StackRadar

CVE-2026-10722

Low

Advisory

Published 3 Jun 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
173
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
1 of 1
affected package

ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader

Carried by container images the latest versions of 173 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
github.com/cilium/ebpfgolangv0.0.0-20191113100448-d9fb101ca1fb, v0.4.0, v0.5.0, v0.6.1+22 more0.22.0156
OSV records
GHSA-xhgw-qwwf-pg32
Also known as
GO-2026-6238

Charts affected

173 by stars
ChartLatestAffected imagesRadar Score
sp-otel-collectorsp-otel-collectorVerified publisher1.1.61 of 1See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/geored/spmm-collector-contrib:1.0.063baf86a49ac
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

2,022
popeyeadnoctemVerified publisher0.3.01 of 1See more

popeye adnoctem 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
github.com/cilium/ebpf@v0.15.0
0.22.0

Open the chart page →

1,196
akto-k8s-ebpf-openshiftakto0.1.11 of 1See more

akto-k8s-ebpf-openshift akto 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
github.com/cilium/ebpf@v0.21.0
0.22.0

Open the chart page →

1,276
buildkit-serviceandrcunsVerified publisher1.8.01 of 1See more

buildkit-service andrcuns 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
moby/buildkit:v0.31.0a095b3d11ce1
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

1,285
kubedb-certifiedappscodeVerified publisher2026.7.102 of 8See more

kubedb-certified appscode 2026.7.10

2 of the 8 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/cilium/ebpf@v0.11.0
0.22.0
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

4,016
kubedb-ops-managerappscodeVerified publisher0.53.01 of 1See more

kubedb-ops-manager appscode 0.53.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

549
otel-collectorarieotechVerified publisher0.1.01 of 1See more

otel-collector arieotech 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.154.0b3079f45e19b
github.com/cilium/ebpf@v0.21.0
0.22.0

Open the chart page →

245
kube-prometheus-stackbook-k8sinfra-v265.5.12 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

2 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

6,036
prometheusbook-k8sinfra-v226.0.13 of 6See more

prometheus book-k8sinfra-v2 26.0.1

3 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/cilium/ebpf@v0.11.0
0.22.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

5,304
pyroscopebook-k8sinfra-v21.10.01 of 3See more

pyroscope book-k8sinfra-v2 1.10.0

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
grafana/alloy:v1.1.1c3dac4e26471
github.com/cilium/ebpf@v0.12.3
0.22.0

Open the chart page →

3,244
buildkitbuildkit0.1.01 of 1See more

buildkit buildkit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
moby/buildkit:master-rootless07115a67cd22
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

620
buildkit-privilegedbuildkit-privileged0.1.01 of 1See more

buildkit-privileged buildkit-privileged 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
moby/buildkit:masterbc964521ee58
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

403
ranchercarbide-charts2.15.11 of 2See more

rancher carbide-charts 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

1,456
castai-tetragoncastaiVerified publisher0.6.11 of 4See more

castai-tetragon castai 0.6.1

1 of the 4 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon-ci:b6f3056a3f6cf05e366a3e07348f7c0b6265a60f5efd991d218b
github.com/cilium/ebpf@v0.9.4-0.20221026141156-bcf6c12e189d
0.22.0

Open the chart page →

4,136
temporalcastaiVerified publisher0.54.21 of 14See more

temporal castai 0.54.2

1 of the 14 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.156.0125bdbeb7590
github.com/cilium/ebpf@v0.21.0
0.22.0

Open the chart page →

15,027
netbird-reverse-proxychristianhuthVerified publisher0.1.01 of 1See more

netbird-reverse-proxy christianhuth 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
netbirdio/reverse-proxy:0.72.43104d5ca3a76
github.com/cilium/ebpf@v0.19.0
0.22.0

Open the chart page →

912
tetragoncilium21.7.11 of 3See more

tetragon cilium2 1.7.1

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.7.1afc9458ba4bc
github.com/cilium/ebpf@v0.21.1-0.20260427123516-6bf8ddfd0f0f
0.22.0

Open the chart page →

218
pulsarcloudve0.2.02 of 2See more

pulsar cloudve 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
github.com/cilium/ebpf@v0.16.0
0.22.0
library/docker:dind5efed980cba3
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

6,162
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
library/docker:27-dindaa3df78ecf32
github.com/cilium/ebpf@v0.12.3
0.22.0

Open the chart page →

19,338
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

618
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

1,925
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
library/docker:dind5efed980cba3
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

14,559
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

58,897
dapr-agentsdapr-agents-devVerified publisher0.1.52 of 31See more

dapr-agents dapr-agents-dev 0.1.5

2 of the 31 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
github.com/cilium/ebpf@v0.20.0
0.22.0
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
github.com/cilium/ebpf@v0.20.0
0.22.0

