StackRadar

CVE-2026-27136

Unscored

Advisory

Published 22 May 2026In the index since 5 Sept 2026
Severity
Unscored
worst across findings
CVSS
—
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,078
of 17,821 indexed, latest versions
Container images
3,727
deployed by those charts
Fix available
1 of 1
affected package

Invoking duplicate attributes can cause XSS in golang.org/x/net/html

Carried by container images the latest versions of 3,078 of 17,821 indexed charts deploy, on 3,727 images.

Affected packageAffected versionsFixed inImages
golang.org/x/netgolangv0.0.0-20170114055629-f2499483f923, v0.0.0-20180301190904-22ae77b79946, v0.0.0-20180811021610-c39426892332, v0.0.0-20180906233101-161cd47e91fd+220 more0.55.03,727
OSV records
GO-2026-5030

Charts affected

3,078 by stars
ChartLatestAffected imagesRadar Score
seaweedfs-operatorseaweedfs-operatorVerified publisher1.5.82 of 3See more

seaweedfs-operator seaweedfs-operator 1.5.8

2 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/nnstd/seaweedfs-operator:1.43ebe2fd253f6
golang.org/x/net@v0.42.0
0.55.0
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v20231011-8b53cabe0a7943503b45d
golang.org/x/net@v0.16.0
0.55.0

Open the chart page →

2,099
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
leonardomulticloud/webhook:v1.0.0d119918900e8
golang.org/x/net@v0.26.0
0.55.0

Open the chart page →

5,509
secrets-bridgesecrets-bridge0.2.01 of 1See more

secrets-bridge secrets-bridge 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/haydercyber/secrets-bridge:0.2.04709f1bb3039
golang.org/x/net@v0.47.0
0.55.0

Open the chart page →

387
aws-secretssecretsprovider0.1.01 of 1See more

aws-secrets secretsprovider 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
public.ecr.aws/aws-secrets-manager/secrets-store-csi-driver-provider-aws:1.0.r1-10-g1942553-2021.06.04.00.07-linux-amd64b32c99e7bc45
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0

Open the chart page →

2,221
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
golang.org/x/net@v0.39.0
0.55.0

Open the chart page →

1,150
secret-syncsecret-syncVerified publisher0.1.111 of 1See more

secret-sync secret-sync 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
csepulvedab/secret-sync:0.5227a6f2b0ff8
golang.org/x/net@v0.0.0-20220722155237-a158d28d115b
0.55.0

Open the chart page →

1,443
cloudflaredsectionmeVerified publisher2022.3.41 of 1See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/giantswarm/cloudflared:2022.3.40b20d2fe9a6b
golang.org/x/net@v0.0.0-20220114011407-0dd24b26b47d
0.55.0

Open the chart page →

2,441
security-smellssecurity-smells0.1.01 of 1See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
durellirsd/security-smells-api:v17398aca4fc2e
golang.org/x/net@v0.23.0
0.55.0

Open the chart page →

1,425
seldon-core-analyticsseldon1.17.13 of 8See more

seldon-core-analytics seldon 1.17.1

3 of the 8 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
grafana/grafana:7.0.3d72946c8e5d5
golang.org/x/net@v0.0.0-20200202094626-16171245cfb2
0.55.0
prom/alertmanager:v0.20.07e4e9f7a0954
golang.org/x/net@v0.0.0-20190724013045-ca1201d0de80
0.55.0
prom/prometheus:v2.18.15880ec936055
golang.org/x/net@v0.0.0-20200421231249-e086a090c8fd
0.55.0

Open the chart page →

10,752
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
golang.org/x/net@v0.47.0
0.55.0

Open the chart page →

1,869
s3managersergeyshevch0.1.01 of 1See more

s3manager sergeyshevch 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/sergeyshevch/s3manager:feature_refactoringff59fcdf44eb
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
0.55.0

Open the chart page →

2,163
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
golang.org/x/net@v0.21.0
0.55.0

