CVE-2026-25679

High

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,750; of 17,803 indexed, latest versions
Container images: 4,276; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 3,750 of 17,803 indexed charts deploy, on 4,276 images.

Affected package	Affected versions	Fixed in	Images
go-rpm-macrosrpm	3.2.0-3.el9, 3.6.0-13.el9_7	0:3.6.0-14.el9_7	4
git-lfsrpm	2.13.3-3.el8_6	0:2.13.3-3.el8_6.7	1
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+176 more	1.25.8	4,273

OSV records: RHSA-2026:20582 RHSA-2026:8841 RLSA-2026:8841 GO-2026-4601
Also known as: BIT-golang-2026-25679

Charts affected

3,750 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stackprometheus-community

91.4.1

1 of 6 See more

kube-prometheus-stack prometheus-community 91.4.1

1 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	stdlib@go1.25.7	1.25.8

Open the chart page →

682

argo-cdargo

10.9.2

2 of 3 See more

argo-cd argo 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	stdlib@go1.25.6	1.25.8
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.25.8

Open the chart page →

3,032

jenkinsjenkinsci

5.9.63

1 of 2 See more

jenkins jenkinsci 5.9.63

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.568.3-jdk21	c1e4c349365f	stdlib@go1.25.3	1.25.8

Open the chart page →

2,557

giteagitea

12.7.0

2 of 4 See more

gitea gitea 12.7.0

2 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	stdlib@go1.25.0	1.25.8
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	stdlib@go1.24.6	1.25.8

Open the chart page →

8,972

nfs-subdir-external-provisionernfs-subdir-external-provisioner

4.0.18

1 of 1 See more

nfs-subdir-external-provisioner nfs-subdir-external-provisioner 4.0.18

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner :v4.0.2	63d5e04551ec	stdlib@go1.15	1.25.8

Open the chart page →

2,745

artifact-hubartifact-hub

1.23.0

4 of 7 See more

artifact-hub artifact-hub 1.23.0

4 of the 7 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	stdlib@go1.25.7	1.25.8
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.8
artifacthub/scanner :v1.23.0	2d8365601f0e	stdlib@go1.25.7	1.25.8
artifacthub/tracker :v1.23.0	5368d21a6e5c	stdlib@go1.24.4	1.25.8

Open the chart page →

11,020

prometheus-blackbox-exporterprometheus-community

11.18.0

1 of 1 See more

prometheus-blackbox-exporter prometheus-community 11.18.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/prometheus/blackbox-exporter :v0.28.0	e753ff9f3fc4	stdlib@go1.25.5	1.25.8

Open the chart page →

600

deschedulerdescheduler

0.36.0

1 of 1 See more

descheduler descheduler 0.36.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/descheduler/descheduler :v0.36.0	7ca92c0a7b4f	stdlib@go1.26.0	1.25.8

Open the chart page →

583

argo-cdargo-cd-oci

10.9.2

2 of 3 See more

argo-cd argo-cd-oci 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	stdlib@go1.25.6	1.25.8
quay.io/argoproj/argocd :v3.5.3	dd3f47d5a5e4	stdlib@go1.24.0	1.25.8

Open the chart page →

3,032

jupyterhubjupyterhub

4.4.2

2 of 7 See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/k8s-image-awaiter :4.4.2	c4df1176d152	stdlib@go1.23.12	1.25.8
registry.k8s.io/kube-scheduler :v1.30.14	74a5cf9cfa9f	stdlib@go1.23.10	1.25.8

Open the chart page →

8,295

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.8

Open the chart page →

4,696

natsnats

2.14.6

1 of 3 See more

nats nats 2.14.6

1 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	stdlib@go1.25.6	1.25.8

Open the chart page →

2,308

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	stdlib@go1.25.0	1.25.8

Open the chart page →

1,775

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	stdlib@go1.20.5	1.25.8

Open the chart page →

30,645

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	stdlib@go1.21.8	1.25.8

Open the chart page →

11,436

falcofalcosecurity

9.1.0

1 of 3 See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	stdlib@go1.25.7	1.25.8

