CVE-2026-27139

Low

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.5; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,843; of 17,813 indexed, latest versions
Container images: 4,361; deployed by those charts
Fix available: 1 of 2; affected packages

FileInfo can escape from a Root in os

Carried by container images the latest versions of 3,843 of 17,813 indexed charts deploy, on 4,361 images.

Affected package	Affected versions	Fixed in	Images
stdlibgolang	go1.13, go1.13.1, go1.13.3, go1.13.4+177 more	1.25.8	4,361
golang-1.19deb	1.19.8-2	no fix listed	1

OSV records: DEBIAN-CVE-2026-27139 GO-2026-4602
Also known as: BIT-golang-2026-27139

Charts affected

3,843 by stars

Chart

Latest

Affected images

Radar Score

fulciosigstore

2.11.1

4 of 6 See more

fulcio sigstore 2.11.1

4 of the 6 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/scaffolding/createcertsdigest-pinned	7f59f7c08d1a	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/createctconfig :v0.7.31	3a061734c5be	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/createtree :v0.7.31	e5232e8c9122	stdlib@go1.25.0	1.25.8
ghcr.io/sigstore/scaffolding/ct_server :v0.7.31	66664ba563e7	stdlib@go1.25.0	1.25.8

Open the chart page →

3,529

policy-controllersigstore

0.10.8

1 of 2 See more

policy-controller sigstore 0.10.8

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned	0bcd60beb93f	stdlib@go1.24.7	1.25.8

Open the chart page →

921

superstreamsuperstream

0.9.62

3 of 3 See more

superstream superstream 0.9.62

3 of the 3 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
library/nats :2.10.25-alpine	3290c829aa05	stdlib@go1.23.5	1.25.8
natsio/nats-server-config-reloader :0.16.1	bf97e5e9b9d2	stdlib@go1.23.3	1.25.8
natsio/prometheus-nats-exporter :0.16.0	54b0d7ff058e	stdlib@go1.23.4	1.25.8

Open the chart page →

3,614

uffizzi-appuffizzi-app

1.3.0

8 of 14 See more

uffizzi-app uffizzi-app 1.3.0

8 of the 14 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	stdlib@go1.20.14	1.25.8
uffizzi/uffizzi-cluster-operator :v1.4.5	14e528bbd926	stdlib@go1.19.13	1.25.8
quay.io/jetstack/cert-manager-cainjector :v1.13.2	858fee0c4af0	stdlib@go1.20.10	1.25.8
quay.io/jetstack/cert-manager-controller :v1.13.2	9c67cf8c92d8	stdlib@go1.20.10	1.25.8
quay.io/jetstack/cert-manager-ctl :v1.13.2	4d9fce2c050e	stdlib@go1.20.10	1.25.8
quay.io/jetstack/cert-manager-webhook :v1.13.2	0a9470447ebf	stdlib@go1.20.10	1.25.8
registry.k8s.io/ingress-nginx/controller :v1.9.4	5b161f051d01	stdlib@go1.21.3	1.25.8
registry.k8s.io/ingress-nginx/kube-webhook-certgen :v20231011-8b53cabe0	a7943503b45d	stdlib@go1.21.3	1.25.8

Open the chart page →

19,487

athens-proxyvolker-raschek

2.0.3

1 of 1 See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
gomods/athens :v0.17.1	0f61d1e62359	stdlib@go1.24.1	1.25.8

Open the chart page →

2,046

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/dexidp/dex :v2.24.0	c9b7f6d0d953	stdlib@go1.13.10	1.25.8

Open the chart page →

13,600

nfs-server-provisionerwso2

1.1.0

1 of 1 See more

nfs-server-provisioner wso2 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/kubernetes_incubator/nfs-provisioner :v2.3.0	f402e6039b3c	stdlib@go1.13.4	1.25.8

Open the chart page →

2,807

matrixzekker6

3.31.0

1 of 4 See more

matrix zekker6 3.31.0

1 of the 4 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.161.0	6b95dd129e35	stdlib@go1.24.4	1.25.8

Open the chart page →

5,660

eshoponabpabp-charts

1.0.0

2 of 15 See more

eshoponabp abp-charts 1.0.0

2 of the 15 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
library/mongo :4.2	699d652ed674	stdlib@go1.18.2	1.25.8
library/postgres :14.1	3162a6ead070	stdlib@go1.16.7	1.25.8

Open the chart page →

19,515

alerta-webalerta-web

0.1.12

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :15.2.0-debian-11-r11	3e65a6b89e38	stdlib@go1.18.2	1.25.8

