CVE-2026-25679

High

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,750; of 17,803 indexed, latest versions
Container images: 4,276; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 3,750 of 17,803 indexed charts deploy, on 4,276 images.

Affected package	Affected versions	Fixed in	Images
go-rpm-macrosrpm	3.2.0-3.el9, 3.6.0-13.el9_7	0:3.6.0-14.el9_7	4
git-lfsrpm	2.13.3-3.el8_6	0:2.13.3-3.el8_6.7	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+176 more	1.25.8	4,273

OSV records: RHSA-2026:20582 RHSA-2026:8841 RLSA-2026:8841 GO-2026-4601
Also known as: BIT-golang-2026-25679

Charts affected

3,750 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

1 of 6 See more

kube-prometheus-stack prometheus-community 91.4.1

1 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	stdlib@go1.25.7	1.25.8

Open the chart page →

682

argo-cdargo

10.9.2

2 of 3 See more

argo-cd argo 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	stdlib@go1.25.6	1.25.8
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.25.8

Open the chart page →

3,032

jenkinsjenkinsci

5.9.63

1 of 2 See more

jenkins jenkinsci 5.9.63

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-jdk21	c1e4c349365f	stdlib@go1.25.3	1.25.8

Open the chart page →

2,557

giteagitea

12.7.0

2 of 4 See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.25.8
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.25.8

Open the chart page →

8,972

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	stdlib@go1.15	1.25.8

Open the chart page →

2,745

artifact-hubartifact-hub

1.23.0

4 of 7 See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	stdlib@go1.25.7	1.25.8
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.8
artifacthub/scanner :v1.23.0	2d8365601f0e	stdlib@go1.25.7	1.25.8
artifacthub/tracker :v1.23.0	5368d21a6e5c	stdlib@go1.24.4	1.25.8

Open the chart page →

11,020

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	stdlib@go1.25.5	1.25.8

Open the chart page →

600

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	stdlib@go1.26.0	1.25.8

Open the chart page →

583

argo-cdargo-cd-oci

10.9.2

2 of 3 See more

argo-cd argo-cd-oci 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	stdlib@go1.25.6	1.25.8
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.25.8

Open the chart page →

3,032

jupyterhubjupyterhub

4.4.2

2 of 7 See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/k8s-image-awaiter :4.4.2	c4df1176d152	stdlib@go1.23.12	1.25.8
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	stdlib@go1.23.10	1.25.8

Open the chart page →

8,295

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.8

Open the chart page →

4,696

natsnats

2.14.6

1 of 3 See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.25.8

Open the chart page →

2,308

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	stdlib@go1.25.0	1.25.8

Open the chart page →

1,775

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.25.8

Open the chart page →

30,645

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	stdlib@go1.21.8	1.25.8

Open the chart page →

11,436

falcofalcosecurity

9.1.0

1 of 3 See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	stdlib@go1.25.7	1.25.8

Open the chart page →

5,523

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	stdlib@go1.16.2	1.25.8

Open the chart page →

2,315

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	stdlib@go1.24.1	1.25.8

Open the chart page →

1,513

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	stdlib@go1.22.10	1.25.8

Open the chart page →

1,472

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	stdlib@go1.25.6	1.25.8

Open the chart page →

1,093

grafanagrafana-community

13.2.5

1 of 1 See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	stdlib@go1.25.7	1.25.8

Open the chart page →

449

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	stdlib@go1.19.5	1.25.8

Open the chart page →

1,445

openebsopenebs

4.6.1

19 of 35 See more

openebs openebs 4.6.1

19 of the 35 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.25.8
grafana/loki :3.4.2	58a6c186ce78	stdlib@go1.23.6	1.25.8
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.25.8
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.25.8
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.25.8
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	stdlib@go1.24.5	1.25.8
openebs/lvm-driver :1.10.1	41f73aba7f31	stdlib@go1.24.7	1.25.8
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.25.8
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.8
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.25.8
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	stdlib@go1.24.6	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	stdlib@go1.24.6	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	stdlib@go1.23.1	1.25.8

Open the chart page →

24,469

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.25.8

Open the chart page →

945

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.25.8

Open the chart page →

1,433

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	stdlib@go1.20.7	1.25.8
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	stdlib@go1.19.1	1.25.8