Open the chart page →

5,523

nfs-server-provisionerkvaps

1.8.0

1 of 1 See more

nfs-server-provisioner kvaps 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfs-provisioner :v4.0.8	c825f3d5e28b	stdlib@go1.16.2	1.25.8

Open the chart page →

2,315

chartmuseumchartmuseum

3.10.4

1 of 1 See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	stdlib@go1.24.1	1.25.8

Open the chart page →

1,513

rook-cephrook

1.20.7

1 of 2 See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
rook/ceph :v1.20.7	2f970c425617	stdlib@go1.22.10	1.25.8

Open the chart page →

1,472

argo-eventsargo

2.4.27

1 of 1 See more

argo-events argo 2.4.27

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argo-events :v1.9.11	fa07b2c9ece6	stdlib@go1.25.6	1.25.8

Open the chart page →

1,093

grafanagrafana-community

13.2.5

1 of 1 See more

grafana grafana-community 13.2.5

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
grafana/grafana :13.2.2-distroless	69a5d2d957ca	stdlib@go1.25.7	1.25.8

Open the chart page →

449

aws-node-termination-handleraws

0.21.0

1 of 1 See more

aws-node-termination-handler aws 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-ec2/aws-node-termination-handler :v1.19.0	844478ebd5b8	stdlib@go1.19.5	1.25.8

Open the chart page →

1,445

openebsopenebs

4.6.1

19 of 35 See more

openebs openebs 4.6.1

19 of the 35 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	stdlib@go1.24.1	1.25.8
grafana/loki :3.4.2	58a6c186ce78	stdlib@go1.23.6	1.25.8
library/nats :2.9.17-alpine	1a7b320b2942	stdlib@go1.19.9	1.25.8
natsio/nats-server-config-reloader :0.10.1	e414cc7e6f59	stdlib@go1.19.4	1.25.8
natsio/prometheus-nats-exporter :0.11.0	31c02aac089a	stdlib@go1.20.3	1.25.8
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	stdlib@go1.24.5	1.25.8
openebs/lvm-driver :1.10.1	41f73aba7f31	stdlib@go1.24.7	1.25.8
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	stdlib@go1.25.0	1.25.8
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.8
quay.io/prometheus-operator/prometheus-config-reloader :v0.81.0	959d47672fbf	stdlib@go1.23.7	1.25.8
registry.k8s.io/sig-storage/csi-attacher :v4.8.1	69888dba5815	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.13.0	d7138bcc3aa5	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v5.2.0	d5e46da8aff7	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v6.1.0	e5900dc98b0d	stdlib@go1.24.6	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v2.0.0	4a95d94e57ad	stdlib@go1.24.6	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v1.13.2	8ddd178ba5d0	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/csi-snapshotter :v8.2.0	dd788d79cf4c	stdlib@go1.23.1	1.25.8
registry.k8s.io/sig-storage/snapshot-controller :v8.2.0	9dade8f2f3ab	stdlib@go1.23.1	1.25.8

Open the chart page →

24,469

prometheus-adapterprometheus-community

5.3.0

1 of 1 See more

prometheus-adapter prometheus-community 5.3.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.25.8

Open the chart page →

945

open-webuiopen-webui

16.5.0

1 of 4 See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine3.21	02419de7eddf	stdlib@go1.18.2	1.25.8

Open the chart page →

1,433

actions-runner-controlleractions-runner-controller

0.23.7

2 of 2 See more

actions-runner-controller actions-runner-controller 0.23.7

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
summerwind/actions-runner-controller :v0.27.6	2128f81dbede	stdlib@go1.20.7	1.25.8
quay.io/brancz/kube-rbac-proxy :v0.13.1	738c854322f5	stdlib@go1.19.1	1.25.8

Open the chart page →

2,890

aws-for-fluent-bitaws

0.2.0

1 of 1 See more

aws-for-fluent-bit aws 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
public.ecr.aws/aws-observability/aws-for-fluent-bit :3.2.1	a480a1241720	stdlib@go1.25.6	1.25.8

