CVE-2026-25679

High

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,754; of 17,787 indexed, latest versions
Container images: 4,279; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 3,754 of 17,787 indexed charts deploy, on 4,279 images.

Affected package	Affected versions	Fixed in	Images
go-rpm-macrosrpm	3.2.0-3.el9, 3.6.0-13.el9_7	0:3.6.0-14.el9_7	4
git-lfsrpm	2.13.3-3.el8_6	0:2.13.3-3.el8_6.7	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+175 more	1.25.8	4,276

OSV records: RHSA-2026:20582 RHSA-2026:8841 RLSA-2026:8841 GO-2026-4601
Also known as: BIT-golang-2026-25679

Charts affected

3,754 by stars

Chart

Latest

Affected images

Radar Score

conference-appsalaboy

1.0.0

4 of 7 See more

conference-app salaboy 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinned	ce9ce8293e4e	stdlib@go1.20.1	1.25.8
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinned	bb64bf14467d	stdlib@go1.20.1	1.25.8
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66cdigest-pinned	1ff7c90845e4	stdlib@go1.20.1	1.25.8
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned	799c35f9f306	stdlib@go1.20.1	1.25.8

Open the chart page →

11,022

ntfysarab97

0.1.7

1 of 1 See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
binwiederhier/ntfy :v2.6.2	83e2e43d9956	stdlib@go1.20.5	1.25.8

Open the chart page →

1,766

uptime-kumasb-helm-charts

0.4.0

1 of 1 See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.0.2	4c364ef96aad	stdlib@go1.20.5	1.25.8

Open the chart page →

38,115

scaleway-csiscaleway-charts

0.2.1

8 of 8 See more

scaleway-csi scaleway-charts 0.2.1

8 of the 8 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
scaleway/scaleway-csi :v0.3.4	11135998e31c	stdlib@go1.24.12	1.25.8
registry.k8s.io/sig-storage/csi-attacher :v4.9.0	5aaefc24f315	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.14.0	5244abbe87e0	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/livenessprobe :v2.16.0	88092d100909	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/snapshot-controller :v8.3.0	12c2da094b02	stdlib@go1.24.2	1.25.8

Open the chart page →

3,811

teamcityscalified-teamcity

2026.2.0

1 of 3 See more

teamcity scalified-teamcity 2026.2.0

1 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :14	156f0b253fd6	stdlib@go1.24.6	1.25.8

Open the chart page →

1,638

schemaheroschemahero

1.4.0

1 of 1 See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
schemahero/schemahero-manager :0.22.1	1609e1a05cd3	stdlib@go1.24.6	1.25.8

Open the chart page →

2,178

scienceboxsciencebox

0.0.7

2 of 17 See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	stdlib@go1.17.3	1.25.8
osixia/openldap :1.5.0	18742e9c449c	stdlib@go1.15.5	1.25.8

Open the chart page →

6,587

iopsciencemesh

0.4.0

1 of 2 See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	stdlib@go1.20.4	1.25.8

Open the chart page →

4,052

secrethorsecrethor

1.1.2

1 of 1 See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
bonovoo/secrethor :1.1.2	bb93b68fcd17	stdlib@go1.24.2	1.25.8

Open the chart page →

514

securosecuro

0.15.1

1 of 4 See more

securo securo 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
pgvector/pgvector :pg16	ccc6e83d6e35	stdlib@go1.24.6	1.25.8

Open the chart page →

3,350

selenosis-deployselenosis

2.1.3

4 of 4 See more

selenosis-deploy selenosis 2.1.3

4 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
alcounit/browser-controller :v1.0.0	93b7cdbab14b	stdlib@go1.25.0	1.25.8
alcounit/browser-service :v0.0.9	4bd10defc324	stdlib@go1.25.0	1.25.8
alcounit/browser-ui :v0.0.9	6a977c92ef27	stdlib@go1.25.0	1.25.8
alcounit/selenosis :v2.1.1	d01a9dbbd943	stdlib@go1.25.0	1.25.8

Open the chart page →

1,579

karakeepself-hosters-by-night

2.5.1

1 of 1 See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	stdlib@go1.23.10	1.25.8

