StackRadar

CVE-2026-24051

High

Advisory

Published 2 Feb 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
548
of 17,787 indexed, latest versions
Container images
552
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking

Carried by container images the latest versions of 548 of 17,787 indexed charts deploy, on 552 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.21.0, v1.22.0, v1.23.0, v1.23.1+16 more1.40.0552
OSV records
GHSA-9h8m-3fm2-qjrq
Also known as
GO-2026-4394

Charts affected

548 by stars
ChartLatestAffected imagesRadar Score
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

3,283
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

4,603
kube-prometheus-stackmesosphere-stable75.9.12 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

2 of the 7 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:12.0.2b5b59bfc7561
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

10,180
mw-autoinstrumentationmiddleware-labsVerified publisher1.2.62 of 6See more

mw-autoinstrumentation middleware-labs 1.2.6

2 of the 6 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator:0.132.05e331c925091
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
quay.io/brancz/kube-rbac-proxy:v0.19.19f21034731c7
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

3,713
cognativemyaVerified publisher0.2403.32 of 3See more

cognative mya 0.2403.3

2 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:10.4.0f9811e4e687f
go.opentelemetry.io/otel/sdk@v1.22.0
1.40.0
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0

Open the chart page →

7,309
jupyterhub-metricsncsaVerified publisher1.3.01 of 5See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

4,132
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

7,184
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

2,819
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

2,796
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

5,034
cert-managernicklasfrahm-cert-managerVerified publisher0.1.22 of 4See more

cert-manager nicklasfrahm-cert-manager 0.1.2

2 of the 4 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
quay.io/jetstack/cert-manager-webhook:v1.18.29431f0d8b510
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

2,824
metrics-servernicklasfrahm-metrics-serverVerified publisher0.1.11 of 1See more

metrics-server nicklasfrahm-metrics-server 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

785
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
go.opentelemetry.io/otel/sdk@v1.32.0
1.40.0

Open the chart page →

6,854
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0

Open the chart page →

2,006
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0

Open the chart page →

2,006
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

6,455
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

5,565
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

4,674
grafananodepulse7.1.01 of 1See more

grafana nodepulse 7.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:10.2.36b5b37eb35bb
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

2,966
lensoci-ai-incubations0.1.143 of 16See more

lens oci-ai-incubations 0.1.14

3 of the 16 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
grafana/grafana:12.1.1a1701c218024
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

17,070
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

2,346
dynamic-scoring-frameworkocm-helm-chartsVerified publisher0.1.02 of 2See more

dynamic-scoring-framework ocm-helm-charts 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

967
kueue-addonocm-helm-chartsVerified publisher0.1.41 of 1See more

kueue-addon ocm-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

1,563
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0

Open the chart page →

6,037
onyx-stackonyx0.3.12 of 12See more

onyx-stack onyx 0.3.1

2 of the 12 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/kedacore/keda:2.17.272dc058e478d
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
ghcr.io/kedacore/keda-metrics-apiserver:2.17.2f312f50ddc57
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

6,338
headroom-controlleropenfaas0.1.71 of 1See more

headroom-controller openfaas 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/headroom-controller:v0.0.467d587cc2c39
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

240
kruise-gameopenkruise1.1.01 of 1See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

911
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

5,017
openlit-operatoropenlit0.2.21 of 1See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

851
harikubeopenshift0.16.31 of 3See more

harikube openshift 0.16.3

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

2,525
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

4,127
kubedb-certifiedopenshift2026.7.101 of 8See more

kubedb-certified openshift 2026.7.10

1 of the 8 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

4,016
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

1,090
voyager-gatewayopenshift2026.1.152 of 2See more

voyager-gateway openshift 2026.1.15

2 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

2,567
agentoptimizely-agentVerified publisher1.4.01 of 1See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
optimizely/agent:4.0.09d0096cabd63
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

1,213
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
prom/prometheus:v3.0.1565ee8650122
go.opentelemetry.io/otel/sdk@v1.30.0
1.40.0
gcr.io/kaniko-project/executor:latest4e7a52dd1f14
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

71,208
pgaot-container-kit1.0.31 of 6See more

pga ot-container-kit 1.0.3

1 of the 6 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:11.1.0079600c9517b
go.opentelemetry.io/otel/sdk@v1.26.0
1.40.0

Open the chart page →

5,137
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

5,411
adotowan-charts0.1.01 of 1See more

adot owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
public.ecr.aws/aws-observability/aws-otel-collector:v0.43.38aa9ea5f67b8
go.opentelemetry.io/otel/sdk@v1.32.0
1.40.0