Open the chart page →

3,336
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
golang.org/x/net@v0.33.0
0.55.0

Open the chart page →

3,355
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
golang.org/x/net@v0.12.0
0.55.0

Open the chart page →

4,352
rdpgwsergiotocaliniVerified publisher1.0.01 of 1See more

rdpgw sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
bolkedebruin/rdpgw:masterc0dc0589373a
golang.org/x/net@v0.48.0
0.55.0

Open the chart page →

687
service-binding-operatorservice-binding-operator-helm-chart1.4.11 of 1See more

service-binding-operator service-binding-operator-helm-chart 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/redhat-developer/servicebinding-operatordigest-pinned16286ac84ddd
golang.org/x/net@v0.17.0
0.55.0

Open the chart page →

796
service-exampleservice-example-10.1.01 of 7See more

service-example service-example-1 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
natsio/nats-box:0.13.3c507bd7e3831
golang.org/x/net@v0.4.0
0.55.0

Open the chart page →

9,147
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.28031d190c7ee
golang.org/x/net@v0.44.0
0.55.0

Open the chart page →

7,598
ccx-monitoringseveralnines0.6.215 of 7See more

ccx-monitoring severalnines 0.6.21

5 of the 7 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
golang.org/x/net@v0.46.0
0.55.0
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
golang.org/x/net@v0.40.0
0.55.0
victoriametrics/vmalert:v1.96.0150cd08fde94
golang.org/x/net@v0.19.0
0.55.0
quay.io/prometheus/alertmanager:v0.26.0361db356b330
golang.org/x/net@v0.10.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.10.1af8220f53493
golang.org/x/net@v0.17.0
0.55.0

Open the chart page →

7,746
apache-shardingsphere-operator-chartsshardingsphere0.3.01 of 2See more

apache-shardingsphere-operator-charts shardingsphere 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
apache/shardingsphere-operator:0.3.0ffe68d6b99c0
golang.org/x/net@v0.10.0
0.55.0

Open the chart page →

1,699
operatorshopware-storeVerified publisher1.8.11 of 1See more

operator shopware-store 1.8.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/shopware/shopware-operator:1.8.187db0eda7a03
golang.org/x/net@v0.38.0
0.55.0

Open the chart page →

571
shopwareshopware-storeVerified publisher2.1.21 of 5See more

shopware shopware-store 2.1.2

1 of the 5 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
golang.org/x/net@v0.19.0
0.55.0

Open the chart page →

4,140
bffshortlink0.2.11 of 1See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
golang.org/x/net@v0.49.0
0.55.0

Open the chart page →

1,699
linkshortlink0.7.31 of 1See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
golang.org/x/net@v0.49.0
0.55.0

Open the chart page →

1,683
nut-exportersi-gitops0.5.01 of 1See more

nut-exporter si-gitops 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
golang.org/x/net@v0.35.0
0.55.0

Open the chart page →

812
alertmanagersignoz0.5.21 of 1See more

alertmanager signoz 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
signoz/alertmanager:0.5.07bc7de2e33c2
golang.org/x/net@v0.0.0-20210726213435-c6fcb2dbf985
0.55.0

Open the chart page →

2,182
ctlogsigstoreVerified publisher0.2.683 of 4See more

ctlog sigstore 0.2.68

3 of the 4 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/createctconfig:v0.7.313a061734c5be
golang.org/x/net@v0.46.0
0.55.0
ghcr.io/sigstore/scaffolding/createtree:v0.7.31e5232e8c9122
golang.org/x/net@v0.46.0
0.55.0
ghcr.io/sigstore/scaffolding/ct_server:v0.7.3166664ba563e7
golang.org/x/net@v0.46.0
0.55.0

Open the chart page →

2,752
sigstore-probersigstoreVerified publisher0.3.11 of 1See more

sigstore-prober sigstore 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/sigstore/sigstore-probers/prober:v1.0.1d1e914e6d6b9
golang.org/x/net@v0.54.0
0.55.0

