StackRadar

CVE-2026-10722

Low

Advisory

Published 3 Jun 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
173
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
1 of 1
affected package

ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader

Carried by container images the latest versions of 173 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
github.com/cilium/ebpfgolangv0.0.0-20191113100448-d9fb101ca1fb, v0.4.0, v0.5.0, v0.6.1+22 more0.22.0156
OSV records
GHSA-xhgw-qwwf-pg32
Also known as
GO-2026-6238

Charts affected

173 by stars
ChartLatestAffected imagesRadar Score
thanos-sidecarsb-helm-charts0.3.01 of 1See more

thanos-sidecar sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

961
thanos-storesb-helm-charts0.3.01 of 1See more

thanos-store sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

961
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

2,429
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

3,462
buildkitsomaz94Verified publisher0.1.41 of 1See more

buildkit somaz94 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.06c2fa84a6b61
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

722
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

3,232
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
github.com/cilium/ebpf@v0.10.0
0.22.0

Open the chart page →

2,220
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
github.com/cilium/ebpf@v0.6.1
0.22.0

Open the chart page →

6,950
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

20,223
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

2,938
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
github.com/cilium/ebpf@v0.17.3
0.22.0
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

4,277
stunner-prometheusstunner0.2.12 of 4See more

stunner-prometheus stunner 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

3,025
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
github.com/cilium/ebpf@v0.17.1
0.22.0
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/cilium/ebpf@v0.17.1
0.22.0

Open the chart page →

4,046
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
github.com/cilium/ebpf@v0.21.0
0.22.0

Open the chart page →

3,911
wallarm-oobwallarmVerified publisher0.23.01 of 3See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
wallarm/ebpf-agent:0.11.0-rc0c8920e60c726
github.com/cilium/ebpf@v0.13.2
0.22.0

Open the chart page →

2,824
azure-janitorwebdevopsVerified publisher1.0.131 of 1See more

azure-janitor webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-janitor:24.9.02446baee7b69
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

801
azure-keyvault-exporterwebdevopsVerified publisher1.0.121 of 1See more

azure-keyvault-exporter webdevops 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-keyvault-exporter:24.9.1f333704ecd60
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

801
azure-resourcegraph-exporterwebdevopsVerified publisher1.1.51 of 1See more

azure-resourcegraph-exporter webdevops 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-resourcegraph-exporter:24.9.0381136dda026
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

785
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

1,122
kube-pool-managerwebdevopsVerified publisher1.0.161 of 1See more

kube-pool-manager webdevops 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/kube-pool-manager:24.9.04fad7e14ad67
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

499
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

1,456
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

2,022
ygdrassil-monitoringygdrassilVerified publisher0.4.03 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

3 of the 10 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/cilium/ebpf@v0.16.0
0.22.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

9,381

Container images carrying it

156 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
webdevops/azure-keyvault-exporter:24.9.1f333704ecd60
github.com/cilium/ebpf@v0.16.0
0.22.0
1
webdevops/azure-resourcegraph-exporter:24.9.0381136dda026
github.com/cilium/ebpf@v0.16.0
0.22.0
1
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/cilium/ebpf@v0.9.1
0.22.0
1
webdevops/kube-pool-manager:24.9.04fad7e14ad67
github.com/cilium/ebpf@v0.16.0
0.22.0
1
gcr.io/cadvisor/cadvisor:v0.40.0135327c978de
github.com/cilium/ebpf@v0.5.0
0.22.0
1
gcr.io/cadvisor/cadvisor:v0.47.2e6c562b5e983
github.com/cilium/ebpf@v0.7.0
0.22.0
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/cilium/ebpf@v0.16.0
0.22.0
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/cilium/ebpf@v0.11.0
0.22.0
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.59269d0e55ea97
github.com/cilium/ebpf@v0.16.0
0.22.0
1
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
github.com/cilium/ebpf@v0.4.0
0.22.0
1
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
github.com/cilium/ebpf@v0.19.0
0.22.0
1
ghcr.io/kagent-dev/kagent/tools:0.2.150b431281d3e
github.com/cilium/ebpf@v0.20.1-0.20260108141042-f7e80f49188b
0.22.0
1
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/cilium/ebpf@v0.20.0
0.22.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/cilium/ebpf@v0.9.1
0.22.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/cilium/ebpf@v0.9.1
0.22.0
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
github.com/cilium/ebpf@v0.17.3
0.22.0
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-0314527ca5d2a9
github.com/cilium/ebpf@v0.17.3
0.22.0
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
github.com/cilium/ebpf@v0.16.0
0.22.0
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
github.com/cilium/ebpf@v0.20.0
0.22.0
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
github.com/cilium/ebpf@v0.21.0
0.22.0
1
ghcr.io/open-telemetry/opentelemetry-ebpf-instrumentation/ebpf-instrument:v0.9.026f82b148dfe
github.com/cilium/ebpf@v0.20.0
0.22.0
1
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
github.com/cilium/ebpf@v0.12.3
0.22.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
github.com/cilium/ebpf@v0.19.0
0.22.0
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/cilium/ebpf@v0.16.0
0.22.0
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
github.com/cilium/ebpf@v0.17.3
0.22.0
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
github.com/cilium/ebpf@v0.17.3
0.22.0
1
ghcr.io/streamingfast/firehose-core:v1.10.222f84e3615c8
github.com/cilium/ebpf@v0.4.0
0.22.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
github.com/cilium/ebpf@v0.4.0
0.22.0
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
github.com/cilium/ebpf@v0.4.0
0.22.0
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/cilium/ebpf@v0.9.1
0.22.0
1
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
github.com/cilium/ebpf@v0.21.0
0.22.0
1
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
github.com/cilium/ebpf@v0.12.3
0.22.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/cilium/ebpf@v0.19.1-0.20250815124406-a785455afa54
0.22.0
1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse:v3.0.1dc5a516c2333
github.com/cilium/ebpf@v0.19.0
0.22.0
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/cilium/ebpf@v0.13.1
0.22.0
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
github.com/cilium/ebpf@v0.10.0
0.22.0
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
github.com/cilium/ebpf@v0.6.1
0.22.0
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
github.com/cilium/ebpf@v0.12.3
0.22.0
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
github.com/cilium/ebpf@v0.19.0
0.22.0
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
github.com/cilium/ebpf@v0.17.1
0.22.0
1
quay.io/cilium/hubble-relay:v1.18.26079308ee15e
github.com/cilium/ebpf@v0.19.0
0.22.0
1
quay.io/cilium/hubble-ui-backend:v0.13.3db1454e45dc3
github.com/cilium/ebpf@v0.19.0
0.22.0
1
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/cilium/ebpf@v0.17.1
0.22.0
1
quay.io/cilium/operator-generic:v1.15.1819c7281f5a4
github.com/cilium/ebpf@v0.12.3
0.22.0
1
quay.io/cilium/operator-generic:v1.18.2cb4e4ffc5789
github.com/cilium/ebpf@v0.19.0
0.22.0
1
quay.io/cilium/tetragon:v1.1.096fac2482898
github.com/cilium/ebpf@v0.12.3
0.22.0
1
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
github.com/cilium/ebpf@v0.9.4-0.20221026141156-bcf6c12e189d
0.22.0
1
quay.io/codefresh/dind:3.0.250885ab519dac
github.com/cilium/ebpf@v0.16.0
0.22.0
1
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/cilium/ebpf@v0.7.0
0.22.0
1
quay.io/groundcover/caretta:v0.0.16ed8f5118e3a4
github.com/cilium/ebpf@v0.10.0
0.22.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.