Open the chart page →

1,016
arpap2p-avs0.1.31 of 2See more

arpa p2p-avs 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
go.opentelemetry.io/otel/sdk@v1.25.0
1.40.0

Open the chart page →

1,980
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

3,621
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

3,350
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

2,366
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

4,120
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

2,028
pax-prometheuspaxtecnologia0.7.01 of 8See more

pax-prometheus paxtecnologia 0.7.0

1 of the 8 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter:v0.12.0932eae60e2bc
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

1,826
archive-analysispcp-helm-chartsVerified publisher1.0.11 of 1See more

archive-analysis pcp-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/performancecopilot/archive-analysis:latest8de11e2363fc
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

1,326
pmm-ha-dependenciespercona1.0.03 of 4See more

pmm-ha-dependencies percona 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.25.41d6f18dbd599
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0
altinity/metrics-exporter:0.25.46ecf67edfb71
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0
percona/percona-postgresql-operator:2.8.06cce2698d3f5
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

2,431
pet-battle-nsffpetbattle0.0.21 of 4See more

pet-battle-nsff petbattle 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
minio/minio:latest14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

3,678
blockmeta-servicepinaxVerified publisher0.0.31 of 1See more

blockmeta-service pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
go.opentelemetry.io/otel/sdk@v1.23.1
1.40.0

Open the chart page →

1,681

Container images carrying it

552 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/argoproj/argocli:v3.7.16efd1cb89dc1
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/argoproj/workflow-controller:v3.7.166388d1b2f08
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/backube/volsync:0.16.00d03a6aad575
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/brancz/kube-rbac-proxy:v0.18.0754ab2a723c8
go.opentelemetry.io/otel/sdk@v1.26.0
1.40.0
1
quay.io/brancz/kube-rbac-proxy:v0.20.1f5fbfec6a2b2
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
1
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/gustavojst/kube-botblocker:0.2.04de059bb32ac
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
quay.io/jetstack/cert-manager-controller:v1.18.281316365dc0b
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
quay.io/jetstack/cert-manager-controller:v1.14.59c0527cab629
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1
quay.io/jetstack/cert-manager-controller:v1.16.1ae5e14401cde
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
quay.io/jetstack/cert-manager-webhook:v1.16.16edf44244b2a
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
quay.io/jetstack/cert-manager-webhook:v1.18.29431f0d8b510
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
quay.io/jetstack/cert-manager-webhook:v1.14.5ef419261a209
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1
quay.io/kiali/kiali:v1.89.30dcdb1c1e747
go.opentelemetry.io/otel/sdk@v1.22.0
1.40.0
1
quay.io/kiali/kiali:v2.23.07652b1285f50
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
1
quay.io/open-cluster-management/dynamic-scoring-addon:latest7e571a08ec1a
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
1
quay.io/open-cluster-management/dynamic-scoring-controller:latest587f5bc8f2ed
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
1
quay.io/open-cluster-management/kueue-addon:v0.1.47f728514fead
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
quay.io/operator-framework/olm40d0363f4aa6
go.opentelemetry.io/otel/sdk@v1.23.1
1.40.0
1
quay.io/opsmxpublic/opa:1.12.084fb1af7401c
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
quay.io/projectquay/clair:4.9.023329c3368e4
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
1
quay.io/prometheus/alertmanager:v0.31.188b605de9aba
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
1
quay.io/prometheus/prometheus:v3.0.03b9b2a15d376
go.opentelemetry.io/otel/sdk@v1.30.0
1.40.0
1
quay.io/prometheus/prometheus:v3.2.05888c188cf09
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
1
quay.io/prometheus/prometheus:v3.5.063805ebb8d2b
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/prometheus/prometheus:v3.2.16927e0919a14
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
1
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
1
quay.io/prometheus/prometheus:v2.53.1f20d3127bf28
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0
1
quay.io/thanos/thanos:v0.40.1aae7b2b030ed
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/thanos/thanos:v0.36.1e542959e1b36
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0
1
quay.io/zncdatadev/airflow-operator:0.4.0b716ef483b75
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/zncdatadev/hdfs-operator:0.4.0eb3c2928250e
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
quay.io/zncdatadev/secret-csi-driver:0.4.0604a7d98ab58
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
registry.gitlab.com/lenitech/k8s-operator/keycloak-client:v0.6.19065cdd80035
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
registry.k8s.io/autoscaling/cluster-autoscaler:v1.34.07b172f42533c
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
1
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
1
registry.k8s.io/etcd:3.6.4-0e36c08168342
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.01c0419326500
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1
registry.k8s.io/metrics-server/metrics-server:v0.7.1db3800085a09
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.