Open the chart page →

2,890

aws-for-fluent-bitaws

0.2.0

1 of 1 See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.25.8

Open the chart page →

252

vpafairwinds-stable

5.1.0

1 of 4 See more

vpa fairwinds-stable 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	stdlib@go1.20.1	1.25.8

Open the chart page →

1,233

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	stdlib@go1.18.8	1.25.8

Open the chart page →

2,060

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	stdlib@go1.23.10	1.25.8

Open the chart page →

3,166

dagsterdagster

1.13.23

1 of 5 See more

dagster dagster 1.13.23

1 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.25.8

Open the chart page →

3,562

zabbixzabbix-community

7.1.0

3 of 5 See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.8
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	stdlib@go1.24.10	1.25.8
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	stdlib@go1.24.10	1.25.8

Open the chart page →

13,987

keycloakcloudpirates-keycloak

0.21.37

2 of 3 See more

keycloak cloudpirates-keycloak 0.21.37

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :18.0	073e7c8b84e2	stdlib@go1.24.6	1.25.8
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.8

Open the chart page →

4,503

graylogkong-z

3.0.33

1 of 5 See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	stdlib@go1.24.2	1.25.8

Open the chart page →

2,723

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	stdlib@go1.25.7	1.25.8
1password/connect-sync :1.8.2	6297ca6136c0	stdlib@go1.25.7	1.25.8

Open the chart page →

2,610

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	stdlib@go1.25.5	1.25.8

Open the chart page →

2,009

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.8

Open the chart page →

2,614

openfaasopenfaas

15.0.13

3 of 6 See more

openfaas openfaas 15.0.13

3 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.25.8
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.25.8
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.25.8

Open the chart page →

3,578

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	stdlib@go1.22.3	1.25.8

Open the chart page →

568

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.25.8

Open the chart page →

5,570

postgrescloudpirates-postgres

0.20.5

1 of 1 See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.8

Open the chart page →

1,686

vault-secrets-operatorhashicorp

1.5.1

1 of 2 See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	stdlib@go1.23.0	1.25.8

Open the chart page →

1,061

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	stdlib@go1.21.4	1.25.8

Open the chart page →

1,384

rocketchatrocketchat-server

7.0.2

5 of 12 See more

rocketchat rocketchat-server 7.0.2

5 of the 12 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.25.8
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	stdlib@go1.20.7	1.25.8
natsio/nats-box :0.19.2	8031d190c7ee	stdlib@go1.25.2	1.25.8
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.25.8
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	stdlib@go1.24.6	1.25.8

Open the chart page →

12,290

zammadzammad

19.0.0

1 of 5 See more

zammad zammad 19.0.0

1 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.25.8

Open the chart page →

6,539

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	stdlib@go1.21.3	1.25.8

Open the chart page →

2,109

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	stdlib@go1.22.12	1.25.8
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	stdlib@go1.19.7	1.25.8