Open the chart page →

252

vpafairwinds-stable

5.1.0

1 of 4 See more

vpa fairwinds-stable 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20230312-helm-chart-4.5.2-28-g66a760794	01d181618f27	stdlib@go1.20.1	1.25.8

Open the chart page →

1,233

terraformhashicorp

1.1.2

1 of 1 See more

terraform hashicorp 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
hashicorp/terraform-k8s :1.1.2	b19857bab620	stdlib@go1.18.8	1.25.8

Open the chart page →

2,060

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	stdlib@go1.23.10	1.25.8

Open the chart page →

3,166

dagsterdagster

1.13.23

1 of 5 See more

dagster dagster 1.13.23

1 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :14.6	f565573d74ae	stdlib@go1.18.2	1.25.8

Open the chart page →

3,562

zabbixzabbix-community

7.1.0

3 of 5 See more

zabbix zabbix-community 7.1.0

3 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.8
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	stdlib@go1.24.10	1.25.8
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	stdlib@go1.24.10	1.25.8

Open the chart page →

13,987

keycloakcloudpirates-keycloak

0.21.37

2 of 3 See more

keycloak cloudpirates-keycloak 0.21.37

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :18.0	073e7c8b84e2	stdlib@go1.24.6	1.25.8
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.8

Open the chart page →

4,503

graylogkong-z

3.0.33

1 of 5 See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	stdlib@go1.24.2	1.25.8

Open the chart page →

2,723

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	stdlib@go1.25.7	1.25.8
1password/connect-sync :1.8.2	6297ca6136c0	stdlib@go1.25.7	1.25.8

Open the chart page →

2,610

node-problem-detectordeliveryhero

2.4.1

1 of 1 See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	stdlib@go1.25.5	1.25.8

Open the chart page →

2,009

miniominio-official

5.4.0

2 of 2 See more

minio minio-official 5.4.0

2 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/minio/mc :RELEASE.2024-11-21T17-21-54Z	993e8c454a7e	stdlib@go1.23.4	1.25.8
quay.io/minio/minio :RELEASE.2024-12-18T13-15-44Z	1dce27c494a1	stdlib@go1.23.4	1.25.8

Open the chart page →

2,614

openfaasopenfaas

15.0.13

3 of 6 See more

openfaas openfaas 15.0.13

3 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.25.8
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	stdlib@go1.24.13	1.25.8
ghcr.io/openfaas/queue-worker :0.14.2	c18da04d70f6	stdlib@go1.23.4	1.25.8

Open the chart page →

3,578

jaeger-operatorjaegertracing

2.57.0

1 of 1 See more

jaeger-operator jaegertracing 2.57.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-operator :1.61.0	3f036ec60e61	stdlib@go1.22.3	1.25.8

Open the chart page →

568

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	stdlib@go1.18.2	1.25.8

Open the chart page →

5,570

postgrescloudpirates-postgres

0.20.5

1 of 1 See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :18.6	4ef4dbc939d6	stdlib@go1.24.6	1.25.8

Open the chart page →

1,686

vault-secrets-operatorhashicorp

1.5.1

1 of 2 See more

vault-secrets-operator hashicorp 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
quay.io/brancz/kube-rbac-proxy :v0.18.1	e6a323504999	stdlib@go1.23.0	1.25.8

Open the chart page →

1,061

linkerd-vizlinkerd2

30.12.11

1 of 5 See more

linkerd-viz linkerd2 30.12.11

1 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
prom/prometheus :v2.48.0	b440bc0e8aa5	stdlib@go1.21.4	1.25.8

Open the chart page →

1,384

rocketchatrocketchat-server

7.0.2

5 of 12 See more

rocketchat rocketchat-server 7.0.2

5 of the 12 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
bitnamilegacy/mongodb :6.0.10-debian-11-r8	42319decb591	stdlib@go1.19.12	1.25.8
bitnamilegacy/mongodb-exporter :0.39.0-debian-11-r106	de7256c7adcd	stdlib@go1.20.7	1.25.8
natsio/nats-box :0.19.2	8031d190c7ee	stdlib@go1.25.2	1.25.8
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	stdlib@go1.25.5	1.25.8
natsio/prometheus-nats-exporter :0.18.0	02469dc907bc	stdlib@go1.24.6	1.25.8