Open the chart page →

431
trilliansigstoreVerified publisher0.3.201 of 5See more

trillian sigstore 0.3.20

1 of the 5 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/createdbdigest-pinned3cee6c78973b
golang.org/x/net@v0.46.0
0.55.0

Open the chart page →

2,758
tufsigstoreVerified publisher0.1.321 of 1See more

tuf sigstore 0.1.32

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/sigstore/scaffolding/serverdigest-pinnedae8eb69c7b70
golang.org/x/net@v0.46.0
0.55.0

Open the chart page →

768
counter-dhlsikademo0.3.01 of 3See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ondrejsika/counter:latestd95eaeee2172
golang.org/x/net@v0.46.0
0.55.0

Open the chart page →

4,561
keycloak-configuratorsikalabs0.2.01 of 1See more

keycloak-configurator sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
hashicorp/terraform:1.44dcb45513699
golang.org/x/net@v0.6.0
0.55.0

Open the chart page →

2,870
loggensikalabs0.1.01 of 1See more

loggen sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
sikalabs/slu:v0.72.07bd267f30247
golang.org/x/net@v0.19.0
0.55.0

Open the chart page →

2,347
metrics-generatorsikalabs0.2.01 of 1See more

metrics-generator sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
sikalabs/slu:v0.34.0fdc0c6711add
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.55.0

Open the chart page →

2,382
olmsikalabs0.3.01 of 2See more

olm sikalabs 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/operator-framework/olmdigest-pinned40d0363f4aa6
golang.org/x/net@v0.25.0
0.55.0

Open the chart page →

1,163
bytesafe-cesimcube1.0.41 of 3See more

bytesafe-ce simcube 1.0.4

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
bytesafe/bytesafe-ce:v1.0.4ee287384c005
golang.org/x/net@v0.10.0
0.55.0

Open the chart page →

1,502
keydbsinextraVerified publisher0.31.01 of 1See more

keydb sinextra 0.31.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/keydb:6.3.376a19ddc3626
golang.org/x/net@v0.0.0-20220425223048-2871e0cb64e4
0.55.0

Open the chart page →

2,172
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
golang.org/x/net@v0.41.0
0.55.0

Open the chart page →

2,883
system-upgrade-controllersinextraVerified publisher0.6.11 of 1See more

system-upgrade-controller sinextra 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
rancher/system-upgrade-controller:v0.19.234fa058fe453
golang.org/x/net@v0.48.0
0.55.0

Open the chart page →

253
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
registry.k8s.io/coredns/coredns:v1.13.294caebb89dcf
golang.org/x/net@v0.47.0
0.55.0

Open the chart page →

1,082
talos-backupsinextraVerified publisher0.1.21 of 1See more

talos-backup sinextra 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/siderolabs/talos-backup:v0.1.0-beta.203a71e140f1d
golang.org/x/net@v0.26.0
0.55.0

Open the chart page →

905
teamcitysinextraVerified publisher1.0.21 of 3See more

teamcity sinextra 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
library/docker:26.1-dinddd43b430341a
golang.org/x/net@v0.25.0
0.55.0

Open the chart page →

2,449
network-observerskupper-network-observerVerified publisher2.2.21 of 3See more

network-observer skupper-network-observer 2.2.2

1 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.11.3c0b857aead0d
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

618
skyhook-agentskyhookVerified publisher1.3.151 of 1See more

skyhook-agent skyhook 1.3.15

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/skyhook-io/skyhook-connector:v2.3.23deb8e4b1aaa
golang.org/x/net@v0.44.0
0.55.0

Open the chart page →

299
skyhook-connectorskyhookVerified publisher1.3.251 of 1See more

skyhook-connector skyhook 1.3.25

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
ghcr.io/skyhook-io/skyhook-connector:v2.5.56c4e3336600d
golang.org/x/net@v0.52.0
0.55.0

