1.20.4
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
stdlib@go1.14.2
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
stdlib@go1.21.5
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
stdlib@go1.17.8
1.24.8
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
stdlib@go1.20.4
1.24.8
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.