Open the chart page →

5,214

sentry-k8ssentry-k8s

1.4.1

3 of 11 See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.8
library/redis :6.2.20-alpine	77697a75da9f	stdlib@go1.18.2	1.25.8
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	stdlib@go1.19.8	1.25.8

Open the chart page →

16,194

sentry-operatorsentry-operator

1.2.5

1 of 1 See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/agjmills/sentry-operator :v1.2.5	00389ef6a00e	stdlib@go1.24.2	1.25.8

Open the chart page →

463

vuiseriohub

1.0.6

2 of 3 See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
dserio83/velero-api :0.3.1	6b3d9115fee2	stdlib@go1.22.5	1.25.8
dserio83/velero-ui :0.3.1	b4e1ec6664d3	stdlib@go1.23.7	1.25.8

Open the chart page →

11,545

session-manager-agentsession-manager-agent

1.9.0

1 of 2 See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	stdlib@go1.23.11	1.25.8

Open the chart page →

479

session-manager-serversession-manager-server

0.1.0-gfu-dev

1 of 1 See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	stdlib@go1.23.7	1.25.8

Open the chart page →

795

k8s-appliershlomibendavid

1.0.1

1 of 1 See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	stdlib@go1.21.7	1.25.8

Open the chart page →

1,206

clickhousesignoz

24.1.18

3 of 3 See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	stdlib@go1.19.10	1.25.8
altinity/metrics-exporter :0.21.2	df3d57215356	stdlib@go1.19.10	1.25.8
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.25.8

Open the chart page →

4,697

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	stdlib@go1.17.9	1.25.8
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	stdlib@go1.17.9	1.25.8

Open the chart page →

5,118

scaffoldsigstore

0.6.114

9 of 15 See more

scaffold sigstore 0.6.114

9 of the 15 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.25.8
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.25.8
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	7f59f7c08d1a	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.31	3a061734c5be	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	3cee6c78973b	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.31	e5232e8c9122	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	5a878e4e4f03	stdlib@go1.26.0	1.25.8
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	28c5ff40963f	stdlib@go1.26.0	1.25.8

Open the chart page →

7,711

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	stdlib@go1.23.8	1.25.8

Open the chart page →

4,250

postgresql-singlesinextra

1.15.1

1 of 1 See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	stdlib@go1.24.6	1.25.8

Open the chart page →

4,920

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	stdlib@go1.17.13	1.25.8
altinity/metrics-exporter :0.20.0	1a46d104406d	stdlib@go1.17.13	1.25.8

Open the chart page →

6,420

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	stdlib@go1.18	1.25.8

Open the chart page →

2,200

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	stdlib@go1.13.15	1.25.8

Open the chart page →

2,301

smallest-self-hostsmallest-self-host

0.2.2

6 of 12 See more

smallest-self-host smallest-self-host 0.2.2

6 of the 12 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	stdlib@go1.21.10	1.25.8
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	stdlib@go1.22.3	1.25.8
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.25.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.25.8
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	stdlib@go1.22.8	1.25.8
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.25.8

Open the chart page →

7,684

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	stdlib@go1.19.3	1.25.8

Open the chart page →

1,144

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.25.8

Open the chart page →

1,461

artifact-hubsoftonic

1.19.0

6 of 8 See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	stdlib@go1.19.10	1.25.8
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.25.8
artifacthub/hub :v1.19.0	111918d8c399	stdlib@go1.22.4	1.25.8
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.8
artifacthub/scanner :v1.19.0	323d026e78c3	stdlib@go1.21.8	1.25.8
artifacthub/tracker :v1.19.0	6596c8c4d955	stdlib@go1.22.4	1.25.8

Open the chart page →

14,504

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	stdlib@go1.13.12	1.25.8

Open the chart page →

2,637

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	stdlib@go1.14	1.25.8
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.25.8

Open the chart page →

5,098

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	stdlib@go1.14.6	1.25.8

Open the chart page →

2,591

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.25.8

Open the chart page →

2,320

sogosogo

0.3.5

1 of 2 See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	stdlib@go1.24.13	1.25.8