Open the chart page →

132
mimirskyloud-helm-chartsVerified publisher5.5.14 of 5See more

mimir skyloud-helm-charts 5.5.1

4 of the 5 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
grafana/mimir:r292-5f018727476e456c738
golang.org/x/net@v0.24.0
0.55.0
grafana/rollout-operator:v0.14.03409edfb45c7
golang.org/x/net@v0.21.0
0.55.0
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
golang.org/x/net@v0.15.0
0.55.0
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
golang.org/x/net@v0.15.0
0.55.0

Open the chart page →

10,822
tailscale-operatorskyloud-helm-chartsVerified publisher1.70.31 of 1See more

tailscale-operator skyloud-helm-charts 1.70.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
tailscale/k8s-operator:v1.70.08edd06cf5bac
golang.org/x/net@v0.26.0
0.55.0

Open the chart page →

1,046
skypilot-prometheus-serverskypilotVerified publisher0.11.13 of 3See more

skypilot-prometheus-server skypilot 0.11.1

3 of the 3 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
quay.io/prometheus-operator/prometheus-config-reloader:v0.83.078aec597d87a
golang.org/x/net@v0.40.0
0.55.0
quay.io/prometheus/prometheus:v3.4.19abc6cf6aea7
golang.org/x/net@v0.39.0
0.55.0
registry.k8s.io/kube-state-metrics/kube-state-metrics:v2.15.0db384bf43222
golang.org/x/net@v0.33.0
0.55.0

Open the chart page →

2,361
pritunl-zerosky-sailVerified publisher0.3.31 of 1See more

pritunl-zero sky-sail 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
pritunl/pritunl-zero:1.0.3648.460f2943e0d41b
golang.org/x/net@v0.42.0
0.55.0

Open the chart page →

660
config-connector-templaterslamdev0.0.51 of 1See more

config-connector-templater slamdev 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-27136.

Container imageDigestPackageFixed in
slamdev/config-connector-templater:0.0.3a234541c9fa8
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0

