StackRadar

CVE-2026-24051

High

Advisory

Published 2 Feb 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.0
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
549
of 17,781 indexed, latest versions
Container images
555
deployed by those charts
Fix available
1 of 1
affected package

OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking

Carried by container images the latest versions of 549 of 17,781 indexed charts deploy, on 555 images.

Affected packageAffected versionsFixed inImages
go.opentelemetry.io/otel/sdkgolangv1.21.0, v1.22.0, v1.23.0, v1.23.1+16 more1.40.0555
OSV records
GHSA-9h8m-3fm2-qjrq
Also known as
GO-2026-4394

Charts affected

549 by stars
ChartLatestAffected imagesRadar Score
pathling-serverchglVerified publisher0.10.111 of 3See more

pathling-server chgl 0.10.11

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

961
kubevirt-cloud-controller-managerchristianhuthVerified publisher0.0.21 of 1See more

kubevirt-cloud-controller-manager christianhuth 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

656
clairclair-helmVerified publisher0.12.01 of 3See more

clair clair-helm 0.12.0

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/projectquay/clair:4.9.023329c3368e4
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

1,617
calico-cniclastixVerified publisher3.28.11 of 3See more

calico-cni clastix 3.28.1

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
calico/kube-controllers:v3.28.1eadb3a25109a
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

3,050
capi-kamaji-vsphere-fullclastixVerified publisher1.0.12 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

2 of the 9 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
registry.k8s.io/cloud-pv-vsphere/cloud-provider-vsphere:v1.32.0f9f4dfd733ab
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

5,933
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

1,744
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

18,293
cloud-provider-kubevirtcloud-provider-kubevirtVerified publisher0.2.01 of 1See more

cloud-provider-kubevirt cloud-provider-kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

656
argo-eventscluster-deploy0.1.01 of 1See more

argo-events cluster-deploy 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/argoproj/argo-events:v1.9.10a83d2699ae53
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

1,035
monitoringcluster-deploy0.3.04 of 11See more

monitoring cluster-deploy 0.3.0

4 of the 11 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

8,183
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

1,394
door-agentcnoVerified publisher3.0.152 of 15See more

door-agent cno 3.0.15

2 of the 15 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
library/docker:27-cli851f91d24121
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
library/docker:27-dindaa3df78ecf32
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0

Open the chart page →

19,338
coder-logstream-kubecoder-logstream-kube0.0.151 of 1See more

coder-logstream-kube coder-logstream-kube 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/coder/coder-logstream-kube:v0.0.1510ae596d296e
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

885
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
go.opentelemetry.io/otel/sdk@v1.32.0
1.40.0

Open the chart page →

1,925
csghubcsghubVerified publisher2.4.35 of 34See more

csghub csghub 2.4.3

5 of the 34 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/loki:3.4.258a6c186ce78
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
minio/minio:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
opencsghq/lws:v0.6.1de15437db41b
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

58,897
csi-driver-ipfscsi-driver-ipfs0.2.02 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

2 of the 6 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0

Open the chart page →

3,629
cloudflareddamounVerified publisher3.3.01 of 1See more

cloudflared damoun 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.5.05d5f70a59d5e
go.opentelemetry.io/otel/sdk@v1.26.0
1.40.0

Open the chart page →

1,306
dapr-agentsdapr-agents-devVerified publisher0.1.513 of 31See more

dapr-agents dapr-agents-dev 0.1.5

13 of the 31 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
grafana/loki:3.6.5847c287ada0e
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
grafana/loki-canary:3.6.5fbb984bab741
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
otel/opentelemetry-collector-contrib:0.145.0a7343f018690
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
ghcr.io/dapr/injector:1.17.0-rc.37a2fd888ed5f
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
ghcr.io/dapr/operator:1.17.0-rc.3d5cc61cbe735
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
ghcr.io/dapr/placement:1.17.0-rc.3a237b43cd5c6
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
ghcr.io/dapr/scheduler:1.17.0-rc.36c62e01e736b
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
ghcr.io/dapr/sentry:1.17.0-rc.3bf79b03591e0
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
ghcr.io/kagent-dev/kagent/tools:0.0.13c8882543f693
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
ghcr.io/kagent-dev/kmcp/controller:0.2.283276357d448
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

22,193
dns-mesh-controllerdashdns2.0.81 of 2See more

dns-mesh-controller dashdns 2.0.8

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
emirozbir/dashdns-controller:v2.0.5d3a5c1063425
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

1,095
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
go.opentelemetry.io/otel/sdk@v1.32.0
1.40.0

Open the chart page →

1,994
defactopsdefactops1.0.91 of 2See more

defactops defactops 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
defactops/defactops-ui:1.0.16825cdf9ba706
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0

