CVE-2026-27139

Low

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.5; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,753; of 17,790 indexed, latest versions
Container images: 4,278; deployed by those charts
Fix available: 1 of 2; affected packages

FileInfo can escape from a Root in os

Carried by container images the latest versions of 3,753 of 17,790 indexed charts deploy, on 4,278 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+175 more	1.25.8	4,278
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-27139 GO-2026-4602
Also known as: BIT-golang-2026-27139

Charts affected

3,753 by stars

Chart

Latest

Affected images

Radar Score

conference-appsalaboy

1.0.0

4 of 7 See more

conference-app salaboy 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinned	ce9ce8293e4e	stdlib@go1.20.1	1.25.8
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinned	bb64bf14467d	stdlib@go1.20.1	1.25.8
salaboy/frontend-go-1739aa83b5e69d4ccb8a5615830ae66cdigest-pinned	1ff7c90845e4	stdlib@go1.20.1	1.25.8
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned	799c35f9f306	stdlib@go1.20.1	1.25.8

Open the chart page →

11,031

ntfysarab97

0.1.7

1 of 1 See more

ntfy sarab97 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
binwiederhier/ntfy :v2.6.2	83e2e43d9956	stdlib@go1.20.5	1.25.8

Open the chart page →

1,772

uptime-kumasb-helm-charts

0.4.0

1 of 1 See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.0.2	4c364ef96aad	stdlib@go1.20.5	1.25.8

Open the chart page →

38,166

scaleway-csiscaleway-charts

0.2.1

8 of 8 See more

scaleway-csi scaleway-charts 0.2.1

8 of the 8 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
scaleway/scaleway-csi :v0.3.4	11135998e31c	stdlib@go1.24.12	1.25.8
registry.k8s.io/sig-storage/csi-attacher :v4.9.0	5aaefc24f315	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.14.0	5244abbe87e0	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/csi-provisioner :v5.3.0	bb057f866177	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/csi-resizer :v1.14.0	5e7cbb63fd49	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/csi-snapshotter :v8.3.0	bc7be893ecc3	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/livenessprobe :v2.16.0	88092d100909	stdlib@go1.24.2	1.25.8
registry.k8s.io/sig-storage/snapshot-controller :v8.3.0	12c2da094b02	stdlib@go1.24.2	1.25.8

Open the chart page →

3,860

teamcityscalified-teamcity

2026.2.0

1 of 3 See more

teamcity scalified-teamcity 2026.2.0

1 of the 3 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
library/postgres :14	156f0b253fd6	stdlib@go1.24.6	1.25.8

Open the chart page →

1,649

schemaheroschemahero

1.4.0

1 of 1 See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
schemahero/schemahero-manager :0.22.1	1609e1a05cd3	stdlib@go1.24.6	1.25.8

Open the chart page →

2,184

scienceboxsciencebox

0.0.7

2 of 17 See more

sciencebox sciencebox 0.0.7

2 of the 17 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.19.0	3b57a34a7dfd	stdlib@go1.17.3	1.25.8
osixia/openldap :1.5.0	18742e9c449c	stdlib@go1.15.5	1.25.8

Open the chart page →

6,595

iopsciencemesh

0.4.0

1 of 2 See more

iop sciencemesh 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
cs3org/revad :v1.24.0	e80a4d67b352	stdlib@go1.20.4	1.25.8

Open the chart page →

4,060

secrethorsecrethor

1.1.2

1 of 1 See more

secrethor secrethor 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
bonovoo/secrethor :1.1.2	bb93b68fcd17	stdlib@go1.24.2	1.25.8

Open the chart page →

521

securosecuro

0.15.1

1 of 4 See more

securo securo 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
pgvector/pgvector :pg16	ccc6e83d6e35	stdlib@go1.24.6	1.25.8

Open the chart page →

3,539

selenosis-deployselenosis

2.1.3

4 of 4 See more

selenosis-deploy selenosis 2.1.3

4 of the 4 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
alcounit/browser-controller :v1.0.0	93b7cdbab14b	stdlib@go1.25.0	1.25.8
alcounit/browser-service :v0.0.9	4bd10defc324	stdlib@go1.25.0	1.25.8
alcounit/browser-ui :v0.0.9	6a977c92ef27	stdlib@go1.25.0	1.25.8
alcounit/selenosis :v2.1.1	d01a9dbbd943	stdlib@go1.25.0	1.25.8

Open the chart page →

1,579

karakeepself-hosters-by-night

2.5.1

1 of 1 See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/karakeep-app/karakeep :0.27.1	abd7d6b11b1b	stdlib@go1.23.10	1.25.8