Open the chart page →

3,569

pod-gatewayangelnu

7.1.1

1 of 2 See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/angelnu/gateway-admision-controller :v3.12.0	6f6ab596afd5	stdlib@go1.24.2	1.25.8

Open the chart page →

1,282

ansible-semaphoreansible-semaphore

0.1.0

1 of 1 See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ansiblesemaphore/semaphore :v2.8.53	03d1f8684027	stdlib@go1.16.3	1.25.8

Open the chart page →

4,022

aperture-controlleraperture

2.34.0

3 of 5 See more

aperture-controller aperture 2.34.0

3 of the 5 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
fluxninja/aperture-operator :2.34.0	356d7aa86632	stdlib@go1.21.5	1.25.8
jimmidyson/configmap-reload :v0.5.0	904d08e9f701	stdlib@go1.15.7	1.25.8
quay.io/prometheus/prometheus :v2.33.5	91100b06e86d	stdlib@go1.17.8	1.25.8

Open the chart page →

4,681

k8upappuio

2.0.5

1 of 1 See more

k8up appuio 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/k8up-io/k8up :v2.3.2	57419b6d3830	stdlib@go1.18	1.25.8

Open the chart page →

3,308

limesurveyarea-42

0.3.96

1 of 2 See more

limesurvey area-42 0.3.96

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	stdlib@go1.25.0	1.25.8

Open the chart page →

4,539

athens-proxyathens-charts

0.17.1

1 of 1 See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
gomods/athens :v0.18.1	97cc113b34b0	stdlib@go1.24.1	1.25.8

Open the chart page →

1,307

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	stdlib@go1.16.9	1.25.8

Open the chart page →

9,064

prometheusavesha

19.3.0

4 of 4 See more

prometheus avesha 19.3.0

4 of the 4 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
jimmidyson/configmap-reload :v0.8.0	5af9d3041d12	stdlib@go1.19.2	1.25.8
quay.io/prometheus/node-exporter :v1.5.0	39c642b2b337	stdlib@go1.19.3	1.25.8
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	stdlib@go1.19.4	1.25.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.7.0	a15ca437f230	stdlib@go1.19.3	1.25.8

Open the chart page →

5,505

aws-calicoaws

0.3.11

1 of 1 See more

aws-calico aws 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/tigera/operator :v1.20.1	379efe0c2541	stdlib@go1.15.2	1.25.8

Open the chart page →

2,251

snapschedulerbackube-helm-charts

3.5.0

2 of 2 See more

snapscheduler backube-helm-charts 3.5.0

2 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/backube/snapscheduler :3.5.0	35ac95c51780	stdlib@go1.24.3	1.25.8
quay.io/brancz/kube-rbac-proxy :v0.19.1	9f21034731c7	stdlib@go1.24.2	1.25.8

Open the chart page →

1,240

yataibentoml

1.1.13

1 of 1 See more

yatai bentoml 1.1.13

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai :1.1.13	a5dc9d91de0d	stdlib@go1.20.7	1.25.8

Open the chart page →

1,917

yatai-deploymentbentoml

1.1.21

1 of 2 See more

yatai-deployment bentoml 1.1.21

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/bentoml/yatai-deployment :1.1.21	2342cfe8c2a9	stdlib@go1.19.13	1.25.8

Open the chart page →

1,160

boundaryboundary

0.1.0

1 of 1 See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
hashicorp/boundary :0.21.0	37bf86488b74	stdlib@go1.25.1	1.25.8

Open the chart page →

1,591

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	stdlib@go1.19.12	1.25.8

Open the chart page →

69,135

caddy-ingress-controllercaddy-ingress

1.3.0

1 of 1 See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
caddy/ingress :v0.2.1	18d1366fc0e9	stdlib@go1.21.4	1.25.8

Open the chart page →

1,901

cadvisorcadvisor

0.1.15

1 of 1 See more

cadvisor cadvisor 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
gcr.io/cadvisor/cadvisor :v0.47.2	e6c562b5e983	stdlib@go1.19.9	1.25.8

Open the chart page →

1,705

cert-managerchoerodon

1.8.2

4 of 4 See more

cert-manager choerodon 1.8.2

4 of the 4 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/jetstack/cert-manager-cainjector :v1.8.2	c010246124c2	stdlib@go1.17.11	1.25.8
quay.io/jetstack/cert-manager-controller :v1.8.2	a20c44021a5d	stdlib@go1.17.11	1.25.8
quay.io/jetstack/cert-manager-ctl :v1.8.2	81b2d775edad	stdlib@go1.17.11	1.25.8
quay.io/jetstack/cert-manager-webhook :v1.8.2	ada7edd90bec	stdlib@go1.17.11	1.25.8