Open the chart page →

4,509
migrantdevtron-labs0.0.31 of 1See more

migrant devtron-labs 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
migrate/migrate:latestcc4ad8e19d66
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

734
direktivdirektivVerified publisher0.10.01 of 6See more

direktiv direktiv 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-k8s:0.120.01e45d9483faa
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0

Open the chart page →

3,470
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

4,217
dnation-kubernetes-monitoring-stackdnationcloud4.0.22 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

2 of the 17 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
bitnamilegacy/thanos:0.37.1-debian-12-r05bf82b98c82c
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
grafana/loki:3.2.0882e30c20683
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

21,641
gatekeeperdoubanVerified publisher3.17.11 of 3See more

gatekeeper douban 3.17.1

1 of the 3 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
openpolicyagent/gatekeeper:v3.17.1b7b4d7cfdd52
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

2,490
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/cephcsi/ceph-csi-operator:v0.5.014fe2f1bffc3
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

1,990
bordysnixVerified publisher0.0.81 of 1See more

bor dysnix 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
0xpolygon/bor:1.3.7396d3de26d8b
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0

Open the chart page →

1,365
api-gatewayeclipse-aeriosVerified publisher1.7.01 of 1See more

api-gateway eclipse-aerios 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
devopsfaith/krakend:2.6.34c678c224f67
go.opentelemetry.io/otel/sdk@v1.25.0
1.40.0

Open the chart page →

1,296
openfaas2eclipse-aeriosVerified publisher12.0.51 of 6See more

openfaas2 eclipse-aerios 12.0.5

1 of the 6 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
prom/prometheus:v2.51.24f6c47e39a90
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0

Open the chart page →

6,678
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

1,284
eg-universal-agent-operatoreg-universal-agent-operatorVerified publisher0.0.51 of 1See more

eg-universal-agent-operator eg-universal-agent-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

558
elastic-agentelasticVerified publisher9.5.31 of 2See more

elastic-agent elastic 9.5.3

1 of the 2 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

753
kube-state-metricselasticVerified publisher6.1.01 of 1See more

kube-state-metrics elastic 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.16.0e750cd4b43f7
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

753
kube-ecp-stackemqx-operator2.5.14 of 16See more

kube-ecp-stack emqx-operator 2.5.1

4 of the 16 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
emqxecp/otelcol:2.5.04c31d9bec846
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
quay.io/jetstack/cert-manager-controller:v1.16.1ae5e14401cde
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
quay.io/jetstack/cert-manager-webhook:v1.16.16edf44244b2a
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

23,685
mariadb-operator-monitoringenixVerified publisher0.1.01 of 1See more

mariadb-operator-monitoring enix 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.17.02bbc91556733
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0

Open the chart page →

731
eoapi-supporteoapiVerified publisher0.1.71 of 7See more

eoapi-support eoapi 0.1.7

1 of the 7 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/grafana:10.3.38640e5038e83
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0

Open the chart page →

8,648
thanoseosc-lot-1Verified publisher0.2.01 of 1See more

thanos eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

834
thanos-bucketeosc-lot-1Verified publisher0.1.01 of 1See more

thanos-bucket eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0

Open the chart page →

834
erpcethereum-helm-chartsVerified publisher0.0.41 of 1See more

erpc ethereum-helm-charts 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/erpc/erpc:0.0.49f5654f745d4c
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

899
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

1,470
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

1,216
ingressmonitorcontrollerevilgn0me0.0.51 of 1See more

ingressmonitorcontroller evilgn0me 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/evilgn0me/ingressmonitorcontroller:v0.0.50bbfa4db14b9
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0

Open the chart page →

576
exalsius-operatorexalsius-operatorVerified publisher0.12.01 of 1See more

exalsius-operator exalsius-operator 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/exalsius/exalsius-operator:0.12.0d24a579a3c75
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0

Open the chart page →

204
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

2,785
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.24 of 18See more

farm-observability farm-observability 0.27.2

4 of the 18 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
grafana/loki:3.6.73c8fd3570dd9
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
grafana/loki-canary:3.6.70dac7d5cb383
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
grafana/tempo:2.9.065a578975943
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

13,255
ferretdbferretdb-helm-chart0.2.31 of 1See more

ferretdb ferretdb-helm-chart 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
ghcr.io/ferretdb/ferretdb:2.7.05706414241eb
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

749
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

5,292
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0

Open the chart page →

8,902
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-24051.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0

