StackRadar

CVE-2026-10722

Low

Advisory

Published 3 Jun 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
173
of 17,781 indexed, latest versions
Container images
156
deployed by those charts
Fix available
1 of 1
affected package

ebpf-go is vulnerable to integer overflow via LoadCollectionSpecFromReader

Carried by container images the latest versions of 173 of 17,781 indexed charts deploy, on 156 images.

Affected packageAffected versionsFixed inImages
github.com/cilium/ebpfgolangv0.0.0-20191113100448-d9fb101ca1fb, v0.4.0, v0.5.0, v0.6.1+22 more0.22.0156
OSV records
GHSA-xhgw-qwwf-pg32
Also known as
GO-2026-6238

Charts affected

173 by stars
ChartLatestAffected imagesRadar Score
thanos-sidecarsb-helm-charts0.3.01 of 1See more

thanos-sidecar sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

961
thanos-storesb-helm-charts0.3.01 of 1See more

thanos-store sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

961
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

2,429
smarter-k3s-edgesmarterVerified publisher0.0.121 of 2See more

smarter-k3s-edge smarter 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
rancher/k3s:v1.25.3-k3s1eaa270df79cc
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

3,462
buildkitsomaz94Verified publisher0.1.41 of 1See more

buildkit somaz94 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
moby/buildkit:v0.33.06c2fa84a6b61
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

722
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

3,232
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
github.com/cilium/ebpf@v0.10.0
0.22.0

Open the chart page →

2,220
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
github.com/cilium/ebpf@v0.6.1
0.22.0

Open the chart page →

6,950
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
prom/prometheus:v2.52.05c435642ca4d
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

20,223
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
github.com/cilium/ebpf@v0.11.0
0.22.0

Open the chart page →

2,938
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
github.com/cilium/ebpf@v0.17.3
0.22.0
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
github.com/cilium/ebpf@v0.17.3
0.22.0

Open the chart page →

4,277
stunner-prometheusstunner0.2.12 of 4See more

stunner-prometheus stunner 0.2.1

2 of the 4 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-operator:v0.77.2af92db7eac86
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.13.0639a1e2da549
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

3,025
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
github.com/cilium/ebpf@v0.17.1
0.22.0
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/cilium/ebpf@v0.17.1
0.22.0

Open the chart page →

4,046
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
github.com/cilium/ebpf@v0.21.0
0.22.0

Open the chart page →

3,911
wallarm-oobwallarmVerified publisher0.23.01 of 3See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
wallarm/ebpf-agent:0.11.0-rc0c8920e60c726
github.com/cilium/ebpf@v0.13.2
0.22.0

Open the chart page →

2,824
azure-janitorwebdevopsVerified publisher1.0.131 of 1See more

azure-janitor webdevops 1.0.13

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-janitor:24.9.02446baee7b69
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

801
azure-keyvault-exporterwebdevopsVerified publisher1.0.121 of 1See more

azure-keyvault-exporter webdevops 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-keyvault-exporter:24.9.1f333704ecd60
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

801
azure-resourcegraph-exporterwebdevopsVerified publisher1.1.51 of 1See more

azure-resourcegraph-exporter webdevops 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-resourcegraph-exporter:24.9.0381136dda026
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

785
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

1,122
kube-pool-managerwebdevopsVerified publisher1.0.161 of 1See more

kube-pool-manager webdevops 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
webdevops/kube-pool-manager:24.9.04fad7e14ad67
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

499
rancherwenerme2.15.11 of 2See more

rancher wenerme 2.15.1

1 of the 2 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
rancher/rancher:v2.15.15f6c4dc52a05
github.com/cilium/ebpf@v0.16.0
0.22.0

Open the chart page →

1,456
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/cilium/ebpf@v0.7.0
0.22.0

Open the chart page →

2,022
ygdrassil-monitoringygdrassilVerified publisher0.4.03 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

3 of the 10 container images this version deploys carry CVE-2026-10722.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.79.2193280a33bc1
github.com/cilium/ebpf@v0.16.0
0.22.0
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/cilium/ebpf@v0.11.0
0.22.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.14.037d841299325
github.com/cilium/ebpf@v0.9.1
0.22.0

Open the chart page →

9,381

Container images carrying it

156 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/prometheus-operator/admission-webhook:v0.79.2d4c97a1b2d67
github.com/cilium/ebpf@v0.16.0
0.22.0
1
quay.io/prometheus-operator/prometheus-config-reloader:v0.78.1e2dc5623bcdd
github.com/cilium/ebpf@v0.11.0
0.22.0
1
quay.io/prometheus-operator/prometheus-operator:v0.75.1a7cc63108511
github.com/cilium/ebpf@v0.11.0
0.22.0
1
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
github.com/cilium/ebpf@v0.11.0
0.22.0
1
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
github.com/cilium/ebpf@v0.11.0
0.22.0
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
github.com/cilium/ebpf@v0.11.0
0.22.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.