Open the chart page →

7,157

postgresql-ha-chartsoldevelo-postgresql-ha-chart

16.3.4

1 of 2 See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	stdlib@go1.25.4	1.25.8

Open the chart page →

4,390

rabbitmqsolidcharts

0.7.5

1 of 2 See more

rabbitmq solidcharts 0.7.5

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5-management	ffd1b50c522a	stdlib@go1.22.2	1.25.8

Open the chart page →

1,040

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	stdlib@go1.18.1	1.25.8
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	stdlib@go1.18.1	1.25.8
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	stdlib@go1.18.1	1.25.8
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	stdlib@go1.18.1	1.25.8

Open the chart page →

9,224

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	stdlib@go1.20.5	1.25.8

Open the chart page →

2,022

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	stdlib@go1.17.13	1.25.8

Open the chart page →

1,594

stackradar-scannerstackradar

0.3.0

1 of 1 See more

stackradar-scanner stackradar 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/lockdep/stackradar-scanner :0.3.0	dd8a35d50c2d	stdlib@go1.25.7	1.25.8

Open the chart page →

1,209

gitwebhookproxystakater

0.2.79

1 of 1 See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.25.8

Open the chart page →

1,503

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	stdlib@go1.17.12	1.25.8

Open the chart page →

11,459

gethstakewise

2.5.8

1 of 3 See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.15.10	1f36ca5922a5	stdlib@go1.24.2	1.25.8

Open the chart page →

1,142

graph-nodestakewise

3.1.0

2 of 3 See more

graph-node stakewise 3.1.0

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
graphprotocol/graph-node :v0.37.0	f4452cdedd68	stdlib@go1.24.1	1.25.8
ipfs/kubo :v0.24.0	e3de33bd746b	stdlib@go1.19.8	1.25.8

Open the chart page →

4,673

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	stdlib@go1.18	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	stdlib@go1.18	1.25.8
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	stdlib@go1.18	1.25.8

Open the chart page →

4,348

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	stdlib@go1.14.13	1.25.8

Open the chart page →

3,371

stornxstornx

1.1.1

7 of 9 See more

stornx stornx 1.1.1

7 of the 9 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	stdlib@go1.24.13	1.25.8
alazidis/stornx :1.1.1	602d4f7f090c	stdlib@go1.25.7	1.25.8
quay.io/kiali/kiali :v2.23.0	7652b1285f50	stdlib@go1.25.0	1.25.8
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	stdlib@go1.25.3	1.25.8
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	stdlib@go1.26.0	1.25.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.25.8
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	stdlib@go1.24.4	1.25.8

Open the chart page →

11,683

stunner-gateway-operatorstunner

1.1.0

2 of 2 See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
l7mp/stunner-auth-server :1.1.0	2f8114477ba6	stdlib@go1.23.8	1.25.8
l7mp/stunner-gateway-operator :1.1.0	c34f7c931491	stdlib@go1.23.8	1.25.8

Open the chart page →

1,292

hlf-k8ssubstra

10.2.4

4 of 7 See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	stdlib@go1.15.7	1.25.8
jwilder/dockerize :latest	f94fb59fb4f6	stdlib@go1.25.5	1.25.8
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	stdlib@go1.18.10	1.25.8
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	stdlib@go1.18.10	1.25.8