Open the chart page →

7,801

popeyechristianhuth

2.4.3

1 of 1 See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	stdlib@go1.23.5	1.25.8

Open the chart page →

1,342

hellocloudecho

0.1.2

1 of 1 See more

hello cloudecho 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
cloudecho/hello :0.1.0	f76ede067ab9	stdlib@go1.16.6	1.25.8

Open the chart page →

1,818

cloudflare-exportercloudflare-exporter

0.2.3

1 of 1 See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/lablabs/cloudflare_exporter :0.0.16	70d74ec46602	stdlib@go1.22.3	1.25.8

Open the chart page →

791

ghostcloudpirates-ghost

0.20.25

3 of 3 See more

ghost cloudpirates-ghost 0.20.25

3 of the 3 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
library/ghost :6.64.0	a31d03f1f629	stdlib@go1.24.6	1.25.8
library/mariadb :12.0.2	5b6a1eac15b8	stdlib@go1.18.2	1.25.8
library/mariadb :13.0.2	d4fdec0510ad	stdlib@go1.24.6	1.25.8

Open the chart page →

7,009

clowardenclowarden

0.2.3

2 of 4 See more

clowarden clowarden 0.2.3

2 of the 4 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
artifacthub/postgres :latest	4fd34fa635cc	stdlib@go1.24.6	1.25.8
ghcr.io/cncf/clowarden/dbmigrator :v0.2.3	c022fd42de45	stdlib@go1.25.3	1.25.8

Open the chart page →

5,688

cluster-manager-servercluster-manager-server

1.8.0

1 of 1 See more

cluster-manager-server cluster-manager-server 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/cluster-manager-server :1.8.0	364b3ff0fcb7	stdlib@go1.24.5	1.25.8

Open the chart page →

753

cluster-registrycluster-registry-controller

0.2.12

1 of 1 See more

cluster-registry cluster-registry-controller 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/cisco-open/cluster-registry-controller :v0.2.12	937eff91df1e	stdlib@go1.18	1.25.8

Open the chart page →

1,708

coder-observabilitycoder-observability

0.7.3

13 of 21 See more

coder-observability coder-observability 0.7.3

13 of the 21 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
grafana/agent :v0.40.3	f6cbec9409be	stdlib@go1.22.1	1.25.8
grafana/grafana :10.4.19	a9043254ba16	stdlib@go1.24.3	1.25.8
grafana/loki :3.1.0	d947e68a84d9	stdlib@go1.22.2	1.25.8
grafana/loki-canary :3.1.0	39baf6d67f85	stdlib@go1.22.2	1.25.8
prom/memcached-exporter :v0.14.2	d8a61419b841	stdlib@go1.21.5	1.25.8
ghcr.io/jimmidyson/configmap-reload :v0.12.0	a7c754986900	stdlib@go1.21.1	1.25.8
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	stdlib@go1.18.6	1.25.8
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	stdlib@go1.18.6	1.25.8
quay.io/prometheus-operator/prometheus-config-reloader :v0.74.0	d55631c7a740	stdlib@go1.22.3	1.25.8
quay.io/prometheus/alertmanager :v0.27.0	e13b6ed5cb92	stdlib@go1.21.7	1.25.8
quay.io/prometheus/node-exporter :v1.8.1	fa7fa12a57ef	stdlib@go1.22.3	1.25.8
quay.io/prometheus/prometheus :v2.53.1	f20d3127bf28	stdlib@go1.22.5	1.25.8
registry.k8s.io/kube-state-metrics/kube-state-metrics :v2.12.0	b401fae262a5	stdlib@go1.21.8	1.25.8

Open the chart page →

24,968

convertigoconvertigo

8.4.3

2 of 5 See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	stdlib@go1.21.5	1.25.8
timescale/timescaledb :latest-pg16	f495f2bc25ca	stdlib@go1.24.6	1.25.8

Open the chart page →

17,183

core-dump-handlercore-dump-handler

9.0.0

1 of 1 See more

core-dump-handler core-dump-handler 9.0.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	stdlib@go1.16.6	1.25.8