Open the chart page →

3,474

Container images carrying it

555 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
otel/opentelemetry-collector-k8s:0.111.032b3c8296dcc
go.opentelemetry.io/otel/sdk@v1.30.0
1.40.0
2
polyaxon/polyaxon-operator:2.16.42716f552b301
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
2
prom/prometheus:v2.52.05c435642ca4d
go.opentelemetry.io/otel/sdk@v1.25.0
1.40.0
2
thanosio/thanos:v0.41.0cf3e9b292e43
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
2
uselagoon/docker-host:v3.6.12c89ed939b8b
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
2
ghcr.io/alpineworks/flux-suspension-exporter:v1.0.0341f0a6cd2b6
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
2
ghcr.io/buoyantio/prometheus:v2.55.12659f4c2ebb7
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
2
ghcr.io/glassflow/glassflow-etl-k8s-operator:v3.2.1e70364e88629
go.opentelemetry.io/otel/sdk@v1.38.0
1.40.0
2
ghcr.io/juniorjpdj/containers/openssl-kubectl:1.36.1-r358afba209ea0
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
2
ghcr.io/keptn/lifecycle-operator:v2.0.0866ced256a8c
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
2
ghcr.io/keptn/metrics-operator:v2.1.0dc48471c7cf8
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
2
ghcr.io/konpyutaika/docker-images/nifikop:v1.14.1-release6bb00c592a82
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
2
ghcr.io/stashed/stash-ui-server:v0.23.047cffbc65700
go.opentelemetry.io/otel/sdk@v1.22.0
1.40.0
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
2
quay.io/argoproj/argo-events:v1.9.11fa07b2c9ece6
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
2
quay.io/brancz/kube-rbac-proxy:v0.20.0147cb28fea35
go.opentelemetry.io/otel/sdk@v1.34.0
1.40.0
2
quay.io/brancz/kube-rbac-proxy:v0.18.1e6a323504999
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
2
quay.io/jetstack/cert-manager-controller:v1.17.22c314feeb5e8
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
2
quay.io/jetstack/cert-manager-controller:v1.14.364adcb95ce09
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
2
quay.io/jetstack/cert-manager-controller:v1.15.3eee34b3de2dd
go.opentelemetry.io/otel/sdk@v1.26.0
1.40.0
2
quay.io/jetstack/cert-manager-webhook:v1.17.237b16a9dff00
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
2
quay.io/jetstack/cert-manager-webhook:v1.14.3d8ad5515f44f
go.opentelemetry.io/otel/sdk@v1.21.0
1.40.0
2
quay.io/jetstack/cert-manager-webhook:v1.15.3fdcb9ac4963f
go.opentelemetry.io/otel/sdk@v1.26.0
1.40.0
2
quay.io/kubevirt/kubevirt-cloud-controller-manager:v0.6.037ad4c475941
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
2
quay.io/prometheus/prometheus:v2.53.0075b1ba2c4eb
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0
2
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
2
quay.io/prometheus/prometheus:v2.54.1f6639335d34a
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
2
quay.io/thanos/thanos:v0.39.21d022ef4b8ef
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
2
registry.k8s.io/metrics-server/metrics-server:v0.8.089258156d0e9
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
2
registry.k8s.io/sig-storage/csi-provisioner:v6.1.1d992c36d4ddd
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
2
registry.k8s.io/sig-storage/csi-provisioner:v6.1.0e5900dc98b0d
go.opentelemetry.io/otel/sdk@v1.37.0
1.40.0
2
0xpolygon/bor:1.3.7396d3de26d8b
go.opentelemetry.io/otel/sdk@v1.27.0
1.40.0
1
1dev/server:11.9.0cd5b12fe5471
go.opentelemetry.io/otel/sdk@v1.31.0
1.40.0
1
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
adyanth/cloudflare-operator6b168dc237d5
go.opentelemetry.io/otel/sdk@v1.35.0
1.40.0
1
aerospike/aerospike-backup-service:3.5.1be40d709c583
go.opentelemetry.io/otel/sdk@v1.39.0
1.40.0
1
aibrix/controller-manager:v0.7.076aabbbfda79
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
aibrix/gateway-plugins:v0.7.05b93ea4c753a
go.opentelemetry.io/otel/sdk@v1.28.0
1.40.0
1
almasood/book-server:latest6ffac9b63cdf
go.opentelemetry.io/otel/sdk@v1.33.0
1.40.0
1
alpine/k8s:1.31.106dbe6f391eda
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
1
alpine/k8s:1.31.137a319b15cfc9
go.opentelemetry.io/otel/sdk@v1.36.0
1.40.0
1
alpine/k8s:1.32.47e1e7d5b7a96
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
1
alpine/k8s:1.31.49c4976d47656
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
1
alpine/k8s:1.32.3eec354133193
go.opentelemetry.io/otel/sdk@v1.29.0
1.40.0
1
altinity/clickhouse-operator:0.25.41d6f18dbd599
go.opentelemetry.io/otel/sdk@v1.24.0
1.40.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.