Open the chart page →

5,220

sentry-k8ssentry-k8s

1.4.1

3 of 11 See more

sentry-k8s sentry-k8s 1.4.1

3 of the 11 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	stdlib@go1.24.6	1.25.8
library/redis :6.2.20-alpine	77697a75da9f	stdlib@go1.18.2	1.25.8
ghcr.io/getsentry/sentry :26.7.2	7c5052aa4e3c	stdlib@go1.19.8	1.25.8

Open the chart page →

16,599

sentry-operatorsentry-operator

1.2.5

1 of 1 See more

sentry-operator sentry-operator 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/agjmills/sentry-operator :v1.2.5	00389ef6a00e	stdlib@go1.24.2	1.25.8

Open the chart page →

463

vuiseriohub

1.0.6

2 of 3 See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
dserio83/velero-api :0.3.1	6b3d9115fee2	stdlib@go1.22.5	1.25.8
dserio83/velero-ui :0.3.1	b4e1ec6664d3	stdlib@go1.23.7	1.25.8

Open the chart page →

11,578

session-manager-agentsession-manager-agent

1.9.0

1 of 2 See more

session-manager-agent session-manager-agent 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-agent :1.9.0	b9f23db99051	stdlib@go1.23.11	1.25.8

Open the chart page →

486

session-manager-serversession-manager-server

0.1.0-gfu-dev

1 of 1 See more

session-manager-server session-manager-server 0.1.0-gfu-dev

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/session-manager-server :0.1.0-gfu-dev	b9537499ff9e	stdlib@go1.23.7	1.25.8

Open the chart page →

802

k8s-appliershlomibendavid

1.0.1

1 of 1 See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
shlomibendavid/k8s-applier :0311240529	a22ffbe0f04e	stdlib@go1.21.7	1.25.8

Open the chart page →

1,206

clickhousesignoz

24.1.18

3 of 3 See more

clickhouse signoz 24.1.18

3 of the 3 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.21.2	cd9252644ce0	stdlib@go1.19.10	1.25.8
altinity/metrics-exporter :0.21.2	df3d57215356	stdlib@go1.19.10	1.25.8
signoz/zookeeper :3.7.1	fcc4a3288154	stdlib@go1.21.2	1.25.8

Open the chart page →

4,698

cosignedsigstore

0.1.23

2 of 2 See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
gcr.io/projectsigstore/cosigneddigest-pinned	784518ff3ee7	stdlib@go1.17.9	1.25.8
gcr.io/projectsigstore/policy-webhookdigest-pinned	82940e8c3e0d	stdlib@go1.17.9	1.25.8

Open the chart page →

5,132

scaffoldsigstore

0.6.115

9 of 15 See more

scaffold sigstore 0.6.115

9 of the 15 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
library/redisdigest-pinned	148bb5411c18	stdlib@go1.18.2	1.25.8
gcr.io/trillian-opensource-ci/db_serverdigest-pinned	2a685a38dd01	stdlib@go1.18.2	1.25.8
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	7f59f7c08d1a	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.31	3a061734c5be	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/createdbdigest-pinned	3cee6c78973b	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/createtreedigest-pinned:v0.7.31	e5232e8c9122	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/trillian_log_serverdigest-pinned	5a878e4e4f03	stdlib@go1.26.0	1.25.8
ghcr.io/sigstore/scaffolding/trillian_log_signerdigest-pinned	28c5ff40963f	stdlib@go1.26.0	1.25.8

Open the chart page →

7,686

mongodb-backupsinextra

1.1.0

1 of 1 See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/mongodb :8.0.10	1eee8e20a87f	stdlib@go1.23.8	1.25.8

Open the chart page →

4,277

postgresql-singlesinextra

1.15.1

1 of 1 See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/sergelogvinov/postgresql :16.15	fafb72e98f22	stdlib@go1.24.6	1.25.8

Open the chart page →

4,937

altinity-clickhouse-operatorslamdev

0.1.2

2 of 2 See more

altinity-clickhouse-operator slamdev 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	stdlib@go1.17.13	1.25.8
altinity/metrics-exporter :0.20.0	1a46d104406d	stdlib@go1.17.13	1.25.8

Open the chart page →

6,420

docker-registry-uislamdev

0.0.1

1 of 1 See more

docker-registry-ui slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quiq/docker-registry-ui :0.9.4	91281da47036	stdlib@go1.18	1.25.8

Open the chart page →

2,200

external-secrets-operatorslamdev

0.0.15

1 of 1 See more

external-secrets-operator slamdev 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
slamdev/external-secrets-operator :0.0.8	855f6625dda4	stdlib@go1.13.15	1.25.8