Open the chart page →

3,089

cosmocosmo-platform

0.20.0

6 of 10 See more

cosmo cosmo-platform 0.20.0

6 of the 10 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	stdlib@go1.24.6	1.25.8
bitnamilegacy/redis :7.2.4-debian-12-r16	70cafc5a71e8	stdlib@go1.21.10	1.25.8
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	stdlib@go1.22.3	1.25.8
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	stdlib@go1.23.6	1.25.8
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	stdlib@go1.23.6	1.25.8
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	stdlib@go1.20.7	1.25.8

Open the chart page →

29,737

crossviewcrossview

4.6.0

1 of 2 See more

crossview crossview 4.6.0

1 of the 2 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
library/postgres :latest	86c951e05bf5	stdlib@go1.24.6	1.25.8

Open the chart page →

1,435

dapr-dashboarddapr

0.15.0

1 of 1 See more

dapr-dashboard dapr 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
daprio/dashboard :0.15.0	4be696707bd1	stdlib@go1.21.13	1.25.8

Open the chart page →

1,322

deepflowdeepflow

6.2.201

5 of 8 See more

deepflow deepflow 6.2.201

5 of the 8 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	stdlib@go1.18.3	1.25.8
deepflowce/deepflow-init-grafana :v6.2.2	7cd16719eb57	stdlib@go1.19.3	1.25.8
deepflowce/deepflow-server :v6.2.2	1477e7334d13	stdlib@go1.18.10	1.25.8
deepflowce/mysql :8.0.31	3d7ae561cf60	stdlib@go1.16.7	1.25.8
grafana/grafana :9.3.6	e5a9655dabef	stdlib@go1.19.4	1.25.8

Open the chart page →

16,008

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	stdlib@go1.21.10	1.25.8

Open the chart page →

3,482

kube-benchdeliveryhero

0.1.17

1 of 1 See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	stdlib@go1.21.7	1.25.8

Open the chart page →

1,624

listmonkdeliveryhero

0.1.12

1 of 1 See more

listmonk deliveryhero 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
listmonk/listmonk :v2.1.0	d2eac77ddfad	stdlib@go1.17.6	1.25.8

Open the chart page →

2,538

prometheus-locust-exporterdeliveryhero

1.2.3

1 of 1 See more

prometheus-locust-exporter deliveryhero 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
containersol/locust_exporter :v0.4.1	a914972d19ad	stdlib@go1.15.8	1.25.8

Open the chart page →

1,277

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	stdlib@go1.23.1	1.25.8

Open the chart page →

4,237

bscdysnix

0.6.59

1 of 4 See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
ghcr.io/bnb-chain/bsc :1.6.2	fd0e3ec7d960	stdlib@go1.24.9	1.25.8

Open the chart page →

1,905

imagepullsecret-patcherempathyco

1.0.0

1 of 1 See more

imagepullsecret-patcher empathyco 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/titansoft/imagepullsecret-patcher :v0.14	21e6d6a155dc	stdlib@go1.13.15	1.25.8

Open the chart page →

2,272

postgres-pgdump-backupeugen

0.7.6

1 of 1 See more

postgres-pgdump-backup eugen 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
traefik/whoami :v1.11.0	200689790a0a	stdlib@go1.24.1	1.25.8

Open the chart page →

353

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-27139.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	stdlib@go1.20.10	1.25.8