Open the chart page →

12,006

Container images carrying it

4,279 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	stdlib@go1.13.4	1.25.8	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	stdlib@go1.19.5	1.25.8	3
quay.io/oliver006/redis_exporter :v1.35.1	908dbee5c546	stdlib@go1.17.7	1.25.8	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	stdlib@go1.20.10	1.25.8	3
quay.io/prometheus/alertmanager :v0.26.0	361db356b330	stdlib@go1.20.7	1.25.8	3
quay.io/prometheus/node-exporter :v1.1.2	22fbde17ab64	stdlib@go1.15.8	1.25.8	3
quay.io/prometheus/node-exporter :v1.6.1	81f94e50ea37	stdlib@go1.20.6	1.25.8	3
quay.io/prometheus/node-exporter :v1.2.2	a990408ed288	stdlib@go1.16.7	1.25.8	3
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	stdlib@go1.22.3	1.25.8	3
quay.io/prometheus-operator/prometheus-operator :v0.50.0	ab4f480f2cc6	stdlib@go1.16	1.25.8	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	stdlib@go1.19.4	1.25.8	3
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	stdlib@go1.23.2	1.25.8	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	stdlib@go1.16.2	1.25.8	3
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	stdlib@go1.26.0	1.25.8	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	stdlib@go1.17.3	1.25.8	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	stdlib@go1.19.7	1.25.8	3
quay.io/prometheus/pushgateway :v1.10.0	7a4d0696a24e	stdlib@go1.23.1	1.25.8	3
quay.io/prometheus/pushgateway :v1.8.0	c159e946abf4	stdlib@go1.22.1	1.25.8	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	stdlib@go1.15.15	1.25.8	3
quay.io/sighup/permission-manager :v1.7.1-rc1	f5e6a5dcee33	stdlib@go1.16.8	1.25.8	3
registry.k8s.io/ingress-nginx/controller :v1.5.1	4ba73c697770	stdlib@go1.19.2	1.25.8	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	stdlib@go1.20.5	1.25.8	3
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.4.1	36d05b4077fb	stdlib@go1.22.2	1.25.8	3
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v1.5.2	e8825994b7a2	stdlib@go1.24.1	1.25.8	3
registry.k8s.io/kubectl :v1.31.0	99b37df34bc4	stdlib@go1.22.5	1.25.8	3
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.17.0	2bbc91556733	stdlib@go1.24.6	1.25.8	3
registry.k8s.io/sig-storage/csi-attacher :v4.3.0	4eb73137b663	stdlib@go1.20.3	1.25.8	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.12.0	0d23a6fd60c4	stdlib@go1.22.5	1.25.8	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.14.0	5244abbe87e0	stdlib@go1.24.2	1.25.8	3
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.10.1	f25af73ee708	stdlib@go1.21.5	1.25.8	3
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	stdlib@go1.23.1	1.25.8	3
registry.k8s.io/sig-storage/csi-resizer :v1.8.0	2e2b44393539	stdlib@go1.20.3	1.25.8	3
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	stdlib@go1.23.1	1.25.8	3
registry.k8s.io/sig-storage/csi-snapshotter :v8.4.0	c7e0a3718832	stdlib@go1.24.6	1.25.8	3
registry.k8s.io/sig-storage/livenessprobe :v2.10.0	4dc0b87ccd69	stdlib@go1.20.3	1.25.8	3
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	stdlib@go1.16.2	1.25.8	3
1password/scim :v2.3.1	29d0c6cb67eb	stdlib@go1.16.8	1.25.8	2
abutaha/aws-es-proxy :v1.1	190ed2d1dfc8	stdlib@go1.14.1	1.25.8	2
alazidis/kube-netlag :1.1.0	0e8c84152201	stdlib@go1.24.13	1.25.8	2
alpine/git :2.47.2	062a01ad7a0e	stdlib@go1.23.9	1.25.8	2
alpine/k8s :1.32.12	048f8d9c8cc7	stdlib@go1.25.7	1.25.8	2
alpine/kubectl :1.35.2	ec8f734b0a10	stdlib@go1.25.7	1.25.8	2
altinity/clickhouse-operator :0.21.2	cd9252644ce0	stdlib@go1.19.10	1.25.8	2
altinity/metrics-exporter :0.21.2	df3d57215356	stdlib@go1.19.10	1.25.8	2
apache/superset :dockerize	afe59523a6c8	stdlib@go1.20.4	1.25.8	2
apecloud/apecloud-mcp :0.1.0	94041b080510	stdlib@go1.23.7	1.25.8	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	stdlib@go1.21.7	1.25.8	2
assistiot/fl_repository_db :latest	ad8f72108636	stdlib@go1.17.10	1.25.8	2
ayushsobti/kube-monkey :v0.5.2	4c94e8f8924e	stdlib@go1.18.9	1.25.8	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	stdlib@go1.24.6	1.25.8	2