Open the chart page →

22,193
cloudwatch-agent-prometheusdasmeta0.2.21 of 1See more

cloudwatch-agent-prometheus dasmeta 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
github.com/cilium/ebpf@v0.0.0-20191113100448-d9fb101ca1fb
0.22.0

Open the chart page →

2,977
adot-exporter-for-eks-on-ec2dasmeta-adot0.15.51 of 1See more

adot-exporter-for-eks-on-ec2 dasmeta-adot 0.15.5

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
amazon/aws-otel-collector:v0.27.0d8ab0eef5074
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

1,926
agent-helmdatasaker0.1.81 of 6See more

agent-helm datasaker 0.1.8

1 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
datasaker/dsk-container-agent:latest08b52999f67b
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

7,571
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

5,174
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

21,641
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
prom/prometheus:v2.51.24f6c47e39a90
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

6,678
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
github.com/cilium/ebpf@v0.11.0
0.22.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.1e2dc5623bcdd
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

23,685
cnpg-monitoringenixVerified publisher0.3.01 of 1See more

cnpg-monitoring enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

824
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
github.com/cilium/ebpf@v0.19.1-0.20250815124406-a785455afa54
0.22.0

Open the chart page →

2,785
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.22 of 18See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
github.com/cilium/ebpf@v0.21.0
0.22.0
grafana/alloy:v1.12.2f94b1c82957a
github.com/cilium/ebpf@v0.19.0
0.22.0

Open the chart page →

13,255
mission-control-tenantflanksourceVerified publisher1.0.921 of 3See more

mission-control-tenant flanksource 1.0.92

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
rancher/k3s:v1.28.2-k3s18c2599ecfca8
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

5,684
monitoringgaloymoney0.12.213 of 6See more

monitoring galoymoney 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/cilium/ebpf@v0.11.0
0.22.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

5,295
monitoringgaloymoney20.12.213 of 6See more

monitoring galoymoney2 0.12.21

3 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.77.2c96d4fb1d57f
github.com/cilium/ebpf@v0.11.0
0.22.0
quay.io/prometheus/prometheus:v2.55.0378f4e037035
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

5,295
gitlab-goproxygitlab-goproxy0.2.21 of 1See more

gitlab-goproxy gitlab-goproxy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
ghcr.io/djcass44/gitlab-goproxy:v0.1.8a43323732181
github.com/cilium/ebpf@v0.4.0
0.22.0

Open the chart page →

1,325
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

12,056
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.114.037fa87091cfa
github.com/cilium/ebpf@v0.11.0
0.22.0
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

49,025
prometheus-operator-admission-webhookgpg-dev0.18.11 of 2See more

prometheus-operator-admission-webhook gpg-dev 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

1,685
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
github.com/cilium/ebpf@v0.19.0
0.22.0

Open the chart page →

3,318
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
github.com/cilium/ebpf@v0.19.0
0.22.0

Open the chart page →

8,188
prometheusgrafana-uxadax26.0.13 of 6See more

prometheus grafana-uxadax 26.0.1

3 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
github.com/cilium/ebpf@v0.11.0
0.22.0
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.2944b2c67345c
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

5,304
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
github.com/cilium/ebpf@v0.12.3
0.22.0

Open the chart page →

2,590
ilum-otel-collectorilumVerified publisher0.1.01 of 1See more

ilum-otel-collector ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.113.05ac3e0ba2b0b
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

1,384
erigoninfradao0.0.51 of 2See more

erigon infradao 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
testinprod/op-erigon:latest0a125bd77a2d
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

2,868
janus-shieldjanus-shield1.0.01 of 2See more

janus-shield janus-shield 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/cilium/tetragon:v1.1.096fac2482898
github.com/cilium/ebpf@v0.12.3
0.22.0

Open the chart page →

2,380
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
github.com/cilium/ebpf@v0.13.3-0.20240314165416-06282fb6ba65
0.22.0

Open the chart page →

3,999

Container images carrying it

156 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
github.com/cilium/ebpf@v0.16.0
0.22.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.1e2dc5623bcdd
github.com/cilium/ebpf@v0.11.0
0.22.0
1
quay.io/prometheus-operator/prometheus-operator:v0.75.1a7cc63108511
github.com/cilium/ebpf@v0.11.0
0.22.0
1
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/cilium/ebpf@v0.11.0
0.22.0
1
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
github.com/cilium/ebpf@v0.11.0
0.22.0
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
github.com/cilium/ebpf@v0.11.0
0.22.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.