Open the chart page →

12,059

Container images carrying it

4,361 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	stdlib@go1.22.8	1.25.8	1
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	stdlib@go1.22.8	1.25.8	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	stdlib@go1.21.5	1.25.8	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.132.0	5e331c925091	stdlib@go1.24.6	1.25.8	1
ghcr.io/open-telemetry/opentelemetry-operator/opentelemetry-operator :0.144.0	79b81912f1fb	stdlib@go1.25.6	1.25.8	1
ghcr.io/open-telemetry/opentelemetry-operator/target-allocator :0.124.0	8936271cf56a	stdlib@go1.24.2	1.25.8	1
ghcr.io/open-webui/open-terminal :0.13.0-slim	dec44673c865	stdlib@go1.24.4	1.25.8	1
ghcr.io/ot-container-kit/redis-operator/redis-operator :v0.18.0	90bfeb2e0d71	stdlib@go1.21.12	1.25.8	1
ghcr.io/paganuzzi/ngrokoperator :latest	5a10cd095699	stdlib@go1.15.12	1.25.8	1
ghcr.io/paperclipinc/paperclip-operator :v0.19.1	0984b890eb38	stdlib@go1.25.0	1.25.8	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	stdlib@go1.19.8	1.25.8	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	stdlib@go1.24.4	1.25.8	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	stdlib@go1.24.4	1.25.8	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	stdlib@go1.24.4	1.25.8	1
ghcr.io/paperless-ngx/paperless-ngx :2.10.1	a132c2ac7c57	stdlib@go1.19.8	1.25.8	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	stdlib@go1.19.8	1.25.8	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	stdlib@go1.24.4	1.25.8	1
ghcr.io/papra-hq/papra :26.6.2-rootless	a281cb44176d	stdlib@go1.20.7	1.25.8	1
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	stdlib@go1.25.1	1.25.8	1
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	stdlib@go1.21.4	1.25.8	1
ghcr.io/parca-dev/parca-agent :v0.42.0	adc0eeb4dd05	stdlib@go1.24.7	1.25.8	1
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	stdlib@go1.25.4	1.25.8	1
ghcr.io/patricklaabs/sample-application :0.0.1	f0935fa2eee3	stdlib@go1.22.0	1.25.8	1
ghcr.io/pbufio/registry :v0.4.1	77a36c035b4b	stdlib@go1.25.5	1.25.8	1
ghcr.io/peak-scale/capsule-argo-addon :0.7.5	087a80163971	stdlib@go1.24.13	1.25.8	1
ghcr.io/peak-scale/observability-tenancy/cortex-proxy :0.4.1	1838720c13b2	stdlib@go1.24.6	1.25.8	1
ghcr.io/peak-scale/observability-tenancy/loki-proxy :0.4.1	548e962d0061	stdlib@go1.24.6	1.25.8	1
ghcr.io/peimanja/artifactory_exporter :v1.16.0	d3e3929a3d2b	stdlib@go1.21.13	1.25.8	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	stdlib@go1.18.4	1.25.8	1
ghcr.io/permify/permify :v1.3.5	f0c6f7d7daa6	stdlib@go1.22.4	1.25.8	1
ghcr.io/pipe-cd/pipecd :v0.39.0	0fae829caf29	stdlib@go1.14.6	1.25.8	1
ghcr.io/pocket-id/pocket-id :v2.7.0	45bdeaf3fcd6	stdlib@go1.26.0	1.25.8	1
ghcr.io/podtato-head/entry :latest	c3d9d9c98be7	stdlib@go1.19	1.25.8	1
ghcr.io/podtato-head/hat :latest	de37ff39a4c0	stdlib@go1.19	1.25.8	1
ghcr.io/podtato-head/left-arm :latest	97596c95276a	stdlib@go1.19	1.25.8	1
ghcr.io/podtato-head/left-leg :latest	00bb31622b1e	stdlib@go1.19	1.25.8	1
ghcr.io/podtato-head/right-arm :latest	5f8f97a60558	stdlib@go1.19	1.25.8	1
ghcr.io/podtato-head/right-leg :latest	03e125b9279e	stdlib@go1.19	1.25.8	1
ghcr.io/predicatelabs/operator :v1.0.5	b62113fe1b27	stdlib@go1.23.5	1.25.8	1
ghcr.io/privacyengineering/collector-go :main	7217f1a4fa28	stdlib@go1.17.13	1.25.8	1
ghcr.io/privacyengineering/consumer :main	73f59c032812	stdlib@go1.17.13	1.25.8	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	stdlib@go1.20.11	1.25.8	1
ghcr.io/projectcapsule/capsule-addon-fluxcd :0.2.2	e0baf564b706	stdlib@go1.23.4	1.25.8	1
ghcr.io/projectcontour/contour :v1.30.0	b12824d7eb58	stdlib@go1.22.5	1.25.8	1
ghcr.io/projectcontour/contour :v1.33.0	cd6e13fa882d	stdlib@go1.25.1	1.25.8	1
ghcr.io/prymitive/karma :v0.85	d06892218680	stdlib@go1.16.3	1.25.8	1
ghcr.io/pschichtel/cert-manager-webhook-cloudns :1.1.0	1020638bbe23	stdlib@go1.21.6	1.25.8	1
ghcr.io/puckpuck/seashell :1.2	ef5e31333821	stdlib@go1.20.10	1.25.8	1
ghcr.io/pulumi/pulumi-esc-csi-provider :0.1.1	3fb058e93502	stdlib@go1.23.1	1.25.8	1
ghcr.io/punchplatform/operator :8.1-dev	2a9536c8cee2	stdlib@go1.22.0	1.25.8	1