Open the chart page →

12,290

zammadzammad

19.0.0

1 of 5 See more

zammad zammad 19.0.0

1 of the 5 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/postgres :18.4	a02db8cac496	stdlib@go1.24.6	1.25.8

Open the chart page →

6,539

influxdb2influxdata

2.1.2

1 of 1 See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
library/influxdb :2.7.4-alpine	a10d46445d68	stdlib@go1.21.3	1.25.8

Open the chart page →

2,109

solr-operatorapache-solr

0.9.1

2 of 3 See more

solr-operator apache-solr 0.9.1

2 of the 3 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
apache/solr-operator :v0.9.1	4db34508137f	stdlib@go1.22.12	1.25.8
pravega/zookeeper-operator :0.2.15	b2bc4042fdd8	stdlib@go1.19.7	1.25.8

Open the chart page →

2,944

ceph-csi-cephfsceph-csi

3.17.1

5 of 6 See more

ceph-csi-cephfs ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.8

Open the chart page →

4,143

ceph-csi-rbdceph-csi

3.17.1

5 of 6 See more

ceph-csi-rbd ceph-csi 3.17.1

5 of the 6 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.11.0	b74b05b39501	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.16.0	ab482308a492	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v6.2.0	6be9f63ca4ca	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v2.1.0	589e525cddef	stdlib@go1.25.7	1.25.8
registry.k8s.io/sig-storage/csi-snapshotter :v8.5.0	da081c27e8a6	stdlib@go1.25.7	1.25.8

Open the chart page →

4,143

chaos-meshchaos-mesh

2.8.4

1 of 4 See more

chaos-mesh chaos-mesh 2.8.4

1 of the 4 container images this version deploys carry CVE-2026-25679.

Container image	Digest	Package	Fixed in
ghcr.io/chaos-mesh/chaos-coredns :v0.2.8	38bfdf5e3774	stdlib@go1.25.5	1.25.8