Open the chart page →

2,944

ceph-csi-cephfsceph-csi

3.17.1

5 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.8

Open the chart page →

4,143

ceph-csi-rbdceph-csi

3.17.1

5 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.8

Open the chart page →

4,143

chaos-meshchaos-mesh

2.8.4

1 of 4 See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.25.8

Open the chart page →

6,674

Container images carrying it

4,276 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/truefoundrycloud/eks/eks-node-monitoring-agent :v1.5.1-eksbuild.1	988c8e1a273a	stdlib@go1.25.6	1.25.8	1
public.ecr.aws/v0r6c2e2/minio :latest	08c90bd040bf	stdlib@go1.23.5	1.25.8	1
public.ecr.aws/v0r6c2e2/trino :latest	c265156b00d1	stdlib@go1.23.0	1.25.8	1
public.ecr.aws/xray/aws-xray-daemon :3.6.2	43d051eed000	stdlib@go1.25.7	1.25.8	1
quay.io/aerokube/boot :1.0.1	3c269612053f	stdlib@go1.22.2	1.25.8	1
quay.io/aerokube/browser-ops :2.6.7	807c1bb67086	stdlib@go1.22.2	1.25.8	1
quay.io/aerokube/keygen :1.0.1	578934444f04	stdlib@go1.20.5	1.25.8	1
quay.io/aerokube/moon :2.5.1	a8837b00ba1c	stdlib@go1.20.4	1.25.8	1
quay.io/aerokube/moon-conf :2.5.1	9ca307b30080	stdlib@go1.20.4	1.25.8	1
quay.io/aerokube/moon-ui :2.0.5	89990b146824	stdlib@go1.20.5	1.25.8	1
quay.io/aerokube/reloader :1.0.1	e4a3661416a5	stdlib@go1.22.2	1.25.8	1
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	go-rpm-macros@3.2.0-3.el9	0:3.6.0-14.el9_7	1
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	stdlib@go1.20.12	1.25.8	1
quay.io/argoproj/argocd :v3.5.1	0deb1a1c9176	stdlib@go1.24.0	1.25.8	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	stdlib@go1.16.5	1.25.8	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	stdlib@go1.22.7	1.25.8	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	stdlib@go1.22.7	1.25.8	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	stdlib@go1.20.4	1.25.8	1
quay.io/argoproj/argocli :v3.7.11	577fc18f86ad	stdlib@go1.25.5	1.25.8	1
quay.io/argoproj/argocli :v3.7.1	6efd1cb89dc1	stdlib@go1.24.6	1.25.8	1
quay.io/argoproj/argocli :v3.5.5	91b9825f09a8	stdlib@go1.21.7	1.25.8	1
quay.io/argoproj/argo-events :v1.9.10	a83d2699ae53	stdlib@go1.24.11	1.25.8	1
quay.io/argoprojlabs/argocd-extension-metrics :v1.0.3	0d614816c4b7	stdlib@go1.21.11	1.25.8	1
quay.io/argoprojlabs/argocd-operator :v0.4.0	cf8faa986789	stdlib@go1.18.4	1.25.8	1
quay.io/argoprojlabs/argocd-rbac-operator :v0.2.4	51dded00137a	stdlib@go1.24.9	1.25.8	1
quay.io/argoproj/workflow-controller :v3.7.1	66388d1b2f08	stdlib@go1.24.6	1.25.8	1
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	stdlib@go1.21.7	1.25.8	1
quay.io/argoproj/workflow-controller :v3.7.11	c46aa0ded8ed	stdlib@go1.25.5	1.25.8	1
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	stdlib@go1.15.12	1.25.8	1
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	stdlib@go1.24.3	1.25.8	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	stdlib@go1.18.4	1.25.8	1
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	stdlib@go1.20.7	1.25.8	1
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	stdlib@go1.19.13	1.25.8	1
quay.io/bentoml/yatai-image-builder :3.0.44	01d8538c4f48	stdlib@go1.24.13	1.25.8	1
quay.io/brancz/kube-rbac-proxy :v0.15.0	2c7b120590cb	stdlib@go1.21.3	1.25.8	1
quay.io/brancz/kube-rbac-proxy :v0.16.0	2c8f8c357ff8	stdlib@go1.21.7	1.25.8	1
quay.io/brancz/kube-rbac-proxy :v0.18.0	754ab2a723c8	stdlib@go1.22.4	1.25.8	1
quay.io/brancz/kube-rbac-proxy :v0.20.1	f5fbfec6a2b2	stdlib@go1.25.4	1.25.8	1
quay.io/cephcsi/cephcsi :v3.5.1	28a674af1df2	stdlib@go1.17.5	1.25.8	1
quay.io/cephcsi/ceph-csi-operator :v0.5.0	14fe2f1bffc3	stdlib@go1.25.7	1.25.8	1
quay.io/chriscowley/openldap_exporter :v2.1.1	6c308e9732e1	stdlib@go1.15.7	1.25.8	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	stdlib@go1.21.7	1.25.8	1
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	stdlib@go1.24.2	1.25.8	1
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	stdlib@go1.25.4	1.25.8	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	stdlib@go1.24.7	1.25.8	1
quay.io/cilium/hubble-relay :v1.18.2	6079308ee15e	stdlib@go1.24.7	1.25.8	1
quay.io/cilium/hubble-ui-backend :v0.13.3	db1454e45dc3	stdlib@go1.24.5	1.25.8	1
quay.io/cilium/operator-generic :v1.15.1	819c7281f5a4	stdlib@go1.21.6	1.25.8	1
quay.io/cilium/operator-generic :v1.18.2	cb4e4ffc5789	stdlib@go1.24.7	1.25.8	1
quay.io/cilium/tetragon :v1.1.0	96fac2482898	stdlib@go1.22.2	1.25.8	1