Open the chart page →

2,301

smallest-self-hostsmallest-self-host

0.2.2

6 of 12 See more

smallest-self-host smallest-self-host 0.2.2

6 of the 12 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	stdlib@go1.21.10	1.25.8
quay.io/prometheus-operator/prometheus-operator :v0.74.0	6b3f6d8b4c0a	stdlib@go1.22.3	1.25.8
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20221220-controller-v1.5.1-58-g787ea74b6	4d99688e5573	stdlib@go1.19.4	1.25.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.25.8
registry.k8s.io/nfd/node-feature-discovery :v0.16.6	19ebca8b3804	stdlib@go1.22.8	1.25.8
registry.k8s.io/prometheus-adapter/prometheus-adapter :v0.12.0	932eae60e2bc	stdlib@go1.22.2	1.25.8

Open the chart page →

7,705

smarter-edgesmarter

0.0.15

1 of 1 See more

smarter-edge smarter 0.0.15

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/smarter-project/smarter-device-manager :v1.20.12	228f7f44594a	stdlib@go1.19.3	1.25.8

Open the chart page →

1,151

yopasssoftizy

1.0.1

1 of 2 See more

yopass softizy 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
jhaals/yopass :11.4.6	9516e3b3e88c	stdlib@go1.19.1	1.25.8

Open the chart page →

1,461

artifact-hubsoftonic

1.19.0

6 of 8 See more

artifact-hub softonic 1.19.0

6 of the 8 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.43.1	944a04445179	stdlib@go1.19.10	1.25.8
artifacthub/db-migrator :v1.19.0	2a746b289fcd	stdlib@go1.22.4	1.25.8
artifacthub/hub :v1.19.0	111918d8c399	stdlib@go1.22.4	1.25.8
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.8
artifacthub/scanner :v1.19.0	323d026e78c3	stdlib@go1.21.8	1.25.8
artifacthub/tracker :v1.19.0	6596c8c4d955	stdlib@go1.22.4	1.25.8

Open the chart page →

14,550

gcp-quota-exportersoftonic

2.0.2

1 of 1 See more

gcp-quota-exporter softonic 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
mintel/gcp-quota-exporter :v0.3.2	0e0707b7732b	stdlib@go1.13.12	1.25.8

Open the chart page →

2,643

go-ratelimitsoftonic

1.0.7

2 of 3 See more

go-ratelimit softonic 1.0.7

2 of the 3 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
envoyproxy/ratelimit :v1.4.0	71081616da3e	stdlib@go1.14	1.25.8
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.25.8

Open the chart page →

5,105

node-policy-webhooksoftonic

0.1.10

1 of 1 See more

node-policy-webhook softonic 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
softonic/node-policy-webhook :0.1.2	ab6098c04a53	stdlib@go1.14.6	1.25.8

Open the chart page →

2,591

redis-shardedsoftonic

0.5.0

1 of 2 See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
oliver006/redis_exporter :v1.9.0	4af75e9f16f6	stdlib@go1.14.4	1.25.8

Open the chart page →

2,330

sogosogo

0.3.5

1 of 2 See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	stdlib@go1.24.13	1.25.8

Open the chart page →

7,204

postgresql-ha-chartsoldevelo-postgresql-ha-chart

16.3.4

1 of 2 See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	stdlib@go1.25.4	1.25.8

Open the chart page →

4,604

rabbitmqsolidcharts

0.7.5

1 of 2 See more

rabbitmq solidcharts 0.7.5

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.3.5-management	ffd1b50c522a	stdlib@go1.22.2	1.25.8

Open the chart page →

1,045

gloosolo-gloo-edge

0.0.0-fork

4 of 5 See more

gloo solo-gloo-edge 0.0.0-fork

4 of the 5 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/solo-io/certgen :0.0.0-fork	b17a8c7d1f32	stdlib@go1.18.1	1.25.8
quay.io/solo-io/discovery :0.0.0-fork	5b62aaade3c9	stdlib@go1.18.1	1.25.8
quay.io/solo-io/gloo :0.0.0-fork	9a6c84560d44	stdlib@go1.18.1	1.25.8
quay.io/solo-io/gloo-envoy-wrapper :0.0.0-fork	26ae185e835a	stdlib@go1.18.1	1.25.8

Open the chart page →

9,256

sp-otel-collectorsp-otel-collector

1.1.6

1 of 1 See more

sp-otel-collector sp-otel-collector 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	stdlib@go1.20.5	1.25.8