Open the chart page →

6,674

Container images carrying it

4,276 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/lunarway/snyk_exporter :v1.11.1	55e5cc5aaa0a	stdlib@go1.17.7	1.25.8	1
quay.io/manusa/kubernetes_mcp_server :v0.0.47	150f76e844d9	stdlib@go1.24.5	1.25.8	1
quay.io/maximilianopizarro/integration-console-plugin :v0.8.2	270ed23a9afd	stdlib@go1.22.9	1.25.8	1
quay.io/maxiv/mortalgpu :1.3.7	e1c5c194bbf0	stdlib@go1.26.0	1.25.8	1
quay.io/metallb/controller :v0.10.2	21164241c045	stdlib@go1.16.5	1.25.8	1
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	stdlib@go1.21.8	1.25.8	1
quay.io/metallb/speaker :v0.14.4	37611bde45a2	stdlib@go1.21.8	1.25.8	1
quay.io/metallb/speaker :v0.10.2	58cb99053bb3	stdlib@go1.16.5	1.25.8	1
quay.io/minio/csi-node-driver-registrar	c805fdc16676	stdlib@go1.20.3	1.25.8	1
quay.io/minio/csi-provisioner	7b5c070ec70d	stdlib@go1.20.3	1.25.8	1
quay.io/minio/csi-resizer	819f68a4daf7	stdlib@go1.20.3	1.25.8	1
quay.io/minio/directpv :v4.0.8	4560083eb77d	stdlib@go1.21.0	1.25.8	1
quay.io/minio/livenessprobe	f3bc9a84f149	stdlib@go1.20.3	1.25.8	1
quay.io/minio/mc :RELEASE.2024-01-11T05-49-32Z	026ae522febc	stdlib@go1.21.5	1.25.8	1
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	stdlib@go1.19.2	1.25.8	1
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	stdlib@go1.18.6	1.25.8	1
quay.io/minio/mc :RELEASE.2024-04-29T09-56-05Z	c574fac67f60	stdlib@go1.21.9	1.25.8	1
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	stdlib@go1.21.5	1.25.8	1
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	stdlib@go1.21.5	1.25.8	1
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	stdlib@go1.18.6	1.25.8	1
quay.io/minio/minio :RELEASE.2024-06-04T19-20-08Z	c6b68f158628	stdlib@go1.22.3	1.25.8	1
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	stdlib@go1.19.2	1.25.8	1
quay.io/minio/operator :v7.1.1	cd587f60c43d	stdlib@go1.24.2	1.25.8	1
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	stdlib@go1.19.13	1.25.8	1
quay.io/mittwald/harbor-operator :v1.6.3	65a38180e27a	stdlib@go1.22.2	1.25.8	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	stdlib@go1.24.4	1.25.8	1
quay.io/mittwald/kubernetes-replicator :v2.11.1	3185496b3af3	stdlib@go1.24.1	1.25.8	1
quay.io/mittwald/kubernetes-replicator :v2.12.4	5dc9fc5ff59a	stdlib@go1.24.13	1.25.8	1
quay.io/mittwald/kubernetes-replicator :v2.10.0	b79e77d421d0	stdlib@go1.20.14	1.25.8	1
quay.io/mittwald/kubernetes-replicator :v2.9.1	baf5f784398b	stdlib@go1.20.5	1.25.8	1
quay.io/mittwald/kubernetes-secret-generator :v3.4.1	465b8e6d0462	stdlib@go1.23.1	1.25.8	1
quay.io/mittwald/servicegateway :v2.3.3	fa948df30d44	stdlib@go1.21.5	1.25.8	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	stdlib@go1.13.15	1.25.8	1
quay.io/mongodb/mongodb-enterprise-operator-ubi :1.33.0	b05101723412	stdlib@go1.24.2	1.25.8	1
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	stdlib@go1.14.10	1.25.8	1
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	stdlib@go1.21.4	1.25.8	1
quay.io/nmstate/kubernetes-nmstate-operator :v0.87.0	4dce694f01ea	stdlib@go1.26.0	1.25.8	1
quay.io/nuclio/dashboard :1.17.8-amd64	b5f5bd4efbee	stdlib@go1.23.8	1.25.8	1
quay.io/oauth2-proxy/oauth2-proxy :v7.13.0	56e3daedf765	stdlib@go1.25.4	1.25.8	1
quay.io/oauth2-proxy/oauth2-proxy :v7.14.3	68336da945bd	stdlib@go1.25.7	1.25.8	1
quay.io/oauth2-proxy/oauth2-proxy :v6.1.1	791aef35b8d1	stdlib@go1.14.4	1.25.8	1
quay.io/oauth2-proxy/oauth2-proxy :v7.7.0	9ed7eaf72050	stdlib@go1.22.8	1.25.8	1
quay.io/oauth2-proxy/oauth2-proxy :v7.1.3	ecd26b74a01f	stdlib@go1.16	1.25.8	1
quay.io/oauth2-proxy/oauth2-proxy :v7.2.1	febeebebe762	stdlib@go1.17.5	1.25.8	1
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	stdlib@go1.20.10	1.25.8	1
quay.io/open-cluster-management/cluster-proxy :v0.12.0	35f9c3ad644a	stdlib@go1.22.4	1.25.8	1
quay.io/open-cluster-management/dynamic-scoring-addon :latest	7e571a08ec1a	stdlib@go1.24.13	1.25.8	1
quay.io/open-cluster-management/dynamic-scoring-controller :latest	587f5bc8f2ed	stdlib@go1.24.13	1.25.8	1
quay.io/open-cluster-management/kueue-addon :v0.1.4	7f728514fead	stdlib@go1.24.6	1.25.8	1
quay.io/open-cluster-management/multicluster-mesh-addon :latest	3e010e1188f1	stdlib@go1.19.13	1.25.8	1