Open the chart page →

2,111

Container images carrying it

3,727 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/tikalk/resource-manager:latest7f21d50e69cb
golang.org/x/net@v0.0.0-20220127200216-cd36cc0744dd
0.55.0
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
golang.org/x/net@v0.40.0
0.55.0
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
golang.org/x/net@v0.49.0
0.55.0
1
ghcr.io/topolvm/pvc-autoresizer:0.21.1078d3527f38b
golang.org/x/net@v0.47.0
0.55.0
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
golang.org/x/net@v0.49.0
0.55.0
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
golang.org/x/net@v0.24.0
0.55.0
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
golang.org/x/net@v0.17.0
0.55.0
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
golang.org/x/net@v0.26.0
0.55.0
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
golang.org/x/net@v0.50.0
0.55.0
1
ghcr.io/twin/k8s-ttl-controller:v1.4.00525a7def93d
golang.org/x/net@v0.26.0
0.55.0
1
ghcr.io/twin/lighthouse:v0.0.45aeda2ea2ba2
golang.org/x/net@v0.23.0
0.55.0
1
ghcr.io/upbothq/upbot-operator:v0.0.20e5da24947c91
golang.org/x/net@v0.38.0
0.55.0
1
ghcr.io/upcloudltd/upcloud-csi5af91c663788
golang.org/x/net@v0.48.0
0.55.0
1
ghcr.io/usememos/memos:0.24.04723d86e6797
golang.org/x/net@v0.34.0
0.55.0
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
golang.org/x/net@v0.40.0
0.55.0
1
ghcr.io/v6d-io/v6d/kube-rbac-proxy:v0.13.0a2523c532c0c
golang.org/x/net@v0.0.0-20220624214902-1bab6f366d9e
0.55.0
1
ghcr.io/valkey-io/valkey-operator:v0.6.052a0f1ed0c03
golang.org/x/net@v0.49.0
0.55.0
1
ghcr.io/vojtechpastyrik/muthur:0.10.0b5a06a6e13b9
golang.org/x/net@v0.51.0
0.55.0
1
ghcr.io/vojtechpastyrik/muthur-collector:0.11.00a580fe3a032
golang.org/x/net@v0.51.0
0.55.0
1
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
golang.org/x/net@v0.47.0
0.55.0
1
ghcr.io/voyagermesh/gateway:v1.6.223f4da194134
golang.org/x/net@v0.47.0
0.55.0
1
ghcr.io/voyagermesh/gateway:v0.0.1a8a144f14889
golang.org/x/net@v0.8.0
0.55.0
1
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
golang.org/x/net@v0.27.0
0.55.0
1
ghcr.io/voyagermesh/voyager:v17.5.04964ceaf9d35
golang.org/x/net@v0.52.0
0.55.0
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
golang.org/x/net@v0.11.0
0.55.0
1
ghcr.io/vshn/stardog-userrole-operator:v0.3.04774237c9e86
golang.org/x/net@v0.19.0
0.55.0
1
ghcr.io/vvanouytsel/jetspotter:1.48.1ec0e17a94f61
golang.org/x/net@v0.39.0
0.55.0
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
golang.org/x/net@v0.37.0
0.55.0
1
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
golang.org/x/net@v0.47.0
0.55.0
1
ghcr.io/wjentner/k8s-db-backup-retention:v1.1.08027bb46d1f4
golang.org/x/net@v0.26.0
0.55.0
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
golang.org/x/net@v0.25.0
0.55.0
1
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
golang.org/x/net@v0.33.0
0.55.0
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
golang.org/x/net@v0.26.0
0.55.0
1
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
golang.org/x/net@v0.38.0
0.55.0
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
golang.org/x/net@v0.0.0-20220225172249-27dd8689420f
0.55.0
1
ghcr.io/xmv-solutions-gmbh/cert-manager-webhook-hcloud-zones:0.1.5a7a846bba3e8
golang.org/x/net@v0.52.0
0.55.0
1
ghcr.io/yeonghoo2/crashloop-operator:0.0.6565d1115e6bd
golang.org/x/net@v0.13.0
0.55.0
1
ghcr.io/zak905/kube-ecr-secrets-operator/controller-manager:0.2.11d078e45bac70
golang.org/x/net@v0.49.0
0.55.0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
golang.org/x/net@v0.25.0
0.55.0
1
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
golang.org/x/net@v0.23.0
0.55.0
1
ghcr.io/zeiss/natz-operator/account-server:0.9.5b380b5f17c3f
golang.org/x/net@v0.35.0
0.55.0
1
ghcr.io/zeiss/natz-operator/operator:0.9.5187007974540
golang.org/x/net@v0.35.0
0.55.0
1
ghcr.io/zeiss/typhoon/controller:0.2.34fdf4edfda45
golang.org/x/net@v0.35.0
0.55.0
1
ghcr.io/zeiss/typhoon/typhoon-webhook:0.2.378f9b82050bc
golang.org/x/net@v0.35.0
0.55.0
1
ghcr.io/zokeber/velero-notifications:0.0.176d84f6c4ce20
golang.org/x/net@v0.52.0
0.55.0
1
ghcr.io/zoriya/kyoo_transcoder:4.7.12dadea51a91e
golang.org/x/net@v0.33.0
0.55.0
1
ghcr.io/zufardhiyaulhaq/frp-operator:v0.11.0cd25ee354df2
golang.org/x/net@v0.23.0
0.55.0
1
mcr.microsoft.com/aks/kaito/gpu-provisioner:0.2.01204a7e948e9
golang.org/x/net@v0.20.0
0.55.0
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
golang.org/x/net@v0.0.0-20220802222814-0bcc04d9c69b
0.55.0
1
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
golang.org/x/net@v0.0.0-20201110031124-69a78807bb2b
0.55.0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.