Open the chart page →

2,032

sql-operatorsql-operator

0.11.2

1 of 1 See more

sql-operator sql-operator 0.11.2

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/stenic/sql-operator :1.13.2	f4324baa2aad	stdlib@go1.17.13	1.25.8

Open the chart page →

1,594

stackradar-scannerstackradar

0.3.0

1 of 1 See more

stackradar-scanner stackradar 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/lockdep/stackradar-scanner :0.3.0	dd8a35d50c2d	stdlib@go1.25.7	1.25.8

Open the chart page →

1,218

gitwebhookproxystakater

0.2.79

1 of 1 See more

gitwebhookproxy stakater 0.2.79

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
stakater/gitwebhookproxy :v0.2.79	c1226e5270cd	stdlib@go1.13.1	1.25.8

Open the chart page →

1,503

splunk-operatorstakater

0.0.6

1 of 2 See more

splunk-operator stakater 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
splunk/splunk-operator :2.0.0	c4e0d3146226	stdlib@go1.17.12	1.25.8

Open the chart page →

11,459

gethstakewise

2.5.8

1 of 3 See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ethereum/client-go :v1.15.10	1f36ca5922a5	stdlib@go1.24.2	1.25.8

Open the chart page →

1,143

graph-nodestakewise

3.1.0

2 of 3 See more

graph-node stakewise 3.1.0

2 of the 3 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
graphprotocol/graph-node :v0.37.0	f4452cdedd68	stdlib@go1.24.1	1.25.8
ipfs/kubo :v0.24.0	e3de33bd746b	stdlib@go1.19.8	1.25.8

Open the chart page →

4,694

mayastorstartechnica

0.2.0

3 of 13 See more

mayastor startechnica 0.2.0

3 of the 13 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/csi-attacher :v4.0.0	9a685020911e	stdlib@go1.18	1.25.8
registry.k8s.io/sig-storage/csi-node-driver-registrar :v2.6.0	f1c25991bac2	stdlib@go1.18	1.25.8
registry.k8s.io/sig-storage/livenessprobe :v2.8.0	cacee2b5c36d	stdlib@go1.18	1.25.8

Open the chart page →

4,367

statpingstatping

0.1.14

1 of 1 See more

statping statping 0.1.14

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
statping/statping :v0.90.74	e874da513a5c	stdlib@go1.14.13	1.25.8

Open the chart page →

3,378

stornxstornx

1.1.1

7 of 9 See more

stornx stornx 1.1.1

7 of the 9 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
alazidis/kube-netlag :1.1.0	0e8c84152201	stdlib@go1.24.13	1.25.8
alazidis/stornx :1.1.1	602d4f7f090c	stdlib@go1.25.7	1.25.8
quay.io/kiali/kiali :v2.23.0	7652b1285f50	stdlib@go1.25.0	1.25.8
quay.io/prometheus/node-exporter :v1.10.2	337ff1d356b6	stdlib@go1.25.3	1.25.8
quay.io/prometheus/prometheus :v3.10.0	7571a304e67f	stdlib@go1.26.0	1.25.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.18.0	1545919b72e3	stdlib@go1.25.5	1.25.8
registry.k8s.io/metrics-server/metrics-server :v0.8.0	89258156d0e9	stdlib@go1.24.4	1.25.8

Open the chart page →

11,735

stunner-gateway-operatorstunner

1.1.0

2 of 2 See more

stunner-gateway-operator stunner 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
l7mp/stunner-auth-server :1.1.0	2f8114477ba6	stdlib@go1.23.8	1.25.8
l7mp/stunner-gateway-operator :1.1.0	c34f7c931491	stdlib@go1.23.8	1.25.8

Open the chart page →

1,292

hlf-k8ssubstra

10.2.4

4 of 7 See more

hlf-k8s substra 10.2.4

4 of the 7 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :1.5.0	f270dfeee91d	stdlib@go1.15.7	1.25.8
jwilder/dockerize :latest	f94fb59fb4f6	stdlib@go1.25.5	1.25.8
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	stdlib@go1.18.10	1.25.8
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	stdlib@go1.18.10	1.25.8

