StackRadar

CVE-2026-25679

High

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,752
of 17,792 indexed, latest versions
Container images
4,275
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 3,752 of 17,792 indexed charts deploy, on 4,275 images.

Affected packageAffected versionsFixed inImages
go-rpm-macrosrpm3.2.0-3.el9, 3.6.0-13.el9_70:3.6.0-14.el9_74
git-lfsrpm2.13.3-3.el8_60:2.13.3-3.el8_6.71
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+175 more1.25.84,272
OSV records
RHSA-2026:20582RHSA-2026:8841RLSA-2026:8841GO-2026-4601
Also known as
BIT-golang-2026-25679

Charts affected

3,752 by stars
ChartLatestAffected imagesRadar Score
zookeeper-exporterzookeeper-exporter0.1.01 of 1See more

zookeeper-exporter zookeeper-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-25679.

Container imageDigestPackageFixed in
dabealu/zookeeper-exporter:latest86106fec315f
stdlib@go1.14.15
1.25.8

Open the chart page →

1,248
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-25679.

Container imageDigestPackageFixed in
library/postgres:18.4-alpine3.249a8afca54e78
stdlib@go1.24.6
1.25.8

Open the chart page →

7,936

Container images carrying it

4,275 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.25.8
89
library/postgres:18:18.6:18.6-trixie:latest4ef4dbc939d6
stdlib@go1.24.6
1.25.8
69
library/mysql:5.74bc6bc963e6d
stdlib@go1.18.2
1.25.8
22
library/postgres:16.15-alpine:16-alpinecf78e76683b9
stdlib@go1.24.6
1.25.8
17
library/postgres:18.6-alpine:18-alpine:alpined3e1620b530c
stdlib@go1.24.6
1.25.8
17
library/mysql:8:8.4:8.4.11b3b90af2a655
stdlib@go1.24.6
1.25.8
16
minio/minio:latest:RELEASE.2025-09-07T16-13-09Z14cea493d9a3
stdlib@go1.24.6
1.25.8
15
jimmidyson/configmap-reload:v0.5.0904d08e9f701
stdlib@go1.15.7
1.25.8
14
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
stdlib@go1.18.10
1.25.8
13
jenkins/jenkins:2.568.3-jdk21:2.568.3-lts-jdk21:ltsc1e4c349365f
stdlib@go1.25.3
1.25.8
13
library/postgres:17-alpine18cfe3ef5e68
stdlib@go1.24.6
1.25.8
13
ghcr.io/appscode/kubectl-nonroot:1.340b26892cec94
stdlib@go1.24.13
1.25.8
13
grafana/grafana:latestf772d434e8fa
stdlib@go1.25.7
1.25.8
12
library/postgres:16f1c3376c26f2
stdlib@go1.24.6
1.25.8
12
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.18.01545919b72e3
stdlib@go1.25.5
1.25.8
12
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
stdlib@go1.24.6
1.25.8
11
library/mongo:8:8.3.8:latest5211c51171f5
stdlib@go1.24.6
1.25.8
11
library/mysql:8.0.28fc77d54cacef
stdlib@go1.16.7
1.25.8
11
library/postgres:15-alpinefe0737ba566a
stdlib@go1.24.6
1.25.8
11
jwilder/dockerize:latestf94fb59fb4f6
stdlib@go1.25.5
1.25.8
10
library/mongo:5.0.6-focal8e70544b6c76
stdlib@go1.16.7
1.25.8
10
library/postgres:1767f41722b7a8
stdlib@go1.24.6
1.25.8
10
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
stdlib@go1.22.5
1.25.8
9
library/rabbitmq:3.13-management:3-managemente582c0bc7766
stdlib@go1.22.2
1.25.8
8
prom/pushgateway:v1.4.2a684e7c830a4
stdlib@go1.16.9
1.25.8
8
quay.io/prometheus/alertmanager:v0.27.0e13b6ed5cb92
stdlib@go1.21.7
1.25.8
8
quay.io/prometheus/node-exporter:v1.0.1cf66a6bbd573
stdlib@go1.14.4
1.25.8
8
library/postgres:14156f0b253fd6
stdlib@go1.24.6
1.25.8
7
osixia/openldap:1.5.018742e9c449c
stdlib@go1.15.5
1.25.8
7
wurstmeister/kafka:latest2d4bbf9cc83d
stdlib@go1.17.10
1.25.8
7
ghcr.io/appscode/b3:v2026.9.1176d28575b71c
stdlib@go1.25.3
1.25.8
7
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
stdlib@go1.24.4
1.25.8
7
quay.io/minio/mc:RELEASE.2024-11-21T17-21-54Z993e8c454a7e
stdlib@go1.23.4
1.25.8
7
quay.io/minio/minio:RELEASE.2024-12-18T13-15-44Z1dce27c494a1
stdlib@go1.23.4
1.25.8
7
quay.io/thanos/thanos:v0.37.24ec6df40fdb9
stdlib@go1.23.4
1.25.8
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.15.011f199f6bec4
stdlib@go1.24.6
1.25.8
7
registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.16.0ab482308a492
stdlib@go1.25.7
1.25.8
7
registry.k8s.io/sig-storage/csi-resizer:v2.1.0589e525cddef
stdlib@go1.25.7
1.25.8
7
registry.k8s.io/sig-storage/csi-resizer:v1.14.05e7cbb63fd49
stdlib@go1.24.2
1.25.8
7
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
stdlib@go1.19.12
1.25.8
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
stdlib@go1.25.0
1.25.8
6
clastix/kubectl:v1.3122918a06c253
stdlib@go1.22.5
1.25.8
6
grafana/grafana:7.0.3d72946c8e5d5
stdlib@go1.14.3
1.25.8
6
library/mariadb:10:10.11ce66c7be32a0
stdlib@go1.24.6
1.25.8
6
library/mysql:9.7.2257388edf9c8
stdlib@go1.24.6
1.25.8
6
library/postgres:159b1d34adbce1
stdlib@go1.24.6
1.25.8
6
library/postgres:18.4a02db8cac496
stdlib@go1.24.6
1.25.8
6
library/registry:2:2.8.3a3d8aaa63ed8
stdlib@go1.20.8
1.25.8
6
minio/mc:latest:RELEASE.2025-08-13T08-35-41Za7fe349ef4bd
stdlib@go1.24.6
1.25.8
6
quay.io/devtron/authenticator:e414faff-393-13273c8958d9533c7
stdlib@go1.18.2
1.25.8
6

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.