Open the chart page →

12,030

Container images carrying it

4,278 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mongo :4.4.13	05678ae4e5e1	stdlib@go1.16.7	1.25.8	1
library/mongo :5.0.32-focal	3b6c281e1c08	stdlib@go1.24.0	1.25.8	1
library/mongo :4.4-bionic	3d0e6df9fd5b	stdlib@go1.16.3	1.25.8	1
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	stdlib@go1.24.6	1.25.8	1
library/mongo :5.0.14-focal	50cae5081ab4	stdlib@go1.17.10	1.25.8	1
library/mongo :6.0.12	646902910d6a	stdlib@go1.18.2	1.25.8	1
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.25.8	1
library/mongo :noble	6ede2806c78e	stdlib@go1.24.6	1.25.8	1
library/mongo :6.0.2	71a63fc2438e	stdlib@go1.17.10	1.25.8	1
library/mongo :5.0.21	7c81758cb295	stdlib@go1.19.12	1.25.8	1
library/mongo :7.0-jammy	84c4a18b60a0	stdlib@go1.24.6	1.25.8	1
library/mongo :7.0.28-jammy	88785f6f665a	stdlib@go1.24.0	1.25.8	1
library/mongo :7.0.12	ae1cf99fa7bf	stdlib@go1.21.12	1.25.8	1
library/mongo :4.4.18	d23ec07162ca	stdlib@go1.17.10	1.25.8	1
library/mongo :8.0.11	dca8d11fe467	stdlib@go1.23.8	1.25.8	1
library/mysql :8.4.3	106d5197fd8e	stdlib@go1.18.2	1.25.8	1
library/mysql :8.0.30	3c1aab708f6e	stdlib@go1.16.7	1.25.8	1
library/mysql :8.4.10	8dbcf531a03a	stdlib@go1.24.6	1.25.8	1
library/mysql :9.0.1	92dc86967801	stdlib@go1.18.2	1.25.8	1
library/mysql :8.0-debian	9382e4f6f7f0	stdlib@go1.24.6	1.25.8	1
library/mysql :8.0.41	bf577825b52a	stdlib@go1.18.2	1.25.8	1
library/mysql :8.0.39	ccb8f749bb5e	stdlib@go1.18.2	1.25.8	1
library/mysql :8.0.40	d58ac93387f6	stdlib@go1.18.2	1.25.8	1
library/nats :2.12.2-alpine	2d5fce3229ae	stdlib@go1.25.4	1.25.8	1
library/nats :2.11.9-alpine	777787bbb4c7	stdlib@go1.24.7	1.25.8	1
library/nats :2.12.3-alpine	88fe8e0e09d6	stdlib@go1.25.5	1.25.8	1
library/nats :2.10.17-alpine	b7752304692b	stdlib@go1.22.4	1.25.8	1
library/nats :2.10.12-alpine	bca70839d953	stdlib@go1.21.8	1.25.8	1
library/nats :2.11.4	c8cd23806eef	stdlib@go1.24.3	1.25.8	1
library/nats :2.9.11-alpine	ccbe811b8575	stdlib@go1.19.4	1.25.8	1
library/nats :2.9-alpine	d402af4147fc	stdlib@go1.20.14	1.25.8	1
library/nats :2.9.20-alpine	d6c6ae7df4a0	stdlib@go1.19.11	1.25.8	1
library/nats :2.9.6-alpine3.16	f576cdc17cc3	stdlib@go1.19.3	1.25.8	1
library/nats-streaming :0.25.6	0ad6861379c9	stdlib@go1.20.11	1.25.8	1
library/nats-streaming :0.25.5	ced93c701875	stdlib@go1.19.10	1.25.8	1
library/postgres :13.7	03652c675ae1	stdlib@go1.16.7	1.25.8	1
library/postgres :18.0	073e7c8b84e2	stdlib@go1.24.6	1.25.8	1
library/postgres :14.3	2d1e636f0778	stdlib@go1.16.7	1.25.8	1
library/postgres :17.4	304ab8135187	stdlib@go1.18.2	1.25.8	1
library/postgres :18.4	3a82e1f56c8f	stdlib@go1.24.6	1.25.8	1
library/postgres :18.1-alpine3.21	44d837eb4c2e	stdlib@go1.24.6	1.25.8	1
library/postgres :16.11	468e1f126ca5	stdlib@go1.24.6	1.25.8	1
library/postgres :18.3-alpine	54451ecb8ab3	stdlib@go1.24.6	1.25.8	1
library/postgres :16.6	557fea37a744	stdlib@go1.18.2	1.25.8	1
library/postgres :16.4-alpine	5660c2cbfea5	stdlib@go1.18.2	1.25.8	1
library/postgres :13.11-bullseye	5c265bf1fd30	stdlib@go1.18.2	1.25.8	1
library/postgres :17.5-alpine	6567bca8d7bc	stdlib@go1.18.2	1.25.8	1
library/postgres :18.3	69e8582b781c	stdlib@go1.24.6	1.25.8	1
library/postgres :15.18	6eb0add3b77c	stdlib@go1.24.6	1.25.8	1
library/postgres :17.4-alpine	7062a2109c4b	stdlib@go1.18.2	1.25.8	1